Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/70b47ad9-010b-4764-8cef-4d3e66669003/e50dcace-be5f-3f1f-9cfe-4047144e8682.roa
File:                     e50dcace-be5f-3f1f-9cfe-4047144e8682.roa (raw, json)
Hash identifier:          N09AjBphoQHT0VrjKHRBGcYWdTUMd4/3pltaSBtfK3I=
Subject key identifier:   B2:62:8B:E6:B2:65:BD:05:72:FB:89:BD:E5:26:4B:DD:3F:97:9F:49
Certificate issuer:       /CN=70b47ad9-010b-4764-8cef-4d3e66669003
Certificate serial:       010D0C9F4328584D95F01DD831FE7E655CF31800
Authority key identifier: 37:56:35:08:DC:09:93:B8:89:6B:FF:F2:2B:9F:A0:44:00:78:06:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/70b47ad9-010b-4764-8cef-4d3e66669003.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/70b47ad9-010b-4764-8cef-4d3e66669003/e50dcace-be5f-3f1f-9cfe-4047144e8682.roa
Signing time:             Wed 22 Apr 2026 01:00:23 +0000
ROA not before:           Wed 22 Apr 2026 01:00:23 +0000
ROA not after:            Tue 21 Jul 2026 01:00:23 +0000
asID:                     16509
IP address blocks:        2620:8:4300::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/70b47ad9-010b-4764-8cef-4d3e66669003/70b47ad9-010b-4764-8cef-4d3e66669003.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/70b47ad9-010b-4764-8cef-4d3e66669003/70b47ad9-010b-4764-8cef-4d3e66669003.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/70b47ad9-010b-4764-8cef-4d3e66669003.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:95:f0:1d:d8:31:fe:7e:65:5c:f3:18:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70b47ad9-010b-4764-8cef-4d3e66669003
        Validity
            Not Before: Apr 22 01:00:23 2026 GMT
            Not After : Jul 21 01:00:23 2026 GMT
        Subject: CN=36e0dec2-6e8d-4e72-80de-00aa87f2b113
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:b1:29:06:c5:c6:48:b2:20:f0:fb:c5:f4:dd:
                    24:05:58:27:c5:a6:d3:bf:6e:3b:e1:ed:73:13:e0:
                    a3:0e:16:a7:25:24:4d:21:58:45:0c:fe:61:28:7e:
                    ff:1c:a0:29:92:0b:bd:17:8a:71:67:02:62:e2:cf:
                    72:96:f7:a2:4c:25:26:bd:c7:81:70:12:97:ae:a4:
                    80:15:b1:e4:74:76:4a:a6:21:c4:19:6b:03:84:5f:
                    65:65:cf:bb:1a:80:f0:62:4b:dd:4a:41:e7:df:80:
                    e6:3f:86:c5:78:85:e8:4a:6d:9a:a3:67:dd:8c:93:
                    c2:e1:67:93:00:3c:5c:01:7a:64:26:93:3e:8d:53:
                    80:05:2a:71:46:ec:94:5f:ed:35:97:25:47:48:c4:
                    29:57:a7:3b:0b:6d:0e:8e:0e:eb:a9:65:36:5c:36:
                    2c:e3:26:58:ce:d3:0b:0b:d9:70:1d:ce:0d:c1:3a:
                    9b:b4:03:29:dd:8b:45:95:f9:3d:1b:ee:7a:24:f9:
                    f3:78:11:58:17:b2:45:8f:09:5e:18:af:e1:7f:d5:
                    45:c7:89:d2:20:11:25:e9:a0:f4:db:c1:4a:28:81:
                    f3:e9:f8:b4:a8:82:0b:73:f3:fa:c6:30:56:3c:9e:
                    c3:4b:65:f8:0c:06:82:fc:af:8d:3f:85:38:1e:35:
                    71:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:62:8B:E6:B2:65:BD:05:72:FB:89:BD:E5:26:4B:DD:3F:97:9F:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/70b47ad9-010b-4764-8cef-4d3e66669003/e50dcace-be5f-3f1f-9cfe-4047144e8682.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/70b47ad9-010b-4764-8cef-4d3e66669003/70b47ad9-010b-4764-8cef-4d3e66669003.crl

            X509v3 Authority Key Identifier:
                keyid:37:56:35:08:DC:09:93:B8:89:6B:FF:F2:2B:9F:A0:44:00:78:06:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/70b47ad9-010b-4764-8cef-4d3e66669003.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:8:4300::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:52:09:49:b4:1a:7e:cf:af:58:89:ba:5b:1c:57:43:8b:18:
         e2:b7:ec:88:0e:15:2a:69:f4:15:a0:d5:5e:67:45:2e:56:af:
         d6:61:31:3c:8b:71:8f:79:c4:ed:a1:82:7a:81:95:3d:1b:f2:
         f8:dd:32:d0:76:8d:70:4d:33:84:1f:15:e6:a4:4b:37:8e:d4:
         55:87:e4:1d:5a:28:c5:15:cf:24:d4:bd:7e:7b:42:32:8b:fe:
         e7:56:e0:e3:d8:16:bd:8f:f0:2b:b4:3f:22:d9:b8:26:2f:b1:
         72:0f:50:f8:23:18:a5:cd:1f:12:74:4d:66:7b:0f:7a:d3:2e:
         16:62:92:2b:ff:ae:69:83:06:fa:8d:5c:ae:5e:51:84:f4:98:
         ba:76:5c:52:c0:7c:5f:d2:6b:0b:f7:a1:cd:dd:b4:9e:93:ad:
         a0:d9:3e:f3:17:f0:18:99:e2:64:69:9f:3c:be:8d:c1:ff:28:
         d2:0e:a6:3b:a3:22:0a:03:1e:31:aa:d4:7a:70:f1:9d:e1:ce:
         e4:f2:8a:0c:ac:a7:eb:12:e7:f3:fe:90:a7:3b:b8:c4:14:6e:
         31:aa:a6:e3:ab:03:cf:66:6b:8a:45:5c:e8:3b:a2:b4:fe:28:
         49:e9:79:95:c9:9f:5c:d8:07:3b:a4:7e:53:c7:e8:2a:2b:98:
         ad:c3:b2:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 18:23:04 2026 by rpki-client