Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/0ab91e94-64e8-38f1-9485-8c741188fc51.roa
File:                     0ab91e94-64e8-38f1-9485-8c741188fc51.roa (raw, json)
Hash identifier:          C/SpC2Hn/CZVe/bE/YoOWWa11FrvNHl6geLMLRXkt4o=
Subject key identifier:   2C:6D:0C:6A:DA:0C:B7:09:F7:A1:10:95:AA:8A:40:58:53:71:CB:18
Certificate issuer:       /CN=5c19a246-d9fa-481a-a4d7-010af8c132b3
Certificate serial:       010D0C9F4328584D40CA34E889662FFEC5E4B240
Authority key identifier: 18:19:AB:D0:11:8B:FC:C2:BE:FE:5D:73:73:40:43:BA:E5:93:AE:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/0ab91e94-64e8-38f1-9485-8c741188fc51.roa
Signing time:             Sun 22 Mar 2026 13:00:41 +0000
ROA not before:           Sun 22 Mar 2026 13:00:41 +0000
ROA not after:            Sat 20 Jun 2026 13:00:41 +0000
asID:                     136557
IP address blocks:        2606:fc40:4002::/48 maxlen: 48
                          2606:fc40:4003::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/5c19a246-d9fa-481a-a4d7-010af8c132b3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/5c19a246-d9fa-481a-a4d7-010af8c132b3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:40:ca:34:e8:89:66:2f:fe:c5:e4:b2:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c19a246-d9fa-481a-a4d7-010af8c132b3
        Validity
            Not Before: Mar 22 13:00:41 2026 GMT
            Not After : Jun 20 13:00:41 2026 GMT
        Subject: CN=bb84619f-255a-47f3-8ab4-978b1fcc915a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:2e:89:14:62:15:3c:16:4a:93:48:3f:dc:82:
                    c1:83:c3:03:75:34:5d:a4:05:c8:13:06:a1:b6:ce:
                    92:a9:bf:8b:09:03:93:ad:4c:7f:61:c4:b3:a0:31:
                    c7:5e:b4:4b:46:f2:34:2d:02:93:cf:64:01:cf:6e:
                    94:be:37:e5:71:c9:71:3c:ed:f2:9d:f9:96:7f:61:
                    88:fb:e1:55:a1:63:e6:4c:cc:41:9b:68:8d:70:26:
                    41:2b:01:f8:6c:85:b9:5e:75:2a:99:91:2f:cc:a5:
                    72:df:aa:71:7e:f8:ab:34:73:30:60:ca:38:35:8a:
                    dc:9e:72:5d:3b:bc:5f:28:e3:1f:69:7a:4c:21:87:
                    28:f9:68:78:d6:99:61:9a:32:be:b7:d7:58:43:62:
                    3a:0e:f0:c9:30:ca:cb:13:e3:84:52:cf:97:1a:5f:
                    ee:db:9f:c1:5e:b8:ec:43:e5:94:58:38:dd:60:b3:
                    15:ca:43:64:69:e5:d0:4b:1e:65:c5:6b:5a:2a:1f:
                    d7:83:b4:c9:32:61:3d:e2:c5:bc:5d:cc:f2:c9:18:
                    02:20:d7:a7:a3:d7:9a:b3:62:c3:21:5c:03:a7:31:
                    77:6a:16:eb:51:bb:94:aa:65:b5:9f:7f:9e:81:e9:
                    c5:c4:34:23:20:e1:db:2c:56:2d:75:e3:8c:c9:e4:
                    61:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:6D:0C:6A:DA:0C:B7:09:F7:A1:10:95:AA:8A:40:58:53:71:CB:18
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/0ab91e94-64e8-38f1-9485-8c741188fc51.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/5c19a246-d9fa-481a-a4d7-010af8c132b3.crl

            X509v3 Authority Key Identifier:
                keyid:18:19:AB:D0:11:8B:FC:C2:BE:FE:5D:73:73:40:43:BA:E5:93:AE:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:fc40:4002::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d0:99:b0:d9:0d:68:48:a7:63:db:91:00:51:2f:8f:c0:51:4e:
         0e:e5:b8:b7:26:3d:32:0e:5f:6b:76:80:e6:0e:56:75:6d:1a:
         5f:17:34:87:ae:d3:b8:f0:64:6c:37:75:3e:fd:50:d2:e3:86:
         82:e9:5b:b6:c5:6f:89:7c:1e:12:78:50:39:ba:0d:e6:5f:d8:
         98:d1:19:20:c9:0e:71:75:74:4e:05:8e:ee:c7:c5:f9:db:c0:
         3c:3e:45:54:f6:b0:b6:d9:ec:76:b6:a0:27:34:88:12:2c:2b:
         ec:1c:c9:f5:9e:0d:39:c8:d6:5d:2f:dc:81:d1:19:ba:af:a1:
         a2:fb:ea:56:25:dc:06:96:72:d9:ec:24:e2:ba:93:60:6b:e3:
         cb:b2:c5:3c:c3:fb:9a:3a:8f:31:77:0d:bb:18:72:3c:17:1e:
         e3:e4:01:ff:6d:a1:e2:3c:b0:cb:77:f4:72:82:2e:07:ae:c1:
         c5:cf:40:48:84:a2:9b:90:ec:cc:66:d7:17:50:51:07:0b:ea:
         92:7c:7b:5e:87:2b:f4:49:e3:95:bd:d5:7e:46:3c:28:ca:86:
         4c:5b:8f:6c:fe:6f:52:d4:36:2a:fa:c9:bd:21:1d:bf:7f:ec:
         29:83:ee:91:cd:d2:22:4e:f9:da:65:37:95:6d:43:21:6d:2e:
         c0:7c:4c:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:06:11 2026 by rpki-client