Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a550f64c-4633-45f0-b896-3ac7bdf7e5b8/404125c1-db53-3460-abc1-3e2005096ff7.roa
File:                     404125c1-db53-3460-abc1-3e2005096ff7.roa (raw, json)
Hash identifier:          m81OdfUSfI5CiO0XOgL0Mj475gKwvDXSRlBrAhvQQ30=
Subject key identifier:   DE:83:07:7F:03:D7:29:29:8E:F1:AE:46:B5:74:FA:09:03:B7:33:85
Certificate issuer:       /CN=a550f64c-4633-45f0-b896-3ac7bdf7e5b8
Certificate serial:       010D0C9F4328584D44FA71D3C79EB3A96262CC40
Authority key identifier: D1:B2:BF:09:00:99:CE:ED:2B:1A:71:E6:A3:98:5A:61:5E:47:3E:D0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a550f64c-4633-45f0-b896-3ac7bdf7e5b8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a550f64c-4633-45f0-b896-3ac7bdf7e5b8/404125c1-db53-3460-abc1-3e2005096ff7.roa
Signing time:             Tue 24 Mar 2026 01:00:31 +0000
ROA not before:           Tue 24 Mar 2026 01:00:31 +0000
ROA not after:            Mon 22 Jun 2026 01:00:31 +0000
asID:                     16509
IP address blocks:        2620:117:5200::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a550f64c-4633-45f0-b896-3ac7bdf7e5b8/a550f64c-4633-45f0-b896-3ac7bdf7e5b8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a550f64c-4633-45f0-b896-3ac7bdf7e5b8/a550f64c-4633-45f0-b896-3ac7bdf7e5b8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a550f64c-4633-45f0-b896-3ac7bdf7e5b8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:44:fa:71:d3:c7:9e:b3:a9:62:62:cc:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a550f64c-4633-45f0-b896-3ac7bdf7e5b8
        Validity
            Not Before: Mar 24 01:00:31 2026 GMT
            Not After : Jun 22 01:00:31 2026 GMT
        Subject: CN=6043c852-267f-4a0b-b10e-f2fa88c055aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:46:c2:23:14:46:e8:e7:7f:30:bd:f3:b4:a2:
                    2e:2b:03:2b:3e:b6:0e:4f:33:aa:93:b3:eb:c0:6e:
                    0f:77:13:62:2c:fd:d2:89:ea:85:86:97:b3:67:36:
                    25:f4:03:dc:08:5a:8b:47:a5:4e:ad:85:de:58:a1:
                    a0:20:04:a7:45:a8:12:ea:4e:49:44:99:13:1c:5d:
                    06:d0:94:59:8f:44:90:ad:9a:2b:5a:00:09:12:a3:
                    74:f6:13:7e:0d:ad:d7:ba:fd:62:1f:f4:d9:3e:8a:
                    a9:31:5e:a7:26:78:52:6e:16:e2:10:0c:59:f6:1a:
                    23:52:66:1f:db:68:fb:12:ed:85:f8:1f:5c:57:6a:
                    04:df:97:b3:73:af:e0:9a:e4:0b:c6:9b:6d:6d:6d:
                    3c:2f:22:b5:1e:06:86:22:c9:6a:29:dc:6f:0e:c0:
                    40:9c:3f:58:89:0a:e3:98:37:70:0b:b1:03:9b:ec:
                    5a:04:3e:87:49:b7:63:47:3f:9b:00:9e:62:29:bb:
                    52:9a:b1:1b:51:7d:f6:4e:18:02:42:f3:6f:d8:14:
                    01:1c:66:88:e9:d6:85:44:a5:20:7b:0b:c4:3d:04:
                    97:69:e9:80:46:b9:ee:d7:26:0a:25:ee:96:0d:3d:
                    33:6a:11:a7:ec:4c:3c:70:0a:fa:6c:d1:ac:27:8c:
                    c6:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:83:07:7F:03:D7:29:29:8E:F1:AE:46:B5:74:FA:09:03:B7:33:85
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a550f64c-4633-45f0-b896-3ac7bdf7e5b8/404125c1-db53-3460-abc1-3e2005096ff7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a550f64c-4633-45f0-b896-3ac7bdf7e5b8/a550f64c-4633-45f0-b896-3ac7bdf7e5b8.crl

            X509v3 Authority Key Identifier:
                keyid:D1:B2:BF:09:00:99:CE:ED:2B:1A:71:E6:A3:98:5A:61:5E:47:3E:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a550f64c-4633-45f0-b896-3ac7bdf7e5b8.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:117:5200::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a2:3f:92:b8:28:d1:e3:bd:ce:43:a9:32:0a:ff:d9:02:82:9d:
         96:f5:a2:c2:c8:51:3b:3c:bf:5a:0f:a3:ed:54:37:85:0a:27:
         79:6a:62:aa:fa:df:46:b6:20:2d:c9:51:13:54:89:f0:73:33:
         33:48:5f:b3:2d:ad:f0:98:e4:e7:a0:b0:2c:76:68:ec:91:c3:
         cb:f4:93:03:89:4f:44:fe:d8:29:d1:24:fe:62:89:42:43:39:
         93:06:c9:af:0d:30:c0:ef:7a:94:e6:02:a7:ad:fa:81:36:ff:
         6d:de:fe:4a:0b:91:f9:40:c7:db:f9:07:7b:79:5e:bd:43:68:
         df:4a:7a:6f:aa:06:2b:30:9e:a8:f7:94:e9:42:e6:00:47:3a:
         41:e5:4d:db:03:ea:b1:89:8c:23:d7:d4:bd:3c:91:83:6f:a7:
         91:49:96:5e:97:fa:36:49:31:b3:9c:96:d5:1f:47:e5:47:61:
         4d:93:3c:ce:53:8e:b5:a9:68:5e:b7:5c:09:e2:cd:e2:9b:f5:
         e8:3c:7b:36:9f:ae:dc:6e:4d:94:c3:ae:ec:90:af:b2:d0:84:
         5a:40:13:2d:ce:a7:39:43:b2:03:35:8f:38:14:4c:67:06:46:
         5b:a4:c5:28:28:c9:57:2c:d4:76:9a:3b:cf:25:eb:7a:b6:ff:
         af:bb:fd:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:13:36 2026 by rpki-client