Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e195a39f-d665-3de5-93fd-b09b9d31a976.roa
File:                     e195a39f-d665-3de5-93fd-b09b9d31a976.roa (raw, json)
Hash identifier:          P1TPxwWJ6gFa+1cWbejJDCB4iMNuEagldPjQmvkZUG0=
Subject key identifier:   1A:22:4A:D7:29:9F:E3:DB:D3:3D:8C:3F:53:E6:D8:82:41:69:C8:77
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584D55BC6FB5E42EA7CBAB272180
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e195a39f-d665-3de5-93fd-b09b9d31a976.roa
Signing time:             Mon 30 Mar 2026 01:00:23 +0000
ROA not before:           Mon 30 Mar 2026 01:00:23 +0000
ROA not after:            Sun 28 Jun 2026 01:00:23 +0000
asID:                     33662
IP address blocks:        2601:2c2:4000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:55:bc:6f:b5:e4:2e:a7:cb:ab:27:21:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar 30 01:00:23 2026 GMT
            Not After : Jun 28 01:00:23 2026 GMT
        Subject: CN=1371bbf6-a61d-48a3-92b9-94c644b029b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:a3:23:4c:79:db:ec:f9:9f:45:fa:46:3f:92:
                    eb:c3:4e:fa:8d:3f:df:7e:e7:c4:3f:48:99:bf:82:
                    be:e1:84:cc:d6:55:44:b6:17:79:a0:0f:70:e2:4c:
                    08:99:0c:7c:16:a6:f1:e8:13:94:7a:2e:66:23:b1:
                    e4:2a:f0:eb:34:ab:24:55:1c:29:10:70:9a:d8:c8:
                    09:43:4c:0e:64:cd:bc:53:9e:7f:4c:93:88:23:25:
                    e3:43:e8:69:0d:f3:24:60:c0:b9:f3:a2:91:85:5d:
                    41:16:1f:18:ab:e1:7d:b5:40:0b:95:13:d2:e9:ec:
                    f8:d4:11:c5:cc:25:ed:62:66:68:18:15:f5:42:24:
                    d2:e0:d1:ac:65:6e:bb:10:0a:35:f2:ce:5b:ef:51:
                    e9:b6:65:10:23:2b:bd:06:09:bf:9d:48:14:1b:a3:
                    5d:80:35:00:03:9e:e6:cc:cf:92:76:2d:19:7f:e8:
                    c6:33:b4:3f:cd:34:c5:b6:d3:94:be:23:54:b9:77:
                    73:76:78:22:1d:bb:85:6f:bf:ba:50:82:95:38:b8:
                    c1:68:63:c5:82:a1:69:76:6c:86:a5:aa:d6:e1:38:
                    0c:6e:ee:44:f9:53:cc:58:62:bd:27:5f:70:49:7d:
                    74:52:4c:24:d0:2d:ad:71:b9:b4:ea:62:a8:e8:5e:
                    e8:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:22:4A:D7:29:9F:E3:DB:D3:3D:8C:3F:53:E6:D8:82:41:69:C8:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e195a39f-d665-3de5-93fd-b09b9d31a976.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2601:2c2:4000::/34

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:8e:dc:db:0c:3a:92:f0:6a:b4:31:2c:6e:8f:29:4b:3e:5c:
         42:34:4f:c5:3a:81:17:57:b8:64:ab:c8:e0:a4:e1:12:02:35:
         23:57:98:43:46:b9:20:c8:c9:63:8c:a6:e7:07:29:3e:dc:a3:
         4e:f5:97:6c:78:26:f3:0b:01:b3:dc:bc:c5:6a:9c:a4:27:ba:
         cb:85:ac:29:d3:d6:a1:6e:ff:91:35:e2:e5:3a:21:ae:e8:6a:
         16:1f:c8:9e:78:42:6a:fe:7e:cb:8b:2e:f6:de:d7:8b:81:a7:
         0c:79:c3:be:8c:4b:7a:ac:1f:53:e6:aa:70:66:47:06:b4:63:
         70:80:d8:f0:d7:9b:3e:62:75:d0:8e:f6:39:8f:82:73:39:7c:
         ee:88:09:67:74:ad:3c:fa:08:1a:3a:34:83:2d:e8:36:1e:35:
         cd:39:40:50:22:cd:af:44:d7:64:e3:16:bf:80:cc:e1:82:b6:
         06:d2:fe:7a:31:9f:f9:42:73:86:10:87:53:28:0f:69:2b:bd:
         be:60:e9:7a:01:c0:24:13:bd:fe:66:c8:2b:3b:65:8d:02:d1:
         0d:2c:87:5d:d2:ee:df:4c:11:ce:82:8c:62:83:60:40:41:c1:
         87:39:db:9b:6a:4e:ff:61:41:94:03:f4:c8:69:a9:13:4e:b6:
         7e:e4:e3:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:52:07 2026 by rpki-client