Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/95e23826-7aa3-3760-91d4-16a719425072.roa
File:                     95e23826-7aa3-3760-91d4-16a719425072.roa (raw, json)
Hash identifier:          pcicfmXknNwzRYy8AcrwptIeJi2nn+ZN2p9xq4jLKOY=
Subject key identifier:   F2:C4:9D:DE:96:87:53:40:55:62:B2:DB:6A:47:A6:47:72:C3:1F:83
Certificate issuer:       /CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
Certificate serial:       010D0C9F4328584D6EDA8FC65A8F0B1085FBE5C0
Authority key identifier: 80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/95e23826-7aa3-3760-91d4-16a719425072.roa
Signing time:             Wed 08 Apr 2026 01:00:24 +0000
ROA not before:           Wed 08 Apr 2026 01:00:24 +0000
ROA not after:            Tue 07 Jul 2026 01:00:24 +0000
asID:                     62610
IP address blocks:        2602:ffe4:c98::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:6e:da:8f:c6:5a:8f:0b:10:85:fb:e5:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
        Validity
            Not Before: Apr  8 01:00:24 2026 GMT
            Not After : Jul  7 01:00:24 2026 GMT
        Subject: CN=4a89af1f-1163-4bcd-9ef0-ed6cb1f47941
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:35:58:18:24:71:e3:f7:1c:f2:7a:85:3a:53:
                    a8:8d:f4:f3:2d:b8:fd:19:93:9c:8a:bf:64:a2:55:
                    f5:76:06:5d:fe:c0:ce:06:70:5b:0b:b4:b2:60:32:
                    d9:0d:16:a1:8b:fa:43:39:65:77:4e:54:a3:b4:7d:
                    bb:ff:c0:e4:4c:c0:4e:5c:14:70:ec:44:c4:26:b1:
                    53:d2:fe:51:da:6b:fe:5d:34:7a:07:52:12:e1:78:
                    94:f3:e1:96:9c:f5:15:b5:8c:30:8f:21:41:d5:31:
                    21:60:30:d9:7d:55:e8:33:f8:74:67:63:3a:8a:83:
                    9d:33:5b:65:14:73:ab:0a:13:7c:86:02:46:4a:16:
                    3d:a8:34:72:df:2d:1c:26:c0:c9:92:cb:a6:7a:7c:
                    1f:d9:32:11:78:c9:4b:d1:e8:56:82:67:fc:bc:5b:
                    41:fb:2f:6c:0d:b8:d6:40:71:9e:e8:c5:87:94:b7:
                    8d:e7:e3:32:37:fe:fc:4f:eb:31:38:74:79:ca:1a:
                    a1:32:65:96:a3:11:51:8e:84:ea:3b:9d:6a:69:b0:
                    ae:f7:1a:be:7d:af:9c:51:fb:7e:0e:ae:01:e8:ed:
                    86:ee:f2:ab:35:dc:49:99:c7:39:9a:a4:3d:9c:ad:
                    24:36:85:9c:88:fd:c9:89:ea:97:cc:7b:06:af:41:
                    92:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:C4:9D:DE:96:87:53:40:55:62:B2:DB:6A:47:A6:47:72:C3:1F:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/95e23826-7aa3-3760-91d4-16a719425072.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl

            X509v3 Authority Key Identifier:
                keyid:80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:ffe4:c98::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:68:a3:2a:5c:72:6b:10:c8:64:31:1b:c0:d8:50:f7:1f:24:
         76:ed:29:f3:b2:f7:bf:37:57:bc:6e:9b:f9:83:9c:78:46:df:
         88:da:4d:1d:8d:8a:88:68:ac:78:b8:83:2a:d5:8a:80:f7:bd:
         ed:b4:4d:d5:9c:fc:b9:00:db:5e:c8:d5:84:96:a2:e9:99:43:
         99:98:08:61:41:92:77:87:4b:8f:73:8a:f3:91:3b:2d:a1:63:
         56:28:1f:73:eb:a4:00:c6:17:df:5a:1c:6b:aa:75:8e:5b:ca:
         26:d2:6c:82:6c:26:b2:73:ad:cb:1a:0c:8f:82:f7:05:a0:a9:
         ec:b3:ed:c1:ca:b7:5a:22:7d:73:5f:d9:52:ad:ee:02:b6:e4:
         87:1f:7f:f8:f1:c4:dd:e2:8d:ad:fd:6c:8c:61:f2:e3:95:5a:
         ae:ee:28:50:3c:e5:5c:e6:59:c4:0a:24:04:7f:64:81:ec:18:
         fe:35:1c:47:c8:61:9d:16:e6:48:b1:a6:08:51:f9:b1:f1:2d:
         ee:38:dc:1d:6a:16:3a:60:a9:0f:88:75:d1:37:54:0a:05:1c:
         fa:2e:94:fe:23:5a:45:f1:80:1a:35:64:6a:3e:7f:22:96:ca:
         1e:3e:73:df:48:b4:ce:08:53:16:8e:f8:7c:13:3e:db:d2:2c:
         cc:ce:20:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:31:52 2026 by rpki-client