Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/d506b4c0-11fa-3941-ac03-95336c9aad87.roa
File:                     d506b4c0-11fa-3941-ac03-95336c9aad87.roa (raw, json)
Hash identifier:          v+p/UF7qHKPAub1z/kXWmm025VBNt0U6wOWSW1iKiho=
Subject key identifier:   52:F8:73:03:8C:FD:33:40:C0:8D:9E:A9:EB:4C:2F:0D:BF:05:83:46
Certificate issuer:       /CN=9906748d-5823-4cd3-9a11-f3dc69a3e751
Certificate serial:       010D0C9F4328584CC612127D2FE9D4839AF3A080
Authority key identifier: A7:31:13:DA:A8:C2:6D:D3:40:47:B6:C3:2B:BA:78:43:31:2F:01:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/d506b4c0-11fa-3941-ac03-95336c9aad87.roa
Signing time:             Fri 06 Feb 2026 14:00:40 +0000
ROA not before:           Fri 06 Feb 2026 14:00:40 +0000
ROA not after:            Thu 07 May 2026 13:00:40 +0000
asID:                     198949
IP address blocks:        2602:280::/29 maxlen: 29
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:c6:12:12:7d:2f:e9:d4:83:9a:f3:a0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9906748d-5823-4cd3-9a11-f3dc69a3e751
        Validity
            Not Before: Feb  6 14:00:40 2026 GMT
            Not After : May  7 13:00:40 2026 GMT
        Subject: CN=a8d7b2e8-8d4f-4ddd-824a-3b42b8760895
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:ba:b7:78:22:31:1a:66:8e:64:69:6e:64:2b:
                    61:e3:72:ca:d8:31:72:22:79:ae:b2:79:d2:38:25:
                    90:9b:f4:da:86:06:a8:14:3b:0e:7a:af:62:f8:f1:
                    5f:41:a4:90:38:40:57:77:09:bb:1b:ba:91:bb:97:
                    6c:f7:5d:a2:ef:46:eb:2f:13:52:c9:ea:54:d3:a1:
                    91:48:8f:89:f3:52:d0:41:b4:f4:8b:4d:71:c9:07:
                    84:a1:a0:54:23:2f:80:c0:2d:6b:a5:db:cd:03:c7:
                    f6:c5:bf:e6:7b:5d:90:33:4e:b4:78:b7:41:2c:63:
                    0a:28:34:8a:e1:cd:e7:cc:04:05:a6:af:41:24:cc:
                    b7:59:81:bc:94:84:58:92:2e:cc:3f:f9:ad:e4:20:
                    98:7e:a4:14:ed:a8:46:43:a0:38:3e:da:e1:3e:1d:
                    e6:0c:3b:c3:37:5b:03:bb:4c:e3:85:cf:29:f5:e4:
                    89:dd:6c:6b:04:49:03:07:98:15:ee:e6:65:db:f8:
                    01:55:73:44:67:ec:f2:75:d9:eb:a9:0a:06:00:9d:
                    8c:c0:f5:71:d0:6a:b5:65:ac:2c:9a:d5:05:32:d8:
                    fc:67:36:23:b2:3b:1b:89:e5:17:3b:e1:94:f2:6d:
                    88:53:07:4d:e3:36:35:87:8f:fc:66:2f:a7:b7:18:
                    4a:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:F8:73:03:8C:FD:33:40:C0:8D:9E:A9:EB:4C:2F:0D:BF:05:83:46
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/d506b4c0-11fa-3941-ac03-95336c9aad87.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.crl

            X509v3 Authority Key Identifier:
                keyid:A7:31:13:DA:A8:C2:6D:D3:40:47:B6:C3:2B:BA:78:43:31:2F:01:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:280::/29

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:c1:7c:19:75:81:ce:ba:e0:3b:af:ef:68:f8:da:58:25:2f:
         8d:23:9b:17:1c:21:6e:57:a6:4f:4d:f8:1b:84:f2:bd:95:ed:
         ab:6a:fd:6f:69:e6:19:20:de:49:6c:d1:86:82:a7:4a:4e:25:
         59:cd:54:17:9c:34:81:58:b9:4c:03:54:d6:32:ad:50:65:a4:
         ec:85:aa:1a:7a:68:87:ba:a3:9d:95:b4:e5:f1:d2:c1:53:fa:
         85:b9:41:80:0d:a7:62:8e:ea:61:e9:94:ac:37:ea:c9:80:64:
         a4:a3:a8:62:1c:9f:d5:29:21:d7:6c:f6:6c:15:48:86:f1:6e:
         77:f3:0a:f9:1e:92:91:f7:6f:f9:6d:bb:29:35:f9:5f:38:29:
         d1:8b:26:cf:99:84:73:2d:5e:04:87:2c:1e:6f:af:54:5e:cc:
         b1:71:ac:68:1f:ba:8c:5c:42:18:c8:d0:a2:4d:e7:84:80:5d:
         01:33:d6:28:66:fa:20:0d:a8:e6:63:51:dc:db:61:c6:35:7d:
         34:c5:ff:72:5c:ab:c8:fb:ca:e5:21:7c:cb:72:f2:4d:86:3c:
         60:a2:df:9f:90:ae:b2:19:f2:3f:e3:a3:2c:7e:be:39:84:8c:
         b9:e2:30:d4:0b:75:9c:6c:24:83:1a:b1:d2:2e:d8:2e:60:20:
         93:c8:ed:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 05:32:12 2026 by rpki-client