Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/83cbad37-4643-3bc3-825f-7a3fcbf1b6c5.roa
File:                     83cbad37-4643-3bc3-825f-7a3fcbf1b6c5.roa (raw, json)
Hash identifier:          4ZhuLnS4Ca3NXFUbA4iu7rv4sHlXZFzHWqaCNFpG1Hk=
Subject key identifier:   49:82:C2:44:7F:B2:88:10:0C:1D:CB:B3:4B:0E:61:79:B7:71:37:B6
Certificate issuer:       /CN=f375140c-52cc-401f-b3a0-476ffa367076
Certificate serial:       010D0C9F4328584CB551E0C79C16668E50F3FB00
Authority key identifier: 44:EA:00:A7:AC:0D:83:8E:EC:A5:10:EE:B1:42:FF:0B:98:5E:06:F3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/83cbad37-4643-3bc3-825f-7a3fcbf1b6c5.roa
Signing time:             Sat 31 Jan 2026 14:00:39 +0000
ROA not before:           Sat 31 Jan 2026 14:00:39 +0000
ROA not after:            Fri 01 May 2026 13:00:39 +0000
asID:                     399976
IP address blocks:        2602:80c:2028::/48 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:b5:51:e0:c7:9c:16:66:8e:50:f3:fb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f375140c-52cc-401f-b3a0-476ffa367076
        Validity
            Not Before: Jan 31 14:00:39 2026 GMT
            Not After : May  1 13:00:39 2026 GMT
        Subject: CN=4de8a29e-7dd5-4f83-80ec-5106554a7953
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:e7:17:70:65:e1:6b:3c:a9:d5:33:b2:a4:78:
                    57:5c:e8:cc:a0:eb:4c:28:06:9a:72:2e:bd:8a:54:
                    00:d1:30:a4:94:60:77:b0:3c:17:c5:a7:0a:77:27:
                    1c:4f:9c:80:4f:39:6f:f4:b8:ff:d5:09:26:02:12:
                    86:ce:8d:fe:ad:81:97:4f:38:5a:fd:f7:c8:37:26:
                    2a:85:e9:65:d0:53:4e:93:9b:b2:2e:8e:3f:e2:67:
                    ad:51:ba:5b:61:0a:5c:40:f6:e9:0a:8a:c6:40:81:
                    eb:e7:6d:6f:e1:05:c2:7d:bd:f2:ec:7e:df:39:99:
                    e7:b2:bd:8f:78:ce:4a:d8:8b:48:a1:04:bb:5f:1f:
                    01:23:eb:5f:c7:8c:d5:13:51:bc:57:39:9e:95:78:
                    0a:3c:b7:ea:4c:59:bd:5e:09:6a:6a:80:ab:24:ca:
                    5a:fa:ed:e7:40:44:86:be:38:b2:56:b8:df:84:3e:
                    4d:2a:9c:9c:e6:a8:11:e2:02:9f:09:a3:88:ad:98:
                    ad:f0:44:50:78:81:7e:bb:5e:44:db:72:e2:41:92:
                    35:9b:e7:9b:ad:87:2f:72:cf:79:b5:67:1a:d5:3a:
                    49:1d:1b:6e:f3:b8:5e:d5:86:2c:3d:12:72:64:19:
                    80:0c:a4:83:42:82:d0:3e:84:2e:2c:4a:06:27:62:
                    83:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:82:C2:44:7F:B2:88:10:0C:1D:CB:B3:4B:0E:61:79:B7:71:37:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/83cbad37-4643-3bc3-825f-7a3fcbf1b6c5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.crl

            X509v3 Authority Key Identifier:
                keyid:44:EA:00:A7:AC:0D:83:8E:EC:A5:10:EE:B1:42:FF:0B:98:5E:06:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:80c:2028::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:d8:42:16:c8:89:eb:c7:67:ee:aa:57:36:19:67:91:77:24:
         78:bd:2c:76:0f:c6:1d:e8:a9:51:63:65:c2:0f:ba:fa:18:16:
         30:67:0a:85:78:a1:00:3b:a2:fa:a7:c7:66:36:cb:c1:74:07:
         25:e5:ea:65:88:04:77:08:6e:63:71:cd:db:32:15:54:0c:5f:
         61:89:f4:71:98:e0:42:eb:da:16:a8:f7:f9:b9:e0:39:13:04:
         8a:7c:47:77:9f:55:0e:0f:c9:13:f1:ab:99:32:83:d7:8c:c7:
         32:4c:f8:05:2e:8c:6a:a1:49:ce:a0:c1:60:2c:70:bd:40:6a:
         b2:ca:6c:1c:eb:95:af:4a:54:c3:0f:f6:8c:11:aa:42:e4:f7:
         92:d1:20:ab:22:c2:e8:0c:0f:25:38:a5:ae:85:f4:08:76:16:
         98:0b:06:fe:aa:8a:06:81:86:79:4f:a0:0c:93:2e:1a:31:0e:
         31:80:d2:6e:7f:6e:01:cd:13:68:a0:92:d2:b0:e1:17:68:a8:
         30:f0:e2:3a:13:22:90:dc:02:cf:21:ee:23:e3:66:6c:77:94:
         27:6f:c7:b2:95:cf:87:73:03:49:a0:8e:cc:8c:e1:9a:99:8f:
         d6:f7:82:21:7d:d0:02:fe:9c:ac:cf:90:4c:c1:eb:88:6b:f4:
         69:94:e3:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:00:23 2026 by rpki-client