Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/28e1f9ea-24bf-4c22-a182-fc925d5a819c/1363b2c3-63ea-3b3d-913f-f7adf06eda35.roa
File:                     1363b2c3-63ea-3b3d-913f-f7adf06eda35.roa (raw, json)
Hash identifier:          TK44nfrjXs5ZgfpttFPx/aP5PQvb2qn9Ag1I6AmEF2U=
Subject key identifier:   09:28:DC:A2:CE:EA:EF:1F:D9:17:74:E9:F3:95:9E:B4:1C:BC:BF:F5
Certificate issuer:       /CN=28e1f9ea-24bf-4c22-a182-fc925d5a819c
Certificate serial:       010D0C9F4328584D9FB56BEF82DAC1724B92C790
Authority key identifier: 44:97:0C:F7:E2:B0:F7:B3:51:4F:9D:79:7E:5C:C3:97:F9:6E:1B:19
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/28e1f9ea-24bf-4c22-a182-fc925d5a819c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/28e1f9ea-24bf-4c22-a182-fc925d5a819c/1363b2c3-63ea-3b3d-913f-f7adf06eda35.roa
Signing time:             Sat 25 Apr 2026 13:00:30 +0000
ROA not before:           Sat 25 Apr 2026 13:00:30 +0000
ROA not after:            Fri 24 Jul 2026 13:00:30 +0000
asID:                     32217
IP address blocks:        2604:8440::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/28e1f9ea-24bf-4c22-a182-fc925d5a819c/28e1f9ea-24bf-4c22-a182-fc925d5a819c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/28e1f9ea-24bf-4c22-a182-fc925d5a819c/28e1f9ea-24bf-4c22-a182-fc925d5a819c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/28e1f9ea-24bf-4c22-a182-fc925d5a819c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:9f:b5:6b:ef:82:da:c1:72:4b:92:c7:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28e1f9ea-24bf-4c22-a182-fc925d5a819c
        Validity
            Not Before: Apr 25 13:00:30 2026 GMT
            Not After : Jul 24 13:00:30 2026 GMT
        Subject: CN=bf3c17e4-6049-4aa4-97a7-9421dfedef84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:00:9b:f4:6d:82:4c:33:66:1f:37:14:14:c1:
                    24:8f:53:3f:c1:d1:18:e2:06:e7:d2:b3:dc:66:16:
                    12:ca:16:89:6a:5b:e5:af:d6:20:7b:93:77:22:e4:
                    72:66:a6:fd:b2:60:0b:04:e9:9c:ca:52:f1:a0:91:
                    90:4d:a8:71:c5:3b:04:a0:36:0c:bf:83:5d:e5:b7:
                    d5:8e:15:53:dc:08:59:09:22:e8:ad:22:d7:33:14:
                    81:cf:df:84:d5:4f:09:b1:10:59:20:9b:fc:98:7b:
                    e0:d4:31:57:1d:cd:d1:8f:23:eb:a2:16:38:1c:bf:
                    55:1b:17:74:d7:84:04:e9:b2:63:10:31:e7:6d:af:
                    bf:a9:0e:57:32:3f:25:18:37:24:26:37:41:e7:ea:
                    c3:3e:2c:8e:13:83:9f:2d:1c:a0:29:33:b5:8d:85:
                    ae:ab:bf:e3:30:ca:b5:bd:bf:c8:ed:8f:6b:51:98:
                    fb:41:27:8f:f7:73:09:b5:92:c6:d0:37:52:4d:3e:
                    90:2b:c7:b8:96:ed:eb:bf:2b:df:b2:ab:8f:70:3b:
                    3d:b1:04:5d:b7:4b:ff:df:6e:b8:b1:28:ee:ec:79:
                    66:23:84:3f:e1:7a:c3:20:b5:d8:22:99:46:35:6a:
                    3d:42:dd:10:ad:ce:ce:c3:33:81:03:3c:cc:69:65:
                    fa:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:28:DC:A2:CE:EA:EF:1F:D9:17:74:E9:F3:95:9E:B4:1C:BC:BF:F5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/28e1f9ea-24bf-4c22-a182-fc925d5a819c/1363b2c3-63ea-3b3d-913f-f7adf06eda35.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/28e1f9ea-24bf-4c22-a182-fc925d5a819c/28e1f9ea-24bf-4c22-a182-fc925d5a819c.crl

            X509v3 Authority Key Identifier:
                keyid:44:97:0C:F7:E2:B0:F7:B3:51:4F:9D:79:7E:5C:C3:97:F9:6E:1B:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/28e1f9ea-24bf-4c22-a182-fc925d5a819c.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:8440::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:89:d2:94:25:a6:73:a5:64:91:26:ae:25:25:86:05:1f:e3:
         09:3a:76:aa:9e:ff:62:4d:e2:d8:c5:b9:5e:27:bf:44:d6:78:
         bc:2c:94:ce:11:55:ca:ff:07:56:de:1a:cb:66:3d:48:f6:d2:
         da:0f:8f:ce:1f:bb:bf:a2:71:62:64:13:85:8e:50:25:bf:07:
         da:84:db:10:3a:03:8c:f1:6c:0a:ea:79:c3:94:c9:4b:d4:6e:
         83:3f:59:93:98:38:08:b1:49:3e:ee:c7:78:40:42:b3:f2:7f:
         ba:19:33:b6:fc:25:37:d9:a2:2d:f9:1f:59:6c:6a:32:1e:44:
         5b:fb:9d:ea:d2:73:44:78:1a:a4:c3:14:b7:52:39:8f:66:c2:
         5f:ab:f9:d3:53:81:d0:3f:82:67:91:68:80:20:b1:ef:0f:21:
         4e:1f:d5:99:02:f5:56:74:17:0c:b7:66:fd:3d:2c:ed:80:05:
         6e:a9:ff:36:f0:b1:9e:a3:57:97:0e:b1:fe:e7:81:79:cf:96:
         89:6d:c8:55:6c:58:5e:b1:61:d9:9b:72:ff:7c:99:cb:5b:c7:
         06:cd:d7:e7:54:dd:59:dd:2d:4d:36:f4:8c:ed:19:a1:fe:c0:
         2c:2d:85:86:e3:54:f8:5c:74:cd:e4:58:52:4d:2b:29:3e:7d:
         fa:d4:61:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:05:21 2026 by rpki-client