Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/041a44b1-8ed5-35cb-bbf6-8b7bbeba246b.roa
File:                     041a44b1-8ed5-35cb-bbf6-8b7bbeba246b.roa (raw, json)
Hash identifier:          rIlTvQ6GS30vDEPyVEcVNwC4vRwVyRGEi/RanYhjBeo=
Subject key identifier:   86:F9:1A:53:17:BC:EF:89:ED:00:67:2E:CC:13:9E:24:8A:EC:2C:CE
Certificate issuer:       /CN=9906748d-5823-4cd3-9a11-f3dc69a3e751
Certificate serial:       010D0C9F4328584DA6B0307A718A4B0AF85AAA80
Authority key identifier: A7:31:13:DA:A8:C2:6D:D3:40:47:B6:C3:2B:BA:78:43:31:2F:01:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/041a44b1-8ed5-35cb-bbf6-8b7bbeba246b.roa
Signing time:             Tue 28 Apr 2026 01:00:24 +0000
ROA not before:           Tue 28 Apr 2026 01:00:24 +0000
ROA not after:            Mon 27 Jul 2026 01:00:24 +0000
asID:                     14618
IP address blocks:        2602:28c:2029::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:a6:b0:30:7a:71:8a:4b:0a:f8:5a:aa:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9906748d-5823-4cd3-9a11-f3dc69a3e751
        Validity
            Not Before: Apr 28 01:00:24 2026 GMT
            Not After : Jul 27 01:00:24 2026 GMT
        Subject: CN=3a89135b-dfcc-47b8-8e67-6e924388cc3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:c8:5a:f7:e6:23:ac:ed:28:72:9f:c1:da:94:
                    aa:81:0f:f6:b4:07:28:69:98:ef:e6:d4:fd:f7:b2:
                    25:71:9e:f2:20:0a:60:9f:f9:a4:81:fd:f8:46:1a:
                    0b:36:aa:03:c6:41:d2:58:be:cd:b8:c4:cd:de:f0:
                    24:e1:1e:66:57:75:03:40:aa:7f:49:79:50:e0:88:
                    73:61:96:83:85:e2:aa:17:d4:62:20:7b:ec:81:58:
                    dc:b8:ad:c2:ff:f2:ff:b1:55:b2:8d:f0:b5:fe:5a:
                    da:78:1f:04:32:f0:03:9c:99:17:4f:a5:14:7f:02:
                    af:8b:74:7d:4a:26:24:b0:0e:24:d2:1e:84:ff:33:
                    3e:c6:5c:07:de:78:8f:aa:17:df:70:1f:f3:a4:66:
                    e5:c3:1b:38:f9:77:7b:bc:f2:31:d6:cf:c7:10:e9:
                    05:cd:22:93:e2:b4:80:e8:28:6a:ba:47:f4:57:2b:
                    29:dd:d7:f0:39:bd:53:6c:4e:9c:5b:59:40:e2:bb:
                    53:23:0f:ca:e5:85:1b:72:dd:37:f2:2e:d0:9a:17:
                    3f:45:ca:72:c1:44:bc:b6:35:9b:48:8e:16:cc:56:
                    b9:16:73:7a:8e:96:b9:a8:29:eb:67:25:b6:fe:8d:
                    a9:ed:3f:3b:54:2d:43:0a:f3:f2:62:82:05:60:ed:
                    83:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:F9:1A:53:17:BC:EF:89:ED:00:67:2E:CC:13:9E:24:8A:EC:2C:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/041a44b1-8ed5-35cb-bbf6-8b7bbeba246b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.crl

            X509v3 Authority Key Identifier:
                keyid:A7:31:13:DA:A8:C2:6D:D3:40:47:B6:C3:2B:BA:78:43:31:2F:01:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:28c:2029::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:0b:0e:b8:b4:82:f8:9a:65:ce:b3:08:3e:32:a9:95:ed:4e:
         37:16:62:ac:e7:30:ab:47:07:d0:01:87:e6:87:01:08:0a:be:
         c1:e3:97:71:7d:95:74:3e:b0:d3:6a:3b:cc:3e:5f:bd:68:73:
         89:56:aa:47:0f:20:05:2f:cf:f8:7a:6a:8d:81:7f:25:28:e9:
         97:86:6c:53:35:99:eb:98:68:ca:bd:84:67:5c:b4:99:c0:6d:
         0a:35:2d:09:8e:eb:8f:cf:0e:fc:60:74:05:e4:bb:cc:8a:37:
         cd:ae:8c:6e:36:84:8e:65:2e:7c:45:ad:8d:72:69:73:7c:f3:
         13:2c:1b:7a:92:c6:c8:77:39:24:4b:51:d6:ec:73:24:c5:e1:
         ff:89:f6:9a:bc:d8:15:3b:dc:09:91:70:08:54:61:fc:13:03:
         4a:d6:7b:c6:35:fd:89:20:46:c6:d4:b2:06:bc:8a:5e:5b:dc:
         f2:df:84:ad:ac:bb:31:30:6c:47:a5:5d:73:0c:c3:a7:b7:03:
         d0:77:1f:39:4a:a9:38:e5:84:0d:a4:f5:0a:f2:64:17:ec:b0:
         dc:77:c2:31:87:ec:71:74:b1:18:9e:fb:39:cd:60:96:a5:27:
         e7:df:12:0f:18:96:34:61:13:c1:51:d3:35:ba:dc:9a:4d:39:
         1c:11:d7:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:23:04 2026 by rpki-client