Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/33beb877-dbaf-4d25-870e-a43af90cc071/53d4dc54-1772-311f-a119-36c490495436.roa
File:                     53d4dc54-1772-311f-a119-36c490495436.roa (raw, json)
Hash identifier:          tJ9W5PG7itVlmAg7n6PA0r4mxiEKOPaXYilE8TKlltU=
Subject key identifier:   F2:0C:0A:ED:6E:EA:00:28:B8:53:83:6D:7D:43:39:AD:3B:EA:B6:91
Certificate issuer:       /CN=33beb877-dbaf-4d25-870e-a43af90cc071
Certificate serial:       010D0C9F4328584D359FA04D1B1A92B318352500
Authority key identifier: A0:EE:2D:FC:8D:E6:BB:C3:AC:BA:14:D6:E2:95:20:73:E7:2C:F9:0F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/33beb877-dbaf-4d25-870e-a43af90cc071.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/33beb877-dbaf-4d25-870e-a43af90cc071/53d4dc54-1772-311f-a119-36c490495436.roa
Signing time:             Wed 18 Mar 2026 13:00:40 +0000
ROA not before:           Wed 18 Mar 2026 13:00:40 +0000
ROA not after:            Tue 16 Jun 2026 13:00:40 +0000
asID:                     26860
IP address blocks:        2001:49b0::/32 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/33beb877-dbaf-4d25-870e-a43af90cc071/33beb877-dbaf-4d25-870e-a43af90cc071.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/33beb877-dbaf-4d25-870e-a43af90cc071/33beb877-dbaf-4d25-870e-a43af90cc071.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/33beb877-dbaf-4d25-870e-a43af90cc071.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:35:9f:a0:4d:1b:1a:92:b3:18:35:25:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33beb877-dbaf-4d25-870e-a43af90cc071
        Validity
            Not Before: Mar 18 13:00:40 2026 GMT
            Not After : Jun 16 13:00:40 2026 GMT
        Subject: CN=b63a1784-7b6a-48de-946e-bb95f86d1bfd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:59:33:f1:58:47:33:8a:6d:29:c1:9d:53:68:
                    3d:b7:b2:40:91:44:08:81:aa:b4:b1:e9:40:9f:5a:
                    6e:c4:89:f1:f4:cd:11:65:bd:e4:ff:05:98:c9:ef:
                    54:a7:9f:64:9c:f8:f9:ac:a1:bf:8e:60:5e:b2:54:
                    1b:22:db:32:61:37:de:d1:46:9f:96:80:45:00:3c:
                    af:b3:c6:7d:3a:2a:c3:71:1d:4a:d8:14:1c:f6:69:
                    b9:84:f8:a7:1e:e6:03:18:c4:ac:29:be:fd:c3:cd:
                    11:b0:6c:a6:87:0d:e7:1c:23:8e:2c:8a:88:51:d3:
                    48:09:3b:fe:b8:b8:88:39:95:cc:74:7e:a9:38:c2:
                    1d:eb:f8:d6:bc:fb:8d:e5:c0:97:37:13:84:44:bc:
                    3d:20:67:fc:0d:3a:80:44:ac:0a:3c:23:1d:94:61:
                    ff:6b:cf:39:90:cd:06:20:f2:20:b4:48:73:a2:28:
                    e1:55:7b:c8:06:23:dd:4b:74:83:93:a1:6e:89:bd:
                    5a:2e:29:73:14:89:25:1a:8e:b5:77:9c:6e:59:9b:
                    1a:05:2a:d4:ad:ee:e1:d6:c3:0b:12:44:97:28:b1:
                    38:77:ed:de:73:8b:70:d6:e2:5b:19:10:1e:ff:fc:
                    5d:17:a7:c8:5c:e5:02:cc:f5:97:cd:0b:b7:f9:8f:
                    8a:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:0C:0A:ED:6E:EA:00:28:B8:53:83:6D:7D:43:39:AD:3B:EA:B6:91
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/33beb877-dbaf-4d25-870e-a43af90cc071/53d4dc54-1772-311f-a119-36c490495436.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/33beb877-dbaf-4d25-870e-a43af90cc071/33beb877-dbaf-4d25-870e-a43af90cc071.crl

            X509v3 Authority Key Identifier:
                keyid:A0:EE:2D:FC:8D:E6:BB:C3:AC:BA:14:D6:E2:95:20:73:E7:2C:F9:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/33beb877-dbaf-4d25-870e-a43af90cc071.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:49b0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:28:9d:45:fc:56:31:97:b6:ad:1e:b2:0a:9f:63:d7:47:0d:
         57:fb:fa:a3:4b:cd:ff:88:38:e2:31:01:da:30:0a:10:a5:26:
         63:d5:54:a0:ff:bf:8d:7e:00:12:49:7d:2b:20:20:81:d0:08:
         21:45:b2:23:d7:02:ef:4f:01:c6:b2:49:33:cb:a8:02:81:f6:
         8f:50:0a:68:b8:dc:5d:91:15:72:67:ad:8b:d6:f4:c7:c0:e0:
         52:e3:55:9d:40:88:3e:e5:90:ae:22:fb:7c:f2:bd:65:fc:ce:
         34:3f:97:6a:1b:53:d8:51:e0:ba:d2:23:54:57:9d:8f:a2:2a:
         22:cd:9c:35:c9:04:da:0b:4b:5b:4a:50:61:42:51:a6:51:73:
         6c:8b:4a:83:e1:c3:60:eb:78:d7:b2:81:77:e4:ba:74:ee:7f:
         23:cb:9a:9d:ac:22:7f:f6:86:66:30:3b:20:41:83:0e:8e:aa:
         d5:63:44:2e:3f:cf:b0:e3:65:05:31:fe:84:0e:55:97:60:1d:
         58:57:f3:1d:1c:80:83:01:27:df:97:df:ef:0c:b9:dd:0c:d5:
         97:1a:0d:8b:ef:81:dc:d8:ac:c8:bb:95:38:e2:e0:23:c5:d7:
         dd:ce:17:2e:ae:9f:b2:70:19:ac:16:db:5e:91:7b:54:84:cc:
         49:31:03:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:28:29 2026 by rpki-client