Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9dbf6569-646e-3a5b-a03f-587d02c03140.roa
File:                     9dbf6569-646e-3a5b-a03f-587d02c03140.roa (raw, json)
Hash identifier:          Zj+Dst3onATiIaZLY2f+MrDMVjCfj078w4CRKF2GFck=
Subject key identifier:   31:D6:40:A9:8A:4B:8C:71:58:B6:6B:BA:02:CC:13:8C:63:2D:07:DE
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584D60E4F8D36E77C7B64664E300
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9dbf6569-646e-3a5b-a03f-587d02c03140.roa
Signing time:             Fri 03 Apr 2026 01:00:24 +0000
ROA not before:           Fri 03 Apr 2026 01:00:24 +0000
ROA not after:            Thu 02 Jul 2026 01:00:24 +0000
asID:                     12222
IP address blocks:        2001:4878:8141::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:60:e4:f8:d3:6e:77:c7:b6:46:64:e3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Apr  3 01:00:24 2026 GMT
            Not After : Jul  2 01:00:24 2026 GMT
        Subject: CN=9ac3c3bb-86f5-48d6-8e1a-79608c00f5ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:5c:90:c6:d7:1f:e0:06:d9:35:27:e2:b6:4b:
                    fc:d9:43:f9:17:ac:cc:1d:1a:32:79:4b:b9:e2:d1:
                    0a:48:ca:e6:cc:69:d6:a5:b1:aa:38:4a:6a:0d:f5:
                    39:57:de:02:a9:1b:67:75:3f:ae:31:a8:7c:c8:fa:
                    1c:6d:48:ba:fe:d6:7e:45:4c:8b:bc:f1:e9:2f:e6:
                    23:cd:0a:04:08:4b:b5:df:28:57:5d:3e:5b:dc:c4:
                    aa:ac:1b:5b:e6:56:4c:d8:56:33:db:e2:99:b9:f2:
                    ec:eb:22:6f:a6:74:ea:91:33:69:dd:9d:7e:b1:2e:
                    fe:7a:f9:60:60:4c:f5:6a:3f:62:dd:34:66:9f:f9:
                    7d:55:86:a2:7d:9f:6d:f5:df:8e:9b:e2:93:d2:6f:
                    80:c1:f9:31:40:12:f3:be:6d:df:b4:cd:19:91:78:
                    bd:d7:43:a3:19:2c:58:fd:96:3a:2e:27:7d:3d:fa:
                    36:2f:23:c4:df:7c:5a:5f:04:1c:ba:74:b4:6e:d5:
                    5d:d8:ea:45:c5:ad:52:00:bc:10:45:36:f3:0a:75:
                    d9:09:54:7e:b2:2d:c9:81:bf:84:9e:9c:39:41:dd:
                    14:64:52:d3:cb:74:ab:81:1e:70:f3:e1:42:5f:a6:
                    1d:17:66:ca:df:5e:3e:ed:50:48:e0:4a:47:f1:6b:
                    5a:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:D6:40:A9:8A:4B:8C:71:58:B6:6B:BA:02:CC:13:8C:63:2D:07:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9dbf6569-646e-3a5b-a03f-587d02c03140.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:4878:8141::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:04:24:0d:3d:bf:37:9f:8d:5a:85:32:1d:e7:62:88:c4:a8:
         46:71:56:ff:34:5d:fe:b4:d6:f6:3b:62:fb:4c:c7:b9:24:e4:
         22:c9:77:bf:14:f8:80:68:e9:dd:b6:94:a5:43:28:b6:a1:6b:
         6b:27:83:ca:29:6f:62:3e:a9:d5:24:86:64:a2:68:e0:16:ca:
         a2:6d:56:45:a2:c1:1d:16:d0:e3:c6:07:ac:8f:54:db:ee:93:
         e1:67:31:52:4a:9e:30:38:5a:3b:97:43:57:e7:72:23:9d:5f:
         5e:fb:cf:9a:25:6f:a4:6b:36:fa:29:d5:02:56:f2:68:17:3a:
         a5:5c:18:bc:20:d8:d4:d3:d8:1f:8f:b8:55:b6:e8:11:d2:7b:
         f7:78:ce:6e:6f:77:14:ae:18:c0:c9:a0:ec:8f:27:bb:ad:f6:
         ba:2e:b2:a3:34:d3:fb:de:98:d0:59:ef:b3:ac:04:52:a4:b9:
         b9:65:30:17:76:73:dd:2b:9f:77:c8:5a:89:90:b9:2a:aa:75:
         26:44:c1:2a:14:47:e6:0a:43:3c:9c:7b:1e:ec:56:40:f5:f3:
         0e:b5:0a:0b:d1:c5:90:78:36:78:14:63:fe:1a:8a:9a:ee:eb:
         89:44:2d:2d:18:e2:cc:7a:9a:72:d0:7b:e9:8f:81:0a:c9:dd:
         7d:eb:ee:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:05:09 2026 by rpki-client