Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e191232b-cf07-4d3d-95e1-afcd1b928ab1/1ef053cc-bac0-3910-9233-dd7c632a17d3.roa
File:                     1ef053cc-bac0-3910-9233-dd7c632a17d3.roa (raw, json)
Hash identifier:          pQQrdBTEXzfYibi0sZxzDX1XkGJLR07L2qjxCr3vb6E=
Subject key identifier:   5A:C0:CD:D9:0E:8C:26:DA:4B:F5:51:EB:B7:F8:EF:AD:8C:19:07:E4
Certificate issuer:       /CN=e191232b-cf07-4d3d-95e1-afcd1b928ab1
Certificate serial:       010D0C9F4328584D3F64DD3DF151179839126D80
Authority key identifier: EC:94:41:2C:05:92:7D:C7:FB:4B:08:41:DA:31:BE:F3:EA:B6:BD:34
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e191232b-cf07-4d3d-95e1-afcd1b928ab1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e191232b-cf07-4d3d-95e1-afcd1b928ab1/1ef053cc-bac0-3910-9233-dd7c632a17d3.roa
Signing time:             Sun 22 Mar 2026 01:00:32 +0000
ROA not before:           Sun 22 Mar 2026 01:00:32 +0000
ROA not after:            Sat 20 Jun 2026 01:00:32 +0000
asID:                     29955
IP address blocks:        2001:49d0:1c0::/42 maxlen: 42
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e191232b-cf07-4d3d-95e1-afcd1b928ab1/e191232b-cf07-4d3d-95e1-afcd1b928ab1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e191232b-cf07-4d3d-95e1-afcd1b928ab1/e191232b-cf07-4d3d-95e1-afcd1b928ab1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e191232b-cf07-4d3d-95e1-afcd1b928ab1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:3f:64:dd:3d:f1:51:17:98:39:12:6d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e191232b-cf07-4d3d-95e1-afcd1b928ab1
        Validity
            Not Before: Mar 22 01:00:32 2026 GMT
            Not After : Jun 20 01:00:32 2026 GMT
        Subject: CN=cb0ef403-579b-4577-a394-accbd3a9c5b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:e2:63:9e:89:1c:50:39:50:dd:62:26:a1:2a:
                    23:c7:9a:ed:8e:61:9d:1a:ae:e2:d9:f6:ef:da:57:
                    f3:98:04:f9:fc:94:07:51:1e:ce:ae:9f:99:cf:fe:
                    e8:91:44:17:82:aa:51:04:7b:b3:c7:7e:bd:9a:f2:
                    c3:5d:cb:b6:51:b3:ac:0f:ec:be:71:0c:da:c0:2f:
                    0d:ef:aa:e6:89:ca:65:2a:5b:66:c8:2f:f5:f2:d5:
                    48:32:35:8b:9c:68:95:3e:ff:53:7d:19:7b:06:4b:
                    3b:51:94:b3:3b:f7:fc:79:c6:0b:2c:82:91:0b:cb:
                    cb:d7:6a:ca:f7:e6:b1:cb:53:e1:f8:3e:35:dc:0b:
                    9b:ed:77:6b:63:2a:62:93:b0:ee:ff:30:e5:d5:32:
                    84:1a:97:bf:4b:b1:d8:26:a7:68:11:54:2f:53:cc:
                    1e:1d:0b:3b:fd:2a:b6:b6:1b:68:09:e2:3a:ba:00:
                    18:9a:af:00:92:90:53:6c:f3:bb:2f:bc:df:86:3b:
                    6a:89:ad:bc:1b:62:78:6c:e1:bc:97:2d:6a:af:74:
                    fc:4b:c9:83:53:10:55:28:1f:71:6e:ec:b6:cf:f9:
                    58:1e:28:63:7d:95:0c:9d:c1:5f:b9:52:7b:cb:b1:
                    7d:d8:5e:f7:4d:46:ed:46:49:c0:e5:5a:0a:4a:01:
                    69:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:C0:CD:D9:0E:8C:26:DA:4B:F5:51:EB:B7:F8:EF:AD:8C:19:07:E4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e191232b-cf07-4d3d-95e1-afcd1b928ab1/1ef053cc-bac0-3910-9233-dd7c632a17d3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e191232b-cf07-4d3d-95e1-afcd1b928ab1/e191232b-cf07-4d3d-95e1-afcd1b928ab1.crl

            X509v3 Authority Key Identifier:
                keyid:EC:94:41:2C:05:92:7D:C7:FB:4B:08:41:DA:31:BE:F3:EA:B6:BD:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e191232b-cf07-4d3d-95e1-afcd1b928ab1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:49d0:1c0::/42

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:fd:9d:0a:68:ee:8f:7c:c6:24:a0:68:7a:bb:be:4b:a5:58:
         c1:61:6c:cf:9c:03:10:b9:b2:06:7c:44:24:6a:fe:d8:d8:b2:
         ae:da:af:5c:68:90:3e:c6:03:03:60:87:1b:39:1f:4a:74:43:
         b0:db:32:e6:fe:54:dd:34:97:7b:a2:79:4b:f8:e9:c6:f3:2d:
         ff:70:1b:25:ed:5e:20:95:04:bf:27:0e:31:f2:64:78:81:a8:
         ef:c3:9c:30:88:f4:2d:f4:80:64:44:f3:43:c1:2e:5f:b7:b4:
         5e:d2:6b:c5:07:ca:61:7e:82:fe:73:3d:f1:d7:1e:56:04:38:
         34:bf:23:24:25:dc:79:7c:5e:38:e7:6a:44:38:13:22:61:db:
         8e:f7:18:27:96:79:8f:9d:aa:a3:5b:04:15:4a:3c:51:f6:5c:
         32:2d:d6:e1:37:b5:f8:be:39:de:3b:c2:9a:2b:bb:aa:05:b0:
         44:bf:17:66:28:ae:9c:e8:c8:65:f4:60:7b:22:c8:a9:bf:23:
         2a:8c:bf:dd:2e:52:a3:ef:88:ab:08:bf:1e:f5:3e:ba:79:a3:
         08:35:b4:1e:35:88:39:c4:07:d3:1b:0c:ca:84:c2:51:e9:2a:
         42:ba:bc:6b:21:55:5f:10:2a:43:5e:43:53:a7:cc:2d:cd:3e:
         47:85:49:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:15:32 2026 by rpki-client