Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/833420d9-77fc-37d5-8ecd-825140380577.roa
File:                     833420d9-77fc-37d5-8ecd-825140380577.roa (raw, json)
Hash identifier:          nayFkKHo4PG/xktogbOLpJRSOrfVcPy9x8ts5/xVf5Y=
Subject key identifier:   2E:79:FF:33:F6:C4:A9:6B:C2:DD:4A:D3:A6:05:92:D3:FC:05:8B:29
Certificate issuer:       /CN=5c19a246-d9fa-481a-a4d7-010af8c132b3
Certificate serial:       010D0C9F4328584DBE6B277BE4F8CD37F93AF960
Authority key identifier: 18:19:AB:D0:11:8B:FC:C2:BE:FE:5D:73:73:40:43:BA:E5:93:AE:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/833420d9-77fc-37d5-8ecd-825140380577.roa
Signing time:             Wed 06 May 2026 13:00:30 +0000
ROA not before:           Wed 06 May 2026 13:00:30 +0000
ROA not after:            Tue 04 Aug 2026 13:00:30 +0000
asID:                     26548
IP address blocks:        2604:7a80:1000::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/5c19a246-d9fa-481a-a4d7-010af8c132b3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/5c19a246-d9fa-481a-a4d7-010af8c132b3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:be:6b:27:7b:e4:f8:cd:37:f9:3a:f9:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c19a246-d9fa-481a-a4d7-010af8c132b3
        Validity
            Not Before: May  6 13:00:30 2026 GMT
            Not After : Aug  4 13:00:30 2026 GMT
        Subject: CN=5a94e94c-7ce5-46a1-be2a-d83249d79001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:ff:57:e8:98:af:a3:79:e3:cf:04:6b:a6:07:
                    f8:bd:a5:d5:6f:45:2a:a4:dd:02:99:26:4e:28:f2:
                    7e:19:21:88:ba:14:bf:a5:7c:33:95:36:3f:2e:4f:
                    ff:ad:e6:be:97:69:e0:38:9f:34:ef:0b:7e:75:1a:
                    34:0d:ca:62:e1:7e:f9:47:78:b4:da:df:b6:3a:c3:
                    45:a2:ff:1b:d0:04:66:2c:7d:b9:28:f1:bb:e2:77:
                    e2:86:27:a8:d8:54:16:ec:4d:15:c7:64:18:63:96:
                    31:53:26:ec:00:c6:b0:33:ac:26:34:29:3a:7c:64:
                    f0:a4:11:6d:7c:5f:6d:87:d7:ce:c2:01:5c:07:25:
                    b0:ce:49:e2:f6:61:fc:91:00:3e:ba:2b:91:bf:3a:
                    29:12:b7:d9:e0:78:a4:c0:14:dc:7a:b8:ff:97:aa:
                    e1:7c:e1:2e:d4:af:bf:e3:8f:28:6e:d3:34:a3:a0:
                    90:60:d7:65:59:c9:75:e9:fe:95:08:6c:71:b7:82:
                    25:18:c3:9d:69:d2:6a:3e:74:cd:64:d3:94:e6:fa:
                    95:d7:86:5b:55:1e:46:39:77:c4:05:0c:d5:77:89:
                    0b:0e:20:1d:c6:9c:0a:80:25:bb:ef:92:16:2e:d9:
                    d5:bd:26:55:a5:99:a8:71:d4:b6:72:e0:61:84:c2:
                    23:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:79:FF:33:F6:C4:A9:6B:C2:DD:4A:D3:A6:05:92:D3:FC:05:8B:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/833420d9-77fc-37d5-8ecd-825140380577.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/5c19a246-d9fa-481a-a4d7-010af8c132b3.crl

            X509v3 Authority Key Identifier:
                keyid:18:19:AB:D0:11:8B:FC:C2:BE:FE:5D:73:73:40:43:BA:E5:93:AE:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:7a80:1000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:39:e2:3f:5e:5c:e3:7d:9c:fb:fa:db:45:43:91:2d:76:37:
         92:06:e3:35:64:35:39:6b:6c:ad:44:b0:6d:6e:18:de:45:0b:
         b8:10:ce:1c:9e:4e:53:96:e1:ca:d3:64:08:44:d8:43:bd:aa:
         d8:5a:af:16:2e:cc:11:41:26:d2:af:d0:92:c9:94:7d:86:5e:
         f9:7b:5e:c2:4c:a6:e1:64:e0:8a:82:bc:83:25:1e:eb:68:8d:
         93:b3:a0:81:4e:64:f7:f9:89:a0:4a:e9:ea:81:13:6d:9b:f9:
         6f:cf:8b:ba:27:82:29:8f:ce:37:a8:97:6d:dd:8a:42:69:7b:
         cf:5e:9a:50:eb:0a:47:7f:d4:30:6a:12:70:7d:ed:ad:83:c9:
         ad:49:df:f3:1d:ee:69:aa:59:87:3f:47:09:5b:48:7a:be:56:
         ca:07:39:0f:a7:e7:9b:e9:eb:0b:35:63:04:11:7e:e2:83:bb:
         4c:22:74:e3:0d:46:ad:fb:12:d1:d6:6c:90:76:03:3a:c4:22:
         5e:57:8f:3a:a7:a3:51:c9:61:6f:d1:44:83:68:d5:00:f3:0a:
         2f:a8:85:57:a2:9e:88:98:e5:e4:94:7c:0d:36:8f:f1:3e:af:
         0a:6e:8a:03:29:cb:fb:d7:2d:09:12:b0:1b:2d:51:45:ce:18:
         b4:cb:63:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:28:11 2026 by rpki-client