Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91a20fbd-d241-4454-b2ba-4938f807efb0/d790adaf-0b21-3aac-8bc7-7b4fda20c332.roa
File:                     d790adaf-0b21-3aac-8bc7-7b4fda20c332.roa (raw, json)
Hash identifier:          ++w5tDZpAW8SIrsJBgqTLckAxOg25k4Na64G/LyAYHc=
Subject key identifier:   47:47:60:9D:9A:2C:20:65:CC:67:1E:30:8A:6E:B7:87:67:FF:0C:40
Certificate issuer:       /CN=91a20fbd-d241-4454-b2ba-4938f807efb0
Certificate serial:       010D0C9F4328584D71A52890D696B1D03FAC8DC0
Authority key identifier: B6:7E:EC:DB:29:C2:DE:FE:5D:4A:00:37:44:EC:49:90:D1:55:56:CE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91a20fbd-d241-4454-b2ba-4938f807efb0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91a20fbd-d241-4454-b2ba-4938f807efb0/d790adaf-0b21-3aac-8bc7-7b4fda20c332.roa
Signing time:             Thu 09 Apr 2026 01:00:23 +0000
ROA not before:           Thu 09 Apr 2026 01:00:23 +0000
ROA not after:            Wed 08 Jul 2026 01:00:23 +0000
asID:                     32135
IP address blocks:        2602:2a4:8b::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91a20fbd-d241-4454-b2ba-4938f807efb0/91a20fbd-d241-4454-b2ba-4938f807efb0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91a20fbd-d241-4454-b2ba-4938f807efb0/91a20fbd-d241-4454-b2ba-4938f807efb0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91a20fbd-d241-4454-b2ba-4938f807efb0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:71:a5:28:90:d6:96:b1:d0:3f:ac:8d:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91a20fbd-d241-4454-b2ba-4938f807efb0
        Validity
            Not Before: Apr  9 01:00:23 2026 GMT
            Not After : Jul  8 01:00:23 2026 GMT
        Subject: CN=10877a4e-5007-415b-9a6f-c97375ad3614
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:a8:29:87:44:f4:ca:b0:24:98:a2:b5:3b:d2:
                    89:1c:aa:a4:82:f7:59:55:a9:39:29:8b:dc:5b:18:
                    10:2a:08:93:d6:3f:75:a6:4e:cd:1f:00:97:d2:ab:
                    3f:75:f2:0f:65:b1:aa:7f:99:53:64:78:80:6f:7f:
                    f0:3f:d8:75:78:eb:66:68:bc:59:71:68:e8:f0:f8:
                    6d:fa:f8:bc:55:90:3c:81:f1:50:74:5e:b0:32:7f:
                    97:84:80:61:0c:7b:9c:cb:33:16:3e:fc:1a:49:55:
                    0d:e8:75:91:7b:8a:9b:f5:16:19:6d:5e:20:44:a0:
                    37:be:82:52:0c:d2:17:22:bb:43:42:84:15:97:05:
                    5c:cb:1a:f7:e9:d2:b7:1c:7f:ae:ff:75:88:f4:ba:
                    4f:42:f6:74:68:1b:2b:b3:33:68:b5:a5:ea:33:0c:
                    64:48:a4:41:39:05:de:65:34:b6:b8:49:aa:e5:90:
                    11:4d:51:2d:63:4d:3b:93:79:e5:8b:10:ac:04:bf:
                    40:75:03:65:6a:f0:ca:59:60:b1:ab:49:90:f1:d3:
                    83:41:43:b2:0e:6b:53:55:2f:13:3f:aa:1e:e3:0e:
                    82:9e:83:ec:bd:d8:d5:73:7b:40:e2:6b:ec:8b:a6:
                    21:fe:3e:78:9c:7d:cc:8a:01:ec:2f:68:12:1d:c2:
                    b3:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:47:60:9D:9A:2C:20:65:CC:67:1E:30:8A:6E:B7:87:67:FF:0C:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91a20fbd-d241-4454-b2ba-4938f807efb0/d790adaf-0b21-3aac-8bc7-7b4fda20c332.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91a20fbd-d241-4454-b2ba-4938f807efb0/91a20fbd-d241-4454-b2ba-4938f807efb0.crl

            X509v3 Authority Key Identifier:
                keyid:B6:7E:EC:DB:29:C2:DE:FE:5D:4A:00:37:44:EC:49:90:D1:55:56:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91a20fbd-d241-4454-b2ba-4938f807efb0.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:2a4:8b::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:fb:2c:39:13:29:82:69:19:2a:4c:c8:a2:14:71:40:38:21:
         17:de:ba:86:37:16:fd:3b:5e:2f:d7:b9:84:99:90:90:3f:34:
         a6:3e:f6:2e:c6:4a:36:44:8d:a7:7a:fb:28:e7:ad:bf:c2:1b:
         55:aa:f7:47:1d:b4:de:75:41:f7:39:0a:bf:ed:fb:ed:d9:db:
         a9:cd:5f:f3:4b:1f:ff:b2:7b:65:37:fd:5a:25:68:cb:f3:e8:
         81:d1:9b:f3:39:ac:ac:80:e3:6d:fd:04:be:d7:96:12:63:ab:
         65:64:0c:07:a0:4b:da:ae:57:c6:83:57:3d:74:dc:af:55:68:
         e3:8a:13:fd:97:f2:9a:0a:ce:0c:91:76:6d:1a:41:41:e2:6a:
         cf:95:26:da:89:d4:fd:18:a3:54:01:a4:b4:77:f0:fc:99:93:
         5c:0b:d3:32:3a:ff:d4:7e:8b:98:36:d7:ca:a0:77:4c:fc:81:
         28:ca:bc:42:4f:d4:ea:f0:47:66:54:93:06:15:94:c7:43:a0:
         1d:c0:a5:63:08:4b:12:83:10:3e:df:f5:cf:25:11:1d:76:99:
         0a:ca:5b:db:e3:94:ff:9a:dc:26:11:b5:94:3e:55:67:bb:04:
         03:41:62:d0:09:94:0d:0f:df:ab:e4:cc:8c:e9:12:a6:73:5d:
         d5:47:25:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:03:28 2026 by rpki-client