Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ac448c7f-05bb-4802-8533-0aad8a69acb1/8d4c36be-83e8-3bb3-a703-b7faeed7798c.roa
File:                     8d4c36be-83e8-3bb3-a703-b7faeed7798c.roa (raw, json)
Hash identifier:          Il2Qdg+EfD3/wRJkx0MSUdmOGvhneJozVmKrThZwMPs=
Subject key identifier:   C9:21:FC:DF:B3:47:E6:06:C7:EE:C3:FF:0E:BF:1A:8D:0A:49:5B:F2
Certificate issuer:       /CN=ac448c7f-05bb-4802-8533-0aad8a69acb1
Certificate serial:       010D0C9F4328584DC6CB0B6FEA9D88F41E89EB60
Authority key identifier: 68:1B:6C:BF:68:80:D6:70:FD:14:48:6E:E9:8B:38:01:3A:A8:4B:44
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ac448c7f-05bb-4802-8533-0aad8a69acb1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ac448c7f-05bb-4802-8533-0aad8a69acb1/8d4c36be-83e8-3bb3-a703-b7faeed7798c.roa
Signing time:             Sat 09 May 2026 13:00:31 +0000
ROA not before:           Sat 09 May 2026 13:00:31 +0000
ROA not after:            Fri 07 Aug 2026 13:00:31 +0000
asID:                     400189
IP address blocks:        2602:fb16::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ac448c7f-05bb-4802-8533-0aad8a69acb1/ac448c7f-05bb-4802-8533-0aad8a69acb1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ac448c7f-05bb-4802-8533-0aad8a69acb1/ac448c7f-05bb-4802-8533-0aad8a69acb1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ac448c7f-05bb-4802-8533-0aad8a69acb1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:c6:cb:0b:6f:ea:9d:88:f4:1e:89:eb:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ac448c7f-05bb-4802-8533-0aad8a69acb1
        Validity
            Not Before: May  9 13:00:31 2026 GMT
            Not After : Aug  7 13:00:31 2026 GMT
        Subject: CN=a5a45c8d-6373-4faf-a3ff-ba9efeea254c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:7c:9c:f9:b4:55:3b:fa:9c:27:d6:48:9f:5d:
                    c8:1b:b2:5c:2d:e6:84:b5:31:85:43:14:32:39:4b:
                    19:c9:d2:32:12:c4:b4:98:5d:da:a4:bf:b5:9c:3e:
                    cd:b9:f1:d7:07:67:54:3f:fb:b2:77:2e:e2:01:17:
                    6f:06:a2:2a:7c:ee:e8:b4:63:cb:f3:a1:ce:db:1a:
                    a9:d3:ec:1a:1c:82:7b:bd:fd:03:35:dc:ec:8c:e3:
                    69:37:5c:78:d3:11:28:0c:8a:cb:7a:6c:ca:f9:62:
                    99:3d:b1:8f:12:9b:7a:1e:05:c8:de:1f:7d:a9:81:
                    21:9c:4c:73:09:bf:5d:ad:bf:66:da:d8:bd:13:b2:
                    c6:76:35:c9:45:71:46:aa:f7:e8:e6:46:61:66:85:
                    85:74:b6:44:7c:32:6b:7c:03:67:00:7b:bb:14:ae:
                    c9:89:3b:9f:cb:53:15:b6:09:ef:89:10:c8:90:20:
                    2a:85:91:23:da:e3:81:9e:ce:ce:c6:b2:f3:68:56:
                    b5:ea:e3:c4:b7:17:d5:d1:b9:db:3c:2b:40:10:89:
                    56:e6:df:99:1e:ad:d7:f8:a7:1a:62:58:8b:49:21:
                    ad:b8:18:44:c0:55:5c:14:24:4c:d6:61:ed:d6:47:
                    99:ac:38:cd:7b:63:94:90:77:9f:5b:9e:b9:81:86:
                    9a:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:21:FC:DF:B3:47:E6:06:C7:EE:C3:FF:0E:BF:1A:8D:0A:49:5B:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ac448c7f-05bb-4802-8533-0aad8a69acb1/8d4c36be-83e8-3bb3-a703-b7faeed7798c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ac448c7f-05bb-4802-8533-0aad8a69acb1/ac448c7f-05bb-4802-8533-0aad8a69acb1.crl

            X509v3 Authority Key Identifier:
                keyid:68:1B:6C:BF:68:80:D6:70:FD:14:48:6E:E9:8B:38:01:3A:A8:4B:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ac448c7f-05bb-4802-8533-0aad8a69acb1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fb16::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:58:76:df:a1:3b:d8:17:44:e7:b8:46:44:ad:9c:ca:d0:d6:
         fc:f6:02:d5:b5:19:2f:be:e2:c9:22:83:fd:36:16:64:17:77:
         e5:ca:80:c7:d7:b3:2e:01:64:f4:b2:77:c7:b3:a0:0f:65:cb:
         b1:78:66:5a:50:3c:6d:2f:18:7a:86:a0:49:d0:fd:54:d1:fb:
         91:3f:53:6f:2b:d4:e0:00:9d:dd:33:f8:db:7d:0f:5e:af:1f:
         0f:cc:b4:e6:2c:0b:f6:9c:6a:71:24:dc:0b:1c:9d:45:9a:ff:
         7f:60:9f:8e:a5:90:46:1e:f6:e2:c9:d7:d0:ed:ca:7e:b3:4c:
         2d:73:1d:3e:b8:54:85:e9:ec:6d:92:58:0a:92:65:5d:d1:1e:
         d9:53:e4:d5:5c:4a:11:ca:f6:0e:6c:34:04:8f:f3:d1:05:de:
         46:6e:d1:51:81:82:01:17:27:9e:28:53:9d:75:7d:ec:5a:2c:
         38:8c:57:90:c0:d0:4e:c9:a4:92:ee:8f:51:5d:08:37:0e:8a:
         9a:24:91:8f:dd:a3:f7:da:fa:32:83:ea:e8:01:88:99:89:28:
         38:74:3e:b4:71:9e:a6:5a:44:48:fb:64:f3:0c:ff:87:75:91:
         a9:10:3d:d9:e4:02:c5:eb:ac:c4:8b:b9:cc:88:fd:1f:44:98:
         09:22:93:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:49:21 2026 by rpki-client