Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b42cd78d-c3f1-471a-931a-26eaf5a872f3/400ab649-3959-3e08-8eb1-04630167fca9.roa
File:                     400ab649-3959-3e08-8eb1-04630167fca9.roa (raw, json)
Hash identifier:          APLnUDmM17i/C1L3kL6+ABDXGaCK2OKtk0Nc7xmJ+fM=
Subject key identifier:   23:BA:84:A5:0E:13:C4:50:EA:6F:D5:D1:CC:DF:7E:2F:25:59:82:01
Certificate issuer:       /CN=b42cd78d-c3f1-471a-931a-26eaf5a872f3
Certificate serial:       010D0C9F4328584CF15775E89E2754323C43DB00
Authority key identifier: 0A:F3:1E:F6:71:CB:5B:F5:26:03:2D:37:EE:66:DD:C8:8B:6D:54:DF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b42cd78d-c3f1-471a-931a-26eaf5a872f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b42cd78d-c3f1-471a-931a-26eaf5a872f3/400ab649-3959-3e08-8eb1-04630167fca9.roa
Signing time:             Sun 22 Feb 2026 02:00:32 +0000
ROA not before:           Sun 22 Feb 2026 02:00:32 +0000
ROA not after:            Sat 23 May 2026 01:00:32 +0000
asID:                     53727
IP address blocks:        2602:f982:10::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b42cd78d-c3f1-471a-931a-26eaf5a872f3/b42cd78d-c3f1-471a-931a-26eaf5a872f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b42cd78d-c3f1-471a-931a-26eaf5a872f3/b42cd78d-c3f1-471a-931a-26eaf5a872f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b42cd78d-c3f1-471a-931a-26eaf5a872f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:f1:57:75:e8:9e:27:54:32:3c:43:db:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b42cd78d-c3f1-471a-931a-26eaf5a872f3
        Validity
            Not Before: Feb 22 02:00:32 2026 GMT
            Not After : May 23 01:00:32 2026 GMT
        Subject: CN=98a35368-aedd-4bb4-a8d6-f74c34b4f592
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:df:69:fd:20:75:83:dd:24:12:fa:70:b8:d4:
                    e4:eb:e5:84:bc:c4:6c:b7:5e:f3:de:e2:8c:9c:d5:
                    fe:7a:7a:d6:ec:ba:0f:99:ac:f0:26:07:3e:89:4c:
                    98:0a:6a:dd:29:fa:3e:2a:e7:cd:c2:6c:6e:ec:c4:
                    f2:00:21:fc:d9:39:f3:82:e8:cc:9c:c0:e1:d5:47:
                    ec:77:5e:a7:56:a7:f0:fc:1d:b5:78:58:84:b8:8e:
                    96:0b:44:33:f4:52:aa:2d:7d:75:59:ca:7e:58:3a:
                    c9:9a:fd:09:3a:cb:15:ad:af:98:40:87:c0:f8:d8:
                    fa:37:23:f7:c6:39:2d:4f:23:ad:0d:89:d3:b4:a7:
                    7e:66:9f:04:9e:55:2e:28:13:9e:98:ae:e0:3d:02:
                    a3:ed:25:27:7f:23:5a:78:80:97:ff:1e:a0:44:22:
                    51:11:13:9d:c8:49:7c:ac:00:4d:a5:af:63:3f:16:
                    06:4e:84:81:f2:1c:ff:7c:91:b3:5f:8f:a2:1a:e8:
                    a5:a9:13:7c:3a:b0:c3:61:16:9c:57:2f:c2:b5:e0:
                    84:5b:78:4e:90:04:fd:d0:8a:f9:c0:fc:a6:58:62:
                    df:95:ea:8d:14:43:d9:35:b9:0e:7f:ce:5a:ea:04:
                    f5:32:18:b3:12:a5:58:73:4f:19:e2:e8:db:f5:d4:
                    14:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:BA:84:A5:0E:13:C4:50:EA:6F:D5:D1:CC:DF:7E:2F:25:59:82:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b42cd78d-c3f1-471a-931a-26eaf5a872f3/400ab649-3959-3e08-8eb1-04630167fca9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b42cd78d-c3f1-471a-931a-26eaf5a872f3/b42cd78d-c3f1-471a-931a-26eaf5a872f3.crl

            X509v3 Authority Key Identifier:
                keyid:0A:F3:1E:F6:71:CB:5B:F5:26:03:2D:37:EE:66:DD:C8:8B:6D:54:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b42cd78d-c3f1-471a-931a-26eaf5a872f3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f982:10::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:90:30:3a:a8:d6:ba:36:60:77:eb:6b:34:2c:77:84:34:8b:
         0e:8c:1d:ec:a5:90:c6:20:e8:d4:cb:56:17:34:2f:24:ce:79:
         a0:8c:4e:6a:cb:ff:8f:ed:25:95:69:da:01:53:50:8e:34:b6:
         71:a5:02:bb:f5:e0:ba:77:a5:10:21:e9:82:b4:f5:2c:bb:eb:
         46:5e:4d:4f:67:f3:62:ee:ab:5b:f9:8a:85:2e:a8:71:b9:a1:
         99:c0:23:6b:1f:76:c4:27:5c:6b:1d:02:15:84:d3:c4:c4:86:
         a1:aa:e7:d8:4d:bd:3f:01:92:73:a2:a4:52:d9:19:b4:cc:aa:
         0b:70:bc:c0:38:63:81:4a:09:2a:74:81:6b:44:12:54:5a:ca:
         df:ad:06:fc:55:3a:9c:49:62:71:90:9c:f2:43:19:57:54:e6:
         69:47:89:78:c0:69:d4:63:2e:f1:2f:52:c2:2f:cb:91:a4:8d:
         ed:1b:35:4e:59:20:69:94:58:35:28:e7:e2:95:10:21:df:2f:
         13:72:eb:d9:78:2f:bb:75:ce:c0:a1:ec:cd:1d:bc:d8:bb:07:
         bd:20:43:05:8c:74:a2:68:25:18:c3:fd:ac:cc:8f:cd:8d:81:
         cf:11:eb:64:41:9e:96:9a:76:e7:1a:7a:6e:eb:6a:8d:bb:44:
         2e:8e:fb:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 22:35:32 2026 by rpki-client