Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f44054dc-aa8b-3e2c-af95-dc4f69634a85.roa
File:                     f44054dc-aa8b-3e2c-af95-dc4f69634a85.roa (raw, json)
Hash identifier:          7c6tO9Yvmr8PoyBjHFTbvYN48nyn1F+ojJZ1PKmm1ls=
Subject key identifier:   57:19:EE:D9:20:47:74:2E:EC:03:AE:82:27:C6:C6:57:DA:80:E7:0D
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584CAE58BDDCC9ADE0A7EBCE7000
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f44054dc-aa8b-3e2c-af95-dc4f69634a85.roa
Signing time:             Thu 29 Jan 2026 02:00:32 +0000
ROA not before:           Thu 29 Jan 2026 02:00:32 +0000
ROA not after:            Wed 29 Apr 2026 01:00:32 +0000
asID:                     33651
IP address blocks:        2603:3024:c00::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ae:58:bd:dc:c9:ad:e0:a7:eb:ce:70:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jan 29 02:00:32 2026 GMT
            Not After : Apr 29 01:00:32 2026 GMT
        Subject: CN=d5a5c51a-faa7-4454-8aff-d9c080cd2ce5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:d6:e4:94:87:29:01:e7:52:8d:53:e5:6b:cf:
                    b8:90:b9:fa:fc:4a:7f:9c:f3:97:ed:a8:be:15:03:
                    27:82:6a:e7:d5:bd:41:2f:d6:f7:58:c2:61:e3:3b:
                    3d:bb:12:11:cd:7c:76:40:af:d1:4b:6a:09:ff:60:
                    ff:73:63:b5:01:81:5b:99:94:f3:f6:02:e1:a7:70:
                    68:f2:38:b0:f4:83:24:67:ef:ee:4e:72:44:94:06:
                    18:85:d2:ee:da:a1:ac:f1:84:88:8d:f4:e5:e1:4e:
                    81:6c:e4:4a:3c:cf:d8:8e:ab:83:76:26:54:fa:68:
                    ee:e5:ea:ab:7a:e5:ec:aa:7d:de:77:da:c2:cb:ba:
                    8b:87:b6:fe:fd:06:dd:cd:a8:59:a4:d5:7c:ab:57:
                    f8:f2:ae:c1:22:e5:03:f8:57:a0:d4:9d:eb:c0:8a:
                    ea:28:f3:e2:e6:0f:ee:eb:1d:bc:7c:4b:e9:2f:ce:
                    9a:42:0f:16:cb:ae:1a:7c:07:0b:fd:e9:32:38:aa:
                    c5:3f:e1:69:ce:d0:e2:c7:23:76:8f:00:f2:0c:96:
                    02:06:19:0b:7f:53:5a:21:46:62:ae:a5:48:69:22:
                    fb:01:7a:1b:0e:ba:a3:2c:d7:19:24:61:09:63:f0:
                    51:7d:cc:09:61:ed:9b:e0:ee:ae:76:b0:18:6e:17:
                    58:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:19:EE:D9:20:47:74:2E:EC:03:AE:82:27:C6:C6:57:DA:80:E7:0D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f44054dc-aa8b-3e2c-af95-dc4f69634a85.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:3024:c00::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:cb:ce:84:fe:f4:8d:1a:d5:73:80:c5:9a:ea:6e:e2:bf:2c:
         ab:c7:56:96:e0:37:06:a5:a3:8b:ff:e0:ee:f0:47:74:8c:e9:
         c3:a9:0c:71:b3:62:11:24:66:20:dc:47:09:55:8a:19:3e:d1:
         29:3d:44:0d:43:61:5b:7b:10:67:fb:8a:14:5b:97:b4:17:b2:
         2e:f6:73:19:f0:41:2d:a4:8c:27:b3:18:da:73:fe:f2:20:74:
         ac:aa:09:dd:b4:b8:5a:ab:b3:83:0b:36:3a:57:9f:1a:0c:68:
         a9:a4:fa:27:de:82:ba:e4:a2:01:ff:a4:01:1c:0c:97:62:a9:
         95:b1:8f:e6:22:dd:95:8b:e4:09:4e:fb:b8:89:8b:1f:90:7d:
         61:0b:99:84:e8:9c:29:27:29:10:c4:0d:55:7e:27:1e:b6:14:
         34:b8:a2:96:36:1a:c4:76:b1:59:6e:a8:1d:41:3a:bf:74:3e:
         e6:6b:e3:01:f1:d4:1c:73:b8:6f:4d:c1:34:2f:df:8d:8a:be:
         61:45:14:cd:d1:5c:d6:7a:6c:61:17:78:67:5c:5f:91:bf:10:
         2e:ab:20:64:97:db:92:09:4d:42:1b:2c:26:45:42:33:69:6c:
         ba:0f:ab:f4:bc:36:21:49:9e:0d:c6:ae:a5:7c:6a:c0:93:59:
         46:09:de:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:08:56 2026 by rpki-client