Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0/508c355b-ad34-3de1-9823-5e99282d5584.roa
File:                     508c355b-ad34-3de1-9823-5e99282d5584.roa (raw, json)
Hash identifier:          W94oDz3337RcxaqU7i1WP2ezIpSSw7K51l9rD/pmeiU=
Subject key identifier:   51:43:9F:1B:CF:97:02:29:19:67:71:84:DA:1B:46:86:2F:0E:85:51
Certificate issuer:       /CN=32ba7ff4-2407-4ee2-af24-bd0641e558d0
Certificate serial:       010D0C9F4328584D6AAAAC9B00DD6ABCB0192840
Authority key identifier: 46:BC:5C:51:EA:D7:0A:C3:F1:DA:D7:79:FD:D7:D6:D2:BA:B3:2F:0B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0/508c355b-ad34-3de1-9823-5e99282d5584.roa
Signing time:             Mon 06 Apr 2026 13:00:30 +0000
ROA not before:           Mon 06 Apr 2026 13:00:30 +0000
ROA not after:            Sun 05 Jul 2026 13:00:30 +0000
asID:                     32806
IP address blocks:        2604:9900:6::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0/32ba7ff4-2407-4ee2-af24-bd0641e558d0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0/32ba7ff4-2407-4ee2-af24-bd0641e558d0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:6a:aa:ac:9b:00:dd:6a:bc:b0:19:28:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32ba7ff4-2407-4ee2-af24-bd0641e558d0
        Validity
            Not Before: Apr  6 13:00:30 2026 GMT
            Not After : Jul  5 13:00:30 2026 GMT
        Subject: CN=40793e4d-7c52-4cc8-88d0-b87d490be4d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:ae:c9:13:0b:52:09:af:32:3d:b2:20:78:34:
                    12:97:23:d2:79:3f:f3:71:b2:d0:d2:e7:cc:16:cc:
                    d8:b6:1e:1f:1a:38:b1:09:5d:68:2a:6f:4d:18:75:
                    de:b2:38:70:88:e7:4d:51:04:23:84:3c:b0:a8:6e:
                    d6:8e:b8:c8:a5:bd:56:b4:80:e4:6f:42:d2:14:b1:
                    c5:f8:40:23:e0:49:9c:31:41:53:bd:ff:d8:ed:be:
                    a7:ec:66:04:f7:0d:d8:7e:04:09:38:b9:9d:50:c9:
                    bf:e6:61:d4:b8:3e:98:4c:5a:f4:9a:af:be:7a:36:
                    84:60:f2:26:5a:e5:02:36:6d:14:ab:4d:2c:26:e9:
                    32:68:50:3b:cc:a2:bb:48:c8:6e:0d:0b:8f:72:cd:
                    0d:b5:c6:8c:e9:dd:52:2d:7d:cc:c7:fb:d8:11:d8:
                    ef:eb:06:0a:24:d4:06:ad:36:4c:01:0c:49:b6:cd:
                    a4:7c:da:0b:04:e1:c5:2c:ee:c0:46:12:25:79:31:
                    89:32:c8:52:79:14:b1:24:da:81:b1:88:bc:f5:43:
                    3f:1f:3e:60:a9:2a:25:0d:27:35:04:ac:29:66:e4:
                    4f:b1:e6:2d:6f:e4:ce:63:61:83:c3:50:ab:c8:c7:
                    ef:46:5e:08:e0:6d:e6:d9:99:0d:41:f6:cb:d7:f3:
                    b5:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:43:9F:1B:CF:97:02:29:19:67:71:84:DA:1B:46:86:2F:0E:85:51
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0/508c355b-ad34-3de1-9823-5e99282d5584.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0/32ba7ff4-2407-4ee2-af24-bd0641e558d0.crl

            X509v3 Authority Key Identifier:
                keyid:46:BC:5C:51:EA:D7:0A:C3:F1:DA:D7:79:FD:D7:D6:D2:BA:B3:2F:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:9900:6::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:35:dc:2d:34:0e:3b:9e:25:cb:25:9e:c5:3c:63:21:71:60:
         a4:4c:b8:0d:13:d1:49:3c:d4:9b:d6:94:7a:2b:8c:07:52:2b:
         cf:89:07:2a:fd:9e:c5:a6:5f:f2:51:f8:89:32:df:8c:f7:02:
         a8:55:3f:45:0d:ba:fb:0e:ad:b1:95:1a:32:3a:9f:c2:99:06:
         93:57:96:ed:68:7b:a3:8d:60:58:af:3e:48:82:a4:be:c3:68:
         3c:f9:98:0a:d3:0d:8c:4f:50:c8:a0:79:6b:97:cb:ba:88:26:
         2c:f0:91:59:8b:31:6f:7e:f3:56:60:2f:24:63:8a:3d:9e:45:
         7b:00:eb:d5:0c:f9:6c:4d:06:de:90:20:62:47:df:1e:df:59:
         c3:49:db:89:ea:1c:3b:09:ae:87:5e:c4:1b:0e:23:8e:00:8e:
         79:6d:b3:37:08:90:94:8d:17:91:a6:ce:37:47:a4:3a:0a:b2:
         b7:b3:e6:64:bf:67:5b:82:dc:4a:52:8d:45:bb:cc:a2:68:d5:
         b6:0a:d6:0f:a5:d8:9d:37:51:fa:cd:2d:cc:3e:af:9e:4b:e9:
         eb:67:91:21:76:28:61:88:2d:2c:69:59:b6:f2:f5:50:83:07:
         3b:4c:8e:3c:fa:b3:16:93:7c:e4:fa:92:a9:59:bc:59:ac:f5:
         66:f8:42:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 00:05:01 2026 by rpki-client