Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/09615a2e-220d-3ddf-833f-1a2d2973e6be.roa
File:                     09615a2e-220d-3ddf-833f-1a2d2973e6be.roa (raw, json)
Hash identifier:          j9VFmTc4w2hKdk6fM6Ftb752ISlZP2KKV6AoWi362xs=
Subject key identifier:   94:21:36:63:B6:63:CC:31:CB:A5:4A:79:9C:06:3E:94:95:47:C9:B7
Certificate issuer:       /CN=9906748d-5823-4cd3-9a11-f3dc69a3e751
Certificate serial:       010D0C9F4328584CC61213E5A7055C22D42E77C0
Authority key identifier: A7:31:13:DA:A8:C2:6D:D3:40:47:B6:C3:2B:BA:78:43:31:2F:01:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/09615a2e-220d-3ddf-833f-1a2d2973e6be.roa
Signing time:             Fri 06 Feb 2026 14:00:40 +0000
ROA not before:           Fri 06 Feb 2026 14:00:40 +0000
ROA not after:            Thu 07 May 2026 13:00:40 +0000
asID:                     8075
IP address blocks:        2602:28c:2181::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:c6:12:13:e5:a7:05:5c:22:d4:2e:77:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9906748d-5823-4cd3-9a11-f3dc69a3e751
        Validity
            Not Before: Feb  6 14:00:40 2026 GMT
            Not After : May  7 13:00:40 2026 GMT
        Subject: CN=4a351473-34a5-47d8-bc2e-7732409650ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:39:28:23:ed:9f:8d:9b:ef:6e:7b:ff:a5:d8:
                    f8:fa:8e:6e:d5:f5:67:f0:80:47:47:0b:23:40:f6:
                    63:33:52:37:ef:23:52:bd:27:d9:ee:c8:b6:1f:6e:
                    68:4c:b7:6c:1a:53:d3:41:da:e2:3f:b1:31:14:d0:
                    36:5b:ea:4d:14:93:c3:79:b6:9b:e6:9f:5b:d8:14:
                    c1:02:34:b7:0d:4a:b8:7a:5b:3d:da:15:7e:6b:b9:
                    b6:77:91:b6:2a:c0:df:af:a9:62:81:93:99:e4:9b:
                    58:58:c2:9b:98:b4:5a:67:7e:a3:9e:89:66:2f:fd:
                    8e:da:1a:d6:85:f2:32:9a:f5:cb:a4:17:2c:2e:6a:
                    b4:16:65:d4:8c:5a:f0:2d:82:67:aa:86:37:9c:f3:
                    08:06:0d:bc:62:08:37:ec:2a:66:a3:74:5e:c7:d7:
                    70:c4:0f:57:c7:ca:22:0e:e6:43:8f:46:3c:3c:aa:
                    9e:44:4c:00:3a:fe:e3:ad:a6:a6:6c:65:e3:5d:af:
                    00:7e:1c:12:3f:32:99:d2:05:e8:83:ae:41:17:9c:
                    1b:55:73:85:36:65:62:10:c7:0d:82:b1:01:d8:b8:
                    8e:11:41:67:f1:b1:a0:3f:ec:eb:dd:fa:67:ce:e1:
                    96:da:09:a8:c6:31:c4:61:02:18:89:b7:5a:3c:2a:
                    49:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:21:36:63:B6:63:CC:31:CB:A5:4A:79:9C:06:3E:94:95:47:C9:B7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/09615a2e-220d-3ddf-833f-1a2d2973e6be.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.crl

            X509v3 Authority Key Identifier:
                keyid:A7:31:13:DA:A8:C2:6D:D3:40:47:B6:C3:2B:BA:78:43:31:2F:01:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:28c:2181::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:ce:ad:3e:a1:ff:a6:2c:b6:9c:6e:ec:05:72:18:e8:51:46:
         b1:bf:d5:b3:8e:e1:ed:c2:25:1e:b3:15:76:ce:3b:61:75:e1:
         5e:d3:2b:46:48:d9:d5:7d:60:a0:43:2b:de:a7:90:95:50:b8:
         c2:4e:94:e0:0d:35:d1:f5:1c:70:3c:8e:27:eb:d2:2c:e2:a5:
         55:29:00:e5:8f:f4:c3:a0:d4:8d:9c:c1:a6:d8:cc:58:4e:34:
         8c:a2:b2:38:ab:8e:41:ab:23:01:bb:97:c4:44:27:63:19:65:
         cf:41:83:76:7b:6d:e2:3a:c1:78:a0:a6:3b:48:f9:0e:46:ee:
         6f:b4:2a:eb:f8:ee:7f:10:4d:b4:7e:17:9f:70:5d:4e:17:0e:
         5a:32:5b:ca:5c:1a:01:6a:28:1a:70:eb:2e:6d:d3:8d:9b:d5:
         1b:49:12:5d:97:84:f7:bd:9e:91:72:ed:df:95:ee:43:0e:e4:
         a7:51:21:c0:bc:b4:97:a8:25:a1:29:c7:1b:e9:92:7b:b6:66:
         84:38:92:6d:50:3b:03:1e:1e:94:c6:ec:dd:7b:6a:77:98:52:
         96:d7:80:41:30:7e:6e:ae:40:b8:f2:7e:ae:05:80:6a:40:42:
         c5:fc:6c:3f:b3:87:6f:a2:e7:3d:c1:4d:5d:36:ec:2a:ac:f5:
         5e:94:b5:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:24:40 2026 by rpki-client