Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6dd4910c-7557-3697-ac4b-5c719657e129.roa
File:                     6dd4910c-7557-3697-ac4b-5c719657e129.roa (raw, json)
Hash identifier:          wi9F5jJYyO+KbJYaBP79Wlh+Ayxw5C+yxqf5TJLbLL0=
Subject key identifier:   14:88:F3:1A:8A:E1:11:F2:00:3D:7A:63:40:E1:9B:93:49:63:7B:41
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584D60E4F70E3DB599F9A5B2CD00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6dd4910c-7557-3697-ac4b-5c719657e129.roa
Signing time:             Fri 03 Apr 2026 01:00:24 +0000
ROA not before:           Fri 03 Apr 2026 01:00:24 +0000
ROA not after:            Thu 02 Jul 2026 01:00:24 +0000
asID:                     12222
IP address blocks:        2001:4878:8027::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:60:e4:f7:0e:3d:b5:99:f9:a5:b2:cd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Apr  3 01:00:24 2026 GMT
            Not After : Jul  2 01:00:24 2026 GMT
        Subject: CN=c9f4b190-f74f-4b14-bd20-b43d94bfd9bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:7c:33:ea:26:d6:7a:23:1f:d2:b2:af:1d:63:
                    d7:61:ea:13:67:fc:0d:c0:f9:fe:e3:94:16:ac:ce:
                    fc:2a:a5:76:8b:22:0a:db:58:8d:a6:26:6c:a2:78:
                    23:c6:49:c5:af:12:cc:b5:76:5b:80:4b:03:58:d0:
                    1c:60:ef:1a:40:e2:b1:e0:1b:10:a0:fb:d2:aa:a2:
                    1d:86:93:ef:7f:35:3d:dc:ee:9a:17:b4:ea:47:2f:
                    3e:42:fb:dc:e8:eb:b1:cd:7a:7f:5c:7c:76:0d:d2:
                    71:8f:de:e6:06:86:7e:77:b5:ec:da:dc:b1:f2:ec:
                    1e:ab:03:36:33:03:5e:75:30:9c:0f:c2:0a:fa:c1:
                    94:3d:8d:36:4d:3c:8f:4a:a4:5e:4f:74:c2:10:d9:
                    36:92:e7:58:d3:4a:c1:4e:ce:6c:d6:45:5f:27:56:
                    6c:91:3f:30:c6:c4:4b:9b:82:8a:f6:8c:fc:7b:65:
                    b6:59:5d:1b:37:31:11:74:dd:28:ce:57:fa:48:16:
                    2f:2e:56:5d:2e:f9:38:0e:90:81:81:e6:38:eb:43:
                    a7:e8:01:16:d9:63:01:0b:10:02:09:c5:f9:56:25:
                    a5:b6:e8:b3:2a:9c:36:ab:04:21:71:56:2e:23:45:
                    16:41:54:88:4b:d6:e8:2c:a7:3a:ce:c8:80:cd:2e:
                    09:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:88:F3:1A:8A:E1:11:F2:00:3D:7A:63:40:E1:9B:93:49:63:7B:41
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6dd4910c-7557-3697-ac4b-5c719657e129.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:4878:8027::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:a0:f7:37:dd:e2:f5:d0:00:ba:b2:c3:2d:30:e8:df:46:56:
         51:09:4d:32:36:17:e7:77:13:db:2f:7c:79:5e:49:31:ac:a6:
         c7:1c:35:4b:5d:92:d7:6b:d1:97:fe:74:aa:f2:f5:5e:b4:b2:
         a2:63:73:ac:f7:85:e6:7c:e9:a1:36:82:1c:62:66:ac:7c:09:
         0c:78:17:53:e3:57:e7:67:af:7e:59:38:a2:59:0e:90:13:12:
         0b:35:c0:38:06:18:09:ab:b0:aa:5d:c0:e4:e6:cb:a4:10:52:
         13:27:d2:ee:c2:53:48:1b:bf:b0:67:a1:a0:66:b1:4c:ed:32:
         ea:e7:bc:05:81:50:ab:e2:91:7e:b4:19:31:de:74:a9:18:f6:
         17:79:74:85:8c:f5:2f:6d:f4:b3:42:6b:4e:77:f0:4b:71:7a:
         40:47:d6:8e:6d:27:f8:f1:89:2d:4b:95:d1:af:c9:3f:f6:96:
         bb:68:5b:c8:f8:34:80:48:22:9d:71:2d:85:92:30:eb:e0:51:
         03:0b:85:b9:74:a3:e2:ed:46:34:8b:a2:af:a2:7b:e4:1b:ac:
         5e:e6:15:e7:7b:13:03:3a:89:3f:91:24:3c:b6:ac:9b:85:ae:
         09:ec:3d:15:df:3d:b0:d8:60:48:d6:fb:d9:14:9b:7d:c6:7e:
         28:b6:f8:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:05:29 2026 by rpki-client