Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/28aca362-cf30-38e9-b4d0-5e8338db26da.roa
File:                     28aca362-cf30-38e9-b4d0-5e8338db26da.roa (raw, json)
Hash identifier:          c0OF1/avM2HTMVQZi9izL32S418fMjttOMMAtb9AwsM=
Subject key identifier:   03:5B:48:C1:88:23:67:AA:B8:3E:CE:45:4F:40:E4:10:25:C9:F5:FF
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584D65151D79157B70192A1E8860
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/28aca362-cf30-38e9-b4d0-5e8338db26da.roa
Signing time:             Sat 04 Apr 2026 13:00:29 +0000
ROA not before:           Sat 04 Apr 2026 13:00:29 +0000
ROA not after:            Fri 03 Jul 2026 13:00:29 +0000
asID:                     12222
IP address blocks:        2001:4878:c228::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:65:15:1d:79:15:7b:70:19:2a:1e:88:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Apr  4 13:00:29 2026 GMT
            Not After : Jul  3 13:00:29 2026 GMT
        Subject: CN=a988fc56-7d09-4495-a4f6-44c4dd0d8f8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:1f:24:cb:ce:7d:ab:25:95:22:2d:78:7a:8b:
                    8f:2e:1b:9b:82:0c:d9:78:70:43:45:36:b9:5c:a8:
                    bb:60:5e:f6:66:1d:fe:a6:22:e1:d8:06:4f:d4:1d:
                    7f:ea:7c:7f:a2:1c:05:66:4e:55:58:23:6c:2e:10:
                    97:00:31:9d:31:52:90:c2:28:d6:68:c8:49:4a:c7:
                    d1:67:01:2f:5d:24:34:b6:9f:f7:d8:88:1f:0d:52:
                    f2:0b:22:3d:b5:bf:d0:53:cd:f4:34:6e:c2:62:1f:
                    a5:98:84:5f:e8:cd:f7:a8:d0:8e:64:b9:8e:3d:01:
                    6c:65:c5:df:84:fe:6c:50:04:1a:1c:24:24:90:93:
                    98:56:73:58:7c:f4:b1:85:e1:f6:db:c9:35:86:e2:
                    22:eb:69:e3:60:9d:ee:13:64:f3:9e:87:fb:3d:3d:
                    da:49:89:7e:78:cc:c2:65:ef:06:d6:fd:c2:34:ec:
                    00:a2:a8:2c:d5:b2:f0:8a:b3:9c:48:65:d1:54:1e:
                    03:10:ed:6d:d6:24:eb:e2:2a:0e:18:e5:4c:33:88:
                    b2:72:a9:d1:2f:3d:cd:b7:33:95:96:49:91:11:17:
                    9a:56:bb:41:d4:df:f6:46:dc:fd:4d:6b:99:4b:69:
                    e8:3e:90:71:fd:f5:89:9b:94:51:81:34:28:8a:86:
                    14:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:5B:48:C1:88:23:67:AA:B8:3E:CE:45:4F:40:E4:10:25:C9:F5:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/28aca362-cf30-38e9-b4d0-5e8338db26da.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:4878:c228::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:ea:0d:b6:64:74:f8:45:2d:2b:33:d0:d2:a3:36:c2:e6:a5:
         a8:85:91:33:08:e1:94:86:e0:50:9c:8c:40:0a:05:88:28:a4:
         8d:1d:c3:0e:6c:66:88:f4:d7:c1:94:d4:60:a9:b8:3e:3b:7b:
         3f:8c:39:4a:ab:97:d2:da:8b:e0:f2:a7:37:78:ae:a1:ec:38:
         41:af:6b:f0:e1:44:c7:1d:c8:d9:10:33:3f:b0:7c:6a:1b:95:
         ed:95:3e:53:41:c9:6e:d2:4a:e2:e5:5e:af:87:ef:06:97:45:
         d8:93:11:e7:dd:1b:1c:42:9e:75:52:78:7e:6d:f1:7e:23:c1:
         e6:a4:56:22:63:69:d7:ff:b3:c3:18:54:84:82:1f:e8:54:34:
         46:0c:40:52:ec:d5:df:8f:dc:41:39:10:38:eb:12:f4:e9:e0:
         92:92:01:4c:24:fe:8d:4e:b8:77:7f:23:44:9a:3a:c6:d0:88:
         fe:cd:b4:e5:7a:35:c5:f9:fe:32:1c:ea:55:31:e8:3c:6a:45:
         01:1e:e6:88:c5:9b:8c:83:1a:4f:a7:9c:50:38:f3:ee:6b:0a:
         58:73:5c:08:e4:97:49:6b:dd:db:e9:49:24:35:da:d5:f2:2e:
         e0:8d:53:df:ae:9b:1a:5b:a1:74:d4:aa:51:9f:c3:2b:25:de:
         4b:62:1c:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:49:39 2026 by rpki-client