Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/13d1e2d5-5089-4514-80fb-652631b3cfab/4c9b872a-c498-3caf-a727-0a8324532537.roa
File:                     4c9b872a-c498-3caf-a727-0a8324532537.roa (raw, json)
Hash identifier:          p/PacgoevjIpYM8TKBjFcQBt4V1kLFSm1W2263i9AM8=
Subject key identifier:   0C:1D:BF:D8:57:48:6D:61:FA:DB:2B:B6:B3:AE:40:06:D8:C4:40:32
Certificate issuer:       /CN=13d1e2d5-5089-4514-80fb-652631b3cfab
Certificate serial:       010D0C9F4328584D397BC5C9686FA5949DE49C00
Authority key identifier: 03:53:40:F7:C9:7E:C0:C8:FC:BB:2E:B0:A6:53:6F:04:20:D6:E1:8D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/13d1e2d5-5089-4514-80fb-652631b3cfab.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/13d1e2d5-5089-4514-80fb-652631b3cfab/4c9b872a-c498-3caf-a727-0a8324532537.roa
Signing time:             Thu 19 Mar 2026 22:12:02 +0000
ROA not before:           Thu 19 Mar 2026 22:12:02 +0000
ROA not after:            Wed 17 Jun 2026 22:12:02 +0000
asID:                     62917
IP address blocks:        2604:82c0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/13d1e2d5-5089-4514-80fb-652631b3cfab/13d1e2d5-5089-4514-80fb-652631b3cfab.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/13d1e2d5-5089-4514-80fb-652631b3cfab/13d1e2d5-5089-4514-80fb-652631b3cfab.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/13d1e2d5-5089-4514-80fb-652631b3cfab.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:39:7b:c5:c9:68:6f:a5:94:9d:e4:9c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13d1e2d5-5089-4514-80fb-652631b3cfab
        Validity
            Not Before: Mar 19 22:12:02 2026 GMT
            Not After : Jun 17 22:12:02 2026 GMT
        Subject: CN=30fce5c4-c0c1-4430-b234-e9a70286bd6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:ae:11:6a:03:6d:d4:48:37:58:da:ca:0d:60:
                    38:04:d1:08:68:b9:96:72:50:2e:96:ee:93:e2:1a:
                    ac:42:13:5b:2a:9a:6b:3a:1c:c9:bb:ac:7a:5a:fe:
                    26:51:78:c3:ca:8d:04:60:5f:94:c2:28:c4:f0:38:
                    70:a0:b1:22:cd:91:da:8b:e8:27:19:fc:1f:b1:be:
                    63:95:43:1f:da:07:0b:66:99:cd:e8:de:8e:12:05:
                    94:95:14:7e:06:5c:ee:ee:52:f0:dd:cb:52:53:a8:
                    9d:7c:35:58:ef:2b:1b:11:25:18:74:4a:54:04:cd:
                    57:d5:ca:39:4f:6c:00:b1:ac:16:38:9f:b2:92:0b:
                    2d:be:f1:a3:0a:38:5b:ba:00:33:2f:91:95:7e:86:
                    24:f4:77:79:54:8f:7e:ae:6d:d1:2a:da:16:84:e6:
                    7d:80:aa:92:db:78:68:ca:55:d0:25:ef:d4:3a:1d:
                    86:95:99:e0:32:d8:12:0d:5d:19:d8:12:dc:37:07:
                    2a:8a:38:46:44:49:03:81:ca:5e:68:75:d8:96:8d:
                    57:e5:ad:6e:e6:3c:89:b1:2e:a9:c1:62:c8:a8:3f:
                    91:45:55:68:e9:1d:7e:9c:35:c2:43:4d:0f:4d:4c:
                    10:86:51:a6:0b:95:14:84:6a:de:1c:50:8f:eb:03:
                    f2:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:1D:BF:D8:57:48:6D:61:FA:DB:2B:B6:B3:AE:40:06:D8:C4:40:32
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/13d1e2d5-5089-4514-80fb-652631b3cfab/4c9b872a-c498-3caf-a727-0a8324532537.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/13d1e2d5-5089-4514-80fb-652631b3cfab/13d1e2d5-5089-4514-80fb-652631b3cfab.crl

            X509v3 Authority Key Identifier:
                keyid:03:53:40:F7:C9:7E:C0:C8:FC:BB:2E:B0:A6:53:6F:04:20:D6:E1:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/13d1e2d5-5089-4514-80fb-652631b3cfab.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:82c0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:d7:8f:36:fb:2f:84:dc:3e:7b:4d:26:f1:b0:fb:d7:53:34:
         a6:27:d7:9a:84:fe:6e:58:d8:34:20:a3:88:cf:75:ad:2c:12:
         69:eb:2d:09:29:d5:e1:e1:82:54:ee:73:16:59:a1:b2:dd:da:
         f2:f2:1e:f4:5f:e0:e6:c2:b7:ce:f4:e4:0b:64:13:8e:ef:db:
         60:b6:25:c5:7f:6e:0c:7f:9a:16:3a:fe:be:68:89:2f:d5:5a:
         75:2f:86:fd:a5:08:98:79:3a:0a:b9:21:07:00:4b:03:1f:0e:
         2d:d8:4c:6a:0c:f7:ba:86:81:c7:b8:43:84:63:f0:b1:e8:23:
         9c:36:6c:87:aa:23:9c:2d:fd:7c:13:82:bb:77:ce:ea:11:2c:
         f2:db:13:6d:af:7b:03:86:8a:7f:8e:ed:49:e5:fe:9f:09:f2:
         e1:65:52:56:8f:c4:92:1f:a3:6c:d1:ea:95:80:02:23:7b:de:
         4a:c7:41:1e:77:4f:65:2f:09:88:06:a4:d6:33:d9:b2:67:36:
         b7:00:93:25:bb:2f:7f:09:c4:2f:96:c4:82:35:97:96:ee:07:
         c5:ce:aa:db:3b:2a:a6:1d:9d:88:b4:ed:13:8b:1e:25:46:09:
         be:00:ef:05:cf:0f:3f:29:43:9f:bd:10:9c:26:73:22:65:3f:
         ee:c5:de:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:05:54 2026 by rpki-client