Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/8e09e784-41b0-3a23-9f55-7641459dcfce.roa
File:                     8e09e784-41b0-3a23-9f55-7641459dcfce.roa (raw, json)
Hash identifier:          +OGf8H+TZVP1fK3hRrwFe95UFdbrhegyiahaiSP+wRA=
Subject key identifier:   E4:7D:C0:0C:8B:85:9B:26:F2:34:5F:AD:6B:EC:A2:76:7C:73:2E:50
Certificate issuer:       /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
Certificate serial:       010D0C9F4328584D5B4FAF6F184B3694A6C51800
Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/8e09e784-41b0-3a23-9f55-7641459dcfce.roa
Signing time:             Wed 01 Apr 2026 01:00:23 +0000
ROA not before:           Wed 01 Apr 2026 01:00:23 +0000
ROA not after:            Tue 30 Jun 2026 01:00:23 +0000
asID:                     22616
IP address blocks:        2605:4300:2200::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:5b:4f:af:6f:18:4b:36:94:a6:c5:18:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
        Validity
            Not Before: Apr  1 01:00:23 2026 GMT
            Not After : Jun 30 01:00:23 2026 GMT
        Subject: CN=5ae42925-a6a3-400c-8a60-2617b593b78f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:ef:c3:52:f6:c9:a6:56:a5:73:52:0d:b1:bb:
                    7f:92:a0:6b:f7:c1:03:0a:07:60:ef:18:85:74:65:
                    7a:85:95:18:d8:7c:08:db:ad:dc:de:d6:0d:d2:0b:
                    af:bc:5d:cc:0f:a7:8a:6f:8f:d8:4e:87:4b:db:ce:
                    9c:16:66:7b:19:e6:04:78:c7:a6:c1:b2:8e:94:a0:
                    f2:f2:3a:48:c5:f5:e1:55:87:6d:ff:84:86:1d:f6:
                    f8:3e:e7:06:90:cd:01:21:7c:6f:73:7c:d8:b1:dc:
                    bd:85:07:e4:1d:02:27:eb:7d:5f:c3:b4:10:89:a1:
                    07:fe:82:4a:b1:28:24:d7:48:15:5b:3a:dc:83:85:
                    31:55:36:24:24:3d:43:b1:b9:81:b0:09:a3:ff:64:
                    dd:a5:61:43:d3:4a:45:ad:e4:99:55:3b:33:51:c1:
                    85:7c:e5:ea:cb:05:d6:51:73:e3:f4:04:a6:a6:93:
                    91:1e:7e:e0:8a:95:51:8a:46:66:b1:d2:04:e9:fe:
                    0f:d0:3e:73:ec:38:4a:f3:d2:b9:66:53:a5:65:30:
                    33:4a:50:d9:46:0d:ef:ad:ec:2a:c8:cd:72:bc:17:
                    bb:1f:26:2d:93:bb:0c:84:dc:63:60:03:f9:52:6e:
                    5f:1b:28:29:dc:9e:20:a5:e2:6b:63:1c:58:a4:18:
                    cc:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:7D:C0:0C:8B:85:9B:26:F2:34:5F:AD:6B:EC:A2:76:7C:73:2E:50
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/8e09e784-41b0-3a23-9f55-7641459dcfce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl

            X509v3 Authority Key Identifier:
                keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:4300:2200::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:36:94:5d:8b:65:6c:0c:65:df:14:ff:3c:28:68:14:11:99:
         17:ab:3b:3e:d5:26:c1:b7:bb:b2:20:a6:b7:df:20:18:3b:49:
         3e:a8:0e:44:81:9f:6c:19:26:cd:aa:ff:a4:35:a9:1e:4c:02:
         34:c0:e1:5d:c6:fa:1e:47:45:f9:2c:8b:be:b5:c5:f6:f1:76:
         87:e8:17:ee:cd:fb:27:d7:3a:25:48:3f:cc:59:08:01:4f:98:
         43:04:47:55:aa:69:3e:67:2f:34:7e:cc:07:1a:1a:2c:22:34:
         e9:66:01:da:07:8f:14:2b:72:fc:82:72:be:2f:be:74:bf:29:
         c1:25:9d:c8:e2:c6:49:d2:14:26:d1:90:1b:37:6b:e2:15:87:
         fa:a3:38:a1:62:6f:4d:0c:59:16:bb:db:69:cc:68:e7:f9:c2:
         18:5d:c9:0b:2b:1d:9d:8f:12:e8:42:7c:b3:39:21:e0:08:71:
         03:db:9b:01:7f:d7:d7:75:da:f3:d4:ed:83:26:74:b0:48:5f:
         ad:7c:99:8b:de:97:f7:64:e8:e9:9c:85:65:5d:cf:85:19:de:
         cf:a7:57:19:dc:7e:aa:61:dd:04:84:34:f5:59:4e:fc:d4:6e:
         64:4d:8b:da:23:08:ff:36:d6:3a:ef:77:c3:80:4d:d6:81:9f:
         9e:c9:a1:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:40:38 2026 by rpki-client