Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bb3e1744-5186-489a-9b86-cb31cef73874/9ca829f6-f3f0-31c0-8ddd-5f95cea0d04d.roa
File:                     9ca829f6-f3f0-31c0-8ddd-5f95cea0d04d.roa (raw, json)
Hash identifier:          2i92K/afb+bThGDNzQWSG9aEEt12L+gNEO3UDU4fD4I=
Subject key identifier:   DB:A4:E0:50:9F:31:07:09:4C:FA:8F:2D:8C:1F:A4:29:FB:C8:8B:94
Certificate issuer:       /CN=bb3e1744-5186-489a-9b86-cb31cef73874
Certificate serial:       010D0C9F4328584D8695528F15369FE6E63A2200
Authority key identifier: 6F:2C:C6:AA:C8:5C:8C:82:ED:09:05:C9:E5:AD:0F:99:CE:1E:07:5B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bb3e1744-5186-489a-9b86-cb31cef73874.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bb3e1744-5186-489a-9b86-cb31cef73874/9ca829f6-f3f0-31c0-8ddd-5f95cea0d04d.roa
Signing time:             Thu 16 Apr 2026 13:00:31 +0000
ROA not before:           Thu 16 Apr 2026 13:00:31 +0000
ROA not after:            Wed 15 Jul 2026 13:00:31 +0000
asID:                     14618
IP address blocks:        2620:20:4000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bb3e1744-5186-489a-9b86-cb31cef73874/bb3e1744-5186-489a-9b86-cb31cef73874.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bb3e1744-5186-489a-9b86-cb31cef73874/bb3e1744-5186-489a-9b86-cb31cef73874.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bb3e1744-5186-489a-9b86-cb31cef73874.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:86:95:52:8f:15:36:9f:e6:e6:3a:22:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bb3e1744-5186-489a-9b86-cb31cef73874
        Validity
            Not Before: Apr 16 13:00:31 2026 GMT
            Not After : Jul 15 13:00:31 2026 GMT
        Subject: CN=a92da179-19ad-4fb0-b9c8-e86043e98eb2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:68:78:20:14:0a:32:26:ba:72:df:45:16:44:
                    7b:e5:ab:0a:f7:d8:d3:a5:7c:87:60:57:db:8d:af:
                    79:fb:ef:c7:fa:e7:1b:4e:f0:e3:79:05:3c:c1:0d:
                    0d:81:e5:3e:cc:cd:3b:59:4e:f9:a2:1c:e9:a2:b1:
                    bb:38:89:5d:95:2d:5f:01:73:ce:48:5c:69:4e:67:
                    0e:bc:47:df:91:45:d5:3d:f4:76:26:bf:95:8d:73:
                    6c:e1:92:35:07:2e:b1:87:2c:d1:84:66:2c:fb:93:
                    ad:3e:14:01:df:56:86:40:87:19:85:64:38:18:c0:
                    9b:1b:6a:f2:fa:2f:5a:32:25:30:24:e6:43:50:21:
                    bc:94:2a:cc:ed:76:af:38:bd:75:cf:c6:ef:93:c5:
                    65:37:bb:56:01:bc:92:a8:59:de:9b:ac:9c:65:58:
                    2d:46:4a:a9:a1:e7:af:85:78:62:0a:cd:c7:3e:3d:
                    d2:7a:9c:c0:f3:e3:28:72:1d:9e:8c:d2:78:62:d0:
                    fc:d5:4e:1d:f5:8b:74:9a:9a:0c:28:a4:9e:8c:6c:
                    5f:5f:ed:c2:0a:0c:cb:bd:0f:14:30:c8:96:6c:8f:
                    97:1d:4f:ba:e5:84:77:0c:e0:7e:66:62:ab:f4:2c:
                    8f:e4:e4:9c:96:44:ca:91:de:e1:55:52:4a:8b:d5:
                    2f:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:A4:E0:50:9F:31:07:09:4C:FA:8F:2D:8C:1F:A4:29:FB:C8:8B:94
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bb3e1744-5186-489a-9b86-cb31cef73874/9ca829f6-f3f0-31c0-8ddd-5f95cea0d04d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bb3e1744-5186-489a-9b86-cb31cef73874/bb3e1744-5186-489a-9b86-cb31cef73874.crl

            X509v3 Authority Key Identifier:
                keyid:6F:2C:C6:AA:C8:5C:8C:82:ED:09:05:C9:E5:AD:0F:99:CE:1E:07:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bb3e1744-5186-489a-9b86-cb31cef73874.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:20:4000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:23:c2:c9:74:46:82:69:d2:72:ab:62:a4:8d:69:0b:5a:bf:
         db:a1:b6:e3:b2:b5:ca:4b:fa:c5:c1:6b:8b:56:e8:d9:1c:fc:
         16:d8:20:55:ed:eb:ae:79:c0:90:ea:86:1f:22:8d:7f:44:4b:
         31:74:31:1a:c5:34:84:85:9f:a1:41:04:62:37:c1:99:06:da:
         f2:5c:2a:5c:bb:87:3d:d2:4a:d1:81:43:9c:01:98:99:b4:8e:
         15:c1:1f:65:d2:70:12:61:4b:60:a6:16:36:ef:8c:8c:d4:0a:
         32:0f:f1:7d:ee:46:3e:66:64:95:f1:f0:dd:da:d7:18:7d:93:
         f2:4d:e8:17:f0:b6:e9:62:a2:23:43:58:c7:da:d9:e2:4e:a3:
         1c:26:ec:e5:98:32:22:17:18:19:e2:69:e5:be:30:fb:4f:0f:
         96:e3:d3:91:34:12:0b:38:cb:be:98:69:43:97:d2:2a:4d:69:
         59:9c:25:a8:0b:a2:01:2a:5c:c6:88:26:2d:cf:02:e7:3b:13:
         a5:bc:44:7e:ef:fc:2c:65:ed:f6:06:f3:88:5d:c4:70:ec:dd:
         71:e2:4d:f0:3d:86:49:59:92:e6:ea:76:22:8e:76:14:37:7b:
         f8:96:2c:14:0b:30:b2:6a:a3:e0:28:9c:a3:8f:a0:d1:53:f1:
         ea:fe:47:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:14:14 2026 by rpki-client