Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4d80daa5-79dc-4c2a-8879-248a3f3e339c/9eab1dcf-bc89-3491-a5b3-bbb64133d9f5.roa
File:                     9eab1dcf-bc89-3491-a5b3-bbb64133d9f5.roa (raw, json)
Hash identifier:          sPk6WdgYUjC4AGSbVElrUE6p4kL+C6NkdHntRFzZtEs=
Subject key identifier:   F1:F3:0F:C8:53:68:60:72:0A:A6:72:AC:EB:FA:A4:99:CB:DF:4F:D7
Certificate issuer:       /CN=4d80daa5-79dc-4c2a-8879-248a3f3e339c
Certificate serial:       010D0C9F4328584D746FCE8504A7CDBB68572AC0
Authority key identifier: 45:24:B4:3E:8E:13:30:ED:D5:96:0D:39:A0:C5:0D:3D:96:C0:56:FA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4d80daa5-79dc-4c2a-8879-248a3f3e339c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4d80daa5-79dc-4c2a-8879-248a3f3e339c/9eab1dcf-bc89-3491-a5b3-bbb64133d9f5.roa
Signing time:             Fri 10 Apr 2026 01:00:24 +0000
ROA not before:           Fri 10 Apr 2026 01:00:24 +0000
ROA not after:            Thu 09 Jul 2026 01:00:24 +0000
asID:                     16509
IP address blocks:        2607:d540::/42 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4d80daa5-79dc-4c2a-8879-248a3f3e339c/4d80daa5-79dc-4c2a-8879-248a3f3e339c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4d80daa5-79dc-4c2a-8879-248a3f3e339c/4d80daa5-79dc-4c2a-8879-248a3f3e339c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4d80daa5-79dc-4c2a-8879-248a3f3e339c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:74:6f:ce:85:04:a7:cd:bb:68:57:2a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d80daa5-79dc-4c2a-8879-248a3f3e339c
        Validity
            Not Before: Apr 10 01:00:24 2026 GMT
            Not After : Jul  9 01:00:24 2026 GMT
        Subject: CN=66139cc0-0185-4ce8-81a2-03e8e4f58d42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:af:2a:ab:c5:45:67:0f:b2:ee:94:f6:60:d3:
                    1f:f8:4a:fc:a9:3b:1e:72:ab:f4:d0:a6:34:36:1e:
                    ef:2e:c8:46:dc:33:13:dd:e1:39:66:d5:ba:c5:2d:
                    79:73:ed:aa:a3:60:f1:27:5a:fd:1d:5d:26:de:19:
                    ac:48:35:de:f9:42:25:e3:bd:f1:72:54:f8:9e:f6:
                    81:00:0a:ed:e5:11:e0:e4:f8:eb:25:cf:4f:c0:cf:
                    8e:29:95:a3:eb:ee:e2:1b:fb:b9:63:ee:9b:6f:65:
                    f9:26:d7:1d:92:a1:8c:4f:bb:fe:34:52:f1:75:d4:
                    54:36:e9:8a:f0:dc:9b:93:7e:a5:b4:40:8e:cb:25:
                    74:0c:0f:97:37:5d:a7:f9:02:69:35:ec:7a:08:02:
                    9a:5c:8c:f5:02:2a:d6:6c:c2:f9:2f:47:c8:74:fe:
                    47:a4:bb:8f:66:d8:06:84:79:01:80:35:2e:95:a2:
                    e1:1d:de:6c:ec:1a:aa:ea:c8:be:b4:76:91:f2:44:
                    d3:2e:a8:ec:1e:d6:be:62:c1:43:23:76:3c:38:81:
                    76:3b:d6:d2:d7:24:6e:36:d6:1a:c5:b9:06:ea:2b:
                    a5:97:bf:b1:49:0d:bd:c9:cb:e9:41:66:58:ec:60:
                    3e:79:f8:1d:50:83:70:c3:40:58:f0:00:23:3a:4f:
                    47:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:F3:0F:C8:53:68:60:72:0A:A6:72:AC:EB:FA:A4:99:CB:DF:4F:D7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4d80daa5-79dc-4c2a-8879-248a3f3e339c/9eab1dcf-bc89-3491-a5b3-bbb64133d9f5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4d80daa5-79dc-4c2a-8879-248a3f3e339c/4d80daa5-79dc-4c2a-8879-248a3f3e339c.crl

            X509v3 Authority Key Identifier:
                keyid:45:24:B4:3E:8E:13:30:ED:D5:96:0D:39:A0:C5:0D:3D:96:C0:56:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4d80daa5-79dc-4c2a-8879-248a3f3e339c.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:d540::/42

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:f6:2e:5a:85:f7:ba:14:17:54:ed:1e:08:7f:50:6d:f6:f7:
         e0:cf:7c:4f:f3:2b:e7:20:d0:22:b7:99:f7:54:8a:86:1e:15:
         b9:08:78:86:5f:05:30:e7:92:8d:87:99:75:eb:fa:c0:04:09:
         40:85:f8:d7:c0:7f:be:b3:eb:31:26:d5:6c:45:b7:db:fd:d5:
         93:14:00:6b:1c:67:af:59:e0:7a:54:79:2e:a1:bf:3f:c8:50:
         ce:37:21:c0:29:d2:12:cb:66:22:58:38:9d:da:7c:98:c3:cc:
         06:13:16:fa:b2:54:96:f7:e4:da:bc:ea:d8:5d:57:4b:91:e0:
         2d:23:61:00:38:d0:e0:2a:f0:56:a3:cc:9f:60:5d:16:0c:30:
         99:92:4a:7b:90:0f:ef:cc:e0:d8:0b:ac:3d:b5:c5:04:44:87:
         a2:75:8a:d9:8c:70:71:df:db:7e:bf:99:32:cc:3c:53:c1:52:
         16:76:98:88:19:b4:fc:10:f9:ad:35:76:5d:93:1e:30:b6:b3:
         89:40:b8:a3:cd:fa:f8:64:aa:7d:fa:2f:b2:1a:be:9c:e5:af:
         ec:5c:a1:2d:30:df:04:bf:42:a4:32:39:96:1b:3b:35:ef:0a:
         c5:5e:a1:4a:a2:89:57:bb:bd:14:80:ed:12:b1:ea:81:f3:8d:
         b1:1c:a8:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:49:51 2026 by rpki-client