Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/16a1ba98-8a17-3094-bfea-ecadc62c2c04.roa
File:                     16a1ba98-8a17-3094-bfea-ecadc62c2c04.roa (raw, json)
Hash identifier:          pq7NoJZR6y1cvnNJSIt/LzPrKb2pyx8AQFGXkCTthNY=
Subject key identifier:   D3:26:C3:78:9E:18:B3:90:01:87:1B:29:67:70:9C:97:63:88:7D:2E
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D6EDA76AF0754C455AEEADD80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/16a1ba98-8a17-3094-bfea-ecadc62c2c04.roa
Signing time:             Wed 08 Apr 2026 01:00:24 +0000
ROA not before:           Wed 08 Apr 2026 01:00:24 +0000
ROA not after:            Tue 07 Jul 2026 01:00:24 +0000
asID:                     396595
IP address blocks:        2620:0:5050::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:6e:da:76:af:07:54:c4:55:ae:ea:dd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr  8 01:00:24 2026 GMT
            Not After : Jul  7 01:00:24 2026 GMT
        Subject: CN=7f298652-7493-466f-8096-11a71de9fc01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:da:d6:b7:ec:67:72:c4:97:46:fc:71:20:35:
                    0a:a5:42:89:13:94:8f:87:4d:6a:44:08:44:30:55:
                    19:59:c5:43:cb:36:8e:9b:cd:f1:1d:02:1c:2b:cc:
                    c2:7d:5b:86:7e:52:32:16:e0:d6:20:8f:66:bf:3a:
                    ce:fa:af:2e:71:e9:cc:57:9d:90:fc:54:aa:66:7b:
                    47:dc:fd:73:d0:9a:a3:ac:e7:3e:51:6e:7d:da:8b:
                    f1:f8:e8:de:b3:46:f2:e5:ab:7d:2c:25:d3:a9:10:
                    1d:93:3f:ca:fa:e2:15:d5:df:58:e2:05:2d:b0:0b:
                    48:2e:4f:f9:85:66:4d:49:6b:16:db:6d:1e:a3:12:
                    27:eb:b5:b3:fc:b4:72:d4:31:c0:5a:37:cc:eb:20:
                    66:1d:96:ff:c4:20:12:4a:62:20:91:7c:a9:cc:2f:
                    79:92:5c:fd:c9:4e:17:06:7b:cf:ea:03:c7:2e:13:
                    1a:f4:92:a4:be:96:33:12:0b:42:6e:6b:4c:9e:50:
                    70:65:be:4e:b6:44:b6:0d:47:9e:c3:33:63:78:e2:
                    4d:41:54:9f:85:09:22:f2:ca:43:bc:c7:69:41:0c:
                    03:c5:02:34:12:e1:05:3d:b5:5a:50:f0:15:7d:b7:
                    1c:ab:52:ab:b3:d3:4c:e6:d8:41:de:90:c0:07:4c:
                    a4:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:26:C3:78:9E:18:B3:90:01:87:1B:29:67:70:9C:97:63:88:7D:2E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/16a1ba98-8a17-3094-bfea-ecadc62c2c04.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:0:5050::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:94:30:79:9f:d7:e8:1f:6e:74:87:fa:02:ef:50:60:c4:d6:
         47:97:5a:75:0a:fc:9f:0c:7c:81:ba:00:ee:1c:5e:85:11:2f:
         04:67:c5:e9:0b:25:99:d0:84:84:5b:23:9d:de:ae:a0:24:6f:
         fb:fc:d0:52:af:9e:5b:a0:3a:03:63:92:b5:e3:b6:7f:72:ac:
         d2:3d:27:ae:16:e1:57:05:b9:d8:47:87:ab:5f:52:0d:eb:2f:
         e7:2a:d9:dd:f3:a4:d0:ec:86:4e:a6:b0:b5:fb:29:d4:01:13:
         9c:65:da:b8:f4:25:7a:c6:fe:7b:75:d7:d2:fc:e7:5b:4f:cd:
         52:01:b9:18:dc:ee:81:68:f7:70:2a:dc:c0:1d:6d:42:4a:7c:
         08:7c:e6:1d:15:2f:f7:cd:04:fc:cd:99:c6:6f:90:85:0f:1c:
         3c:bb:a5:6b:fd:de:f2:05:b2:1b:00:d0:3d:8e:02:9e:e0:4a:
         49:ac:94:cf:9c:72:47:a5:33:06:db:54:e6:9a:e1:c3:5e:b1:
         8f:2d:4a:d1:97:d6:38:86:20:cd:6d:cd:ec:2e:6c:ea:97:e7:
         62:4e:b8:46:ca:74:7a:84:f4:d0:01:f8:51:02:28:ff:23:a8:
         b2:3c:fe:67:16:a9:5c:46:f3:ad:db:2b:b5:fe:af:b7:64:9f:
         76:bd:c1:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:31:45 2026 by rpki-client