Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/eb96cd32-71b8-3ee4-8e33-800d66ab1f93.roa
File:                     eb96cd32-71b8-3ee4-8e33-800d66ab1f93.roa (raw, json)
Hash identifier:          qENfKug2utZ9RDgusIYefUiX0dRpAB0hpvN+Zps1VeQ=
Subject key identifier:   82:1A:9B:EB:CC:D9:2E:49:88:8C:2C:8B:0E:D4:3D:B0:91:48:19:61
Certificate issuer:       /CN=9906748d-5823-4cd3-9a11-f3dc69a3e751
Certificate serial:       010D0C9F4328584CC61216E9A1DC11D1F0F33F80
Authority key identifier: A7:31:13:DA:A8:C2:6D:D3:40:47:B6:C3:2B:BA:78:43:31:2F:01:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/eb96cd32-71b8-3ee4-8e33-800d66ab1f93.roa
Signing time:             Fri 06 Feb 2026 14:00:40 +0000
ROA not before:           Fri 06 Feb 2026 14:00:40 +0000
ROA not after:            Thu 07 May 2026 13:00:40 +0000
asID:                     14618
IP address blocks:        2620:147:c15::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:c6:12:16:e9:a1:dc:11:d1:f0:f3:3f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9906748d-5823-4cd3-9a11-f3dc69a3e751
        Validity
            Not Before: Feb  6 14:00:40 2026 GMT
            Not After : May  7 13:00:40 2026 GMT
        Subject: CN=b11649db-2a71-40a1-96aa-d61ce6047e26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:7c:39:8a:84:49:82:cf:54:5d:a2:c6:49:8d:
                    10:44:26:1d:03:e1:0d:78:ea:9e:4c:db:ce:7e:97:
                    a0:a9:3e:d7:d0:1b:ed:6c:6f:62:8f:62:42:16:35:
                    6f:1d:e6:1a:f8:c9:18:2c:20:c0:01:e1:71:27:63:
                    3d:e6:4f:7a:18:20:ef:6c:9f:d8:39:8d:83:1c:aa:
                    3c:38:85:8e:93:ea:49:61:4d:9f:77:c1:bb:27:b4:
                    3f:70:3e:03:70:39:5a:f7:38:3f:45:9f:0d:1b:04:
                    03:c7:19:85:fb:6e:95:93:21:2a:75:82:78:74:d6:
                    e8:f6:d3:0e:b6:12:87:73:67:a4:e9:cd:9c:29:31:
                    f2:34:d5:c9:f9:6d:e3:ac:0b:2a:ed:e4:f1:87:89:
                    ca:99:9a:6d:82:0d:1b:00:ad:65:aa:3e:08:37:a5:
                    0f:75:7b:b4:44:16:09:e0:77:ff:11:76:26:e8:a7:
                    cd:d7:95:70:81:45:1c:72:81:96:49:84:7c:12:83:
                    18:d4:ee:f7:78:3c:1e:b5:9a:9f:49:4a:9b:56:3e:
                    12:fa:de:29:d6:3d:19:a2:92:9e:76:95:ff:c4:ec:
                    5e:cc:65:de:17:8b:de:bc:d8:f1:8c:81:e1:37:e5:
                    53:7f:ab:73:e6:b7:0d:a6:c3:9f:cb:fc:53:3f:03:
                    a4:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:1A:9B:EB:CC:D9:2E:49:88:8C:2C:8B:0E:D4:3D:B0:91:48:19:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/eb96cd32-71b8-3ee4-8e33-800d66ab1f93.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.crl

            X509v3 Authority Key Identifier:
                keyid:A7:31:13:DA:A8:C2:6D:D3:40:47:B6:C3:2B:BA:78:43:31:2F:01:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:147:c15::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:34:51:6f:14:a5:8f:7b:f5:bd:df:16:5a:7b:e8:a6:50:37:
         07:ef:46:92:a4:e0:c8:0a:ca:ae:47:b2:ec:70:92:ab:d0:f8:
         ef:c2:62:a3:b7:d9:95:6d:65:2b:5f:af:fe:ba:7c:ea:90:2b:
         33:3e:11:eb:bd:e6:b1:f7:52:19:5f:ed:5e:35:c1:dd:b0:9c:
         37:d7:d4:b9:ba:bf:5b:88:ab:97:b4:ba:dd:94:c7:d9:03:fd:
         d3:ea:4c:17:ac:61:2a:cc:be:27:26:cf:19:b4:69:c0:27:40:
         eb:60:24:f5:95:b2:82:e3:38:a3:66:09:ee:23:68:27:14:b8:
         23:e5:f7:cf:4e:cf:fe:01:35:f9:45:72:5f:bb:60:89:4e:40:
         ef:4c:18:58:62:67:f3:eb:4c:9f:08:92:cb:02:66:80:f4:e7:
         d8:80:09:1b:a2:f8:56:6d:77:9b:d4:4f:11:42:4a:1f:db:82:
         a6:86:a1:e9:67:b5:f9:c1:2b:a2:55:f1:ed:0a:15:9d:16:14:
         0d:9d:3d:41:63:6e:9a:9d:84:b6:f9:2b:6f:bd:fa:b5:fa:45:
         a2:27:05:4e:5c:ed:f5:39:7e:ff:c5:2e:b5:86:70:57:76:04:
         60:3a:5c:90:47:ee:72:68:f0:fe:43:4a:0e:c3:98:fe:2d:18:
         67:3b:5a:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:10:27 2026 by rpki-client