Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/89edca34-026a-3c55-9706-b38b7c4a3279.roa
File:                     89edca34-026a-3c55-9706-b38b7c4a3279.roa (raw, json)
Hash identifier:          8zBys5wsFS059BefNHwAWktT15Gp9PiL1TUjmpHaQx8=
Subject key identifier:   F3:75:61:7D:09:A4:C5:EB:36:C3:D1:96:99:F6:F4:C0:94:60:EB:10
Certificate issuer:       /CN=f375140c-52cc-401f-b3a0-476ffa367076
Certificate serial:       010D0C9F4328584CB551DEF4D5DA9962F032D240
Authority key identifier: 44:EA:00:A7:AC:0D:83:8E:EC:A5:10:EE:B1:42:FF:0B:98:5E:06:F3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/89edca34-026a-3c55-9706-b38b7c4a3279.roa
Signing time:             Sat 31 Jan 2026 14:00:39 +0000
ROA not before:           Sat 31 Jan 2026 14:00:39 +0000
ROA not after:            Fri 01 May 2026 13:00:39 +0000
asID:                     399976
IP address blocks:        2602:80c:2000::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:b5:51:de:f4:d5:da:99:62:f0:32:d2:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f375140c-52cc-401f-b3a0-476ffa367076
        Validity
            Not Before: Jan 31 14:00:39 2026 GMT
            Not After : May  1 13:00:39 2026 GMT
        Subject: CN=5387eace-48cd-4f35-aac9-fa0dc4ea788b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:57:6f:72:44:bc:bd:ba:7e:cf:63:b5:2f:2f:
                    57:cb:4a:44:4b:98:56:11:0f:3b:50:91:e2:aa:6e:
                    9a:13:fc:dd:43:d5:5b:61:86:2a:d9:6e:7b:71:05:
                    e3:3c:01:80:74:52:ce:c3:24:1f:38:12:21:62:c1:
                    3d:eb:40:62:7a:ab:c5:c3:e1:a1:24:36:0a:4e:90:
                    d3:7f:ab:97:15:7b:22:be:0e:ba:1b:d8:40:63:5e:
                    d6:6b:dc:d4:70:30:24:01:1e:16:c0:80:07:89:9f:
                    14:e5:14:a2:10:95:c5:42:82:e1:02:c3:e9:7f:66:
                    15:10:20:14:3e:9d:01:10:c9:ca:ed:9e:14:63:d1:
                    80:95:df:3d:d9:08:9b:45:17:2a:20:b6:d8:20:bf:
                    93:4c:0a:85:fc:6f:26:8e:c7:15:48:fa:21:aa:fb:
                    eb:56:39:19:fb:c1:44:e3:40:5f:73:35:d6:56:bd:
                    9e:45:cd:90:82:2a:07:1d:ed:e4:dc:93:6c:54:38:
                    06:f8:21:ec:49:e3:75:2e:a7:0f:be:5c:6b:8e:f4:
                    05:09:86:62:27:de:b5:df:92:4a:23:58:7a:f5:0d:
                    a5:3e:12:9d:a7:04:29:20:af:e2:89:5c:0c:d1:9a:
                    e4:2c:36:c5:a1:37:7b:cd:7f:0f:68:c7:16:8a:de:
                    7c:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:75:61:7D:09:A4:C5:EB:36:C3:D1:96:99:F6:F4:C0:94:60:EB:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/89edca34-026a-3c55-9706-b38b7c4a3279.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.crl

            X509v3 Authority Key Identifier:
                keyid:44:EA:00:A7:AC:0D:83:8E:EC:A5:10:EE:B1:42:FF:0B:98:5E:06:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:80c:2000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:c0:2c:ba:34:69:8a:bb:02:ca:7a:60:f7:aa:45:91:98:83:
         a3:62:10:4e:8c:80:6d:a9:66:6f:fd:d3:b0:b2:cc:d1:f7:35:
         0b:4a:52:7b:4b:78:0e:cf:99:5e:3a:15:c2:62:4e:e1:ab:21:
         c7:57:1f:67:70:59:64:8e:e9:e1:05:fa:b5:11:be:c7:89:25:
         5c:76:ad:51:d8:1c:c5:5a:52:25:60:d3:ec:4a:c2:df:31:d6:
         e3:24:19:a7:05:ca:20:11:d6:ea:37:21:55:d1:98:f8:5f:c5:
         83:e1:7c:53:3a:43:3d:ef:51:56:54:28:7c:f1:a8:2c:19:9e:
         64:93:d4:7e:e9:47:c1:53:c9:1f:8e:66:92:f1:ed:58:9b:f0:
         7b:72:1d:d9:7e:0b:3b:01:6d:8a:21:85:4f:d6:a3:54:2e:cf:
         a6:1e:a9:db:fa:55:12:ec:0c:8b:bb:85:a7:fa:75:2a:c3:e3:
         ec:26:88:1a:2e:e2:4f:67:5e:69:51:96:84:3a:8b:9d:23:04:
         ec:fd:88:a6:05:ba:ba:1d:e3:28:e8:d1:31:cd:ff:76:89:b2:
         41:78:b9:4b:1c:8a:47:76:27:62:27:b8:0b:80:df:09:42:19:
         21:ce:02:e6:bb:62:dd:f4:8f:e1:10:40:31:5f:a6:53:19:1b:
         34:8a:77:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:32:50 2026 by rpki-client