Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395/e6a8ea0e-9dc4-37d7-8af9-9f071ebcce04.roa
File:                     e6a8ea0e-9dc4-37d7-8af9-9f071ebcce04.roa (raw, json)
Hash identifier:          FiHfKJ0zG0eQxo3oEXj3W21u/pHH/d6i815giqXa9KM=
Subject key identifier:   C7:72:51:97:9C:52:0B:07:B6:B5:8A:5C:2D:A1:17:2C:47:27:F8:10
Certificate issuer:       /CN=e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395
Certificate serial:       010D0C9F4328584CF85249E8DC1C679366950800
Authority key identifier: 29:93:F0:1F:A9:62:E9:C2:CE:07:F5:20:1B:EF:1D:45:AF:2D:59:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395/e6a8ea0e-9dc4-37d7-8af9-9f071ebcce04.roa
Signing time:             Tue 24 Feb 2026 14:00:41 +0000
ROA not before:           Tue 24 Feb 2026 14:00:41 +0000
ROA not after:            Mon 25 May 2026 13:00:41 +0000
asID:                     14618
IP address blocks:        2602:fc88:1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:f8:52:49:e8:dc:1c:67:93:66:95:08:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395
        Validity
            Not Before: Feb 24 14:00:41 2026 GMT
            Not After : May 25 13:00:41 2026 GMT
        Subject: CN=f969093f-ee65-4da0-86d5-479c73694ee8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:64:a5:7d:08:fa:9c:3c:55:d9:40:12:1c:34:
                    7f:2d:0c:37:56:5b:28:a1:26:be:3d:b7:66:9e:49:
                    6f:11:3d:b3:ff:8c:cd:93:56:eb:82:d0:37:f6:07:
                    b1:fb:b8:44:1b:ac:74:10:45:d4:cc:d7:0f:b1:04:
                    73:42:46:b0:51:12:69:62:ac:73:30:1b:a5:fd:5c:
                    d7:d0:ab:fc:69:b8:02:3e:0d:9f:20:63:f3:ac:d8:
                    11:c0:b7:04:15:f7:2d:01:5b:b8:c5:f9:93:98:c6:
                    cc:d9:96:74:e9:d0:43:25:67:d3:a1:46:7f:e6:fa:
                    f3:eb:d6:20:12:3d:39:eb:23:4e:2b:c3:c0:b3:2d:
                    12:b4:c6:1c:16:9b:dc:90:bd:4b:7a:15:86:bf:84:
                    b1:dc:0c:9b:85:73:8c:8e:23:b0:eb:f3:bf:d5:20:
                    35:36:9e:cb:5b:47:05:0e:f0:d8:70:43:59:28:fc:
                    ff:fd:bc:bd:40:1d:b6:f5:f7:fe:6d:a7:0b:be:d5:
                    47:2d:7c:c8:c0:b8:ee:f6:2b:0d:ea:05:40:9a:c7:
                    7b:9c:21:33:c0:5c:96:b5:c0:4c:9b:76:82:10:d8:
                    07:7a:39:8e:ad:19:b1:46:b2:4d:aa:2f:ec:17:68:
                    bc:e0:74:37:99:c3:00:35:a7:4d:2a:bc:1b:22:22:
                    e5:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:72:51:97:9C:52:0B:07:B6:B5:8A:5C:2D:A1:17:2C:47:27:F8:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395/e6a8ea0e-9dc4-37d7-8af9-9f071ebcce04.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395.crl

            X509v3 Authority Key Identifier:
                keyid:29:93:F0:1F:A9:62:E9:C2:CE:07:F5:20:1B:EF:1D:45:AF:2D:59:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc88:1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:3c:fc:7b:fc:4b:39:e0:f9:d2:40:80:99:b4:d5:80:f9:c5:
         bb:68:8e:72:2a:23:0f:f4:49:0e:15:d3:74:86:6c:7e:1f:da:
         ad:9b:3b:22:aa:e3:d4:40:35:14:d7:1d:a6:9a:d4:a1:88:dd:
         63:cf:ab:91:73:38:95:c3:ea:7f:01:2f:62:66:76:73:a7:89:
         db:98:b0:4c:5e:c5:e3:89:7e:e4:3c:f1:39:d3:60:5a:25:ac:
         13:fa:c9:1e:3d:6c:a7:54:a3:ac:3b:10:0b:6f:33:e8:2f:ec:
         58:56:ae:94:72:53:e6:22:8c:8e:50:09:76:a9:37:62:75:ac:
         14:59:6a:bf:17:00:b6:06:48:d4:bc:de:07:98:a8:74:ab:24:
         25:9e:43:8c:dc:a2:88:df:0d:6e:04:34:4b:f3:d4:a2:d6:c5:
         06:bb:a1:ab:30:91:3f:f1:82:17:1e:a9:6a:ee:c0:de:a1:53:
         48:ae:a6:81:ac:c6:c4:f4:97:2a:e5:1a:54:fc:f7:80:4e:03:
         5d:a9:8d:09:66:28:16:bb:e5:87:b9:10:f7:fb:f9:dd:de:3e:
         99:fb:90:d1:df:d7:1d:4a:d3:46:34:87:5f:30:02:8e:e1:c8:
         ea:9f:93:3f:78:ea:e2:b1:fe:a1:4d:e4:2d:70:a1:31:e0:fb:
         74:ea:58:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:03:45 2026 by rpki-client