Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/da61f786-99c2-4468-90f7-0b35abd168e5/bc669675-4f09-3100-852b-f89b8e4fa0ee.roa
File:                     bc669675-4f09-3100-852b-f89b8e4fa0ee.roa (raw, json)
Hash identifier:          WUFzsSFKBzvASO+z7cp4Rjqcj6fuV9wb8L9hw5advxU=
Subject key identifier:   74:B3:8B:F5:27:F5:36:F4:95:A1:F3:01:8A:2F:A3:8A:AE:E7:99:FE
Certificate issuer:       /CN=da61f786-99c2-4468-90f7-0b35abd168e5
Certificate serial:       010D0C9F4328584CD4075594EF5D0BF94E0A4F80
Authority key identifier: 9B:B2:56:DD:8E:8C:E4:13:02:1F:AC:BA:4D:EB:C0:52:A2:E5:05:59
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/da61f786-99c2-4468-90f7-0b35abd168e5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/da61f786-99c2-4468-90f7-0b35abd168e5/bc669675-4f09-3100-852b-f89b8e4fa0ee.roa
Signing time:             Wed 11 Feb 2026 14:00:41 +0000
ROA not before:           Wed 11 Feb 2026 14:00:41 +0000
ROA not after:            Tue 12 May 2026 13:00:41 +0000
asID:                     54650
IP address blocks:        2604:bb40::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/da61f786-99c2-4468-90f7-0b35abd168e5/da61f786-99c2-4468-90f7-0b35abd168e5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/da61f786-99c2-4468-90f7-0b35abd168e5/da61f786-99c2-4468-90f7-0b35abd168e5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/da61f786-99c2-4468-90f7-0b35abd168e5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:d4:07:55:94:ef:5d:0b:f9:4e:0a:4f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da61f786-99c2-4468-90f7-0b35abd168e5
        Validity
            Not Before: Feb 11 14:00:41 2026 GMT
            Not After : May 12 13:00:41 2026 GMT
        Subject: CN=dc059fbc-ca64-48dd-be4a-fbd6460d3993
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:2d:c9:34:65:18:c9:00:a1:11:1c:58:1c:3b:
                    13:d5:2e:8d:5b:2f:36:52:cd:dc:9a:ad:e7:60:ac:
                    c1:fb:11:63:f7:4e:80:3a:bd:a8:79:85:96:80:9c:
                    5f:14:0d:54:e8:b6:ab:7b:c0:02:b8:9d:52:33:16:
                    f2:d4:5c:7c:54:15:18:e9:5b:c3:7b:8d:55:94:57:
                    81:72:11:23:79:4c:e9:0c:ec:f3:83:64:fa:ff:7b:
                    6a:ea:8e:07:07:3d:75:94:f5:b7:62:b3:7b:58:5d:
                    65:ec:3a:e8:0b:c3:ec:22:b4:48:d9:69:9f:71:c8:
                    ad:72:e3:eb:d8:4f:26:fb:8d:a7:bf:56:3e:2d:69:
                    c6:1d:44:73:ca:f6:59:63:11:44:85:de:55:fe:7b:
                    3f:01:77:04:db:92:67:76:c4:76:06:55:d1:ea:a1:
                    f4:72:5a:93:37:70:86:4d:74:e5:59:7e:7c:b7:ee:
                    0c:fa:7a:52:2b:21:7e:d8:73:2f:4d:98:ba:72:34:
                    51:7f:4c:a2:ad:29:6b:46:a7:33:83:c8:15:1e:83:
                    82:76:cb:94:07:a8:d3:29:5a:48:0b:87:50:55:83:
                    e2:4f:05:76:d6:ae:79:a9:a9:42:3a:db:3c:3f:5d:
                    2c:9c:d5:f1:ca:f0:93:a3:07:a6:76:c1:05:27:95:
                    6a:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:B3:8B:F5:27:F5:36:F4:95:A1:F3:01:8A:2F:A3:8A:AE:E7:99:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/da61f786-99c2-4468-90f7-0b35abd168e5/bc669675-4f09-3100-852b-f89b8e4fa0ee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/da61f786-99c2-4468-90f7-0b35abd168e5/da61f786-99c2-4468-90f7-0b35abd168e5.crl

            X509v3 Authority Key Identifier:
                keyid:9B:B2:56:DD:8E:8C:E4:13:02:1F:AC:BA:4D:EB:C0:52:A2:E5:05:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/da61f786-99c2-4468-90f7-0b35abd168e5.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:bb40::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:12:17:e9:94:f2:b9:04:06:62:51:aa:a7:03:00:9c:6d:19:
         a8:f1:5a:10:b5:dd:d6:fa:97:65:58:3d:45:c9:84:55:e3:e4:
         e3:06:e2:e2:62:29:07:37:ea:7c:5c:b5:8b:b6:b8:c8:cf:bd:
         63:57:54:35:c3:4b:3c:b3:a3:dc:38:00:f6:0f:7f:73:5c:6d:
         3b:94:68:3c:2c:48:a1:71:f5:de:e7:7c:09:a2:cf:7f:31:d3:
         be:45:2f:d3:0b:81:2d:2a:91:1a:32:05:78:27:f0:60:cc:7e:
         b0:2e:b3:93:ac:33:d4:4e:74:64:18:1b:51:c7:b5:d8:08:74:
         2a:0c:16:83:bf:d6:78:76:9f:57:a8:1d:b0:e6:ef:30:78:d0:
         2b:46:fa:1e:91:6c:22:91:b4:8e:1c:d1:49:4b:58:f4:8c:82:
         91:c5:32:42:fe:39:72:73:8b:91:41:a2:a1:18:1c:bd:1f:c4:
         e9:36:d3:af:16:28:e9:63:cf:5e:3b:4f:b3:b3:30:3b:fa:ab:
         1d:a2:18:d2:00:e8:52:96:22:8c:8a:92:d0:20:1d:53:b1:4d:
         ef:6f:36:86:a4:73:51:cd:1e:0f:70:67:7a:0b:01:e9:6a:16:
         8a:a9:ff:45:25:2a:4f:0d:8c:af:d2:3c:05:4c:ad:d2:40:9a:
         4e:3c:6c:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:35:57 2026 by rpki-client