Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9d295acd-c538-4740-8f21-9eca736b29d5/d848c8af-0652-3114-8455-08a34c4dfef3.roa
File:                     d848c8af-0652-3114-8455-08a34c4dfef3.roa (raw, json)
Hash identifier:          pp91MvLmTMzo85DpRCejQAU3JuY6UFAx+BdmI9uadik=
Subject key identifier:   C8:C4:EA:84:5D:80:A7:17:28:98:56:47:8E:DE:C7:B8:93:E2:FF:5D
Certificate issuer:       /CN=9d295acd-c538-4740-8f21-9eca736b29d5
Certificate serial:       010D0C9F4328584D7E353937A486EAEE683D8A00
Authority key identifier: 42:03:5D:B9:00:BA:0A:9F:E5:9B:F0:A7:55:C0:87:D8:26:02:C2:D9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9d295acd-c538-4740-8f21-9eca736b29d5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9d295acd-c538-4740-8f21-9eca736b29d5/d848c8af-0652-3114-8455-08a34c4dfef3.roa
Signing time:             Mon 13 Apr 2026 13:00:30 +0000
ROA not before:           Mon 13 Apr 2026 13:00:30 +0000
ROA not after:            Sun 12 Jul 2026 13:00:30 +0000
asID:                     14618
IP address blocks:        2604:1f20::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9d295acd-c538-4740-8f21-9eca736b29d5/9d295acd-c538-4740-8f21-9eca736b29d5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9d295acd-c538-4740-8f21-9eca736b29d5/9d295acd-c538-4740-8f21-9eca736b29d5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9d295acd-c538-4740-8f21-9eca736b29d5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 Apr 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:7e:35:39:37:a4:86:ea:ee:68:3d:8a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9d295acd-c538-4740-8f21-9eca736b29d5
        Validity
            Not Before: Apr 13 13:00:30 2026 GMT
            Not After : Jul 12 13:00:30 2026 GMT
        Subject: CN=ba6bfcb4-4bb9-425a-b80e-3274d2bd8a3e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:ef:82:84:4a:4b:a4:79:8a:48:16:3a:1b:65:
                    83:cc:18:d9:bc:b6:20:0b:23:75:2e:1c:e4:e6:c8:
                    fa:38:73:a6:63:6b:0d:b4:c4:44:8a:66:b4:ad:45:
                    2a:1f:07:09:f8:dd:5c:28:68:61:72:8c:3a:ef:e1:
                    c7:57:4e:26:80:e4:ac:3c:0f:a7:26:7f:6b:8b:36:
                    a4:19:20:88:bb:be:27:c2:45:91:ca:31:d9:21:d5:
                    44:15:04:21:5a:b1:1d:ac:fa:12:d2:3b:ef:8a:1f:
                    a9:77:6d:4a:47:bc:f4:c8:3a:78:43:02:c2:57:bb:
                    9d:5a:ad:30:9e:19:5d:69:c6:d1:06:9b:6b:cd:9e:
                    85:5d:fb:6a:9d:11:24:a9:04:be:3c:eb:94:c1:cf:
                    be:aa:5f:c3:9b:1c:b9:7b:d8:c0:32:fb:a8:23:99:
                    39:90:0b:18:b5:d4:1b:9d:ad:1c:37:2b:bc:24:f7:
                    6d:4f:de:cd:50:35:5a:6a:f1:2a:6f:19:01:15:9d:
                    62:85:38:0f:e9:dc:f8:a7:ad:3e:58:bb:6e:f0:ba:
                    37:be:f2:7f:f8:21:7c:83:06:34:e9:70:7f:0e:1c:
                    ea:89:fd:96:ed:d6:6a:53:a2:79:b3:b8:d6:a3:30:
                    a7:98:7a:4d:01:94:66:5c:f7:7a:7a:93:42:28:e8:
                    b7:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:C4:EA:84:5D:80:A7:17:28:98:56:47:8E:DE:C7:B8:93:E2:FF:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9d295acd-c538-4740-8f21-9eca736b29d5/d848c8af-0652-3114-8455-08a34c4dfef3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9d295acd-c538-4740-8f21-9eca736b29d5/9d295acd-c538-4740-8f21-9eca736b29d5.crl

            X509v3 Authority Key Identifier:
                keyid:42:03:5D:B9:00:BA:0A:9F:E5:9B:F0:A7:55:C0:87:D8:26:02:C2:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9d295acd-c538-4740-8f21-9eca736b29d5.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:1f20::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:12:08:41:8e:d7:96:41:f1:b8:8f:ca:0b:c5:ae:b3:1d:f3:
         0a:ef:f4:85:ca:ca:1b:aa:79:5c:1c:9e:70:26:fa:75:d6:bb:
         fd:9e:a5:90:46:f8:a6:a4:b1:9b:9c:82:71:45:af:4b:51:da:
         90:90:9e:05:49:03:e6:e9:6c:3a:b9:92:58:1b:bf:f0:84:7f:
         f5:8d:3e:27:1f:1d:c4:de:30:4d:7a:57:76:10:a1:04:1f:94:
         93:13:85:d2:6a:9f:d8:58:d3:29:06:71:2b:f7:f2:e1:4e:78:
         7f:a3:00:ed:77:5a:f7:40:65:d9:73:b6:fd:49:e1:52:6c:fb:
         9f:e7:df:3e:cd:30:76:4b:36:8f:3b:c5:6a:a0:8b:74:dd:43:
         42:25:21:df:32:3e:85:4a:dc:ba:a2:b8:a1:ea:c8:2a:77:d7:
         cf:a9:0e:ea:ae:2a:72:04:e0:04:e5:e7:14:a2:bd:d1:7b:c0:
         31:5b:bf:12:7e:6a:50:51:b6:49:5d:c3:0c:18:f8:af:f7:74:
         e2:42:0d:71:55:bd:93:a0:b6:32:bb:72:3c:66:23:c1:bf:56:
         07:ed:e0:06:cd:15:d3:24:b8:db:42:55:42:8e:70:db:65:56:
         30:29:30:f1:86:10:3e:84:e7:ab:11:2c:3d:ca:3a:e6:0d:7c:
         82:35:ed:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 09:31:43 2026 by rpki-client