Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f7a9a595-6b33-33ff-b053-482abe5fec0d.roa
File:                     f7a9a595-6b33-33ff-b053-482abe5fec0d.roa (raw, json)
Hash identifier:          IHaGXb97HSFix300AwHI7u+PjUuRpn42c6xZRfijbQk=
Subject key identifier:   25:71:1E:90:C7:C9:E2:BE:C5:02:AA:78:F3:AA:0F:87:45:D0:2E:63
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584DDE85FB8F04601EC825DB07E0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f7a9a595-6b33-33ff-b053-482abe5fec0d.roa
Signing time:             Mon 18 May 2026 01:00:24 +0000
ROA not before:           Mon 18 May 2026 01:00:24 +0000
ROA not after:            Sun 16 Aug 2026 01:00:24 +0000
asID:                     22909
IP address blocks:        2603:3009:600::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:de:85:fb:8f:04:60:1e:c8:25:db:07:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 18 01:00:24 2026 GMT
            Not After : Aug 16 01:00:24 2026 GMT
        Subject: CN=651e5127-1636-4c1f-852b-fbcf56a0ab91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:a9:36:53:ce:1e:25:c0:22:fa:f3:17:ea:b7:
                    9b:08:9b:e7:a2:4c:cd:e5:44:0c:3b:ff:79:64:6f:
                    35:16:4b:48:2a:72:18:f6:70:72:47:1f:fd:cf:b2:
                    1e:ff:68:82:72:f2:59:8e:d0:4c:e1:3a:c9:8b:ec:
                    fe:f9:55:48:a5:cd:95:f8:90:b1:59:d7:5e:93:78:
                    91:80:71:fc:2e:50:34:cc:e4:b2:0a:9a:d0:ca:c6:
                    f0:28:40:4a:2b:b5:09:8a:cb:3a:f8:2e:98:d6:a8:
                    e4:dc:1a:f0:59:9d:3f:c2:7f:80:97:d4:13:e7:ec:
                    85:ce:46:c4:3e:a3:df:16:6e:c7:b8:74:0c:a3:4b:
                    21:69:5b:ae:b4:de:ee:29:31:93:f8:7a:b1:4c:bf:
                    60:22:42:c3:57:26:9d:d4:87:75:42:b4:fe:a5:cd:
                    bd:86:e3:d7:02:14:8e:28:1b:2c:31:de:f3:bd:bd:
                    cd:44:90:92:30:ec:fc:d3:00:ae:4d:60:12:f2:74:
                    2a:89:a1:af:95:ff:f9:86:06:d3:6d:f9:15:70:b5:
                    d4:ac:aa:bd:2c:de:01:d4:c9:7a:60:eb:5b:ed:fa:
                    c6:5d:ee:97:99:0d:9a:1b:a7:ee:be:a8:61:8a:55:
                    a3:fb:02:83:8c:ba:3c:6a:60:7e:e1:01:47:3d:24:
                    67:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:71:1E:90:C7:C9:E2:BE:C5:02:AA:78:F3:AA:0F:87:45:D0:2E:63
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f7a9a595-6b33-33ff-b053-482abe5fec0d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:3009:600::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         cc:fa:39:b8:82:4c:e8:63:e1:71:fc:80:98:48:d7:0a:92:fb:
         e1:e9:72:bc:cb:2d:a4:b8:78:fb:78:63:1d:f6:d7:a7:0c:cf:
         eb:ca:39:db:5f:49:ad:39:14:5a:a0:61:13:b6:bf:ae:8a:82:
         34:c2:f0:49:8f:18:6b:b7:79:5d:c4:af:87:a8:9a:05:2d:39:
         b4:f6:ec:69:f7:10:b0:22:fe:84:13:a9:70:8a:d1:2c:43:90:
         4e:4c:39:37:a8:37:b1:86:c4:d9:fc:78:31:76:83:79:51:ef:
         72:6e:6b:1a:11:9b:91:3d:93:7e:95:7c:41:df:91:b1:c1:da:
         d6:e2:63:8e:3f:12:63:c2:02:0b:de:9a:dd:8d:c2:77:de:f5:
         97:61:fc:66:20:4c:f8:27:24:5e:0e:f9:6e:bd:df:fb:ed:d2:
         8c:08:1d:dc:fc:73:fa:26:04:38:f8:cb:77:2e:85:2e:68:e7:
         7f:69:95:d5:f8:61:b8:cb:14:e1:5d:11:5b:bf:da:dd:12:1e:
         5e:b9:83:50:13:fc:d3:28:83:1a:da:38:93:dd:fc:3a:c3:ad:
         d4:da:a6:17:a4:6e:88:d3:39:9d:e8:ea:09:20:98:af:3f:9f:
         0e:55:6d:9a:46:15:fc:54:cb:51:ae:a4:c7:85:cc:ab:e8:41:
         4c:9c:e7:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 19:45:13 2026 by rpki-client