Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/07c482f6-0e64-42ff-a503-75a85635277e/cef479ee-fd92-3cfa-a85b-31f23ee4283d.roa
File:                     cef479ee-fd92-3cfa-a85b-31f23ee4283d.roa (raw, json)
Hash identifier:          zeqk9ihdwYaUP5B72/S0un2qdwd00Gnuoa6DidkzwGQ=
Subject key identifier:   9D:C3:8B:52:EA:95:66:E0:E8:00:5E:B0:9A:A0:3D:04:FF:DA:91:41
Certificate issuer:       /CN=07c482f6-0e64-42ff-a503-75a85635277e
Certificate serial:       010D0C9F4328584D65152DA5AC27AD2A0B7946C0
Authority key identifier: 9B:60:17:6F:03:4D:1C:65:68:81:31:15:5C:0D:5C:45:58:67:C1:23
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/07c482f6-0e64-42ff-a503-75a85635277e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/07c482f6-0e64-42ff-a503-75a85635277e/cef479ee-fd92-3cfa-a85b-31f23ee4283d.roa
Signing time:             Sat 04 Apr 2026 13:00:29 +0000
ROA not before:           Sat 04 Apr 2026 13:00:29 +0000
ROA not after:            Fri 03 Jul 2026 13:00:29 +0000
asID:                     14618
IP address blocks:        2607:5f40:200::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/07c482f6-0e64-42ff-a503-75a85635277e/07c482f6-0e64-42ff-a503-75a85635277e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/07c482f6-0e64-42ff-a503-75a85635277e/07c482f6-0e64-42ff-a503-75a85635277e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/07c482f6-0e64-42ff-a503-75a85635277e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:65:15:2d:a5:ac:27:ad:2a:0b:79:46:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07c482f6-0e64-42ff-a503-75a85635277e
        Validity
            Not Before: Apr  4 13:00:29 2026 GMT
            Not After : Jul  3 13:00:29 2026 GMT
        Subject: CN=110c6615-f9ed-4c96-9c73-5e3bfdd40871
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:9a:49:36:3a:21:38:2d:14:79:a7:c7:d5:92:
                    eb:fe:af:60:e6:12:14:82:a8:94:8a:2f:94:20:9b:
                    bc:21:e3:79:b1:5c:77:63:e1:62:9a:e6:8b:4d:df:
                    e8:51:f1:a6:72:9a:61:d8:97:e9:79:ab:94:90:02:
                    09:2f:ab:82:01:c1:2a:8a:f8:5f:12:c2:2c:2d:2e:
                    10:01:28:4f:8b:87:bc:fe:3f:65:16:f1:f2:02:4f:
                    50:60:96:32:f9:27:da:39:19:f1:4d:1d:84:09:17:
                    29:9a:8c:f4:43:75:0d:e7:f0:9f:d4:fd:73:6d:19:
                    c0:d7:6e:3b:15:3e:dd:0b:63:bf:c1:3d:82:f5:29:
                    e5:be:1f:7b:f1:7e:10:c4:a4:d6:cc:7c:cc:7e:3c:
                    83:c6:16:d4:21:f9:15:76:be:24:70:17:e3:08:7e:
                    8c:fb:21:3b:86:96:d6:51:df:61:23:75:23:4d:83:
                    66:63:98:b4:9f:d0:f0:73:81:b3:7c:35:a8:b9:b0:
                    70:e7:b8:d7:2d:14:11:ac:fb:c7:cb:7d:66:6d:bb:
                    3c:9f:b0:46:7e:85:6d:61:d3:d0:39:75:49:68:7b:
                    3f:f6:bc:af:f9:77:40:14:73:34:4a:21:9e:b1:51:
                    42:3a:fb:74:f4:92:4d:e2:14:ad:c8:57:3b:0c:f9:
                    54:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:C3:8B:52:EA:95:66:E0:E8:00:5E:B0:9A:A0:3D:04:FF:DA:91:41
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/07c482f6-0e64-42ff-a503-75a85635277e/cef479ee-fd92-3cfa-a85b-31f23ee4283d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/07c482f6-0e64-42ff-a503-75a85635277e/07c482f6-0e64-42ff-a503-75a85635277e.crl

            X509v3 Authority Key Identifier:
                keyid:9B:60:17:6F:03:4D:1C:65:68:81:31:15:5C:0D:5C:45:58:67:C1:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/07c482f6-0e64-42ff-a503-75a85635277e.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:5f40:200::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:11:70:93:f4:16:ce:e1:ec:64:80:47:88:2c:6d:53:03:68:
         cc:13:60:19:55:94:4d:15:16:d1:c8:66:26:3d:47:90:f4:1d:
         fa:62:aa:6f:6f:28:b9:5a:9a:96:52:d2:63:ad:fe:8d:7c:2e:
         d4:8a:ce:85:42:91:eb:a9:c1:53:70:83:43:24:2f:98:0e:88:
         51:71:2d:85:d4:88:c8:25:da:3a:23:56:77:b3:60:67:cd:6c:
         c3:0e:ba:9d:1d:e7:8d:75:c8:e4:38:c2:bd:60:73:46:60:c5:
         b6:76:d5:81:1f:93:05:0f:1e:11:30:8c:ee:8d:a4:55:27:8b:
         b2:51:6d:c5:e8:e2:93:4d:a0:a4:1b:6e:75:48:53:08:de:43:
         b7:88:de:08:19:7f:09:03:e6:d9:93:69:12:f9:a6:31:e1:84:
         7f:b7:3d:56:1d:71:a3:b1:9d:88:a5:50:7e:fd:f0:f6:75:7b:
         bd:41:95:80:a7:07:db:fc:1a:e9:f5:97:fc:4e:42:04:43:3a:
         be:c3:e0:43:4e:fa:72:94:9b:81:22:ab:41:44:44:09:72:52:
         36:14:19:fe:35:6b:fa:15:1a:ff:af:c4:dc:31:6e:c1:18:cd:
         e0:98:f8:e4:9b:ae:d3:79:20:51:80:ef:84:f2:fc:78:43:f7:
         47:50:d2:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:46:44 2026 by rpki-client