Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2e21335c-6d64-3203-9f2d-70c1bb2d4a3c.roa
File:                     2e21335c-6d64-3203-9f2d-70c1bb2d4a3c.roa (raw, json)
Hash identifier:          lTBulNaNACS6Ludg4kwge/KBmhO6xSu9WxxV21nlprQ=
Subject key identifier:   98:2A:6B:FF:9D:08:D8:C5:BF:B3:1C:84:F7:36:40:CF:39:78:EF:86
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584CFDEA4B3C86E8BA07F52FE360
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2e21335c-6d64-3203-9f2d-70c1bb2d4a3c.roa
Signing time:             Thu 26 Feb 2026 14:00:40 +0000
ROA not before:           Thu 26 Feb 2026 14:00:40 +0000
ROA not after:            Wed 27 May 2026 13:00:40 +0000
asID:                     13367
IP address blocks:        2603:3016:2000::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:fd:ea:4b:3c:86:e8:ba:07:f5:2f:e3:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Feb 26 14:00:40 2026 GMT
            Not After : May 27 13:00:40 2026 GMT
        Subject: CN=7b7f3a5d-d942-45fa-840c-9216d9e197b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:18:25:d5:2c:f6:bb:2f:60:ab:13:69:2e:36:
                    52:73:5d:46:54:3d:65:ff:5d:d1:e6:79:24:15:68:
                    7d:47:43:08:3f:71:ca:70:f3:25:d1:fb:24:fc:c9:
                    ca:6e:bc:b6:d8:81:a8:66:f5:ef:e2:ee:ae:82:d2:
                    7a:31:af:21:28:58:02:00:99:86:a3:66:90:61:c6:
                    18:cd:12:9c:a1:f8:77:de:86:ff:b1:77:94:7f:d3:
                    ae:8c:dd:d0:23:1e:08:ca:f0:a2:f0:ce:b0:cb:fc:
                    8b:b3:cf:eb:c5:ee:fe:70:e1:21:5a:4d:fe:6a:7c:
                    7d:9e:d8:75:55:97:ac:d0:9a:ee:3a:41:97:ec:b4:
                    3c:38:d1:33:8c:e7:c2:0b:9d:26:72:31:04:31:d5:
                    33:45:04:70:84:a8:18:4a:4b:40:47:39:9f:b8:2e:
                    47:6b:0f:04:c1:7e:9b:57:91:23:ca:56:3a:75:a8:
                    d1:3a:81:9e:00:b6:19:9b:32:ff:e4:5f:0a:32:9e:
                    f3:ee:9e:97:01:53:c2:a1:1b:a5:ec:16:b7:bf:dc:
                    1f:6e:08:db:8c:e1:df:53:8e:7f:d6:96:72:83:38:
                    32:98:30:15:81:c0:66:17:17:47:ff:ed:09:18:bb:
                    5f:72:ab:db:8d:d9:99:82:0c:f9:14:91:de:a3:a3:
                    1e:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:2A:6B:FF:9D:08:D8:C5:BF:B3:1C:84:F7:36:40:CF:39:78:EF:86
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2e21335c-6d64-3203-9f2d-70c1bb2d4a3c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:3016:2000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:fc:7c:fa:9c:91:05:61:9c:ce:48:7c:2a:7e:6d:0a:7e:9f:
         d6:7e:01:75:07:1a:ba:71:73:2e:5c:f2:42:ab:cd:b2:7f:38:
         64:2d:91:f6:99:b7:f2:2b:7f:c4:eb:18:69:65:1b:f6:aa:55:
         64:d4:60:ad:23:83:0b:9d:9c:a4:eb:07:ea:35:9e:58:78:a0:
         41:01:a2:ff:35:29:7f:1a:0a:82:d9:40:9d:9d:59:fb:e0:85:
         c3:d8:f9:07:df:36:c9:1f:e2:f6:20:99:f4:2d:ec:fe:e8:38:
         c0:27:b4:b3:ff:38:21:ad:9a:ed:c5:39:6e:cd:61:5d:84:2c:
         e5:84:c9:30:f6:d5:c7:9e:d0:42:43:57:2d:e6:2e:f6:97:d2:
         90:85:7c:18:f4:09:51:13:af:7b:8e:b0:08:a4:9d:d4:1c:21:
         55:00:73:6e:ca:a9:63:a1:4e:e9:7b:4c:dc:ab:97:9d:fd:b0:
         3f:54:53:56:0e:74:47:ca:57:24:75:5c:68:f9:d1:dc:7e:09:
         68:65:03:a0:25:3b:95:e6:2d:f9:6a:57:53:29:a0:90:d9:54:
         d3:b7:a0:b6:c2:ce:6e:11:dc:1b:0d:e0:1d:0a:a5:ea:30:98:
         9a:bb:c6:19:95:10:7c:a8:5e:92:24:1a:71:5b:ff:26:09:b6:
         c4:88:e5:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:27:38 2026 by rpki-client