Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078/21ca7c72-d1f5-3559-bbea-9464473a6882.roa
File:                     21ca7c72-d1f5-3559-bbea-9464473a6882.roa (raw, json)
Hash identifier:          tzgly9E+NkSR/jct62/QGUgAaJHpnpYwuCEESAskpVU=
Subject key identifier:   7C:5E:8F:1A:46:38:79:0B:89:98:9E:CA:26:F6:BE:A7:66:86:00:43
Certificate issuer:       /CN=e15d3fdb-7c2d-4390-a72f-fa46f02f4078
Certificate serial:       010D0C9F4328584DC6CAFD712B3C76CBFF921900
Authority key identifier: 10:CA:AB:0D:A6:15:C3:67:12:DD:35:EC:D2:73:23:F7:9C:C3:AB:B0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078/21ca7c72-d1f5-3559-bbea-9464473a6882.roa
Signing time:             Sat 09 May 2026 13:00:31 +0000
ROA not before:           Sat 09 May 2026 13:00:31 +0000
ROA not after:            Fri 07 Aug 2026 13:00:31 +0000
asID:                     198949
IP address blocks:        2607:cc80:2000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078/e15d3fdb-7c2d-4390-a72f-fa46f02f4078.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078/e15d3fdb-7c2d-4390-a72f-fa46f02f4078.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:c6:ca:fd:71:2b:3c:76:cb:ff:92:19:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e15d3fdb-7c2d-4390-a72f-fa46f02f4078
        Validity
            Not Before: May  9 13:00:31 2026 GMT
            Not After : Aug  7 13:00:31 2026 GMT
        Subject: CN=d1ed3582-3367-4310-b16a-65da267126ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:84:aa:f8:de:d7:0e:02:05:1a:bc:1a:92:6c:
                    3e:2d:22:03:6e:de:93:d4:fc:a5:82:cf:96:23:63:
                    26:17:87:4e:fb:9f:26:c3:b6:a0:8a:f6:3b:62:4e:
                    6b:1d:6a:6b:46:1f:9a:59:7b:72:9c:5c:0b:8c:33:
                    32:78:b7:5c:29:95:49:f8:27:28:4b:7e:c2:8e:d8:
                    5d:0b:7d:00:02:6c:f0:13:dd:5e:1e:31:aa:c2:98:
                    cf:1c:e7:64:c5:39:db:97:95:09:0f:64:2c:4f:45:
                    44:65:92:de:77:93:49:66:39:52:01:de:30:76:77:
                    8e:6f:3f:93:7f:7c:9d:35:d1:56:75:d3:ec:52:63:
                    cc:cf:3e:c0:5c:b0:a0:48:d6:4b:4d:fc:af:9d:a0:
                    d8:b7:fb:2a:09:dd:a2:07:f4:35:a9:a0:2f:3e:57:
                    68:f9:7b:97:1b:a1:4d:d1:bb:3e:7e:a0:a8:4e:49:
                    88:a8:d2:6c:86:5b:30:52:30:33:f1:a9:3b:c9:3c:
                    91:e3:c1:4f:56:55:2e:98:72:d6:9b:f4:72:e5:6f:
                    84:2b:27:f7:ff:86:1f:df:e1:83:57:96:2b:4b:98:
                    d6:e0:35:00:9c:cf:14:98:26:9d:6a:f8:f8:e3:f6:
                    61:0e:b0:55:91:fa:9a:a2:06:09:b5:98:3f:05:ba:
                    6a:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:5E:8F:1A:46:38:79:0B:89:98:9E:CA:26:F6:BE:A7:66:86:00:43
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078/21ca7c72-d1f5-3559-bbea-9464473a6882.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078/e15d3fdb-7c2d-4390-a72f-fa46f02f4078.crl

            X509v3 Authority Key Identifier:
                keyid:10:CA:AB:0D:A6:15:C3:67:12:DD:35:EC:D2:73:23:F7:9C:C3:AB:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:cc80:2000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:a7:0d:0c:c0:7f:48:d2:cf:ed:67:55:81:83:52:73:19:0c:
         c6:5a:58:6c:a3:f8:73:51:eb:4c:33:46:81:cf:eb:9f:f8:e4:
         96:8c:69:13:85:dc:11:78:cc:63:43:79:7d:8b:fb:f8:17:23:
         9f:a1:98:98:b5:77:3d:60:ba:42:e3:68:b5:56:5a:15:cb:01:
         7b:a4:a3:3e:96:33:4e:42:64:f5:9f:ff:a0:6e:25:d1:64:4d:
         bc:40:5f:8d:54:4f:a9:d8:f9:92:ff:ba:10:3b:03:0d:68:59:
         06:2e:b4:a3:59:a5:9e:d6:f3:1c:e7:69:d1:fe:3e:ee:37:93:
         ad:20:ae:f0:a3:6d:ff:8f:3d:dc:f9:4e:52:03:10:d5:c5:51:
         89:8b:28:ee:d5:0c:ff:b6:a6:3b:fe:b7:c5:75:92:a7:10:00:
         6f:7c:cc:2e:e7:11:94:47:f2:ad:4e:99:3f:96:88:75:9c:78:
         e1:8b:0d:2b:33:cf:21:6f:b1:df:b5:37:0e:1a:5b:23:d7:df:
         23:f9:ac:d5:8d:9d:a3:a2:98:f0:10:22:69:2d:1b:eb:93:c5:
         d3:be:52:04:ad:f8:13:7e:fe:70:bd:70:0d:9d:16:d5:5b:15:
         fa:8d:f2:03:34:af:3e:27:cf:66:4a:50:05:cb:fb:7c:5d:c7:
         46:b6:91:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:33:42 2026 by rpki-client