Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/05ae7733-dbe0-3364-bd76-5254d0ae363e.roa
File:                     05ae7733-dbe0-3364-bd76-5254d0ae363e.roa (raw, json)
Hash identifier:          D8yG/gGBoQZechQQ8jqHSG1PnPaXa2r8KmvP3NV7Gzk=
Subject key identifier:   85:A7:AF:77:A3:1F:A2:E2:58:26:1E:C9:E1:EA:9E:CD:0A:11:EA:99
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584D52439793B2D1285499778180
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/05ae7733-dbe0-3364-bd76-5254d0ae363e.roa
Signing time:             Sat 28 Mar 2026 19:13:19 +0000
ROA not before:           Sat 28 Mar 2026 19:13:19 +0000
ROA not after:            Fri 26 Jun 2026 19:13:19 +0000
asID:                     7016
IP address blocks:        2603:2985::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:52:43:97:93:b2:d1:28:54:99:77:81:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar 28 19:13:19 2026 GMT
            Not After : Jun 26 19:13:19 2026 GMT
        Subject: CN=729c0447-55ab-4bde-a7e0-ef7b7658e833
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:50:6d:03:e8:ea:3e:fb:06:06:b6:31:88:a9:
                    26:cf:c6:43:a0:7e:7b:4a:37:c4:80:98:df:19:06:
                    65:9b:11:08:78:5e:2a:80:80:02:79:c6:9b:49:fe:
                    0b:62:b8:1d:d1:35:f0:9a:60:47:49:f9:0f:03:27:
                    d8:19:1a:ea:12:86:8f:51:b0:01:f9:e8:7e:07:89:
                    83:0f:ec:48:64:81:43:ab:22:82:be:93:af:4e:a1:
                    40:4a:74:5c:f6:eb:ad:19:07:2b:5b:2a:3b:07:ad:
                    df:0b:0a:d7:14:39:19:93:a7:14:f2:19:d2:76:0d:
                    e7:fb:88:cd:de:1c:20:77:46:35:8a:f5:87:c2:be:
                    c8:c5:24:c4:7f:05:34:4e:81:25:01:a4:9e:fd:38:
                    e2:73:4c:ef:28:bb:98:4d:ab:ba:d9:2f:ca:fa:85:
                    3f:20:63:f1:37:3f:9e:42:54:69:86:03:71:b0:9e:
                    1e:0a:18:2d:a7:e0:05:fd:bf:23:cd:ee:7d:c0:fd:
                    69:b3:99:93:22:e1:d4:63:51:8d:e5:a2:f4:f6:eb:
                    ae:0a:2a:0f:ee:fb:e6:59:5a:ff:ef:ff:87:0f:83:
                    7d:43:36:5a:8f:b5:41:a0:48:65:87:21:6c:06:7e:
                    42:f5:80:ce:ce:35:5d:af:f6:b5:d0:54:c5:8b:68:
                    5c:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:A7:AF:77:A3:1F:A2:E2:58:26:1E:C9:E1:EA:9E:CD:0A:11:EA:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/05ae7733-dbe0-3364-bd76-5254d0ae363e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:2985::/34

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:dc:83:22:23:da:3b:15:6b:e6:56:54:b6:13:39:aa:25:e2:
         2a:eb:f8:8a:c5:03:9f:25:f6:00:74:bc:6b:f9:00:57:3e:43:
         bb:6b:47:19:94:2a:1d:1d:e0:a8:a4:d9:0e:3a:91:e1:3b:d8:
         66:a2:4f:e9:2c:f3:c7:fb:0d:e6:bc:86:2c:a0:a4:da:ee:e0:
         67:35:bc:62:2d:dc:da:3b:7a:3c:4e:6d:da:3b:8c:fc:bf:2b:
         b1:43:25:ee:d6:f9:86:e3:c5:4d:85:99:14:b7:ce:68:8c:7e:
         60:9c:88:4d:12:7e:76:bc:06:33:60:32:c2:6d:1d:ae:47:f1:
         ee:82:6e:1a:50:53:1c:47:2e:bb:b6:b9:03:c4:9e:7f:09:27:
         5d:60:d5:40:b2:66:b7:ee:a6:a1:50:9a:fd:80:51:97:e8:cc:
         7b:e2:10:94:47:33:a5:50:fd:9f:7c:f6:97:f6:ba:f7:c6:b9:
         07:ce:fc:2d:e2:b0:33:d7:f4:2e:6c:31:a7:9d:f7:7d:db:55:
         91:50:22:a8:4e:c8:43:65:bf:b1:be:b3:64:93:3e:31:65:12:
         3c:53:72:3c:6b:b4:f6:14:a3:cc:4e:e2:d3:94:b8:48:e2:56:
         46:6b:a8:a2:6a:d2:29:b8:c3:49:88:cf:4a:60:01:d8:ab:2f:
         ab:dc:bb:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:32:59 2026 by rpki-client