Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa/33cc3e06-84cc-3c07-b504-8a924bc790f6.roa
File:                     33cc3e06-84cc-3c07-b504-8a924bc790f6.roa (raw, json)
Hash identifier:          rHkzh2R9Ad/bNXcbjToP35r9KU4kkDvjFjI7RXC2Zuo=
Subject key identifier:   DD:19:AD:CB:FE:57:C0:72:07:ED:FA:0C:6F:27:AB:2E:9D:0B:A6:93
Certificate issuer:       /CN=f7798abb-711d-4f10-bc46-bceed055e1fa
Certificate serial:       010D0C9F4328584CEFF234D39020BD6DE9146E80
Authority key identifier: CC:90:3D:D7:AA:39:05:EC:E7:35:08:AC:CB:45:F4:6E:65:BC:1D:E1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa/33cc3e06-84cc-3c07-b504-8a924bc790f6.roa
Signing time:             Sat 21 Feb 2026 14:00:41 +0000
ROA not before:           Sat 21 Feb 2026 14:00:41 +0000
ROA not after:            Fri 22 May 2026 13:00:41 +0000
asID:                     206216
IP address blocks:        2602:fb54:148::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa/f7798abb-711d-4f10-bc46-bceed055e1fa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa/f7798abb-711d-4f10-bc46-bceed055e1fa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ef:f2:34:d3:90:20:bd:6d:e9:14:6e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f7798abb-711d-4f10-bc46-bceed055e1fa
        Validity
            Not Before: Feb 21 14:00:41 2026 GMT
            Not After : May 22 13:00:41 2026 GMT
        Subject: CN=986c19ee-e660-4d67-8158-baf707f88436
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:f2:e5:6b:03:7c:33:8a:14:66:0e:75:04:71:
                    69:55:2f:d9:27:89:a1:06:73:09:19:08:df:a9:f6:
                    c8:a3:f9:42:71:eb:eb:90:cd:19:58:5e:5f:85:36:
                    c8:25:5a:6c:48:a3:71:9a:c0:cf:c4:bb:19:96:64:
                    87:2f:94:68:ee:7e:e0:01:36:3d:fa:20:77:04:4e:
                    b4:1c:72:a2:19:05:e2:6b:1b:a6:03:ed:1a:67:c3:
                    c8:19:86:c5:71:ed:8f:e0:b2:2c:d6:f0:02:f7:d3:
                    d3:8f:d8:f0:e9:88:4a:9e:ea:5e:09:16:de:5b:e1:
                    da:2a:b2:27:7f:70:f9:d5:5f:03:2c:1d:dd:6a:18:
                    d0:b1:29:2d:4d:f2:3a:a3:fe:c3:04:66:93:9e:c1:
                    fe:3f:1d:d0:2a:aa:89:6f:08:68:e5:60:59:4e:49:
                    35:8c:8e:e2:54:ed:ff:ae:2b:75:d1:5f:bd:b7:10:
                    98:dc:c1:b9:27:16:ef:89:28:9d:58:d4:14:ee:41:
                    80:95:ab:09:f4:43:c8:97:73:85:07:99:d5:82:e1:
                    86:71:09:bc:09:c0:18:b2:38:30:56:ca:12:db:99:
                    c9:8c:6c:4b:a2:75:2a:86:60:44:7e:1e:11:60:a9:
                    c2:5b:a2:a8:e5:d0:ad:7a:21:1d:9c:b9:57:2c:4e:
                    38:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:19:AD:CB:FE:57:C0:72:07:ED:FA:0C:6F:27:AB:2E:9D:0B:A6:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa/33cc3e06-84cc-3c07-b504-8a924bc790f6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa/f7798abb-711d-4f10-bc46-bceed055e1fa.crl

            X509v3 Authority Key Identifier:
                keyid:CC:90:3D:D7:AA:39:05:EC:E7:35:08:AC:CB:45:F4:6E:65:BC:1D:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fb54:148::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9e:a4:aa:2e:45:20:90:dc:db:4a:2d:6c:ff:31:7e:1a:e4:a0:
         b7:b3:77:ce:98:dc:cc:b9:08:bf:11:40:f1:4c:34:56:02:06:
         5a:1f:9f:67:4c:f2:74:23:43:01:ed:d0:ff:c3:c3:69:9e:bd:
         55:0f:51:8b:60:ed:44:18:c7:5f:b2:ec:61:b5:08:2f:c6:62:
         f7:2f:df:ff:45:cc:f6:42:4e:73:6f:59:30:25:fe:2a:c8:33:
         6d:fe:a9:9c:91:96:6b:14:d3:ec:fd:8e:46:fa:81:bf:2a:f7:
         19:bc:e3:97:5d:ed:c7:64:80:0d:1b:af:55:b9:7d:7e:3c:6e:
         1e:43:01:5f:70:6e:a8:eb:dc:47:07:87:48:69:7b:f0:34:60:
         81:7e:27:b4:3f:b7:55:24:4c:cd:fe:e9:17:ba:71:32:3a:a9:
         03:33:d5:f1:87:f5:4c:a9:6a:cf:1e:bf:f5:9e:7c:76:32:ca:
         1a:49:05:fa:a9:4e:da:5f:27:7c:ce:ec:f3:bd:ff:c9:60:11:
         bd:fd:41:b2:87:21:77:d5:61:09:06:d5:f0:7d:c0:ce:b4:a3:
         46:af:7b:d6:5d:6b:11:cf:06:78:35:3a:81:e1:38:2f:42:42:
         21:80:57:a1:f9:8e:f1:53:af:63:ae:7f:ec:ab:65:66:3d:16:
         df:8a:44:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:38:14 2026 by rpki-client