Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e0808dbd-8138-4b99-ac5a-4f6a7f475f92/cd01d152-7a59-32c5-a3b2-e76ed7233eca.roa
File:                     cd01d152-7a59-32c5-a3b2-e76ed7233eca.roa (raw, json)
Hash identifier:          47jx7pJ9eQSbzaMOdaGrsxtK9tYN/zVxeaDWSqLH7v8=
Subject key identifier:   D8:20:5A:5B:A4:B0:B1:AB:07:A4:20:7E:9A:9F:F1:D9:47:8E:57:18
Certificate issuer:       /CN=e0808dbd-8138-4b99-ac5a-4f6a7f475f92
Certificate serial:       010D0C9F4328584DA3E5602EEF7F73F16072F600
Authority key identifier: CA:54:C2:97:29:E2:9F:BF:FD:7B:3F:D5:DB:32:2A:8B:CC:EC:9A:B3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e0808dbd-8138-4b99-ac5a-4f6a7f475f92.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e0808dbd-8138-4b99-ac5a-4f6a7f475f92/cd01d152-7a59-32c5-a3b2-e76ed7233eca.roa
Signing time:             Mon 27 Apr 2026 01:00:24 +0000
ROA not before:           Mon 27 Apr 2026 01:00:24 +0000
ROA not after:            Sun 26 Jul 2026 01:00:24 +0000
asID:                     396919
IP address blocks:        2605:940::/40 maxlen: 56
                          2605:940:400::/40 maxlen: 56
                          2605:940:510::/44 maxlen: 56
                          2605:940:610::/44 maxlen: 56
                          2605:940:710::/44 maxlen: 56
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e0808dbd-8138-4b99-ac5a-4f6a7f475f92/e0808dbd-8138-4b99-ac5a-4f6a7f475f92.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e0808dbd-8138-4b99-ac5a-4f6a7f475f92/e0808dbd-8138-4b99-ac5a-4f6a7f475f92.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e0808dbd-8138-4b99-ac5a-4f6a7f475f92.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:a3:e5:60:2e:ef:7f:73:f1:60:72:f6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0808dbd-8138-4b99-ac5a-4f6a7f475f92
        Validity
            Not Before: Apr 27 01:00:24 2026 GMT
            Not After : Jul 26 01:00:24 2026 GMT
        Subject: CN=36079593-c1cf-4489-be1a-54a4f4129e3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:c9:04:90:30:ad:2e:d8:f3:0f:05:ce:61:38:
                    1f:d2:c4:dd:f8:7a:4b:2f:b7:26:5f:7b:a7:de:3c:
                    c8:62:e0:dc:2e:1e:58:af:c9:fc:1d:f2:19:33:e1:
                    1d:5c:bc:46:1f:1d:e2:37:91:6e:42:f2:b7:38:60:
                    58:7a:9f:02:02:6d:e0:72:c4:1c:76:1c:af:0d:6a:
                    d0:0d:a4:51:81:8a:0d:ca:d2:5f:2b:ab:c6:c9:30:
                    6c:50:78:ca:13:b2:4a:51:e8:d7:70:db:c5:56:7b:
                    02:86:86:bd:e0:44:52:74:ad:27:74:33:ba:f0:b1:
                    12:dd:87:96:a1:af:cc:67:17:13:e4:56:7a:52:a2:
                    93:2a:4c:bf:8c:8c:79:a1:6d:4e:9a:04:96:34:1c:
                    51:24:8b:2f:e0:59:33:e2:30:39:95:ad:ac:39:30:
                    c3:fd:74:1f:e6:82:8a:4b:90:45:9e:7d:14:f1:20:
                    19:cd:d1:d8:1a:15:ea:fe:22:5f:09:b6:57:1b:2a:
                    6c:8f:b3:df:42:28:8c:c8:ef:8f:1a:2c:cd:92:2a:
                    ee:cf:61:64:51:c5:1b:08:17:5d:c2:5d:4f:81:57:
                    63:54:14:10:4d:63:86:c6:d6:d6:e8:79:76:d2:86:
                    20:34:3b:48:13:d0:36:8a:cf:f1:a2:3a:8e:6d:e9:
                    83:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:20:5A:5B:A4:B0:B1:AB:07:A4:20:7E:9A:9F:F1:D9:47:8E:57:18
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e0808dbd-8138-4b99-ac5a-4f6a7f475f92/cd01d152-7a59-32c5-a3b2-e76ed7233eca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e0808dbd-8138-4b99-ac5a-4f6a7f475f92/e0808dbd-8138-4b99-ac5a-4f6a7f475f92.crl

            X509v3 Authority Key Identifier:
                keyid:CA:54:C2:97:29:E2:9F:BF:FD:7B:3F:D5:DB:32:2A:8B:CC:EC:9A:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e0808dbd-8138-4b99-ac5a-4f6a7f475f92.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:940::/40
                  2605:940:400::/40
                  2605:940:510::/44
                  2605:940:610::/44
                  2605:940:710::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:2a:e8:54:c3:1e:b8:1f:27:3b:02:e7:10:41:b8:9f:fb:df:
         37:6d:93:99:35:20:e1:f8:97:ac:f1:ec:d0:01:4f:4c:68:28:
         8d:25:6f:77:77:57:0d:80:c6:72:9d:59:9e:4f:5e:50:c2:fd:
         ce:2b:66:39:d6:c5:59:f2:06:50:82:27:dc:fc:ad:f3:da:21:
         ba:00:b4:90:4a:8f:b4:6f:0d:52:11:f7:02:10:89:a7:80:10:
         73:22:77:b9:e7:9e:0e:50:87:c0:cb:53:e7:54:40:65:99:4a:
         8e:7f:f0:4e:26:55:87:32:0c:11:00:81:2b:a8:61:7a:95:e4:
         87:67:7a:7d:ad:04:09:da:76:26:a5:b0:7f:0a:df:c1:e0:99:
         52:21:ff:6f:72:bb:6b:e8:f8:c1:d8:44:64:8f:90:60:73:7d:
         f6:78:8e:7c:1f:65:14:34:37:3a:90:fd:14:77:b0:85:1a:bf:
         cb:d1:04:e2:9e:fc:cb:76:22:1c:64:38:63:22:93:3c:f2:a3:
         7b:43:a8:26:40:3b:df:d2:c0:d1:ea:63:27:91:cd:fa:f2:57:
         df:96:f5:3d:9a:31:77:6d:ee:96:9e:b9:b3:17:bf:4e:eb:89:
         79:b9:e0:21:b9:50:7e:3f:80:4f:b1:ff:19:6c:5b:42:ba:03:
         18:7c:00:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:19:13 2026 by rpki-client