Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3c17db7-204c-41e2-85ca-6a5a448a8b88/9c549b63-6d1b-340f-a75a-67f7ee513f95.roa
File:                     9c549b63-6d1b-340f-a75a-67f7ee513f95.roa (raw, json)
Hash identifier:          mZm9ZLGtvuyjOnjz3fSkz7xTLLZTWQCvuRxIentvPeE=
Subject key identifier:   51:54:A6:DB:BB:6F:E8:4E:33:A0:7B:B9:89:2D:C2:61:3D:06:9F:8E
Certificate issuer:       /CN=c3c17db7-204c-41e2-85ca-6a5a448a8b88
Certificate serial:       010D0C9F4328584D5E1A7944A271D47A80446900
Authority key identifier: 7D:2D:BA:FF:43:DB:E9:72:96:E9:45:87:95:5C:45:72:54:D4:6B:83
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3c17db7-204c-41e2-85ca-6a5a448a8b88.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3c17db7-204c-41e2-85ca-6a5a448a8b88/9c549b63-6d1b-340f-a75a-67f7ee513f95.roa
Signing time:             Thu 02 Apr 2026 01:00:23 +0000
ROA not before:           Thu 02 Apr 2026 01:00:23 +0000
ROA not after:            Wed 01 Jul 2026 01:00:23 +0000
asID:                     396982
IP address blocks:        2607:1c0:2320::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3c17db7-204c-41e2-85ca-6a5a448a8b88/c3c17db7-204c-41e2-85ca-6a5a448a8b88.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3c17db7-204c-41e2-85ca-6a5a448a8b88/c3c17db7-204c-41e2-85ca-6a5a448a8b88.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3c17db7-204c-41e2-85ca-6a5a448a8b88.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:5e:1a:79:44:a2:71:d4:7a:80:44:69:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3c17db7-204c-41e2-85ca-6a5a448a8b88
        Validity
            Not Before: Apr  2 01:00:23 2026 GMT
            Not After : Jul  1 01:00:23 2026 GMT
        Subject: CN=a08b39d6-d499-4adb-8e63-12e202336e98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:6b:d1:e0:30:41:60:87:fe:69:33:18:2a:62:
                    51:6f:f3:b8:b7:1d:fd:f5:30:df:a9:83:3e:a0:3b:
                    66:39:66:f2:a3:b0:a0:82:93:d0:85:8a:d5:d2:7d:
                    3f:2c:a1:f9:df:e6:25:ec:5b:d0:c8:32:90:bc:ae:
                    03:27:ad:4f:28:37:0c:44:ba:ea:35:e9:cf:aa:86:
                    0f:f9:06:08:4a:41:36:42:01:b9:5e:7b:5d:84:a4:
                    d4:ce:87:7e:cb:b9:38:f3:ad:49:9b:05:32:31:9e:
                    fe:2f:06:49:fe:e3:69:54:a8:79:77:28:b4:13:b4:
                    74:10:86:7e:60:80:5a:bb:96:32:70:72:59:30:17:
                    da:38:93:54:44:35:ca:61:3b:6a:62:cd:57:cc:d0:
                    85:20:86:13:a5:4f:51:1f:9a:b2:2a:e4:70:8e:19:
                    71:f2:39:98:f7:47:a3:90:38:15:e8:9e:e8:ec:3e:
                    14:18:fe:67:9e:0d:b4:8a:36:df:5d:66:1d:0b:80:
                    07:c2:f3:81:18:3a:46:37:c9:1d:08:a4:9b:d1:28:
                    53:ff:57:fd:6c:70:e1:7a:10:fc:27:21:a8:5d:f6:
                    9a:19:e4:22:5b:50:38:3b:f8:33:c5:17:be:d8:8f:
                    3b:cb:df:26:27:09:18:48:3d:83:1d:6b:61:59:1b:
                    ed:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:54:A6:DB:BB:6F:E8:4E:33:A0:7B:B9:89:2D:C2:61:3D:06:9F:8E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3c17db7-204c-41e2-85ca-6a5a448a8b88/9c549b63-6d1b-340f-a75a-67f7ee513f95.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3c17db7-204c-41e2-85ca-6a5a448a8b88/c3c17db7-204c-41e2-85ca-6a5a448a8b88.crl

            X509v3 Authority Key Identifier:
                keyid:7D:2D:BA:FF:43:DB:E9:72:96:E9:45:87:95:5C:45:72:54:D4:6B:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3c17db7-204c-41e2-85ca-6a5a448a8b88.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:1c0:2320::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:66:dd:55:4f:11:cd:f0:da:55:be:33:82:72:b5:39:e2:3a:
         ab:b0:14:85:e4:81:4e:85:f6:24:3d:13:3d:a7:2e:7a:66:33:
         f8:fc:00:8e:91:da:8b:8c:f2:ce:54:02:19:50:45:e2:ac:41:
         b2:b4:a8:ab:f8:7e:fd:8a:a7:e3:ab:d7:6f:71:d4:1a:0e:21:
         1b:bd:c4:1b:43:16:a5:d3:e1:17:5b:06:06:d2:d7:8e:4c:8e:
         c8:23:9e:7d:46:62:bc:95:48:51:f0:10:2b:81:ef:98:7b:97:
         2b:ce:0e:e6:dc:e9:db:b3:0f:0f:f9:84:0d:19:fa:a8:16:86:
         8b:59:f4:54:6d:b7:9e:7a:ef:5f:ba:db:c6:bd:3f:b6:d0:0a:
         24:3a:4f:ae:9f:02:7a:ca:9f:35:91:6a:2b:a2:35:e0:61:3b:
         c8:33:49:0e:20:40:b6:6b:5d:66:1d:03:bc:3a:dd:04:25:cf:
         e7:5f:d4:31:72:ba:66:3c:0d:ff:bc:59:b9:f5:6d:48:04:34:
         d5:de:44:fc:6f:28:cb:aa:e1:6f:0f:91:ec:c0:5c:ff:25:bf:
         c7:a4:a2:25:e4:e2:0d:39:6d:28:4d:52:93:5b:d0:6e:c1:c7:
         48:6f:8b:09:c6:12:d7:ce:39:52:a4:a5:f3:62:5e:01:4a:3e:
         b6:e9:9a:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:58:22 2026 by rpki-client