Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd/ea128ee5-92a4-30c5-bbd2-b4d04e1fdd6d.roa
File:                     ea128ee5-92a4-30c5-bbd2-b4d04e1fdd6d.roa (raw, json)
Hash identifier:          b+7nE5xynU70rln2KFYHnvUZCIFoG3yfojx0eU1NT9o=
Subject key identifier:   CB:10:31:66:56:01:BF:75:56:D9:A8:29:A3:3E:E6:03:8C:AC:6A:2B
Certificate issuer:       /CN=8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd
Certificate serial:       010D0C9F4328584DA11AB5A7CE031BDD8D2D9850
Authority key identifier: 97:FC:85:1D:72:C6:73:DC:60:DC:E4:F3:FA:12:C4:FA:2B:F3:46:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd/ea128ee5-92a4-30c5-bbd2-b4d04e1fdd6d.roa
Signing time:             Sun 26 Apr 2026 01:00:25 +0000
ROA not before:           Sun 26 Apr 2026 01:00:25 +0000
ROA not after:            Sat 25 Jul 2026 01:00:25 +0000
asID:                     47065
IP address blocks:        2604:4540:80::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:a1:1a:b5:a7:ce:03:1b:dd:8d:2d:98:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd
        Validity
            Not Before: Apr 26 01:00:25 2026 GMT
            Not After : Jul 25 01:00:25 2026 GMT
        Subject: CN=39d04e89-f28c-48fd-b528-08742dbe4a4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:fc:69:a3:8f:5e:a7:2a:f8:34:3f:47:d3:ef:
                    4d:8f:a7:9c:40:da:8a:47:06:66:0d:01:50:a6:77:
                    7f:4d:47:f6:0b:aa:f5:80:45:c4:0b:64:fa:67:04:
                    a8:bb:08:1c:4a:a2:7f:88:21:7b:8f:3f:b9:c4:04:
                    76:c7:f6:af:4e:f9:ba:78:f9:f5:fd:65:b3:b1:11:
                    c1:df:ff:15:aa:5c:de:f1:3c:a0:1d:82:d4:7d:65:
                    35:8c:95:63:eb:1e:98:20:dc:dc:8d:71:63:6c:5f:
                    82:75:e3:0d:05:cc:06:a0:37:9b:72:d1:fd:20:f1:
                    90:fb:0c:97:33:4f:c1:84:fe:5c:96:70:30:e2:fc:
                    09:d7:42:54:bf:2e:c9:b2:64:62:a3:7b:04:e0:86:
                    fb:3d:43:03:e9:8f:71:e8:69:73:54:e5:42:e0:da:
                    c1:fd:14:fc:ba:85:8a:f2:94:fa:84:bf:05:09:47:
                    99:44:4a:55:e3:b9:5f:0b:68:96:93:65:02:ed:3d:
                    60:8d:af:5c:3f:ad:6d:c3:dc:f2:7b:b3:b6:f0:c5:
                    88:05:8b:e2:c0:ca:4d:fc:a0:89:0b:03:68:2a:29:
                    71:5d:08:63:ee:17:1a:38:b3:89:fb:3d:8f:cf:c9:
                    39:36:79:e3:31:b2:8f:62:1b:1f:53:7f:30:39:dd:
                    ae:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:10:31:66:56:01:BF:75:56:D9:A8:29:A3:3E:E6:03:8C:AC:6A:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd/ea128ee5-92a4-30c5-bbd2-b4d04e1fdd6d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd.crl

            X509v3 Authority Key Identifier:
                keyid:97:FC:85:1D:72:C6:73:DC:60:DC:E4:F3:FA:12:C4:FA:2B:F3:46:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:4540:80::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b5:b0:0e:41:2e:e2:99:08:73:b6:99:95:ec:b7:b0:51:e3:bf:
         c7:01:97:ff:12:9e:ba:32:d8:bd:86:65:b0:03:c2:10:35:09:
         f8:c9:b4:33:fb:4d:7f:e8:99:80:4d:a3:d2:69:3e:6a:8a:78:
         dd:12:b4:5f:f6:bf:d4:45:b2:81:cf:6e:99:67:ae:fe:cf:7c:
         23:15:3a:8f:4f:7c:45:38:23:82:b1:ed:e8:aa:b3:62:1b:5c:
         39:e7:df:6f:e2:0a:22:e8:12:b9:35:9b:d6:00:1b:04:c8:09:
         e2:53:c2:fb:4f:5d:eb:49:49:83:53:fd:38:b9:e7:90:58:69:
         cc:c7:ac:e1:ae:ac:91:8f:9c:3c:5a:20:ac:19:dc:57:b8:39:
         ad:d2:85:ed:36:9b:92:d2:64:4f:e6:bb:a8:40:12:94:84:a5:
         6a:73:db:12:72:ff:e3:74:bf:8b:fd:4c:f9:bb:ce:22:fc:4c:
         06:67:98:9d:f4:31:4d:b3:8f:22:b9:5f:17:b7:52:04:c3:95:
         ab:91:47:58:de:f0:ec:6e:3e:94:63:e9:50:ef:a1:5a:7f:a9:
         6d:be:79:0d:0d:7b:28:b9:49:bc:24:cb:20:c7:3b:96:97:88:
         4d:60:71:8f:0d:67:83:2e:0e:c7:5e:4d:0a:93:84:38:4a:0b:
         f9:6b:f0:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:37:59 2026 by rpki-client