Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8e2da239-793e-4082-afde-6458f2319e7e/8dc688c8-d263-3e7b-be29-d4ff4f73d1b2.roa
File:                     8dc688c8-d263-3e7b-be29-d4ff4f73d1b2.roa (raw, json)
Hash identifier:          VhmABOP2/nG/ybr+fTQmbfnDUILhHKLj7TneH1hUHaU=
Subject key identifier:   0A:79:8C:8B:0F:9A:B8:DC:B0:DA:CE:8C:9D:81:03:27:59:8B:84:AC
Certificate issuer:       /CN=8e2da239-793e-4082-afde-6458f2319e7e
Certificate serial:       010D0C9F4328584CE1FCBBA578FE7CF313A32D00
Authority key identifier: B6:1E:B0:C8:29:6F:59:D0:64:2B:44:2F:41:AC:38:58:E0:07:01:E8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8e2da239-793e-4082-afde-6458f2319e7e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8e2da239-793e-4082-afde-6458f2319e7e/8dc688c8-d263-3e7b-be29-d4ff4f73d1b2.roa
Signing time:             Mon 16 Feb 2026 14:00:40 +0000
ROA not before:           Mon 16 Feb 2026 14:00:40 +0000
ROA not after:            Sun 17 May 2026 13:00:40 +0000
asID:                     3755
IP address blocks:        2620:f:2::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8e2da239-793e-4082-afde-6458f2319e7e/8e2da239-793e-4082-afde-6458f2319e7e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8e2da239-793e-4082-afde-6458f2319e7e/8e2da239-793e-4082-afde-6458f2319e7e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8e2da239-793e-4082-afde-6458f2319e7e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:e1:fc:bb:a5:78:fe:7c:f3:13:a3:2d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e2da239-793e-4082-afde-6458f2319e7e
        Validity
            Not Before: Feb 16 14:00:40 2026 GMT
            Not After : May 17 13:00:40 2026 GMT
        Subject: CN=8b177bd9-f00f-445d-9253-0445330a31a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:70:4c:56:a1:c9:ec:8d:86:bb:1a:ee:9e:c4:
                    16:f1:aa:ed:72:f6:a2:c1:3c:44:28:60:f8:91:93:
                    83:cd:ab:67:9c:56:9c:ce:35:a5:cd:77:47:99:e8:
                    a4:ac:27:5e:7c:f4:11:f6:47:8c:bc:f2:37:6d:54:
                    21:bd:05:3c:c5:31:6c:3a:6d:a3:30:78:b6:74:0b:
                    66:14:11:1e:17:42:e8:33:c2:7f:b5:59:cc:37:7b:
                    6b:95:2e:32:8a:40:cb:cc:c8:1f:eb:e9:ae:07:7e:
                    e4:df:fc:0e:9d:aa:e5:fb:0a:f9:3f:d9:21:22:64:
                    90:da:dc:ed:08:ba:12:f7:7d:55:00:7c:d8:df:4c:
                    eb:aa:3a:8c:53:ce:00:17:29:73:69:f1:4f:11:4c:
                    bb:e3:87:2b:0b:e1:b2:e2:db:1c:c6:7f:c3:e6:32:
                    26:cd:ff:41:83:31:d4:15:88:67:55:13:b0:91:f8:
                    10:48:37:4e:af:52:d5:68:86:e7:0f:61:1d:1d:e5:
                    7f:2d:40:d4:08:c6:f8:a7:25:c8:7e:8a:a4:06:f7:
                    88:80:d9:f0:52:5a:d0:ba:60:09:1a:96:6c:5b:fa:
                    56:7d:fe:25:1b:71:6f:e2:f3:d4:7d:95:a0:dd:1c:
                    62:5c:42:43:39:47:4a:d9:6f:71:54:b5:0a:88:e8:
                    f4:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:79:8C:8B:0F:9A:B8:DC:B0:DA:CE:8C:9D:81:03:27:59:8B:84:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8e2da239-793e-4082-afde-6458f2319e7e/8dc688c8-d263-3e7b-be29-d4ff4f73d1b2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8e2da239-793e-4082-afde-6458f2319e7e/8e2da239-793e-4082-afde-6458f2319e7e.crl

            X509v3 Authority Key Identifier:
                keyid:B6:1E:B0:C8:29:6F:59:D0:64:2B:44:2F:41:AC:38:58:E0:07:01:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8e2da239-793e-4082-afde-6458f2319e7e.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:f:2::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:0a:b3:23:e4:ca:98:09:68:c4:ae:3e:a6:e8:34:c9:8d:74:
         69:fb:48:18:a0:73:5e:12:da:54:5b:21:51:aa:07:b1:44:2f:
         01:03:83:27:4a:99:22:d0:10:d5:24:f4:47:5b:a1:bb:32:b0:
         10:7c:8d:c5:f3:3f:fa:fd:7d:56:32:62:d0:eb:a8:dd:18:8d:
         48:b5:fd:48:4c:25:b1:2d:db:4e:af:24:4e:42:51:85:8d:fd:
         62:fb:f8:35:7b:e1:25:ba:b7:d3:dd:0f:08:56:ff:99:bc:e6:
         b3:b4:2b:87:a0:de:99:30:fe:dc:24:21:9b:1e:62:9f:00:5b:
         e1:11:95:84:ad:bf:dd:03:8d:af:ab:a8:08:1c:60:17:58:b3:
         c0:e3:24:d6:cd:f5:76:c7:43:db:f1:29:f1:a3:00:ab:f7:72:
         42:61:c5:55:28:25:80:07:b5:b9:cb:66:11:27:e1:61:c7:b0:
         db:61:52:33:a4:4f:1e:92:62:91:39:a7:b8:ff:cf:40:bd:75:
         c0:e1:3c:b6:4b:8f:5b:21:ff:d5:f7:b1:51:d9:29:3e:9e:71:
         de:d5:f9:cc:9e:f8:f8:08:08:c3:c2:72:b0:6f:db:95:38:a3:
         69:cb:01:6d:15:6b:7c:0b:55:6e:d7:44:bf:3d:e9:44:d6:3b:
         59:d2:dd:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:20:46 2026 by rpki-client