Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/c86b5de1-bbd3-3493-85cd-85e037cf0e9c.roa
File:                     c86b5de1-bbd3-3493-85cd-85e037cf0e9c.roa (raw, json)
Hash identifier:          N3kGGi3iIJmaEk0FjDryjo1Y9/m3HaCOJdphMF7RmAc=
Subject key identifier:   ED:3A:6B:CF:25:8A:3B:AA:8A:5E:1D:A7:95:B1:82:62:70:FE:2B:0C
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584CDF32B6EDF0374C97C063CF00
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/c86b5de1-bbd3-3493-85cd-85e037cf0e9c.roa
Signing time:             Sun 15 Feb 2026 14:00:41 +0000
ROA not before:           Sun 15 Feb 2026 14:00:41 +0000
ROA not after:            Sat 16 May 2026 13:00:41 +0000
asID:                     22773
IP address blocks:        2600:880a:1114::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:df:32:b6:ed:f0:37:4c:97:c0:63:cf:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Feb 15 14:00:41 2026 GMT
            Not After : May 16 13:00:41 2026 GMT
        Subject: CN=bca78ec8-c5b6-40d6-97e3-c87c9277dd7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:19:46:7a:da:cf:bc:77:f2:4c:3a:a3:7a:c1:
                    2d:ae:b0:fc:d6:26:ed:5c:9f:59:9e:06:67:cb:e9:
                    6f:7e:b6:a6:20:f9:c3:24:7c:ef:6c:db:36:3e:66:
                    f3:28:16:6f:e1:1e:09:78:58:c2:fb:5e:03:2e:3c:
                    a0:a0:d6:63:85:95:cb:a3:6f:d4:3c:e3:50:b7:29:
                    6d:17:f8:c8:01:d6:07:08:4d:2e:f3:a8:c6:50:d2:
                    f2:84:b7:e7:af:55:9c:8d:73:a8:c9:ad:35:db:73:
                    0a:e4:6c:c3:c4:2b:d3:9b:de:18:e5:13:1c:82:58:
                    44:a8:79:3b:69:bb:d2:b7:3b:8d:50:b9:6c:65:3f:
                    82:1e:2c:40:6a:b4:b4:9f:80:08:55:2d:9b:74:9b:
                    f7:fb:f6:62:f6:7a:0e:37:d7:da:8a:70:23:82:d8:
                    19:fb:b3:b9:32:01:96:dd:8b:21:44:a6:e5:2f:91:
                    8a:31:a3:69:32:72:be:fb:35:f1:21:55:ff:34:09:
                    c1:34:66:75:01:5e:fe:1c:5c:47:af:2e:4e:c2:8f:
                    ea:6d:b1:1a:8c:5b:48:18:16:ca:2d:26:68:08:f6:
                    f4:29:5c:c5:62:05:16:b0:58:1b:ce:7d:57:ba:76:
                    4e:c1:0d:89:32:b2:2d:f6:7a:35:81:78:27:6d:af:
                    29:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:3A:6B:CF:25:8A:3B:AA:8A:5E:1D:A7:95:B1:82:62:70:FE:2B:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/c86b5de1-bbd3-3493-85cd-85e037cf0e9c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:880a:1114::/46

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:7e:1c:bf:95:98:ef:a5:c1:21:c2:f8:36:1f:99:be:6f:ef:
         57:e8:5b:28:1c:44:56:f9:2c:7f:6d:07:4f:73:9d:64:ae:3e:
         89:57:0d:0a:a3:f9:26:5c:d6:43:84:75:6e:9c:83:a3:e3:9c:
         09:ef:c3:7a:f3:bf:59:a1:ff:f1:05:5c:55:d6:7c:02:2c:25:
         40:e6:ff:d2:62:e2:23:da:fc:56:b7:ba:55:59:e5:e1:ab:b4:
         fb:26:ca:59:4c:4b:ae:95:5b:e3:db:4f:a7:c7:73:45:7b:4d:
         64:c1:04:db:5e:d1:01:64:7a:0e:5f:45:8b:32:33:62:e9:96:
         b4:96:12:0f:77:41:81:7d:0c:b6:7b:b6:82:f9:6d:1b:76:e3:
         ee:99:55:0f:96:43:87:a8:11:93:9a:4b:85:e2:5a:16:55:d7:
         39:ec:c4:ad:9c:10:c7:1b:5b:2d:b3:67:6e:e1:c9:50:e2:cd:
         4e:7a:ba:be:98:ca:33:a0:cc:ce:c9:79:38:09:16:4e:20:fb:
         c3:d9:f7:9b:3b:d2:92:27:0f:53:db:27:e7:a1:2a:a5:8e:9a:
         d0:bc:55:b7:70:a5:a1:4f:12:3a:f0:b1:92:01:f5:f6:06:54:
         ac:f7:92:73:b3:cd:82:d1:62:e3:18:62:08:45:d3:6c:fe:89:
         83:d9:f4:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:39:26 2026 by rpki-client