Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a1007781-65de-3cfc-a90c-5849be595b33.roa
File:                     a1007781-65de-3cfc-a90c-5849be595b33.roa (raw, json)
Hash identifier:          80LCXXEU9iJlyJToPQ2iZhmM7s4qq2uprvlWhvGDsXs=
Subject key identifier:   1D:45:17:2D:EE:85:3D:1B:21:78:68:11:83:E0:B1:77:95:08:4B:40
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584D7F9A737751046B47F9DC2740
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a1007781-65de-3cfc-a90c-5849be595b33.roa
Signing time:             Tue 14 Apr 2026 01:00:24 +0000
ROA not before:           Tue 14 Apr 2026 01:00:24 +0000
ROA not after:            Mon 13 Jul 2026 01:00:24 +0000
asID:                     13335
IP address blocks:        2606:4700:2ffa::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:7f:9a:73:77:51:04:6b:47:f9:dc:27:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Apr 14 01:00:24 2026 GMT
            Not After : Jul 13 01:00:24 2026 GMT
        Subject: CN=9b26b042-1b6b-4325-a692-8044bc20ef39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:0f:a4:89:9f:b3:8e:76:ba:b6:a0:14:34:ab:
                    9f:f3:5e:63:cd:0e:eb:c0:8a:09:a4:d2:bd:81:38:
                    9a:c4:fc:cc:f9:8a:65:f4:eb:14:64:25:c8:d0:6e:
                    13:af:9b:d9:84:73:c5:96:24:74:f8:53:1d:fe:2c:
                    49:d4:f3:d0:76:0b:41:8e:01:5c:6a:ba:69:99:f4:
                    5c:69:d1:3a:3a:06:7f:bd:99:0f:16:6e:bc:6c:a4:
                    d8:2a:2a:ff:46:f2:67:9f:d9:5d:17:1d:dd:5b:e5:
                    1c:bd:8a:29:50:34:90:4b:84:79:66:5a:2b:6d:d9:
                    39:47:4c:f9:54:2f:dd:1e:14:15:10:5f:8d:b6:3f:
                    5c:95:2d:4f:cf:28:74:f4:5b:ba:da:b3:2e:5e:87:
                    26:02:0e:28:a1:bd:a4:ad:f1:1a:82:db:2e:19:3c:
                    a0:2c:c1:be:e7:d6:21:1e:d1:22:cb:b5:aa:c4:3d:
                    4a:f0:f5:a9:24:7d:23:99:3c:ff:b2:bf:75:9d:fb:
                    26:53:06:5a:90:2a:f7:3a:47:3b:50:cf:d7:b2:1c:
                    b8:06:80:15:02:78:e8:78:db:00:78:b9:1d:45:70:
                    c2:3d:cb:2e:f5:86:6e:61:32:83:0a:b1:db:d4:f8:
                    01:32:56:60:02:8b:e9:2a:5f:e2:1d:a7:9d:3f:2a:
                    89:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:45:17:2D:EE:85:3D:1B:21:78:68:11:83:E0:B1:77:95:08:4B:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a1007781-65de-3cfc-a90c-5849be595b33.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:4700:2ffa::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:c7:a9:2c:23:cb:96:81:ba:46:02:c3:51:64:a0:41:0c:ce:
         b9:f5:d7:da:28:9b:9b:76:4c:2b:3a:2f:2a:e7:35:55:19:db:
         b2:8b:6c:b7:38:36:00:23:3c:92:55:d8:63:0b:52:55:86:95:
         d7:ae:7f:d1:58:b0:b7:ef:4c:ce:db:f9:37:66:9a:31:c5:fa:
         a8:ad:6c:96:7b:46:07:c5:3e:31:d3:70:6f:bf:aa:a3:f5:36:
         da:93:27:91:c7:9e:62:9b:db:c9:23:82:04:46:da:e0:72:58:
         b3:4b:48:cb:4b:7a:55:d7:b4:c3:8b:83:86:e1:7f:75:fa:ac:
         43:4b:81:37:84:48:c6:bb:b1:60:77:28:13:64:1e:4a:78:5b:
         75:e0:94:e9:40:84:e5:7b:3c:b7:da:aa:6b:82:eb:02:cc:66:
         78:9b:eb:a8:51:dc:84:da:54:36:31:cf:05:90:eb:f9:21:95:
         58:82:84:1f:5a:dc:33:67:e0:4a:82:40:40:76:2c:3d:c4:ac:
         cf:cc:0c:ea:fb:40:cd:e7:48:25:5e:51:40:62:50:c8:de:2f:
         2c:78:9e:d9:5e:5a:50:64:37:0e:4a:1e:cb:19:fc:d9:41:3a:
         1a:1a:c9:f8:b0:77:05:eb:e4:d9:e3:91:01:0f:e6:0a:ca:e9:
         d8:17:ca:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:22:18 2026 by rpki-client