Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/c007bec6-63a6-3aa3-8fa3-7911489cacfa.roa
File:                     c007bec6-63a6-3aa3-8fa3-7911489cacfa.roa (raw, json)
Hash identifier:          wSv0PSCwAtnpPL3h4GUu1TBbtGtcHrpAH7UUaFCJQLY=
Subject key identifier:   B5:46:E4:B4:69:F5:F5:3C:58:2C:E2:11:41:B7:97:1C:6E:CF:02:42
Certificate issuer:       /CN=9906748d-5823-4cd3-9a11-f3dc69a3e751
Certificate serial:       010D0C9F4328584DA6B02CFF3770455C78AAD080
Authority key identifier: A7:31:13:DA:A8:C2:6D:D3:40:47:B6:C3:2B:BA:78:43:31:2F:01:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/c007bec6-63a6-3aa3-8fa3-7911489cacfa.roa
Signing time:             Tue 28 Apr 2026 01:00:24 +0000
ROA not before:           Tue 28 Apr 2026 01:00:24 +0000
ROA not after:            Mon 27 Jul 2026 01:00:24 +0000
asID:                     14618
IP address blocks:        2620:147:c45::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:a6:b0:2c:ff:37:70:45:5c:78:aa:d0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9906748d-5823-4cd3-9a11-f3dc69a3e751
        Validity
            Not Before: Apr 28 01:00:24 2026 GMT
            Not After : Jul 27 01:00:24 2026 GMT
        Subject: CN=1fe9477b-7594-4d2b-baaf-19537084c182
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:19:8a:d4:d1:3c:df:a6:a2:0d:18:f5:43:0a:
                    4e:1a:44:bf:8e:3a:34:1a:f1:ad:c5:f0:a8:91:e1:
                    a4:58:25:d0:44:93:da:c0:2a:b1:d9:44:88:d9:f3:
                    6c:a4:7b:87:50:a3:16:c5:e6:09:fc:f5:22:25:09:
                    c5:00:4d:e3:83:e7:39:ae:5d:4f:6d:d1:a3:4a:51:
                    d2:a3:b8:41:4e:bc:56:8c:e6:21:a1:2a:2e:5c:45:
                    c1:1a:f7:45:a0:c4:90:16:c6:a2:d8:23:a7:61:12:
                    f1:bc:b7:be:ee:bc:7f:61:15:96:19:a8:cb:d7:64:
                    ce:1c:db:aa:8c:30:63:08:be:e2:80:2a:82:cb:d4:
                    f3:f8:b2:9b:a7:f5:31:53:7c:26:db:47:d3:9b:54:
                    ac:93:a3:27:22:f9:bd:18:99:8e:51:4e:a4:79:84:
                    48:5f:e8:1d:ee:50:f7:db:99:c8:87:f6:42:d6:a5:
                    b6:37:a4:53:b9:d3:d5:9d:34:0c:88:17:b6:67:39:
                    1e:58:b3:17:b0:7d:e7:ef:86:80:29:90:dd:3a:84:
                    89:2f:4a:83:06:85:6a:b6:55:9d:04:57:89:8d:3e:
                    8f:b2:c7:13:2f:b4:b8:72:6f:c0:95:56:8f:a7:2b:
                    31:d9:4a:9e:c3:45:69:51:29:fa:0b:06:0b:e5:c1:
                    78:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:46:E4:B4:69:F5:F5:3C:58:2C:E2:11:41:B7:97:1C:6E:CF:02:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/c007bec6-63a6-3aa3-8fa3-7911489cacfa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.crl

            X509v3 Authority Key Identifier:
                keyid:A7:31:13:DA:A8:C2:6D:D3:40:47:B6:C3:2B:BA:78:43:31:2F:01:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:147:c45::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:10:d2:9f:9b:0a:d8:23:60:3b:83:2f:d5:5e:8c:48:66:0a:
         6b:cb:dd:9f:88:c9:8e:a3:f9:a6:3e:c6:49:5a:55:34:df:c2:
         18:8c:42:a4:93:7c:d0:bb:26:f6:52:d0:d7:20:26:0a:a3:d5:
         41:71:c7:7a:85:01:2c:7e:84:e6:95:5a:e0:78:29:a2:b0:f3:
         a7:af:d3:4c:1a:2b:ae:f2:0e:83:24:3b:91:8c:ba:64:6a:61:
         ef:aa:75:f7:97:09:50:70:97:bf:37:0e:d3:20:6b:d2:5b:5b:
         8f:cc:53:18:b4:f8:44:21:f7:8f:11:2d:71:9a:e1:34:1d:a2:
         ae:d1:45:bd:a6:ae:1f:79:6f:58:46:ba:62:45:f9:eb:c0:3e:
         9a:ca:8a:b0:35:4e:72:e8:09:f1:2e:a4:23:1b:ae:f8:f9:4e:
         42:0a:10:f4:0e:84:ca:eb:aa:28:72:21:b6:5d:2b:9b:f3:07:
         63:33:79:ca:12:6f:24:a6:4f:08:24:da:a2:ac:07:cd:3f:ad:
         68:4f:28:de:45:9d:87:fa:6f:50:e9:a2:a4:08:1a:d8:8c:eb:
         50:6e:ea:92:92:8e:fe:6c:73:d7:d7:97:3e:95:44:c7:53:38:
         d7:01:58:33:a0:78:9e:a8:44:56:a8:7c:56:ab:1f:8b:da:42:
         e1:55:67:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 17:34:44 2026 by rpki-client