Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/665e2eb7-d906-36bb-b075-f1ce4c879b8c.roa
File:                     665e2eb7-d906-36bb-b075-f1ce4c879b8c.roa (raw, json)
Hash identifier:          8pJIrq5FFh8o3cNHfKuxe0nxn4VeuiZFa/CzsKZJHCc=
Subject key identifier:   98:15:EB:CD:C0:6E:AE:85:8A:69:81:D2:19:5D:65:58:DB:0F:F5:C2
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584CE097904FC9F4F61A82E1F180
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/665e2eb7-d906-36bb-b075-f1ce4c879b8c.roa
Signing time:             Mon 16 Feb 2026 02:00:32 +0000
ROA not before:           Mon 16 Feb 2026 02:00:32 +0000
ROA not after:            Sun 17 May 2026 01:00:32 +0000
asID:                     22773
IP address blocks:        2600:880a:e000::/35 maxlen: 35
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:e0:97:90:4f:c9:f4:f6:1a:82:e1:f1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Feb 16 02:00:32 2026 GMT
            Not After : May 17 01:00:32 2026 GMT
        Subject: CN=3f68d0a9-1d26-4ade-95fe-d77fa0c5b3a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:f4:d0:98:12:4f:f2:34:23:51:28:6d:ec:1b:
                    27:16:9f:7b:4b:8c:2e:4e:0e:b8:0c:70:8b:54:8e:
                    8f:47:93:95:4e:1b:df:9e:d8:37:07:04:86:35:6b:
                    7c:10:51:d7:aa:c2:3d:83:a5:17:78:b7:cc:77:14:
                    5d:7d:31:6c:44:6f:1f:e1:08:4e:51:19:0d:90:69:
                    49:1b:da:81:ba:29:68:fa:e6:c2:cc:44:7d:56:05:
                    a8:50:dd:f0:a4:ab:75:9a:f5:0c:44:8e:1a:4b:90:
                    ae:cc:6c:3a:ea:85:3b:ca:43:67:a6:70:1a:06:a0:
                    38:40:9a:16:65:3c:ac:89:38:58:4f:f9:97:fa:b3:
                    79:41:d8:b4:a4:65:58:14:9e:41:06:8a:2f:23:e5:
                    e1:b5:d3:f8:d5:b4:ba:4f:32:c1:3f:30:62:23:d1:
                    2e:d8:93:9f:47:95:6e:a4:7a:84:58:6b:07:88:4c:
                    94:6f:cb:c2:f3:50:82:01:81:33:46:15:2b:57:3b:
                    2a:4b:c8:1e:e3:9f:39:85:04:a0:a9:8d:4d:9d:92:
                    41:9c:99:fb:ea:b8:96:9d:e6:cb:29:db:c8:38:76:
                    43:ef:e0:be:e1:86:00:0c:ed:d3:9f:b8:c8:bd:50:
                    4c:03:09:43:37:5f:b3:ac:c6:fe:98:dd:84:a7:f5:
                    21:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:15:EB:CD:C0:6E:AE:85:8A:69:81:D2:19:5D:65:58:DB:0F:F5:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/665e2eb7-d906-36bb-b075-f1ce4c879b8c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:880a:e000::/35

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:cd:56:09:4e:bc:8c:73:ef:c9:80:0d:13:d6:e8:80:7a:1d:
         e2:2b:72:4f:2f:f3:9a:f7:e5:1c:01:e1:95:a2:2c:c8:22:73:
         97:98:46:7b:8e:88:86:5f:3a:78:30:6a:00:54:c8:b6:3a:a1:
         ba:3b:71:2c:cb:c5:cc:f1:1a:8c:2f:2f:db:0b:97:a0:d3:d4:
         52:40:c2:13:e9:d6:d8:b6:9c:d0:a8:55:55:f8:c9:e6:95:f8:
         15:50:70:24:70:c7:cb:2c:e2:33:0f:08:00:bb:88:08:3f:4f:
         df:fd:27:e3:8e:b3:3d:6a:cf:c9:8a:3d:44:be:37:15:2b:88:
         f3:5a:ec:a3:54:40:1f:7b:00:81:a6:c4:77:b5:3d:c6:4f:b3:
         8c:81:75:35:f2:65:45:cd:04:f5:7a:50:89:5b:c3:27:e6:04:
         26:7e:b6:46:c9:b4:b7:8d:8c:72:d5:63:bc:6f:87:ad:b2:41:
         5c:74:5e:e7:79:da:52:a6:6d:bb:b5:c2:6b:a3:0d:d2:a0:18:
         a4:27:00:46:90:33:c9:00:10:97:05:db:0a:cb:c2:49:b7:ac:
         ef:7f:ed:a8:bc:13:10:15:ce:25:8b:5a:51:ae:11:c7:9c:53:
         3e:2a:c2:0b:5e:3e:28:95:fa:b9:36:d1:73:63:3f:b4:37:f2:
         24:61:ba:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:21:16 2026 by rpki-client