Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c98d46fd-3b1c-46a7-b369-35b753e6c60e/4078bd25-d8f5-3f71-95b8-5e99a1a57516.roa
File:                     4078bd25-d8f5-3f71-95b8-5e99a1a57516.roa (raw, json)
Hash identifier:          OHGrE3Y3GC+nhub7/+LgDKt6heme/5N6NcFsAENZ18E=
Subject key identifier:   CF:40:A2:1F:77:7B:36:0D:F6:0D:A2:FC:35:1F:E9:F5:32:5D:A8:99
Certificate issuer:       /CN=c98d46fd-3b1c-46a7-b369-35b753e6c60e
Certificate serial:       010D0C9F4328584E09CB44105745C7C718F93C40
Authority key identifier: 1A:35:7E:67:CF:79:42:57:0E:DA:D8:43:CB:B1:15:EA:1D:D6:03:0E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c98d46fd-3b1c-46a7-b369-35b753e6c60e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c98d46fd-3b1c-46a7-b369-35b753e6c60e/4078bd25-d8f5-3f71-95b8-5e99a1a57516.roa
Signing time:             Tue 02 Jun 2026 13:00:10 +0000
ROA not before:           Tue 02 Jun 2026 13:00:10 +0000
ROA not after:            Mon 31 Aug 2026 13:00:10 +0000
asID:                     26077
IP address blocks:        52.128.48.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c98d46fd-3b1c-46a7-b369-35b753e6c60e/c98d46fd-3b1c-46a7-b369-35b753e6c60e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c98d46fd-3b1c-46a7-b369-35b753e6c60e/c98d46fd-3b1c-46a7-b369-35b753e6c60e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c98d46fd-3b1c-46a7-b369-35b753e6c60e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:09:cb:44:10:57:45:c7:c7:18:f9:3c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c98d46fd-3b1c-46a7-b369-35b753e6c60e
        Validity
            Not Before: Jun  2 13:00:10 2026 GMT
            Not After : Aug 31 13:00:10 2026 GMT
        Subject: CN=a295268b-a648-4d0e-bd96-b4b9db8752a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:85:dd:3d:fa:98:ef:26:b9:85:da:e9:9b:eb:
                    6f:57:6d:1b:b0:b4:14:c7:43:a1:66:e5:4a:a3:55:
                    ff:3f:e4:1b:69:74:65:79:a6:97:6c:14:26:5c:26:
                    9f:26:b7:41:c8:9e:2e:13:d1:b5:04:09:3e:6e:ad:
                    f9:58:66:b5:38:62:e4:4c:97:ea:e2:df:75:d4:ab:
                    80:43:13:fd:03:9f:25:8d:5e:89:88:d4:6c:1a:c2:
                    d5:4d:35:1b:cf:02:85:97:2b:72:60:fb:0b:c5:ea:
                    dd:4d:1e:cf:41:89:e7:9f:26:33:fc:e6:c6:20:e3:
                    3e:34:43:ef:8f:02:0b:ac:14:6b:63:31:7c:d5:08:
                    40:af:4c:e6:c9:94:dd:f3:d1:bd:60:26:55:11:83:
                    c9:0c:51:5c:50:fd:3e:ee:c2:b4:70:67:7a:d8:f8:
                    7a:55:82:2d:69:80:a9:8e:0b:5c:4b:7b:62:80:f6:
                    92:22:bd:d9:ea:42:78:c7:e2:44:79:1b:71:06:6a:
                    8f:84:bd:ad:10:29:d0:16:3d:e2:7c:14:b3:e4:b6:
                    2f:3b:ff:78:1d:d0:3d:86:8b:82:49:54:68:6e:3a:
                    bd:69:6a:25:a6:51:35:d6:07:5b:f2:32:c8:35:92:
                    30:6f:b9:14:b4:c7:eb:e7:2e:ac:91:90:19:c5:23:
                    d8:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:40:A2:1F:77:7B:36:0D:F6:0D:A2:FC:35:1F:E9:F5:32:5D:A8:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c98d46fd-3b1c-46a7-b369-35b753e6c60e/4078bd25-d8f5-3f71-95b8-5e99a1a57516.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c98d46fd-3b1c-46a7-b369-35b753e6c60e/c98d46fd-3b1c-46a7-b369-35b753e6c60e.crl

            X509v3 Authority Key Identifier:
                keyid:1A:35:7E:67:CF:79:42:57:0E:DA:D8:43:CB:B1:15:EA:1D:D6:03:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c98d46fd-3b1c-46a7-b369-35b753e6c60e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.128.48.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:f6:fa:c8:21:14:db:70:ef:ae:7b:f8:91:67:70:ad:e1:58:
         2f:dc:8e:50:7b:0c:65:41:f2:96:a5:fc:39:6f:d3:8a:d0:6d:
         aa:e0:b7:57:c9:53:c6:5a:86:11:68:da:d2:bb:50:2f:62:89:
         9a:47:98:c2:cd:fa:5e:db:9c:f9:f8:7a:09:f7:59:6c:5b:9d:
         c4:ac:27:1e:83:3d:68:37:cc:6b:f2:3d:68:37:95:df:d0:c5:
         d8:bf:cf:f1:0c:58:16:17:a4:42:ed:8b:65:45:ec:92:92:fb:
         32:0a:b9:68:68:2c:f4:59:74:2e:60:03:d0:0a:da:f6:12:15:
         1f:3b:a3:bf:f7:96:59:41:3b:b9:55:e9:c4:43:9a:ee:13:65:
         fa:de:eb:73:be:f4:53:26:ac:af:a6:2b:ad:48:7a:46:79:ef:
         f0:d3:72:2a:b9:0d:9e:7a:12:6b:7c:11:8a:a7:78:2b:8e:ed:
         c5:c5:31:51:99:ca:b4:90:2d:84:08:d9:8f:b4:de:07:c3:50:
         49:3e:94:2f:e5:b4:76:3d:03:5b:16:c1:03:dc:3e:79:ce:d1:
         96:82:7e:ea:9f:09:a9:06:13:77:67:01:d5:33:88:2d:0e:58:
         75:28:c5:da:ba:2e:b1:59:84:82:8c:e7:9c:78:86:1a:6e:9e:
         49:08:97:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 00:00:12 2026 by rpki-client