Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/2caced71-f2e3-391d-928f-93c3baed4514.roa
File:                     2caced71-f2e3-391d-928f-93c3baed4514.roa (raw, json)
Hash identifier:          CxEQJxQKxi/kK+GPI76qYbt8WGRsY7HP7GLxd1VCNfA=
Subject key identifier:   E3:14:90:4A:74:D0:9F:BB:8D:A8:94:E1:73:8B:90:5C:93:98:42:08
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584D83CA8698B743903137E7E080
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/2caced71-f2e3-391d-928f-93c3baed4514.roa
Signing time:             Wed 15 Apr 2026 13:00:30 +0000
ROA not before:           Wed 15 Apr 2026 13:00:30 +0000
ROA not after:            Tue 14 Jul 2026 13:00:30 +0000
asID:                     3848
IP address blocks:        2001:4958:1521::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:83:ca:86:98:b7:43:90:31:37:e7:e0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Apr 15 13:00:30 2026 GMT
            Not After : Jul 14 13:00:30 2026 GMT
        Subject: CN=b6a70356-9904-4983-b3dc-1f8720782518
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:b3:0b:81:1f:37:06:0e:a8:33:2d:5f:ed:41:
                    e7:09:f9:20:62:3e:80:9e:f1:77:a7:62:2b:d1:8b:
                    6b:7a:6f:64:4f:43:75:f0:37:8d:6f:ea:57:5e:ef:
                    93:2e:50:12:9e:20:28:1e:9b:5d:75:3d:14:b0:3e:
                    5a:ec:d7:05:29:22:f2:23:ad:23:c5:d8:d7:7c:33:
                    a1:54:0a:58:4e:b8:40:6b:df:6c:3a:b2:14:15:96:
                    34:ec:d6:2f:5f:29:a1:e2:b2:fd:74:a9:8b:64:8a:
                    70:b7:26:20:49:59:c7:f3:04:54:9f:f4:ce:26:29:
                    2d:af:6c:52:82:fd:94:27:da:94:49:76:b9:db:79:
                    76:fb:65:fc:4b:6c:f4:7b:3e:68:87:35:26:b2:46:
                    ba:c3:fe:6d:be:3a:fc:ab:96:e9:1b:a4:55:2b:14:
                    f7:eb:b9:dd:bd:fb:2c:ff:cd:a2:ea:38:c2:c2:c7:
                    9d:97:60:b7:bd:58:77:b7:06:6a:02:30:80:ed:0a:
                    c7:6d:7d:e0:01:4e:1c:16:33:0d:0f:7a:e1:e3:d5:
                    c9:d5:24:c4:b9:5b:8f:0c:d2:3e:10:90:68:21:c2:
                    9b:00:69:55:ed:04:b5:85:4a:59:28:81:aa:da:72:
                    e9:98:2f:e7:8a:0b:c6:0f:2c:64:fb:27:50:53:75:
                    1e:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:14:90:4A:74:D0:9F:BB:8D:A8:94:E1:73:8B:90:5C:93:98:42:08
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/2caced71-f2e3-391d-928f-93c3baed4514.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:4958:1521::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:d5:e5:ea:2f:b7:74:a5:af:e6:3c:5e:5d:db:ae:1f:07:62:
         55:77:90:aa:04:3b:28:25:ca:d1:5b:48:7c:f7:e4:83:a2:3e:
         76:f7:83:fe:72:49:6d:f9:30:ae:c6:3d:cb:c6:81:a8:bb:d1:
         82:16:59:c0:a8:89:27:13:19:04:4c:7a:9e:8f:2c:01:ee:00:
         03:da:21:6b:82:c2:b8:12:63:c3:0a:e7:ca:3a:24:5c:f0:21:
         4c:bf:0b:90:b1:ed:9a:26:f1:65:5f:38:76:4b:1c:bf:b0:cf:
         80:4d:d1:e9:4b:1d:74:3b:36:38:5f:d9:f6:98:8a:bb:7a:57:
         5c:ad:ea:f1:95:13:7f:86:88:f3:80:2b:79:08:8a:80:74:20:
         3d:5b:94:ef:fc:0d:83:bf:25:ee:fb:fd:54:ca:6b:92:13:bf:
         c1:5e:1e:1a:ee:c6:6a:4f:58:a2:ce:d8:32:45:1b:70:83:e2:
         a7:de:11:6b:b3:85:d4:b2:7c:74:29:01:1f:6b:8f:0d:71:69:
         4e:a9:4c:f2:01:6b:42:dd:f7:a3:f6:ca:e9:2d:ed:5f:93:fa:
         a1:c4:6e:cd:c3:9c:c6:c3:f6:80:99:cd:12:47:10:23:ca:8a:
         99:ed:e5:18:4c:64:94:0b:19:0a:52:47:8b:7d:67:6e:ff:29:
         bf:df:67:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 22:32:46 2026 by rpki-client