Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd/00a33301-9187-30c7-82ee-d5b3029d2af1.roa
File:                     00a33301-9187-30c7-82ee-d5b3029d2af1.roa (raw, json)
Hash identifier:          +Z2Z/NpELGqLratZx+nw4VWAeN3MCl6sBLEr0kTskNs=
Subject key identifier:   3D:53:92:9B:B6:B2:2D:DF:D6:5D:E2:9C:46:18:B8:54:13:5F:BA:44
Certificate issuer:       /CN=8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd
Certificate serial:       010D0C9F4328584DAC456BC8BB5CDF4A5C1AB080
Authority key identifier: 97:FC:85:1D:72:C6:73:DC:60:DC:E4:F3:FA:12:C4:FA:2B:F3:46:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd/00a33301-9187-30c7-82ee-d5b3029d2af1.roa
Signing time:             Thu 30 Apr 2026 01:00:26 +0000
ROA not before:           Thu 30 Apr 2026 01:00:26 +0000
ROA not after:            Wed 29 Jul 2026 01:00:26 +0000
asID:                     47065
IP address blocks:        2604:4540::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ac:45:6b:c8:bb:5c:df:4a:5c:1a:b0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd
        Validity
            Not Before: Apr 30 01:00:26 2026 GMT
            Not After : Jul 29 01:00:26 2026 GMT
        Subject: CN=b3f4771a-210c-46ea-b624-5ffedc62fb44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:fe:15:ec:f6:fe:18:4a:bb:00:02:d4:eb:10:
                    99:e1:26:9b:f2:bd:cc:e0:2b:72:83:88:2b:51:fe:
                    c2:92:a8:bb:e2:83:12:b0:30:2b:b8:95:f6:26:02:
                    27:58:41:83:a6:68:25:60:a0:0f:5d:e6:94:96:bf:
                    dc:e4:d7:44:5a:1a:c2:9f:5a:14:5c:ca:38:db:aa:
                    b4:85:4f:d6:06:03:7e:14:25:90:3e:eb:36:9b:bd:
                    31:10:8e:b6:45:1b:60:ec:fa:5f:6f:02:a7:08:3c:
                    7a:ba:6b:55:db:87:1b:aa:4b:c7:bd:fb:7b:ee:50:
                    90:2b:ca:51:11:6e:ca:11:a7:62:34:f2:2e:a9:63:
                    3d:55:b7:99:83:57:dc:17:f3:f2:e8:e3:c2:f5:0b:
                    30:b5:60:83:53:5b:65:4f:c4:3d:6d:2e:35:79:c3:
                    b3:0c:30:73:bc:14:68:ad:bc:8d:6f:b7:8a:fd:8a:
                    5c:97:b9:e0:b6:62:f2:e1:83:b6:ce:7f:7e:c6:62:
                    92:df:ae:40:95:11:f4:7c:0f:fe:5f:65:66:7f:46:
                    6d:8c:40:eb:5d:64:d4:e4:62:00:0c:fb:44:cf:fd:
                    2a:34:3d:3a:22:36:6b:41:68:5f:6e:c8:57:10:e1:
                    94:54:49:21:32:3a:ed:8f:99:9d:b3:11:3a:bf:14:
                    e5:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:53:92:9B:B6:B2:2D:DF:D6:5D:E2:9C:46:18:B8:54:13:5F:BA:44
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd/00a33301-9187-30c7-82ee-d5b3029d2af1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd.crl

            X509v3 Authority Key Identifier:
                keyid:97:FC:85:1D:72:C6:73:DC:60:DC:E4:F3:FA:12:C4:FA:2B:F3:46:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:4540::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:dd:a5:95:ea:62:14:c9:8e:b0:5a:ae:36:c2:47:9d:af:82:
         38:c1:12:52:83:ce:07:46:c1:48:39:1b:ee:dc:54:1e:2a:fd:
         f6:ab:70:de:cd:3a:6a:4a:7a:05:31:f7:19:40:79:ae:49:2a:
         75:7d:4c:9b:e4:55:8b:10:3b:ee:2a:c7:14:a1:1a:ea:65:30:
         e7:09:20:64:9a:dd:9c:e8:ee:ad:31:54:e4:e3:f5:47:6f:cf:
         ac:3b:0b:c6:f5:20:a4:2f:09:72:72:cd:85:e7:ce:b3:0f:27:
         59:9b:7c:9f:97:4e:97:b3:05:1b:31:f4:50:24:cc:9a:0d:83:
         ff:af:8f:cb:e4:11:47:fa:dd:e1:61:07:43:7b:34:56:34:a7:
         a5:6e:d9:3d:77:cf:82:ed:d7:b2:45:3d:cd:a8:61:21:bb:ce:
         65:30:d6:ed:b4:66:3b:dd:f2:a0:da:5c:f9:4a:7d:79:10:c0:
         dc:e7:79:86:69:ca:19:62:90:7d:ed:9a:7a:15:56:a1:88:8a:
         ad:9d:a0:1e:6f:dd:1d:e7:6d:9a:ef:3c:51:60:31:56:a5:d8:
         63:e3:ac:d0:a2:5f:54:f5:68:d1:9a:53:90:4c:39:6e:60:c2:
         34:ae:90:92:e4:16:c4:93:0a:83:e6:35:cb:7f:a3:58:7b:71:
         58:8f:1f:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:30:38 2026 by rpki-client