Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/7962c309-390e-315a-b39a-8a478712c1a1.roa
File:                     7962c309-390e-315a-b39a-8a478712c1a1.roa (raw, json)
Hash identifier:          bHFMZ0sOiWxhFhZHp/PuNB2v6p0fPplLZ3+zs1hkrl0=
Subject key identifier:   35:F2:CF:EF:C7:A2:1A:D5:19:AE:31:11:87:53:31:A2:1C:60:B0:DF
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584D83CAA312F04A135758883200
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/7962c309-390e-315a-b39a-8a478712c1a1.roa
Signing time:             Wed 15 Apr 2026 13:00:30 +0000
ROA not before:           Wed 15 Apr 2026 13:00:30 +0000
ROA not after:            Tue 14 Jul 2026 13:00:30 +0000
asID:                     855
IP address blocks:        2001:4c0:8002::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:83:ca:a3:12:f0:4a:13:57:58:88:32:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Apr 15 13:00:30 2026 GMT
            Not After : Jul 14 13:00:30 2026 GMT
        Subject: CN=ea9efe92-38fb-4abb-91f6-ce3fc7577f40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:90:ff:44:c7:8c:d7:ff:84:c5:bf:d0:73:a6:
                    3c:4c:8b:ea:e0:9f:51:c9:f2:c3:b7:c1:93:2c:a9:
                    36:15:bc:b6:99:d1:46:dc:72:4c:b2:de:c6:65:7c:
                    63:9d:2b:7a:eb:39:35:25:49:00:7b:09:39:45:2d:
                    25:65:61:be:36:14:bd:5e:a9:ba:43:c4:99:93:38:
                    9c:52:d5:ca:70:58:01:49:a9:98:ee:be:3a:96:d5:
                    9c:84:01:5f:49:8a:fe:60:a9:d4:fd:47:bc:4a:d3:
                    2c:b4:dc:13:26:e0:fb:60:7e:73:8b:61:9a:c0:4a:
                    95:05:2c:09:e9:71:84:3e:e0:9e:2a:38:ea:12:a4:
                    91:ac:eb:6e:07:e1:83:11:1d:21:44:ed:30:84:7f:
                    e6:d9:72:a3:63:7e:24:3f:42:cb:f1:d5:44:30:47:
                    62:83:b6:d6:91:b0:b5:7f:ae:75:cf:fa:6d:a4:ee:
                    a3:16:3d:61:ec:85:6d:33:14:e9:1e:fd:17:6b:2a:
                    17:df:1f:7f:1d:bb:17:6b:12:2b:b0:24:fb:0c:78:
                    ed:02:a3:da:32:42:dc:27:4d:05:7a:96:28:1d:b1:
                    97:01:89:65:5a:6f:30:bb:ac:e8:0e:b2:7c:95:49:
                    2d:d6:bf:8d:aa:26:b2:0f:9f:2c:6f:0c:f3:f7:8f:
                    bb:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:F2:CF:EF:C7:A2:1A:D5:19:AE:31:11:87:53:31:A2:1C:60:B0:DF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/7962c309-390e-315a-b39a-8a478712c1a1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:4c0:8002::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:04:b6:46:ee:f4:f6:f4:80:66:86:fd:f2:46:a9:e7:c7:da:
         7a:89:d7:db:73:1a:06:68:a1:98:b9:96:6d:d9:15:15:c3:18:
         65:0e:fd:bb:e6:d1:42:b5:6f:ab:3e:ca:33:34:52:e5:7e:30:
         42:dc:62:33:01:fe:3c:28:5b:94:3f:6d:5a:cf:9e:07:42:65:
         7d:81:07:f5:f2:15:9a:10:e8:9b:f6:ed:4f:9d:90:c5:79:e8:
         0a:a3:0b:97:37:d3:78:37:5b:9a:95:2a:21:7d:2a:79:e3:a6:
         05:45:bd:4e:59:10:29:42:c2:0e:f3:68:78:f9:d4:c7:dd:0f:
         87:65:33:d7:80:26:da:03:9b:17:4e:4b:22:49:b5:0e:8a:79:
         04:e1:d9:c3:be:bb:a1:b2:fa:50:27:5c:6c:16:d9:63:88:01:
         25:e8:68:8e:90:fd:1b:f3:32:7b:ca:d4:1c:86:c6:7f:ba:2d:
         78:a3:47:77:8b:ac:63:b3:b7:2c:b5:52:88:16:61:84:5b:41:
         e2:de:df:49:29:71:b0:cc:31:32:97:5b:76:ed:4d:01:31:3e:
         41:68:6f:95:c5:1f:43:c2:da:e9:1b:e6:d2:e5:56:b9:dd:3e:
         2b:77:b8:e1:17:71:e2:d8:e6:d5:37:06:3d:90:1c:14:bb:34:
         2f:3e:cf:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 01:15:10 2026 by rpki-client