Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/ebe79a59-4947-3591-abf8-3a90402caae2.roa
File:                     ebe79a59-4947-3591-abf8-3a90402caae2.roa (raw, json)
Hash identifier:          WeIIr8c9NXXUUaG1VSJbaEBlOEeZ3RBjtfbrnjPAfcQ=
Subject key identifier:   05:DB:A0:77:C2:12:84:D8:DE:4C:BE:DF:4E:AB:9F:D5:E4:3F:11:CC
Certificate issuer:       /CN=3efd7529-38b1-472c-9d5b-d87382d088a0
Certificate serial:       010D0C9F4328584CCBA75CDBF2EDA4DF84932120
Authority key identifier: 5B:83:22:72:94:88:A9:78:59:9B:3A:DB:DD:E0:48:29:87:6A:94:07
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/ebe79a59-4947-3591-abf8-3a90402caae2.roa
Signing time:             Sun 08 Feb 2026 14:00:41 +0000
ROA not before:           Sun 08 Feb 2026 14:00:41 +0000
ROA not after:            Sat 09 May 2026 13:00:41 +0000
asID:                     394285
IP address blocks:        2606:a100:4000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:cb:a7:5c:db:f2:ed:a4:df:84:93:21:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3efd7529-38b1-472c-9d5b-d87382d088a0
        Validity
            Not Before: Feb  8 14:00:41 2026 GMT
            Not After : May  9 13:00:41 2026 GMT
        Subject: CN=1be48a4e-c9b8-417a-ae4c-c97191803772
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:fd:32:c5:7f:c6:0e:b8:cb:a3:b4:fc:12:62:
                    13:be:16:7a:73:53:61:1a:52:b3:fd:98:3a:85:50:
                    20:e1:73:14:2c:6f:08:ec:a5:ea:5c:82:fb:c0:1a:
                    18:be:aa:ee:68:28:21:f2:98:4f:c4:33:1b:21:36:
                    54:f1:2f:c8:75:de:39:14:2c:fa:e4:3c:28:e3:e5:
                    32:8c:f0:95:30:68:5e:9b:59:45:8a:e9:fc:47:59:
                    d8:30:dd:36:f8:57:aa:79:0b:05:fc:c3:61:56:31:
                    a7:97:6e:89:83:22:0d:5f:3f:b7:65:ea:f7:d6:b2:
                    0c:ec:ad:53:5e:2a:01:b1:99:56:d4:f1:fc:34:50:
                    03:5e:9c:31:6d:aa:72:67:0f:c7:54:4a:a5:72:48:
                    8b:ea:09:fd:8b:93:a2:24:88:48:e9:14:d3:bc:1d:
                    74:58:db:22:33:65:76:5b:51:2c:57:79:30:fe:bb:
                    79:8b:d9:71:50:6c:dc:cb:63:d0:d2:b7:d1:45:f9:
                    92:e3:58:d5:9b:bc:02:6c:d0:13:2e:9b:f4:cb:3e:
                    8d:ba:02:54:a2:56:14:dc:de:06:2f:56:c8:52:67:
                    82:f2:22:86:4d:ad:02:28:d7:c9:c7:d0:43:2c:23:
                    37:b0:48:2a:d6:13:52:2a:49:6d:75:79:5b:b5:ac:
                    19:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:DB:A0:77:C2:12:84:D8:DE:4C:BE:DF:4E:AB:9F:D5:E4:3F:11:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/ebe79a59-4947-3591-abf8-3a90402caae2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.crl

            X509v3 Authority Key Identifier:
                keyid:5B:83:22:72:94:88:A9:78:59:9B:3A:DB:DD:E0:48:29:87:6A:94:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:a100:4000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:77:8f:14:9d:17:65:05:60:e8:9a:de:6f:1b:c3:65:9c:b9:
         04:91:f5:7a:1e:d1:c0:0f:02:69:b8:d3:db:33:a0:ac:8e:22:
         2c:86:94:ce:4d:ac:be:b9:f7:9d:1e:bc:d7:17:24:f7:a4:37:
         29:31:75:ab:69:b9:f9:de:83:91:f0:79:1f:bd:4c:c9:d6:1a:
         e5:7a:9b:85:4d:63:e3:ff:a3:f2:98:86:3e:ef:61:46:a0:28:
         ba:95:fa:14:72:52:92:51:ef:c1:cf:fe:3f:b0:3e:42:58:9e:
         2d:b7:cb:e7:4e:0c:5e:94:f1:87:f5:48:55:8c:35:2f:7e:b5:
         0c:fd:2e:99:d6:b0:41:15:3c:36:e9:2e:dd:52:e8:35:86:1c:
         a4:fe:68:b8:e9:5a:87:7b:54:66:07:ce:b7:18:90:d4:d7:b4:
         90:88:50:fc:df:0a:fc:af:64:a2:32:b0:d1:f8:91:7d:46:97:
         1a:42:89:13:9f:23:f0:11:6f:5e:78:29:50:63:c5:9d:fb:d7:
         08:7d:be:23:cc:b2:a3:11:5b:1c:0f:01:96:b3:21:5a:e6:d5:
         87:11:4e:a3:2f:8f:57:90:d3:2e:33:d7:9b:25:27:f8:ef:c4:
         f2:cd:a2:01:9d:68:5a:f6:3f:97:8c:44:86:e9:af:f2:af:b2:
         a6:9e:b2:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:14:53 2026 by rpki-client