Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/fec2ff72-8e26-3dd4-9e45-70542738af70.roa
File:                     fec2ff72-8e26-3dd4-9e45-70542738af70.roa (raw, json)
Hash identifier:          +ZpDK8zCHpSnuvstLKftE2WEzq0m/6Zve3dFpUHfayw=
Subject key identifier:   94:68:8E:CB:59:63:F4:E8:D8:6C:CE:B2:72:60:23:0B:DA:D5:4C:30
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584CBDB20F2027AF520294BB0400
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/fec2ff72-8e26-3dd4-9e45-70542738af70.roa
Signing time:             Tue 03 Feb 2026 14:00:39 +0000
ROA not before:           Tue 03 Feb 2026 14:00:39 +0000
ROA not after:            Mon 04 May 2026 13:00:39 +0000
asID:                     22773
IP address blocks:        2001:579:7478::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:bd:b2:0f:20:27:af:52:02:94:bb:04:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Feb  3 14:00:39 2026 GMT
            Not After : May  4 13:00:39 2026 GMT
        Subject: CN=c28e0f11-302d-4e7d-92a9-f605b56a1cd1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:85:79:50:98:24:03:c3:ae:26:b8:6d:ba:59:
                    0c:ba:5c:23:23:e0:66:6b:37:eb:e4:57:cc:2e:84:
                    fc:9f:b2:a7:33:67:53:07:67:51:84:39:f6:24:55:
                    22:6a:ec:88:83:a8:2f:e4:d9:94:d4:c5:18:80:6b:
                    30:36:3a:46:76:46:ce:17:fa:6c:c6:42:4c:ed:11:
                    d8:ec:65:d8:b3:2c:8f:9c:83:55:05:c8:57:0e:67:
                    9b:45:5f:93:fd:60:c6:5d:5f:8d:f7:ed:b5:13:f8:
                    bc:69:5c:a7:e1:50:63:ca:7b:ce:0d:57:ee:00:f7:
                    c0:5f:f1:e1:91:28:b8:e0:9d:41:99:87:f1:cc:9c:
                    eb:09:f8:fd:7c:ad:0b:87:4b:a9:f8:73:e2:ae:75:
                    bd:0d:83:d1:8a:5f:0a:11:15:83:89:90:08:d6:55:
                    72:73:8b:26:03:13:08:af:26:a9:f2:b8:09:6f:f1:
                    6c:67:ae:6b:00:a1:74:b3:0d:fe:79:96:5d:2a:23:
                    ed:32:ba:c0:68:45:0f:6e:3f:1a:7f:75:1e:33:3d:
                    6e:2e:a2:fd:c1:8f:c9:0a:15:2f:79:a2:b6:27:e5:
                    3a:d5:06:1c:b1:f9:15:1f:a0:c4:9e:37:f4:f5:bd:
                    c3:aa:64:b5:80:4a:ea:06:37:e7:ec:a6:93:52:db:
                    6d:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:68:8E:CB:59:63:F4:E8:D8:6C:CE:B2:72:60:23:0B:DA:D5:4C:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/fec2ff72-8e26-3dd4-9e45-70542738af70.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:579:7478::/46

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:7e:89:12:f5:68:5b:3c:a6:5b:84:c1:45:f5:b8:d5:46:00:
         f9:c4:49:42:dc:d6:15:33:0b:d1:30:a9:e7:4f:a4:a3:ce:fd:
         1c:96:05:c5:d8:59:9b:26:db:7e:87:d1:31:fb:02:b4:46:80:
         89:32:3a:89:85:de:91:0a:f1:dc:bc:5d:8c:cb:5d:d1:cf:70:
         cd:ad:53:0c:32:13:b5:de:2a:3b:4e:1e:fb:2f:1d:71:af:94:
         0a:11:ea:d2:b9:3c:e9:7d:86:a5:07:6c:10:fc:a0:c5:b2:8f:
         d8:8e:e4:60:d0:87:78:48:60:4a:d0:a4:39:8d:4f:3c:c6:6a:
         cb:a6:06:cd:5c:d0:12:4d:46:db:48:99:f1:a9:99:3f:c4:9f:
         72:c9:d7:78:b1:12:2e:4a:57:5d:4e:3c:3f:60:e3:60:48:fb:
         b8:c9:07:88:8a:f4:e1:5b:be:0b:19:27:24:78:78:fb:a8:b8:
         bd:2c:aa:04:00:6e:6c:d3:6b:88:56:dc:5a:d3:a2:05:69:cc:
         14:ee:6f:40:86:b6:b9:ab:a2:3a:06:f6:7c:f1:ab:79:d4:63:
         25:6f:e0:5a:61:b3:c0:31:30:a0:c7:da:bb:31:8d:3c:21:af:
         4d:bd:18:f0:b1:64:8e:32:ec:cd:8b:97:7d:d8:4d:76:24:13:
         53:38:db:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:58:37 2026 by rpki-client