Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4949a692-d1b4-3e9c-9b65-88ee487a37c6.roa
File:                     4949a692-d1b4-3e9c-9b65-88ee487a37c6.roa (raw, json)
Hash identifier:          80K3s6Ky4O5gilQlBpGUYxa+3Y0X68lvasLfMyFmQLU=
Subject key identifier:   87:85:DE:B5:42:2D:05:54:89:50:C7:10:C5:95:25:68:33:C7:C1:FA
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584DDE871942C917C6C7969E8200
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4949a692-d1b4-3e9c-9b65-88ee487a37c6.roa
Signing time:             Mon 18 May 2026 01:00:24 +0000
ROA not before:           Mon 18 May 2026 01:00:24 +0000
ROA not after:            Sun 16 Aug 2026 01:00:24 +0000
asID:                     22909
IP address blocks:        2601:482:4000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:de:87:19:42:c9:17:c6:c7:96:9e:82:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 18 01:00:24 2026 GMT
            Not After : Aug 16 01:00:24 2026 GMT
        Subject: CN=861510dc-9d98-4e03-a024-4e68399784e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:85:68:7e:a4:79:1e:35:25:93:91:76:0d:4f:
                    bf:39:1f:02:c2:12:b0:98:38:e1:54:c1:2f:52:0a:
                    8f:c2:b1:1f:20:38:68:b6:50:02:5b:61:ea:04:25:
                    49:77:b6:f4:09:35:68:4a:20:16:a0:5e:cc:a6:6d:
                    ba:41:63:4f:4a:70:28:37:f6:3e:fd:9d:9b:83:20:
                    9f:6c:88:d2:34:2d:38:45:a4:02:2d:38:f8:5e:19:
                    98:61:fe:09:db:98:7c:17:30:dc:5a:18:dc:53:38:
                    87:9e:2b:31:61:da:ff:c4:32:5d:a2:49:5a:30:9b:
                    e7:3b:b5:ce:7a:59:1f:9f:a9:4b:49:fa:7c:29:c5:
                    ce:37:17:df:4f:56:58:8d:39:66:82:60:73:20:e8:
                    ad:61:8b:7e:38:a8:30:14:22:6b:10:6e:93:b8:aa:
                    47:81:24:e6:c7:8a:4c:6d:70:9b:e8:eb:25:24:00:
                    60:0c:aa:dd:92:3e:29:14:15:34:78:f8:8e:92:fe:
                    c7:b2:02:0e:59:f1:b6:69:b6:85:ad:21:79:c4:44:
                    22:48:b2:2c:fb:9a:ae:e6:b2:42:67:e1:aa:b6:07:
                    3c:0c:ba:d6:80:2d:1f:e7:94:02:a1:9e:89:a7:01:
                    cd:61:be:bd:eb:da:22:bf:c8:9b:07:ef:df:f7:be:
                    08:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:85:DE:B5:42:2D:05:54:89:50:C7:10:C5:95:25:68:33:C7:C1:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4949a692-d1b4-3e9c-9b65-88ee487a37c6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2601:482:4000::/34

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:9b:17:0a:f1:7f:3c:ea:cf:cc:2d:ed:55:1f:3c:c7:d9:f4:
         25:2d:16:73:8d:c9:0d:9b:11:36:be:96:77:9e:b6:8e:06:6e:
         20:97:6f:1e:09:7a:f3:31:ae:41:2f:dd:ed:fe:22:e3:a1:11:
         64:fc:c5:1d:76:3f:85:ea:3f:3d:7d:46:d5:7f:03:18:b5:d3:
         bf:9b:b4:95:86:2e:22:ff:25:6f:e0:71:39:6b:40:92:ae:a9:
         60:c0:a7:da:e1:b5:1d:c7:59:8b:f1:6e:b0:5f:70:58:e9:d9:
         25:a5:dc:51:6f:18:7e:51:19:81:da:4d:ee:a1:e9:3f:d6:c0:
         f5:a4:43:42:6a:08:a5:ff:ee:5f:6b:63:6c:b3:bc:d5:f6:23:
         af:69:7b:56:16:c8:87:b0:a9:50:0d:a6:bc:ef:d2:90:49:e7:
         00:1b:95:df:a9:1c:c8:3d:0a:53:02:09:94:fd:1d:44:46:93:
         9c:4d:2c:96:4d:86:1d:25:66:b3:a6:64:05:e7:ef:de:9e:22:
         ff:25:dd:85:2c:bb:b4:7b:de:49:df:4f:b2:15:15:57:c1:1e:
         58:e4:62:a6:b1:28:03:6a:42:8c:e2:4f:c3:6d:5b:d1:f4:d7:
         a0:9b:d1:28:e9:60:bd:35:6e:0e:4d:21:06:a6:91:37:11:73:
         0b:dc:a4:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 18:39:33 2026 by rpki-client