Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/938e1602-8093-4bcd-b527-f5d1756295fc/c431513d-aaef-3485-b46c-d4c9e32372d8.roa
File:                     c431513d-aaef-3485-b46c-d4c9e32372d8.roa (raw, json)
Hash identifier:          Lre6fKJzP2GPyvyVBhx4b5QkKdqWKbZgKjouS0cySHM=
Subject key identifier:   68:2D:74:5A:56:43:05:F6:18:65:58:07:01:2A:96:7E:35:B7:10:6E
Certificate issuer:       /CN=938e1602-8093-4bcd-b527-f5d1756295fc
Certificate serial:       010D0C9F4328584D5E1A6A7B1B6410324F304554
Authority key identifier: FC:CC:00:B4:C6:BD:80:7C:69:57:66:2D:19:A9:EB:C2:37:89:78:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/938e1602-8093-4bcd-b527-f5d1756295fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/938e1602-8093-4bcd-b527-f5d1756295fc/c431513d-aaef-3485-b46c-d4c9e32372d8.roa
Signing time:             Thu 02 Apr 2026 01:00:23 +0000
ROA not before:           Thu 02 Apr 2026 01:00:23 +0000
ROA not after:            Wed 01 Jul 2026 01:00:23 +0000
asID:                     401482
IP address blocks:        2620:cf:a000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/938e1602-8093-4bcd-b527-f5d1756295fc/938e1602-8093-4bcd-b527-f5d1756295fc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/938e1602-8093-4bcd-b527-f5d1756295fc/938e1602-8093-4bcd-b527-f5d1756295fc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/938e1602-8093-4bcd-b527-f5d1756295fc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:5e:1a:6a:7b:1b:64:10:32:4f:30:45:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=938e1602-8093-4bcd-b527-f5d1756295fc
        Validity
            Not Before: Apr  2 01:00:23 2026 GMT
            Not After : Jul  1 01:00:23 2026 GMT
        Subject: CN=e57075e6-9be7-43cc-aca4-5a8e7d49d3f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:42:bd:5f:c5:9d:35:d5:61:e1:ff:c1:e0:5a:
                    90:6f:68:3d:e6:6a:71:33:99:cf:f0:71:bf:d3:ba:
                    86:ec:65:0c:69:1a:e1:bd:cb:7c:06:e6:f4:63:ba:
                    dd:56:4c:c6:2e:87:c6:05:8a:53:dd:0c:63:bf:cf:
                    0a:22:28:f6:eb:7e:db:e5:64:be:13:97:e6:10:83:
                    32:5a:58:d4:13:b0:80:37:dd:b0:77:ff:5b:91:e1:
                    23:2c:3d:e5:39:e2:83:f3:4a:7f:b9:67:2c:45:25:
                    ca:cf:c3:91:10:47:68:9d:77:cc:6a:60:fd:7b:d6:
                    5b:bf:6c:fb:8f:2c:63:04:67:93:77:eb:3b:7c:f8:
                    b3:fe:61:ac:9a:e0:c4:91:34:d0:34:44:c3:93:ff:
                    c5:3d:97:13:77:f9:73:8e:14:5a:6f:f1:14:6b:56:
                    9a:1b:b8:3c:ab:b0:db:03:f6:75:4d:b0:c4:c9:35:
                    09:e9:99:ca:96:ec:19:f9:eb:44:33:b0:a7:6d:7a:
                    37:8e:e7:f3:51:9e:a3:61:c2:7a:5a:74:04:48:fc:
                    90:eb:19:ce:96:48:b0:83:3c:e6:05:17:04:f5:01:
                    b5:5b:33:1b:94:7d:7d:09:06:6b:f2:04:5b:89:28:
                    76:5f:96:96:8c:e6:58:6a:f1:e0:c5:e4:0d:00:de:
                    7b:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:2D:74:5A:56:43:05:F6:18:65:58:07:01:2A:96:7E:35:B7:10:6E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/938e1602-8093-4bcd-b527-f5d1756295fc/c431513d-aaef-3485-b46c-d4c9e32372d8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/938e1602-8093-4bcd-b527-f5d1756295fc/938e1602-8093-4bcd-b527-f5d1756295fc.crl

            X509v3 Authority Key Identifier:
                keyid:FC:CC:00:B4:C6:BD:80:7C:69:57:66:2D:19:A9:EB:C2:37:89:78:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/938e1602-8093-4bcd-b527-f5d1756295fc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:cf:a000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:e7:62:e4:45:73:ad:dc:05:76:ec:1a:b8:7f:a2:cb:7d:1d:
         b8:a8:a4:8a:8d:40:af:60:61:bd:4f:ca:91:82:f2:0a:46:7a:
         f8:0f:a7:4d:ae:64:d8:92:c6:cc:65:a4:8b:ae:54:19:64:4a:
         c3:11:63:99:25:d9:0a:8f:d5:5d:de:5d:51:58:d7:d7:a1:e8:
         0a:e0:1b:f8:c9:ec:c6:7d:79:0a:6c:ac:15:e4:06:40:f0:c6:
         ad:7f:bb:f3:82:38:f9:c9:62:ff:53:dd:3e:0d:2d:e5:ad:19:
         8f:2f:3e:14:61:1d:85:30:ce:00:f3:8f:74:97:48:ce:c6:72:
         8f:24:25:c2:b4:0f:95:39:e5:53:8c:a0:75:87:77:04:ae:03:
         00:de:11:9d:4a:eb:28:51:89:af:e4:41:24:6d:c2:40:6c:1e:
         54:08:a2:35:f4:80:9c:db:5f:4d:46:7d:63:37:5b:93:cc:b6:
         32:c2:17:b6:5f:31:b9:20:5a:ba:ed:77:30:26:44:43:c9:e0:
         84:4a:15:72:a4:e7:7e:00:36:49:bf:19:9a:83:0f:99:cb:36:
         f6:b4:d6:06:fe:ec:33:b7:00:fd:01:10:78:0f:0b:f2:d2:0f:
         91:2f:6a:99:61:98:f7:4a:9a:f2:be:7b:64:f7:c3:20:2c:b9:
         2e:88:9e:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:02:04 2026 by rpki-client