Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f2f18c6b-b590-4e09-b5a7-b0c417d79fd4/4df7686b-cc08-3fc3-99b6-ac3f98d79051.roa
File:                     4df7686b-cc08-3fc3-99b6-ac3f98d79051.roa (raw, json)
Hash identifier:          kvBd5YK6XBa89Ip6BQzUlN1yKAEnEzbtF3EFvnpdgGg=
Subject key identifier:   B3:46:51:F1:73:0B:96:3F:37:44:3C:83:B9:48:C4:73:70:60:71:94
Certificate issuer:       /CN=f2f18c6b-b590-4e09-b5a7-b0c417d79fd4
Certificate serial:       010D0C9F4328584CDB020A721D48250885509D00
Authority key identifier: 41:31:EF:08:16:8D:16:6B:C6:E1:C5:84:BD:51:46:61:44:CF:73:8B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f2f18c6b-b590-4e09-b5a7-b0c417d79fd4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f2f18c6b-b590-4e09-b5a7-b0c417d79fd4/4df7686b-cc08-3fc3-99b6-ac3f98d79051.roa
Signing time:             Sat 14 Feb 2026 02:00:32 +0000
ROA not before:           Sat 14 Feb 2026 02:00:32 +0000
ROA not after:            Fri 15 May 2026 01:00:32 +0000
asID:                     25615
IP address blocks:        2606:fb80::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f2f18c6b-b590-4e09-b5a7-b0c417d79fd4/f2f18c6b-b590-4e09-b5a7-b0c417d79fd4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f2f18c6b-b590-4e09-b5a7-b0c417d79fd4/f2f18c6b-b590-4e09-b5a7-b0c417d79fd4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f2f18c6b-b590-4e09-b5a7-b0c417d79fd4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:db:02:0a:72:1d:48:25:08:85:50:9d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f2f18c6b-b590-4e09-b5a7-b0c417d79fd4
        Validity
            Not Before: Feb 14 02:00:32 2026 GMT
            Not After : May 15 01:00:32 2026 GMT
        Subject: CN=b8ba568b-3659-4ba2-a3f5-b61d61422c86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:27:ab:e6:34:df:d6:33:ae:43:79:75:e1:23:
                    4c:4a:3b:d6:d4:5c:3b:ed:e3:1b:f4:7a:ef:4e:0a:
                    e5:83:3d:f8:5d:fa:f8:d5:9b:6e:cf:bf:56:49:b8:
                    04:dc:66:90:21:cb:51:0e:e7:4f:9e:ee:46:3f:68:
                    93:31:53:4a:77:d2:2a:0d:5a:d1:11:68:a9:7d:ca:
                    99:51:4a:32:a9:03:7d:f8:6f:d0:85:51:e7:94:07:
                    15:9e:63:eb:04:22:23:2b:5f:c0:f8:bc:f0:96:4d:
                    02:8d:75:e0:62:91:fa:06:b6:b6:a7:57:d9:d5:8c:
                    8a:2f:a9:de:48:47:94:49:32:0a:05:9c:f6:cf:b7:
                    70:a9:2d:91:1b:97:3c:53:34:5a:14:5d:02:05:f0:
                    99:29:f5:c6:df:bc:69:6b:7b:8a:ef:9e:4e:66:0c:
                    d7:ef:bf:5c:fb:bf:51:9d:11:d0:af:3c:1f:b4:1c:
                    6a:70:68:4c:63:6f:a9:2c:af:d5:6d:e4:d7:11:3f:
                    e3:aa:82:26:b9:2c:d5:7d:ed:b7:35:a5:61:aa:e6:
                    c6:59:0d:0e:05:c4:74:38:fe:3d:5c:04:39:c2:70:
                    a5:37:2b:44:47:e5:93:2f:0c:a7:e8:ba:53:ba:35:
                    dd:b4:e2:88:ae:7d:0b:fb:40:ec:cb:cf:16:83:ef:
                    6b:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:46:51:F1:73:0B:96:3F:37:44:3C:83:B9:48:C4:73:70:60:71:94
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f2f18c6b-b590-4e09-b5a7-b0c417d79fd4/4df7686b-cc08-3fc3-99b6-ac3f98d79051.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f2f18c6b-b590-4e09-b5a7-b0c417d79fd4/f2f18c6b-b590-4e09-b5a7-b0c417d79fd4.crl

            X509v3 Authority Key Identifier:
                keyid:41:31:EF:08:16:8D:16:6B:C6:E1:C5:84:BD:51:46:61:44:CF:73:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f2f18c6b-b590-4e09-b5a7-b0c417d79fd4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:fb80::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:31:a4:8b:68:3c:5c:fd:2c:e2:33:6e:78:10:ac:81:b6:23:
         6d:30:ae:d6:34:06:b0:76:0b:9c:fd:12:d6:f9:3e:a1:bf:88:
         3c:55:2a:dd:63:5c:51:b5:31:94:10:0e:29:c1:fa:be:b3:f1:
         f0:c6:93:84:34:3b:28:be:1e:da:c9:22:a3:2a:f5:78:04:3d:
         99:07:97:13:92:5e:2d:71:3c:ee:7e:16:9a:08:8e:b6:71:d9:
         df:25:b6:a3:43:a8:c4:d3:4d:bd:c0:3b:66:88:dd:e2:7e:57:
         d7:35:69:11:21:23:00:63:1c:2c:5c:a0:81:bc:99:a3:20:f7:
         7b:f6:5f:0b:11:02:3b:de:6a:26:86:17:c8:34:3c:43:4f:5c:
         37:a6:fd:43:87:ee:39:25:47:52:be:04:a5:b9:3b:7f:1f:c8:
         da:13:db:5f:97:8c:02:5c:28:8f:46:ef:a8:84:94:9d:bd:3a:
         ff:1f:a0:d4:4d:a3:90:78:b5:a4:3d:c0:f8:8a:d9:d6:5f:09:
         76:ff:69:44:cf:67:6d:7e:64:9e:11:e5:9f:4c:f3:8e:94:06:
         54:08:88:b9:11:57:3b:e5:33:af:fd:99:e3:94:5d:1e:5a:46:
         db:75:fb:2a:f3:14:de:f7:bf:73:2a:7d:29:91:aa:6d:14:9a:
         ec:14:97:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:41:39 2026 by rpki-client