Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/faf76ac2-e697-3a4a-9e9c-818394565aae.roa
File:                     faf76ac2-e697-3a4a-9e9c-818394565aae.roa (raw, json)
Hash identifier:          njgxPbiXuBHk9H91PsJYs9L2RqE4Nnntu0iCVhxG+/Y=
Subject key identifier:   2B:48:B4:DD:8A:EC:88:F7:9D:8E:33:D7:1E:E0:BB:69:51:3A:C4:DC
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584CF587AE2D6B4BE3D7628D5380
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/faf76ac2-e697-3a4a-9e9c-818394565aae.roa
Signing time:             Mon 23 Feb 2026 14:00:41 +0000
ROA not before:           Mon 23 Feb 2026 14:00:41 +0000
ROA not after:            Sun 24 May 2026 13:00:41 +0000
asID:                     396603
IP address blocks:        2620:74:2c::31/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:f5:87:ae:2d:6b:4b:e3:d7:62:8d:53:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Feb 23 14:00:41 2026 GMT
            Not After : May 24 13:00:41 2026 GMT
        Subject: CN=b3b5b0f5-1e09-4f63-a84c-076f314899e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:e9:da:42:92:26:d6:da:eb:f1:da:58:1f:61:
                    06:eb:a1:54:17:16:f1:6b:e2:24:1b:36:54:18:99:
                    a7:a2:f2:18:f5:af:73:41:dc:dd:aa:5d:06:e1:4c:
                    59:09:94:86:b5:65:77:b4:9d:4c:9a:f7:99:4c:db:
                    ba:d7:43:22:02:d1:54:10:96:18:50:20:d1:ab:2d:
                    40:bc:8a:3c:4c:59:13:4a:54:51:7d:86:4d:50:d9:
                    ea:e8:7a:5d:fd:cb:52:d3:b9:dc:53:bf:6d:d4:5b:
                    cf:27:e4:5e:4a:a9:1f:6b:e2:27:90:d6:ac:a1:55:
                    a1:a4:50:af:d3:6b:78:85:0c:54:7f:cb:57:22:90:
                    a2:f5:d2:38:43:f5:51:15:09:61:16:ed:9f:ee:6e:
                    87:de:78:c0:8e:fe:e6:3d:96:91:99:bb:dc:ed:52:
                    49:99:7c:c4:52:76:49:29:33:7e:bc:14:50:08:86:
                    5b:46:1b:e1:22:af:f4:31:6b:04:19:b1:f8:09:a1:
                    c9:fb:5e:05:16:25:37:86:f8:79:0a:f5:42:fb:dd:
                    3e:61:e8:66:3a:7c:16:31:0e:0b:1d:57:a8:fb:5c:
                    f7:dc:85:60:d0:f7:fb:9f:93:5a:00:b1:57:22:27:
                    dc:5a:a6:f0:5c:6a:28:44:5b:b3:a1:32:9a:4d:5e:
                    70:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:48:B4:DD:8A:EC:88:F7:9D:8E:33:D7:1E:E0:BB:69:51:3A:C4:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/faf76ac2-e697-3a4a-9e9c-818394565aae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:2c:0:0:0:0:31/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:01:c6:2c:0f:d0:2e:c7:cf:47:5e:1b:02:66:68:aa:56:91:
         a0:ea:b0:e1:83:c1:77:f4:f1:3d:40:04:d1:02:fd:3b:5d:c4:
         9f:8b:9b:07:6a:a0:13:45:ad:81:cd:b6:8b:c0:e3:c1:4e:97:
         3d:85:82:fb:d6:7a:ce:b7:e2:a7:c9:85:7f:db:29:ec:b7:43:
         52:59:eb:0a:48:09:ca:90:35:2e:ad:2a:c2:1b:fd:9f:f4:63:
         29:ec:24:2e:60:f6:93:cf:af:b2:be:80:1a:2f:8b:e3:1b:fb:
         6b:e5:53:fb:d9:bc:c7:0d:14:b7:53:f5:ba:1b:60:79:fb:85:
         90:8e:86:68:24:e1:09:8b:37:bd:50:50:79:e4:df:ed:d2:6b:
         30:5e:75:d5:78:40:9e:1b:ed:cb:27:07:d7:b5:ff:c7:c0:19:
         b8:19:d6:52:6b:60:46:b8:93:49:84:c8:a4:13:1e:ac:fb:80:
         76:e8:03:cd:39:2c:09:ee:29:bb:d3:dc:dc:1d:bb:89:f2:c9:
         a0:65:48:5a:17:57:8b:e6:45:55:d3:a6:d9:14:ad:e7:0b:62:
         13:e3:6f:ae:db:5d:d3:47:2e:1c:1b:6b:39:de:7a:01:45:9a:
         19:a5:8d:e6:cd:90:19:c7:e4:96:72:b8:09:bb:b1:6c:a1:78:
         2f:78:dd:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:58:14 2026 by rpki-client