Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/082ca3a2-9e2b-49da-aaee-2b02d0898f81/9595f41e-46d7-3def-bdb5-88d8928a7905.roa
File:                     9595f41e-46d7-3def-bdb5-88d8928a7905.roa (raw, json)
Hash identifier:          G7vCDB+maK/nYNIyPfokt4hMoEfXTTTYPJBeebCznAM=
Subject key identifier:   2F:5E:98:95:DE:36:84:EB:5C:6E:2A:18:FC:6C:9B:48:E9:CC:93:69
Certificate issuer:       /CN=082ca3a2-9e2b-49da-aaee-2b02d0898f81
Certificate serial:       010D0C9F4328584D63AF9E083E97300E3CD94400
Authority key identifier: 85:B8:6E:76:79:36:38:96:03:F5:DA:8D:DE:1B:AE:D9:B4:1F:4C:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/082ca3a2-9e2b-49da-aaee-2b02d0898f81.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/082ca3a2-9e2b-49da-aaee-2b02d0898f81/9595f41e-46d7-3def-bdb5-88d8928a7905.roa
Signing time:             Sat 04 Apr 2026 01:00:25 +0000
ROA not before:           Sat 04 Apr 2026 01:00:25 +0000
ROA not after:            Fri 03 Jul 2026 01:00:25 +0000
asID:                     26383
IP address blocks:        2605:e440:a::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/082ca3a2-9e2b-49da-aaee-2b02d0898f81/082ca3a2-9e2b-49da-aaee-2b02d0898f81.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/082ca3a2-9e2b-49da-aaee-2b02d0898f81/082ca3a2-9e2b-49da-aaee-2b02d0898f81.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/082ca3a2-9e2b-49da-aaee-2b02d0898f81.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:63:af:9e:08:3e:97:30:0e:3c:d9:44:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=082ca3a2-9e2b-49da-aaee-2b02d0898f81
        Validity
            Not Before: Apr  4 01:00:25 2026 GMT
            Not After : Jul  3 01:00:25 2026 GMT
        Subject: CN=79ca1861-631b-4419-99d8-437bfb8b1c3a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:db:c8:1c:5a:ca:a8:82:ba:6f:5b:84:33:62:
                    ec:30:91:0e:71:a6:d7:4d:b2:e3:50:de:5b:eb:ca:
                    c9:a3:96:ac:46:03:95:ee:b0:9e:1c:fc:31:a5:8f:
                    17:21:f0:be:07:bf:16:a7:e7:9d:a2:66:e0:a6:46:
                    dd:e2:7f:de:dd:ff:a2:52:dd:8e:07:1f:64:da:c4:
                    54:b4:29:1b:b3:ed:1a:9b:2f:e2:09:ad:da:80:98:
                    ae:e0:3f:4a:00:96:d5:e5:60:07:d1:85:8d:d0:91:
                    97:b6:12:c7:ca:bf:27:7b:7b:c9:fc:fc:c8:36:97:
                    3a:0e:c6:56:d7:8c:59:04:8e:f0:3d:83:14:31:35:
                    42:35:f4:6a:78:9e:f2:03:4e:f1:45:de:b7:77:ea:
                    e6:dc:2a:d1:51:33:8a:63:b0:cf:bd:12:89:25:2c:
                    ae:0a:7d:8c:0f:90:b6:9c:09:4b:fc:0a:09:21:a4:
                    33:21:f3:d6:64:24:e6:fa:fb:eb:e6:fd:62:43:30:
                    9c:ba:32:55:2d:6c:e8:0e:85:69:89:68:b6:ee:cd:
                    50:a6:51:ec:19:88:92:64:8a:6f:b3:78:28:17:f3:
                    fc:8b:ae:76:4e:2a:11:cb:cf:3c:fa:42:6e:e3:0b:
                    1e:06:49:33:18:32:db:14:3a:1f:2c:10:78:ad:a6:
                    47:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:5E:98:95:DE:36:84:EB:5C:6E:2A:18:FC:6C:9B:48:E9:CC:93:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/082ca3a2-9e2b-49da-aaee-2b02d0898f81/9595f41e-46d7-3def-bdb5-88d8928a7905.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/082ca3a2-9e2b-49da-aaee-2b02d0898f81/082ca3a2-9e2b-49da-aaee-2b02d0898f81.crl

            X509v3 Authority Key Identifier:
                keyid:85:B8:6E:76:79:36:38:96:03:F5:DA:8D:DE:1B:AE:D9:B4:1F:4C:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/082ca3a2-9e2b-49da-aaee-2b02d0898f81.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:e440:a::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:73:78:ff:08:f6:66:84:8a:40:e0:8f:ac:d3:79:66:3a:2a:
         6f:35:c0:65:39:38:d6:a4:54:10:1e:cb:11:d1:48:39:b1:ec:
         d5:30:a8:9c:e3:b9:fa:18:8a:7f:21:7f:91:4e:9a:3a:74:00:
         85:3d:33:22:8d:c4:fb:ec:28:82:b1:a8:50:71:b1:78:70:33:
         5e:48:30:08:b5:07:51:12:3a:d6:4e:9c:af:c2:c8:c2:d2:25:
         d4:7e:76:64:b3:04:2d:3f:3e:73:50:9c:96:a1:bf:f3:59:61:
         80:c5:e3:fd:5c:b1:ed:cb:99:d2:c6:90:18:72:95:9e:51:11:
         1a:93:5d:6a:d2:c1:32:ad:e2:8c:ea:6e:d2:53:ed:ee:3c:ed:
         c6:e8:45:40:11:8f:02:fd:56:9e:da:44:02:59:fe:4c:df:e9:
         fa:15:a2:3c:8e:44:8c:fb:8b:8d:b7:90:a2:c1:27:d9:59:ea:
         25:fb:5c:97:8d:5b:a7:d8:0f:6f:f9:6f:b4:85:ec:3f:73:5b:
         d3:e4:01:50:68:e8:07:dc:e9:45:f5:15:2a:22:b2:56:46:5a:
         ec:34:aa:2b:1d:49:c1:27:19:42:d9:91:fd:48:d6:f8:41:65:
         bc:7f:9f:d2:01:59:7f:1d:e5:99:10:bb:8e:b2:35:3e:77:74:
         eb:21:fb:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:56:24 2026 by rpki-client