Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/ae636f1a-35e3-362c-a291-972d10f2a58a.roa
File:                     ae636f1a-35e3-362c-a291-972d10f2a58a.roa (raw, json)
Hash identifier:          EdHuu3PxYXIdrXt32J1ACfwsDFdipy/JPS+wsfBHckw=
Subject key identifier:   0D:22:B5:7D:AF:D4:DD:DB:15:B4:66:57:6C:9A:C4:54:D6:89:88:2B
Certificate issuer:       /CN=23ddb57b-8888-40f4-bf17-518b6a50512d
Certificate serial:       010D0C9F4328584D869555EB6DE353BB57AD4880
Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/ae636f1a-35e3-362c-a291-972d10f2a58a.roa
Signing time:             Thu 16 Apr 2026 13:00:31 +0000
ROA not before:           Thu 16 Apr 2026 13:00:31 +0000
ROA not after:            Wed 15 Jul 2026 13:00:31 +0000
asID:                     21928
IP address blocks:        2001:4870:e00b::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:86:95:55:eb:6d:e3:53:bb:57:ad:48:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d
        Validity
            Not Before: Apr 16 13:00:31 2026 GMT
            Not After : Jul 15 13:00:31 2026 GMT
        Subject: CN=847c4513-57d9-47af-b68e-59c7ee572c2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:ba:db:b6:ab:85:1e:bb:47:fa:21:23:48:37:
                    6f:a3:d9:41:4e:27:40:be:ce:a7:d5:5a:ae:da:59:
                    dc:3b:94:de:cf:bd:5c:c1:42:51:7f:07:47:21:b4:
                    d9:23:a6:a9:18:d5:1d:d6:77:65:4c:2b:3c:8b:b4:
                    74:1e:71:fd:ad:26:24:1c:ff:d7:4b:1a:05:7b:bf:
                    17:a1:62:62:64:04:e5:1a:f0:4e:bc:f9:2e:3a:3a:
                    66:e7:15:ab:99:10:52:36:e6:68:a0:fb:66:0f:2d:
                    ea:23:0f:90:9f:79:13:e7:c5:4a:cf:ac:da:2b:d2:
                    71:10:6e:68:bc:5c:11:18:66:e5:ab:f0:71:43:db:
                    8b:e6:9b:92:ab:1d:cf:78:f7:4a:50:b9:d6:71:ac:
                    6b:96:65:6f:42:9d:55:eb:d8:3d:8d:a2:36:1c:ee:
                    93:e1:6a:76:c2:61:6a:ce:ed:31:d8:d0:77:ee:aa:
                    4c:ec:28:33:98:39:cc:c2:7d:d4:6e:07:04:8e:30:
                    5e:30:32:00:af:4a:93:18:5c:aa:9b:71:1f:48:08:
                    28:87:11:0f:27:21:3b:fe:f0:f5:06:de:34:d9:3f:
                    53:30:bc:e6:a3:df:fc:e5:6a:7e:a2:41:1b:c5:fe:
                    82:9a:24:0f:93:b1:0c:3e:53:3a:cc:4f:22:82:80:
                    26:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:22:B5:7D:AF:D4:DD:DB:15:B4:66:57:6C:9A:C4:54:D6:89:88:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/ae636f1a-35e3-362c-a291-972d10f2a58a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl

            X509v3 Authority Key Identifier:
                keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:4870:e00b::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:c4:ce:35:df:74:7b:2c:a1:dc:50:53:a9:e4:c4:cf:43:e8:
         68:45:bd:50:9e:be:a4:85:7a:d7:10:85:bd:e6:5c:cc:c7:3b:
         2f:73:c4:cb:ca:3e:38:38:1f:f5:3f:a8:0f:9e:7a:31:13:6a:
         82:6b:bc:99:33:47:4a:54:c7:7f:c2:07:61:fc:95:8a:fe:e0:
         5a:ec:98:9c:fe:b6:7c:e9:de:18:e6:25:36:42:c5:ad:a8:3f:
         bd:48:25:10:61:20:e5:c9:ea:d6:78:30:73:3d:5b:74:e1:0f:
         0a:b6:6e:e5:58:5a:03:ae:88:be:e1:35:dd:a7:48:33:51:1a:
         4f:e5:c5:92:ed:be:a4:62:7b:5a:0e:d2:3d:f4:a9:80:33:0a:
         e1:11:b7:e6:60:46:c7:ee:f0:fb:1f:42:69:69:f4:33:0b:a9:
         be:e4:b0:86:94:47:e7:80:d5:0f:ba:95:bb:bb:ba:cc:50:70:
         02:a2:63:bc:8e:15:97:5b:80:cf:09:2e:54:ac:ac:51:6d:a7:
         27:6a:21:6f:19:82:0e:e8:66:d2:04:a1:91:d3:30:79:17:55:
         14:16:7d:9f:ee:c4:e4:f1:38:15:56:2d:a8:21:3c:3c:3d:33:
         14:f0:04:e9:db:56:b2:9c:bf:7e:79:c9:c7:04:1e:84:4b:6e:
         06:9b:35:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:13:13 2026 by rpki-client