Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/400c5da8-08ab-40ed-9e23-dff413fb2d52/cc0a5f14-0f4f-3a8b-ad60-c6e64446b7da.roa
File:                     cc0a5f14-0f4f-3a8b-ad60-c6e64446b7da.roa (raw, json)
Hash identifier:          lyQvMIvJlb5FKD7EJ8PkDdOIFAid/2gH4pjrPzAg+ds=
Subject key identifier:   7F:A7:3C:7D:29:53:81:92:35:EB:69:2D:56:A8:53:55:C1:D7:92:3D
Certificate issuer:       /CN=400c5da8-08ab-40ed-9e23-dff413fb2d52
Certificate serial:       010D0C9F4328584D7CCFD8CF429C0F21C7067880
Authority key identifier: C1:64:92:0E:E9:7C:FC:C2:87:A4:0A:82:1D:BF:EA:21:97:33:7F:D9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/400c5da8-08ab-40ed-9e23-dff413fb2d52.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/400c5da8-08ab-40ed-9e23-dff413fb2d52/cc0a5f14-0f4f-3a8b-ad60-c6e64446b7da.roa
Signing time:             Mon 13 Apr 2026 01:00:24 +0000
ROA not before:           Mon 13 Apr 2026 01:00:24 +0000
ROA not after:            Sun 12 Jul 2026 01:00:24 +0000
asID:                     23158
IP address blocks:        2606:d580::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/400c5da8-08ab-40ed-9e23-dff413fb2d52/400c5da8-08ab-40ed-9e23-dff413fb2d52.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/400c5da8-08ab-40ed-9e23-dff413fb2d52/400c5da8-08ab-40ed-9e23-dff413fb2d52.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/400c5da8-08ab-40ed-9e23-dff413fb2d52.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 Apr 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:7c:cf:d8:cf:42:9c:0f:21:c7:06:78:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=400c5da8-08ab-40ed-9e23-dff413fb2d52
        Validity
            Not Before: Apr 13 01:00:24 2026 GMT
            Not After : Jul 12 01:00:24 2026 GMT
        Subject: CN=895446f1-c0d7-4165-9325-b281adb47fe2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:c7:45:d6:2c:b2:b1:b1:7e:e5:e9:02:68:ba:
                    15:e3:89:12:1b:43:4d:2f:44:ac:93:a8:7f:b0:3c:
                    36:93:b1:6c:09:4c:dd:95:58:e7:5f:9b:2b:35:2c:
                    8f:eb:01:a3:28:a1:6d:c9:3b:49:5f:24:6c:e8:b6:
                    46:52:b9:73:fb:46:85:fd:da:75:08:c4:ce:b9:92:
                    8d:3c:fb:53:c4:57:2b:77:7a:51:3a:85:42:49:a3:
                    87:85:d3:cb:a4:22:8f:b1:3d:b5:dc:bb:1a:34:cb:
                    c7:43:af:43:3c:3c:62:78:1f:8f:17:89:63:3d:6b:
                    1b:58:52:9c:7c:cf:be:6d:e2:ea:64:28:6f:01:22:
                    d7:b9:35:a0:03:35:93:47:d6:25:79:1b:9e:df:2a:
                    d8:19:aa:81:5a:57:e4:73:b9:b7:24:48:ab:38:27:
                    98:bc:40:06:45:73:38:26:f3:a2:f5:c1:4f:97:c5:
                    d6:0b:83:ba:e0:a4:10:c4:7c:19:fb:c2:63:5b:7d:
                    ae:20:f8:2b:14:a1:c8:d1:85:36:90:60:6c:f6:51:
                    96:4c:7d:7e:b8:02:80:a9:dc:c2:db:3a:e8:a3:b0:
                    c8:65:45:f1:1e:ce:82:9d:e2:5e:f4:4c:09:99:1f:
                    9d:86:08:c4:1d:50:38:d1:f0:8b:6a:12:0a:b3:28:
                    bf:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:A7:3C:7D:29:53:81:92:35:EB:69:2D:56:A8:53:55:C1:D7:92:3D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/400c5da8-08ab-40ed-9e23-dff413fb2d52/cc0a5f14-0f4f-3a8b-ad60-c6e64446b7da.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/400c5da8-08ab-40ed-9e23-dff413fb2d52/400c5da8-08ab-40ed-9e23-dff413fb2d52.crl

            X509v3 Authority Key Identifier:
                keyid:C1:64:92:0E:E9:7C:FC:C2:87:A4:0A:82:1D:BF:EA:21:97:33:7F:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/400c5da8-08ab-40ed-9e23-dff413fb2d52.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:d580::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:1e:36:13:91:4d:5b:c2:d8:46:28:22:aa:c9:84:e5:3c:8a:
         91:89:d4:fb:cb:7f:7f:bd:d6:04:a2:7b:86:85:65:d8:35:d7:
         de:15:81:8c:1c:b0:1b:f2:9f:6d:51:90:60:e6:45:c3:e3:d8:
         2d:0f:62:ed:52:f2:b1:99:27:15:95:9d:5a:0a:ef:a3:5f:d3:
         c0:40:6d:05:91:db:5c:d8:1c:aa:5a:00:f7:a9:5f:92:8f:d9:
         d3:a2:e9:fe:bd:22:de:aa:9f:01:9b:86:c5:3f:78:4f:9c:77:
         33:14:30:86:c4:2d:99:78:f6:86:bb:93:a1:32:49:81:ce:c0:
         92:58:de:ba:29:9d:1d:71:46:82:4a:9a:00:53:13:8d:dc:32:
         1b:36:25:79:77:3e:6c:e2:06:9d:15:5e:e0:2a:65:30:06:23:
         d5:b1:65:ac:10:d8:a7:03:1d:bd:26:ed:06:72:9d:fa:5a:8f:
         8b:c0:30:f2:b6:52:23:94:00:29:dc:a3:14:74:2d:4a:4a:42:
         70:33:bc:1e:0b:d3:4a:57:90:53:cf:e0:db:01:8f:65:2e:27:
         b9:76:a9:2a:fd:b0:f7:64:4e:f7:9e:7f:b9:52:48:8e:d4:6d:
         1f:df:e7:df:f9:47:d5:56:e4:f0:35:5b:8f:d0:f7:d1:43:3b:
         ac:89:17:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:15:31 2026 by rpki-client