Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/cbfb1fb3-6662-3691-a60d-1e84526c4ea0.roa
File:                     cbfb1fb3-6662-3691-a60d-1e84526c4ea0.roa (raw, json)
Hash identifier:          zPSOfuykUS2gUbFmexGqpkPZ68wEtZ+xX70QOc4mSm0=
Subject key identifier:   90:D3:C0:71:21:10:29:E4:1F:FC:47:19:04:3B:41:17:D6:84:DD:EF
Certificate issuer:       /CN=458edb4b-8474-44dc-8841-30a6c66f33d7
Certificate serial:       010D0C9F4328584CB551D6DF1DF3D4B141C47100
Authority key identifier: 24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/cbfb1fb3-6662-3691-a60d-1e84526c4ea0.roa
Signing time:             Sat 31 Jan 2026 14:00:39 +0000
ROA not before:           Sat 31 Jan 2026 14:00:39 +0000
ROA not after:            Fri 01 May 2026 13:00:39 +0000
asID:                     14618
IP address blocks:        2606:7bc0:1060::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:b5:51:d6:df:1d:f3:d4:b1:41:c4:71:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=458edb4b-8474-44dc-8841-30a6c66f33d7
        Validity
            Not Before: Jan 31 14:00:39 2026 GMT
            Not After : May  1 13:00:39 2026 GMT
        Subject: CN=31089b1b-eb03-422e-8c53-d6e80c10462b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:53:cd:33:98:3f:c1:e4:6a:40:c5:e6:8c:3d:
                    76:f8:6a:fc:36:f4:19:91:04:87:a0:79:f3:59:83:
                    44:19:a1:7c:e5:01:ca:09:55:5c:d8:4b:88:ce:85:
                    61:35:fb:da:86:19:d8:cc:d5:68:0a:a6:3a:27:f6:
                    16:a2:41:e9:33:19:c6:2c:22:af:85:cd:ce:82:10:
                    63:08:91:46:a8:32:f6:51:e9:ad:ee:f6:84:13:63:
                    81:c1:cc:93:41:ec:b3:a0:3a:5c:09:64:a6:35:58:
                    b2:63:8e:af:00:ec:22:7a:52:35:d8:ba:53:0a:a5:
                    72:7e:8c:44:d3:95:4f:7b:78:5d:63:db:72:26:a9:
                    f6:96:97:09:8a:40:8e:1e:38:12:9a:e4:c4:71:65:
                    c8:ed:e7:d7:9f:ba:f7:33:cc:ee:27:7b:5c:0d:71:
                    f8:af:92:a1:ac:d0:01:8c:d2:ca:f9:df:26:85:9a:
                    a6:5a:34:e3:d4:55:9e:2c:51:5f:21:df:0c:21:9f:
                    39:dc:a6:f6:09:db:bf:2f:e8:46:8c:57:8b:07:6f:
                    66:de:e4:0c:37:85:f5:d1:be:a8:80:e9:e3:8c:66:
                    ef:22:43:79:b3:1c:7e:35:a5:34:09:f3:e4:49:f3:
                    c3:51:88:76:13:7b:6f:93:75:b2:10:49:53:24:b5:
                    78:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:D3:C0:71:21:10:29:E4:1F:FC:47:19:04:3B:41:17:D6:84:DD:EF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/cbfb1fb3-6662-3691-a60d-1e84526c4ea0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl

            X509v3 Authority Key Identifier:
                keyid:24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:7bc0:1060::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:be:88:79:65:b5:7f:64:56:2b:e4:6c:3a:8c:a8:34:95:75:
         7c:87:6f:db:a6:3c:46:bb:6c:f0:43:20:00:a3:1d:cf:34:fc:
         da:1f:fa:9a:8e:be:3b:48:fa:d2:75:2b:cc:a0:e6:f0:a7:a9:
         1d:c8:a5:38:40:44:09:1a:85:84:fb:57:c3:96:11:66:c7:06:
         85:90:46:ff:64:a6:12:84:8c:05:1e:72:2e:f1:09:28:85:14:
         59:03:88:e6:c1:3c:18:c9:dc:a9:c5:66:26:4f:1e:29:f2:4d:
         fd:91:c2:a1:df:de:14:81:b4:c9:50:03:a5:99:44:0e:86:9a:
         49:36:98:cd:65:ec:23:d8:14:c6:4f:82:4d:5f:6f:4a:c3:a7:
         11:72:c2:d6:4e:ca:08:77:82:27:b2:7d:75:c4:b6:ae:08:66:
         61:c5:17:f9:6e:f8:0d:b3:96:9f:3b:35:ba:7d:64:0a:d6:f3:
         c9:4b:2f:d2:18:97:d6:ce:f8:ed:6b:91:99:ba:3f:85:69:cc:
         fe:ed:6e:ca:29:fe:d8:be:7e:f9:93:4f:05:d3:42:70:d6:86:
         e0:73:1b:4a:d7:35:92:c0:e2:48:32:f8:e1:a5:91:e6:5c:3f:
         02:c9:55:2e:ef:2f:4f:1c:b5:79:79:0b:df:fe:2d:e4:1a:1c:
         72:3f:05:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:50:13 2026 by rpki-client