Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/415e162d-b21b-3df0-ae47-8d5119d8aea2.roa
File:                     415e162d-b21b-3df0-ae47-8d5119d8aea2.roa (raw, json)
Hash identifier:          pPT4tlndB7BgzUAjAMQ4Odop9CCZGBImAb0SlW7zG+Q=
Subject key identifier:   3E:79:3A:F2:E7:23:EA:B9:84:05:EE:86:A6:87:EA:EE:32:E6:1E:7D
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584D9E502DED150C44BF8A7B1C00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/415e162d-b21b-3df0-ae47-8d5119d8aea2.roa
Signing time:             Sat 25 Apr 2026 01:00:24 +0000
ROA not before:           Sat 25 Apr 2026 01:00:24 +0000
ROA not after:            Fri 24 Jul 2026 01:00:24 +0000
asID:                     36040
IP address blocks:        2001:559:0:ca::/64 maxlen: 64
                          2001:559:0:cb::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:9e:50:2d:ed:15:0c:44:bf:8a:7b:1c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 25 01:00:24 2026 GMT
            Not After : Jul 24 01:00:24 2026 GMT
        Subject: CN=bd186a7a-fa1c-46b0-ab48-58d31e1104b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:a7:cb:55:26:be:66:51:39:ca:b5:cf:3b:ea:
                    e1:04:4f:6e:23:87:88:3b:79:d6:46:10:6f:77:d0:
                    46:b5:b9:f3:a7:8a:4b:93:55:05:6e:13:9d:0e:c6:
                    2e:6e:65:89:a5:63:88:8d:a5:f9:27:3f:fe:45:5c:
                    05:c2:a7:a6:ae:38:4e:25:a5:e9:8a:8f:f1:d3:ad:
                    f1:eb:88:32:5b:0d:38:a5:25:0e:e9:6e:4d:26:df:
                    d3:78:a4:4a:46:f3:77:34:32:b0:6b:91:f0:99:89:
                    88:3d:0c:8e:9d:cf:d5:f3:2d:3f:d8:69:46:ef:63:
                    09:6a:16:4a:3e:d3:b5:0d:ec:8e:73:ab:97:d1:09:
                    e9:f4:99:3c:28:a9:1f:4f:5a:bb:f7:0a:2b:14:1c:
                    e7:36:bd:29:a8:93:aa:62:6b:1d:0e:02:22:2b:3f:
                    84:6f:2f:d9:33:41:18:d8:17:33:68:61:3b:48:02:
                    dd:7a:51:4b:71:f0:2b:4e:c3:9b:97:af:9f:5a:36:
                    7d:14:83:c3:df:36:1d:32:7a:70:05:e2:be:96:8b:
                    e7:a8:5b:cc:ea:cd:5e:8b:92:83:1e:c4:ea:30:c0:
                    1a:6d:86:56:f6:2c:52:7a:d0:6d:b8:c5:8c:3f:a8:
                    12:36:16:40:5f:d1:5b:b0:7b:1e:4e:77:38:ae:02:
                    f8:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:79:3A:F2:E7:23:EA:B9:84:05:EE:86:A6:87:EA:EE:32:E6:1E:7D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/415e162d-b21b-3df0-ae47-8d5119d8aea2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:0:ca::/63

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:31:9a:98:2b:33:34:1d:37:bf:32:56:f4:a6:eb:f6:c2:3f:
         e2:4a:6b:c2:7d:2b:7d:84:6d:56:0d:d3:6b:c7:8d:8b:b4:74:
         07:53:17:d8:99:5d:d2:2b:58:ff:95:9b:78:e2:dc:61:29:8f:
         b2:da:02:97:c1:52:d2:7a:ef:ba:06:f4:e9:e6:ee:a5:b9:15:
         80:6c:1a:4a:a5:a2:78:0e:36:cb:0e:9a:8f:33:90:3c:4c:48:
         72:51:b9:b5:78:49:73:68:34:cd:85:6c:08:df:38:c7:b4:01:
         8e:af:85:ba:65:85:1f:c4:71:31:7a:75:c0:9d:6d:01:24:28:
         bd:05:15:41:57:60:2d:d3:9a:1f:8b:f1:ca:21:49:e3:5b:ba:
         90:41:3c:7b:44:b3:50:d0:8b:26:ab:91:28:ef:74:63:b2:c6:
         41:18:da:4f:4f:56:6c:21:f4:84:e3:78:89:67:db:c5:cb:aa:
         3c:eb:da:ba:b9:c7:02:7c:e0:15:12:a0:7a:12:f0:3c:05:eb:
         65:ec:40:b3:31:6d:a8:0e:da:d0:1a:93:24:56:28:8f:e6:f6:
         b4:27:5b:1f:6d:26:ab:94:60:66:f3:a0:4f:25:3a:c7:a8:a3:
         82:bb:ff:b0:6d:97:3b:84:9a:0c:f0:b2:f3:b1:1b:c6:a1:58:
         9d:12:d7:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:31:18 2026 by rpki-client