Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/17436076-857b-4889-82e9-22151c59a4b1/f385ad82-3306-3e6e-b322-cdd5f01a0d54.roa
File:                     f385ad82-3306-3e6e-b322-cdd5f01a0d54.roa (raw, json)
Hash identifier:          CZNbXfgx/FgGNucAZ52aOBBzK5eNOSfXTWwlmRTh9uk=
Subject key identifier:   EC:17:80:A8:69:45:24:42:58:7E:C4:E8:81:F1:B2:8C:EB:DE:97:1A
Certificate issuer:       /CN=17436076-857b-4889-82e9-22151c59a4b1
Certificate serial:       010D0C9F4328584C9EFC6D602FB1081D0F0CC048
Authority key identifier: 47:0A:FA:56:B9:09:C9:A7:EE:6D:7E:FE:BA:23:0C:CB:80:18:1D:1D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/17436076-857b-4889-82e9-22151c59a4b1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/17436076-857b-4889-82e9-22151c59a4b1/f385ad82-3306-3e6e-b322-cdd5f01a0d54.roa
Signing time:             Fri 23 Jan 2026 14:00:38 +0000
ROA not before:           Fri 23 Jan 2026 14:00:38 +0000
ROA not after:            Thu 23 Apr 2026 13:00:38 +0000
asID:                     46644
IP address blocks:        2620:bf:2000::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/17436076-857b-4889-82e9-22151c59a4b1/17436076-857b-4889-82e9-22151c59a4b1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/17436076-857b-4889-82e9-22151c59a4b1/17436076-857b-4889-82e9-22151c59a4b1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/17436076-857b-4889-82e9-22151c59a4b1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:9e:fc:6d:60:2f:b1:08:1d:0f:0c:c0:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17436076-857b-4889-82e9-22151c59a4b1
        Validity
            Not Before: Jan 23 14:00:38 2026 GMT
            Not After : Apr 23 13:00:38 2026 GMT
        Subject: CN=84764f19-029d-45f0-8149-1b3ad9897a26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:63:92:71:49:b8:79:05:8a:4e:30:36:c8:87:
                    8f:d5:1b:4c:0a:d1:e0:2e:b4:d1:b7:cb:34:a1:e3:
                    aa:49:41:38:c8:3e:1d:87:89:78:a0:45:b0:7f:ed:
                    17:db:c2:48:c0:ad:53:2d:d7:c5:84:4f:f6:82:5e:
                    f3:0e:88:f1:8e:fb:7a:20:76:fd:58:bb:8d:6e:6f:
                    0b:72:9f:70:9f:8a:c8:20:24:e4:25:2f:f3:39:9b:
                    52:62:a5:19:46:65:e4:5f:35:12:a5:9f:26:99:90:
                    56:8e:54:77:ff:32:9d:ea:a5:d8:67:61:a0:5c:8a:
                    51:0d:85:30:5d:98:89:94:e5:6b:22:0a:8d:c7:40:
                    8a:4b:43:5c:68:98:cd:24:1f:13:25:78:42:df:37:
                    96:d4:f4:43:d5:09:cf:9e:8d:7a:5b:6a:ef:33:ab:
                    b6:7b:af:1f:3e:4f:19:9a:07:bc:9e:51:d7:b6:68:
                    51:9d:7f:cd:78:bc:aa:88:a6:dd:d9:32:cc:ee:da:
                    3d:a0:10:b1:05:54:1f:7d:49:f6:f7:30:b4:bb:ec:
                    89:2f:9b:8f:33:8e:48:74:de:7d:fd:ca:cd:f5:ab:
                    93:ac:c6:e2:21:6b:9a:d3:1f:22:4c:69:3b:da:90:
                    a5:d3:b7:5e:a0:1b:7b:9d:ed:6d:4e:96:bf:c2:88:
                    47:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:17:80:A8:69:45:24:42:58:7E:C4:E8:81:F1:B2:8C:EB:DE:97:1A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/17436076-857b-4889-82e9-22151c59a4b1/f385ad82-3306-3e6e-b322-cdd5f01a0d54.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/17436076-857b-4889-82e9-22151c59a4b1/17436076-857b-4889-82e9-22151c59a4b1.crl

            X509v3 Authority Key Identifier:
                keyid:47:0A:FA:56:B9:09:C9:A7:EE:6D:7E:FE:BA:23:0C:CB:80:18:1D:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/17436076-857b-4889-82e9-22151c59a4b1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:bf:2000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:9c:6f:9a:5c:0a:af:f8:95:3d:a3:17:77:db:ab:1b:97:eb:
         9a:11:51:6e:27:12:b4:b3:4b:74:fc:8a:39:01:40:93:e4:94:
         89:47:fa:71:f0:8e:0a:2e:27:f1:01:1b:d9:05:75:22:53:ac:
         7f:10:13:64:8b:22:c9:71:87:26:9a:75:bd:8e:c6:b8:e6:0d:
         ca:31:fa:51:7f:31:dc:87:d5:36:bd:50:0e:6c:0f:04:57:7b:
         1f:00:20:a7:f5:ff:ba:b6:74:d1:0d:bb:7f:ad:8b:8a:c9:4e:
         61:04:b6:42:c5:0c:e9:12:5d:d6:0d:20:f4:62:94:0f:19:ad:
         31:f2:c8:ff:0d:9a:b1:95:ad:a3:fd:04:d8:bd:90:74:bf:1e:
         a2:05:6e:57:34:6d:37:9d:21:29:b5:ca:86:56:8f:af:c7:ba:
         0c:eb:35:03:d0:be:e0:41:ce:43:fd:03:c9:b3:6b:08:72:9f:
         78:30:c3:78:8d:22:aa:68:e8:89:d1:33:01:1d:93:13:3a:76:
         41:fc:f2:5a:cb:54:1b:fd:21:4b:54:aa:e4:0a:73:3c:9b:59:
         26:a1:95:b2:03:28:8e:89:b4:45:49:96:a8:ee:70:91:cc:02:
         aa:88:0c:09:7b:c6:3c:1b:1f:38:67:23:3a:08:12:85:2a:8c:
         dd:da:a7:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:26:21 2026 by rpki-client