Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63/4889b0ec-0588-3cf2-9c0c-988be4398e1b.roa
File:                     4889b0ec-0588-3cf2-9c0c-988be4398e1b.roa (raw, json)
Hash identifier:          dGIKGw2UtEQ/hDn+IVd8772PD/qf8oeRUe9NELnAW2c=
Subject key identifier:   62:31:97:3C:6E:9F:FD:A4:89:6D:41:D5:44:ED:C9:1E:AD:9D:4D:18
Certificate issuer:       /CN=98161ef7-249b-450b-ba6a-5819e613ed63
Certificate serial:       010D0C9F4328584D5E1A71FD6828D861A3B86860
Authority key identifier: D4:19:D4:44:4B:11:89:5C:8C:6D:68:65:FD:EB:4B:4F:F2:AC:1A:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63/4889b0ec-0588-3cf2-9c0c-988be4398e1b.roa
Signing time:             Thu 02 Apr 2026 01:00:23 +0000
ROA not before:           Thu 02 Apr 2026 01:00:23 +0000
ROA not after:            Wed 01 Jul 2026 01:00:23 +0000
asID:                     33020
IP address blocks:        2602:2b7:c30::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63/98161ef7-249b-450b-ba6a-5819e613ed63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63/98161ef7-249b-450b-ba6a-5819e613ed63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:5e:1a:71:fd:68:28:d8:61:a3:b8:68:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98161ef7-249b-450b-ba6a-5819e613ed63
        Validity
            Not Before: Apr  2 01:00:23 2026 GMT
            Not After : Jul  1 01:00:23 2026 GMT
        Subject: CN=4b529788-c34f-4ba6-a5cf-1b0274debd25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:c4:34:c6:0e:3c:97:2c:05:72:62:37:f7:ae:
                    dd:14:82:26:80:1a:57:8e:7b:5f:7d:87:48:8e:14:
                    a8:8c:07:75:ac:e1:d8:0b:14:e7:fa:85:f8:0a:1a:
                    09:d1:0f:12:0a:a7:a2:3d:20:18:b9:8a:d8:28:39:
                    d1:7e:b1:01:fc:9c:ec:e5:4e:93:68:60:d4:9f:62:
                    08:c8:23:b6:d7:52:8c:25:e8:d0:1b:d9:d4:8a:64:
                    6f:1c:07:86:41:6b:f4:ec:17:a4:3c:0c:88:1b:7f:
                    31:d0:65:39:3f:e6:87:36:0e:2c:ba:0f:67:cd:66:
                    31:1f:3f:48:b2:59:48:c3:14:e1:ba:c1:90:ca:47:
                    ca:84:cd:e1:57:10:5f:06:56:41:2d:d7:26:97:9e:
                    72:b9:e8:71:47:05:b1:df:b6:98:64:cd:69:37:84:
                    86:9e:5b:c0:2f:03:b3:36:9b:f4:be:5e:d1:e8:4b:
                    cc:b2:cb:0c:b3:fc:25:78:28:01:c8:a6:54:6c:f6:
                    e1:e6:13:e1:7a:83:b5:27:65:46:ed:32:8c:95:74:
                    72:4c:54:aa:b7:f4:7d:09:6d:b4:ad:d8:82:a7:0b:
                    02:5f:42:81:e3:d2:1b:14:1e:a3:bc:d5:88:89:5a:
                    63:15:ae:2f:5a:84:52:1d:32:25:ed:33:c3:0b:ab:
                    1f:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:31:97:3C:6E:9F:FD:A4:89:6D:41:D5:44:ED:C9:1E:AD:9D:4D:18
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63/4889b0ec-0588-3cf2-9c0c-988be4398e1b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63/98161ef7-249b-450b-ba6a-5819e613ed63.crl

            X509v3 Authority Key Identifier:
                keyid:D4:19:D4:44:4B:11:89:5C:8C:6D:68:65:FD:EB:4B:4F:F2:AC:1A:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:2b7:c30::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:62:8c:b8:89:52:2f:84:db:a3:9e:c3:d1:66:78:5b:5e:50:
         02:2f:bb:bd:68:98:88:6e:96:b1:34:3e:46:58:5a:f9:80:47:
         68:c0:65:70:95:e0:aa:e0:27:81:0a:b6:72:9e:e8:f3:41:5d:
         86:8e:01:44:a0:9a:35:d4:b1:73:6e:54:99:5d:82:16:9b:2a:
         64:7f:a8:d0:43:a8:be:55:8e:ba:75:8f:22:cc:28:50:37:70:
         10:ce:59:9e:22:b7:dc:47:3a:fb:21:bb:47:2c:85:3c:89:5b:
         93:bd:10:57:4d:d7:04:6e:0e:d1:2a:56:1e:21:f8:8a:d4:e5:
         06:c9:fb:55:bf:8f:64:35:1d:eb:09:c0:d7:db:d4:54:7a:e5:
         7c:4f:11:74:95:6d:53:0f:0d:c1:52:1a:c0:28:06:ae:01:c2:
         62:b9:53:4c:06:ab:d9:60:c5:f7:7f:7b:f5:0f:19:62:06:c5:
         85:71:83:89:71:b4:79:02:2a:cc:6e:e6:72:31:0e:6c:88:ea:
         fa:f0:31:d6:84:ea:ae:cb:a3:24:61:1a:67:a1:c2:f8:8e:ac:
         3c:35:b2:2a:70:65:70:91:b3:b0:96:55:0d:8b:74:3e:2d:fc:
         a8:67:b0:7a:c4:15:cf:3e:50:d1:3b:bb:1f:7d:ec:d9:42:64:
         2d:3f:16:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 01:42:49 2026 by rpki-client