Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e/af56c26b-429b-351b-b947-c8b53bdd868c.roa
File:                     af56c26b-429b-351b-b947-c8b53bdd868c.roa (raw, json)
Hash identifier:          o41bepEa7QLygcHNksyd04T8W5xZs+kvvcUXh0LVBAE=
Subject key identifier:   AF:CE:96:B1:AC:12:FF:E4:C7:67:F0:FC:F8:97:17:11:73:EC:04:03
Certificate issuer:       /CN=33c78d60-34eb-4fed-8e25-925b95a30c8e
Certificate serial:       010D0C9F4328584CDB02114CE5551ABAD9403900
Authority key identifier: 5F:65:25:B0:69:97:21:82:E6:E2:D3:91:46:77:BA:5C:33:D3:E0:41
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e/af56c26b-429b-351b-b947-c8b53bdd868c.roa
Signing time:             Sat 14 Feb 2026 02:00:32 +0000
ROA not before:           Sat 14 Feb 2026 02:00:32 +0000
ROA not after:            Fri 15 May 2026 01:00:32 +0000
asID:                     33039
IP address blocks:        2602:f95c:ca2::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e/33c78d60-34eb-4fed-8e25-925b95a30c8e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e/33c78d60-34eb-4fed-8e25-925b95a30c8e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:db:02:11:4c:e5:55:1a:ba:d9:40:39:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33c78d60-34eb-4fed-8e25-925b95a30c8e
        Validity
            Not Before: Feb 14 02:00:32 2026 GMT
            Not After : May 15 01:00:32 2026 GMT
        Subject: CN=5d9f29a7-7d08-4182-b830-55c6e64bc947
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:d7:b3:30:9a:5a:63:bd:ac:f3:bc:19:d6:34:
                    b7:c6:f9:4a:c4:f5:f7:de:b4:48:8b:1f:36:c4:5a:
                    38:5d:c5:9f:7b:76:ae:0d:17:38:bc:f0:ab:0a:ad:
                    12:e3:1a:40:92:47:7c:1e:08:5c:8a:fe:de:82:7d:
                    1a:68:59:5d:d7:fc:cf:21:08:fc:09:f8:c9:47:30:
                    18:6f:32:79:f6:84:6f:87:1a:7c:56:de:0a:03:a6:
                    16:da:f6:ea:b0:d9:3f:83:02:1b:25:c5:9e:bd:0a:
                    72:4e:ce:43:00:18:98:1c:86:0d:ff:89:ba:fa:5a:
                    ed:d9:6e:95:c4:e2:57:86:fa:22:1b:d6:97:65:99:
                    31:14:25:11:d6:16:e4:0e:b1:cf:b1:a8:95:cf:d9:
                    be:87:bc:1a:c0:40:3d:ce:51:2b:43:5d:f5:49:8d:
                    b0:db:1f:36:d0:3b:5a:7a:e4:58:56:78:87:57:a8:
                    6f:e5:cf:e1:ac:9e:97:e9:fc:30:34:2b:bb:47:32:
                    c5:b0:da:07:b1:df:6d:2b:88:76:e9:6f:74:ab:b7:
                    1f:60:73:a2:ab:56:8f:9d:ca:1e:da:cb:27:f1:d0:
                    38:b6:a8:84:25:43:23:d8:e2:2c:f4:37:90:40:2e:
                    53:50:60:4c:df:ce:01:ee:f8:8c:8e:0c:8d:13:5a:
                    b3:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:CE:96:B1:AC:12:FF:E4:C7:67:F0:FC:F8:97:17:11:73:EC:04:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e/af56c26b-429b-351b-b947-c8b53bdd868c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e/33c78d60-34eb-4fed-8e25-925b95a30c8e.crl

            X509v3 Authority Key Identifier:
                keyid:5F:65:25:B0:69:97:21:82:E6:E2:D3:91:46:77:BA:5C:33:D3:E0:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f95c:ca2::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:91:fe:53:96:c2:cc:37:62:89:79:68:e5:25:c1:b9:35:78:
         2d:df:76:af:26:02:66:44:d9:4b:c1:af:22:39:fd:c0:90:66:
         a5:fb:32:52:36:bd:49:ac:1b:27:69:cc:6f:15:ed:bf:40:30:
         0d:78:f8:a4:d3:2f:bf:10:d5:76:7f:ae:76:a8:06:dc:c1:82:
         3a:16:56:83:6f:41:a0:a6:9f:12:16:e3:01:ae:12:9b:2b:3a:
         be:42:af:ca:1f:1f:6b:a8:ca:5f:55:31:f1:6e:d5:8e:e3:47:
         46:50:27:22:03:aa:56:7d:0e:05:ec:a8:b8:1b:82:83:d6:7c:
         2c:f2:00:3c:49:55:e8:2b:9f:d1:c7:48:71:fa:0a:fe:ee:24:
         9f:4c:d0:ed:d5:d5:79:eb:b3:04:7c:ae:52:3c:2c:69:47:5e:
         fc:44:d9:8d:0c:69:e3:62:31:84:d5:24:50:70:d5:47:7c:ba:
         81:6d:98:87:d6:55:af:8b:72:06:ea:ad:99:57:c8:f5:9e:6c:
         99:4b:a0:22:99:be:1c:d6:1e:6c:4a:8f:87:be:36:02:14:69:
         b9:46:c6:eb:9d:5c:d9:14:2d:74:6d:4a:94:2e:f0:85:63:f0:
         c6:0b:92:f4:80:c2:8a:98:97:c4:aa:b2:1a:8b:f8:0a:4e:b0:
         ca:43:80:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:25:11 2026 by rpki-client