Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/33c1a97c-7649-3d3a-95ee-05dd3546a772.roa
File:                     33c1a97c-7649-3d3a-95ee-05dd3546a772.roa (raw, json)
Hash identifier:          z6WXI0q+pYp/xjWfNp0/U40LNRHVvqHdzrSmuluyw1Y=
Subject key identifier:   85:81:F4:96:A0:7C:60:B8:16:9F:5F:00:1F:E3:DC:6C:63:82:42:39
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584D60E500F378948F138D811D00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/33c1a97c-7649-3d3a-95ee-05dd3546a772.roa
Signing time:             Fri 03 Apr 2026 01:00:24 +0000
ROA not before:           Fri 03 Apr 2026 01:00:24 +0000
ROA not after:            Thu 02 Jul 2026 01:00:24 +0000
asID:                     12222
IP address blocks:        2001:4878:a010::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:60:e5:00:f3:78:94:8f:13:8d:81:1d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Apr  3 01:00:24 2026 GMT
            Not After : Jul  2 01:00:24 2026 GMT
        Subject: CN=fd72f3ad-79c2-483b-85f2-bf61521a0c74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:9b:55:17:b1:b2:9c:28:9d:da:18:c5:e6:1c:
                    0d:5d:88:22:fd:b9:f4:ba:0a:c5:3c:68:c8:69:69:
                    32:b7:9e:49:da:a1:17:fd:26:72:4f:ce:3f:f7:e1:
                    30:95:74:15:97:38:cc:84:96:5a:e4:a9:5e:a0:be:
                    d3:8c:b5:06:1e:d4:86:d7:08:14:26:9b:3d:4b:ca:
                    77:c9:6b:49:19:94:6c:62:37:30:7d:f2:8e:61:46:
                    72:29:b2:1a:0f:f0:01:0b:89:00:44:26:1c:45:1c:
                    a9:52:76:01:2d:cc:a6:0f:be:de:02:fa:8e:eb:ad:
                    f8:29:e5:bd:49:0e:8a:09:f8:d7:91:43:30:9a:77:
                    03:13:ac:29:d0:9a:18:7d:c0:9c:56:38:ef:3f:e6:
                    e6:3d:5f:c7:11:73:b9:18:ec:0c:b7:28:cc:60:5c:
                    75:c0:28:90:ca:d5:ef:ec:c9:b8:b0:b9:27:fb:b8:
                    67:61:c5:ce:f7:1d:82:7a:cd:fc:70:7f:2c:73:31:
                    fc:89:60:b6:a5:ec:a8:17:6c:62:6d:8a:88:99:81:
                    f5:4a:b5:bf:40:b2:63:97:ea:47:a9:96:8d:aa:c2:
                    de:5b:0a:26:2a:16:52:37:c2:b6:dc:d6:29:4f:a1:
                    2c:c5:28:6d:79:d9:e5:10:91:9e:0f:6b:62:01:4b:
                    59:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:81:F4:96:A0:7C:60:B8:16:9F:5F:00:1F:E3:DC:6C:63:82:42:39
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/33c1a97c-7649-3d3a-95ee-05dd3546a772.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:4878:a010::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:5e:ca:59:4b:ff:6e:d2:68:bf:ae:dc:05:d5:4d:17:ce:be:
         b5:29:fe:23:59:e5:91:f9:9f:ec:78:a2:3f:13:24:01:a0:13:
         9e:39:69:53:98:86:94:50:eb:07:83:27:5c:37:47:58:98:84:
         0e:61:4b:16:13:fb:2e:e4:9e:19:2e:16:83:99:e0:bd:e0:c9:
         36:c4:da:b2:c2:05:bd:88:e2:9d:38:15:67:b3:63:76:de:df:
         30:7f:9b:3f:13:7f:44:ac:a6:0a:70:a6:b8:55:f7:53:e4:45:
         f9:6a:c9:62:5e:31:01:00:3f:1a:2e:dd:58:05:9e:c0:9e:24:
         77:bb:a1:f1:ff:e2:c2:35:86:c6:a3:5b:c0:7d:49:c1:48:f1:
         cd:b6:54:87:8f:84:ed:21:ff:7a:36:6e:d9:d5:0c:99:1f:d4:
         db:ac:cb:d0:4c:d0:40:01:5c:d7:ab:72:a1:5e:c5:11:16:cf:
         41:99:c7:88:eb:96:b4:1a:f1:3c:55:6e:ea:04:f6:79:1e:c9:
         28:3b:25:cf:27:0a:27:b3:22:96:9f:37:89:b6:23:b4:6e:d4:
         fb:8c:e4:86:7b:ef:98:23:4d:a9:ad:64:0e:80:69:fd:c2:8c:
         ba:3c:6c:b0:10:7b:96:e6:83:95:d8:d9:1f:ba:03:c3:cd:a3:
         d8:0d:85:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 01:44:23 2026 by rpki-client