Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/07c8d8a0-e6e7-3b27-a564-ddb01b0d50b8.roa
File:                     07c8d8a0-e6e7-3b27-a564-ddb01b0d50b8.roa (raw, json)
Hash identifier:          NJYCIoufhYx1Syly9a+PQTHcpC7ALADee4PJUgqTYSg=
Subject key identifier:   1A:E5:30:85:06:37:39:AA:27:66:82:8C:95:34:E8:50:36:DB:57:FF
Certificate issuer:       /CN=8e2f3353-82b9-432b-bd94-000bf5cef0c3
Certificate serial:       010D0C9F4328584CF2BCE1091C3970673BEC8D00
Authority key identifier: B4:B5:6C:64:46:3D:47:EB:DC:A5:0E:CB:D0:7B:9A:33:43:55:40:45
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/07c8d8a0-e6e7-3b27-a564-ddb01b0d50b8.roa
Signing time:             Sun 22 Feb 2026 14:00:41 +0000
ROA not before:           Sun 22 Feb 2026 14:00:41 +0000
ROA not after:            Sat 23 May 2026 13:00:41 +0000
asID:                     14618
IP address blocks:        2607:fb90:c150::/48 maxlen: 48
                          2607:fb90:c151::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/8e2f3353-82b9-432b-bd94-000bf5cef0c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/8e2f3353-82b9-432b-bd94-000bf5cef0c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:f2:bc:e1:09:1c:39:70:67:3b:ec:8d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e2f3353-82b9-432b-bd94-000bf5cef0c3
        Validity
            Not Before: Feb 22 14:00:41 2026 GMT
            Not After : May 23 13:00:41 2026 GMT
        Subject: CN=658dd812-282b-4dca-a015-600a9c4d89db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:49:ca:16:e7:91:e6:49:93:77:92:7b:0c:d3:
                    c4:5a:3a:9a:7b:48:eb:5f:a9:6e:27:69:ae:fc:02:
                    85:69:3a:82:0d:34:36:37:00:c6:5c:92:c8:ad:1c:
                    aa:7d:84:ac:ce:66:93:5e:a1:8d:bc:41:62:9f:96:
                    dd:ac:ed:b8:f0:69:cb:d4:6c:17:05:c2:a0:75:fc:
                    0a:79:0b:17:5b:7f:ec:57:d7:df:95:33:44:02:6e:
                    20:a3:53:1d:12:f4:28:13:d8:0b:1f:51:a6:29:f4:
                    c1:ac:6e:ea:82:d1:f5:b3:51:0c:ac:18:b7:35:f5:
                    06:a8:5a:06:9f:a5:4c:e0:0b:da:8e:d1:de:d9:47:
                    d2:68:85:08:31:0a:f9:ce:49:dd:e3:e3:75:da:7c:
                    1e:74:72:e7:39:16:0a:78:25:71:c9:fa:a5:d3:e8:
                    dc:d4:00:28:99:24:a5:f8:7e:ff:3e:b4:f0:80:fd:
                    94:e1:fe:dd:ad:47:ea:10:ac:19:68:ba:f2:da:a4:
                    b4:7b:cf:16:7e:29:62:bf:0b:89:6e:14:c3:66:ae:
                    9b:c8:c0:32:2b:5d:2e:48:b7:a5:a4:ed:03:6e:3d:
                    f7:67:4a:e3:ed:d1:cb:0e:d1:08:a3:8a:82:dc:04:
                    39:13:dc:ff:33:53:df:28:c3:12:5f:73:8c:37:92:
                    93:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:E5:30:85:06:37:39:AA:27:66:82:8C:95:34:E8:50:36:DB:57:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/07c8d8a0-e6e7-3b27-a564-ddb01b0d50b8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/8e2f3353-82b9-432b-bd94-000bf5cef0c3.crl

            X509v3 Authority Key Identifier:
                keyid:B4:B5:6C:64:46:3D:47:EB:DC:A5:0E:CB:D0:7B:9A:33:43:55:40:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:fb90:c150::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:ba:36:68:a2:70:1d:13:1c:7d:67:34:1e:67:ff:c4:1a:d2:
         57:fe:02:31:8f:87:81:86:e3:ba:f7:68:f6:40:a4:d6:42:66:
         71:6b:69:fa:7e:26:90:1f:2b:e1:12:b9:cb:04:98:34:63:ca:
         1d:ce:b4:19:98:18:87:09:d7:47:eb:52:42:e7:ad:a6:45:67:
         ff:79:c0:e6:69:b1:9e:b8:49:f7:78:26:7c:40:0b:58:e6:31:
         10:98:86:d0:0f:a9:70:01:30:8c:8a:ab:05:65:cb:ea:2d:1b:
         39:61:be:d0:ee:d7:53:ff:07:97:aa:02:26:25:ae:2c:03:41:
         56:94:9a:ec:e7:35:58:50:16:bb:e7:45:35:71:f2:db:70:48:
         86:16:8a:d0:c6:c6:f5:aa:1a:35:d6:42:ad:89:89:0f:9e:2a:
         cd:60:54:b7:47:a6:c3:ed:01:6c:dd:da:ed:82:d2:49:65:0f:
         57:31:82:d9:8b:fb:86:75:17:8c:1f:81:7b:bc:dc:ce:f3:17:
         66:a1:fe:74:9f:6e:85:d8:ed:78:38:1a:25:2f:02:47:8f:1b:
         76:26:47:cd:67:1c:36:81:54:e5:3a:03:19:25:60:82:0e:19:
         00:85:13:49:79:63:c0:6e:2a:f0:3a:be:fd:dd:1f:c8:ef:f4:
         0f:d7:a0:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:41:15 2026 by rpki-client