Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/96fbd019-e8e1-4204-844b-f1654a891e0d/1a878d04-db22-373b-9cbf-daacfe8408ec.roa
File:                     1a878d04-db22-373b-9cbf-daacfe8408ec.roa (raw, json)
Hash identifier:          PLoVaSN/e8pK3Xzt6yrwEDns9r5ky6x9UA8rE0pNdos=
Subject key identifier:   4B:D1:35:E1:C0:4B:55:4B:BF:41:7E:A4:AA:31:A8:4A:BE:67:E7:9D
Certificate issuer:       /CN=96fbd019-e8e1-4204-844b-f1654a891e0d
Certificate serial:       010D0C9F4328584D4D5A39A8B887A26081671180
Authority key identifier: 5B:33:1B:14:36:ED:C2:56:D2:5D:29:91:9F:C0:EB:60:51:4D:8F:93
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/96fbd019-e8e1-4204-844b-f1654a891e0d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/96fbd019-e8e1-4204-844b-f1654a891e0d/1a878d04-db22-373b-9cbf-daacfe8408ec.roa
Signing time:             Fri 27 Mar 2026 01:00:31 +0000
ROA not before:           Fri 27 Mar 2026 01:00:31 +0000
ROA not after:            Thu 25 Jun 2026 01:00:31 +0000
asID:                     11796
IP address blocks:        2607:3340::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/96fbd019-e8e1-4204-844b-f1654a891e0d/96fbd019-e8e1-4204-844b-f1654a891e0d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/96fbd019-e8e1-4204-844b-f1654a891e0d/96fbd019-e8e1-4204-844b-f1654a891e0d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/96fbd019-e8e1-4204-844b-f1654a891e0d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:4d:5a:39:a8:b8:87:a2:60:81:67:11:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96fbd019-e8e1-4204-844b-f1654a891e0d
        Validity
            Not Before: Mar 27 01:00:31 2026 GMT
            Not After : Jun 25 01:00:31 2026 GMT
        Subject: CN=93f1c3aa-a3b1-49b6-a95c-6d87e7f38c59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:b9:be:73:af:eb:83:24:09:4d:1b:d7:ed:a1:
                    1d:d4:22:c9:35:8c:68:fb:23:64:1b:ff:e1:af:cb:
                    96:69:7f:61:bb:2c:29:de:ed:dc:39:a0:55:95:17:
                    cd:7e:1d:30:5d:5a:64:57:a9:89:1b:cf:99:69:20:
                    7c:ac:11:45:1d:44:54:8b:33:ec:4e:0d:6b:ef:b5:
                    8f:67:35:d1:0e:21:c4:1b:49:4f:34:59:ab:7c:47:
                    b9:32:e4:2a:68:84:85:40:93:40:45:c4:3e:9c:ab:
                    52:1f:20:56:ab:e8:7e:f9:f4:84:b7:6d:7f:96:2c:
                    0e:ff:12:b1:ef:3b:e2:8c:f3:6e:27:31:9e:e6:23:
                    46:9e:d6:15:81:e9:df:68:62:05:36:00:30:36:33:
                    3e:3f:e9:fb:fe:90:fa:ea:a6:25:c3:09:74:c2:32:
                    e4:5a:4a:d2:a6:49:79:50:40:3f:56:69:e0:b5:55:
                    1e:f3:70:6f:f8:cb:94:cc:35:3d:5f:19:49:3c:c5:
                    97:4e:81:21:30:9b:f6:c4:31:3a:0a:2b:d6:93:27:
                    e9:2c:7f:9b:b0:4d:d2:d8:05:3b:59:87:27:df:79:
                    94:28:d5:cb:f9:8a:2a:a5:4a:f0:3c:45:77:e4:a5:
                    25:0a:f3:1f:07:08:7f:c9:c2:2f:54:ee:ba:22:a6:
                    92:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:D1:35:E1:C0:4B:55:4B:BF:41:7E:A4:AA:31:A8:4A:BE:67:E7:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/96fbd019-e8e1-4204-844b-f1654a891e0d/1a878d04-db22-373b-9cbf-daacfe8408ec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/96fbd019-e8e1-4204-844b-f1654a891e0d/96fbd019-e8e1-4204-844b-f1654a891e0d.crl

            X509v3 Authority Key Identifier:
                keyid:5B:33:1B:14:36:ED:C2:56:D2:5D:29:91:9F:C0:EB:60:51:4D:8F:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/96fbd019-e8e1-4204-844b-f1654a891e0d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:3340::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:81:2a:66:59:8d:3a:b2:19:2e:47:42:f2:9f:d5:29:c2:0d:
         3c:8e:c1:08:0d:c8:95:1a:f2:57:ee:69:72:35:b9:29:ff:91:
         f1:55:6a:61:29:ca:ff:29:9d:db:a3:16:f5:59:f4:33:aa:91:
         64:69:0c:ca:dc:d0:b0:ae:2b:4b:fc:f4:c2:f8:4a:1e:fd:17:
         81:6e:80:62:ef:44:b2:53:e6:85:86:3b:38:b3:34:51:88:d7:
         5d:97:05:2f:22:ca:d9:f0:a0:33:58:74:87:11:f4:3d:1b:a3:
         0f:63:f4:74:d3:ed:2f:fe:ce:77:6c:b7:7a:5b:89:cf:9f:87:
         47:cb:9b:01:47:d3:c7:92:3c:16:b5:15:cf:65:8e:66:10:af:
         06:01:aa:41:eb:40:5a:9d:eb:d9:50:de:8e:b4:8d:b5:12:a6:
         95:e5:4d:23:76:1c:ce:cd:d3:e9:46:8a:2b:0e:0b:3f:fc:e5:
         f7:5a:de:5a:d1:1d:ec:e2:e7:83:e4:77:5e:0b:76:f4:21:19:
         5c:a1:85:57:16:d7:40:4d:09:23:8d:1f:46:3f:27:38:3f:09:
         a0:6f:97:12:b0:7a:2c:44:e9:d5:57:89:f5:c0:1f:ea:7c:ae:
         da:ec:c4:24:9e:d6:f8:a2:37:76:05:0a:0c:ca:a0:80:6d:ff:
         c6:7c:83:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 01:32:13 2026 by rpki-client