Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311/fc7e1ab8-f5a6-34aa-9832-6462cf544893.roa
File:                     fc7e1ab8-f5a6-34aa-9832-6462cf544893.roa (raw, json)
Hash identifier:          msbLQVtcM6xhfgdNclgJu7PCSarVbJJwz9ViJ4qmbUQ=
Subject key identifier:   0D:20:28:20:AD:B6:71:F9:F5:C2:F6:FE:4B:0F:F2:1A:72:CE:AC:7D
Certificate issuer:       /CN=d5ebadbb-b63c-4e95-8e76-fd22cc861311
Certificate serial:       010D0C9F4328584CED278BC5BF3634D9665F7600
Authority key identifier: 0A:5D:E7:3A:9A:58:CA:C5:9D:F6:05:BC:E3:F2:1E:CC:23:F8:D7:94
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311/fc7e1ab8-f5a6-34aa-9832-6462cf544893.roa
Signing time:             Fri 20 Feb 2026 14:00:41 +0000
ROA not before:           Fri 20 Feb 2026 14:00:41 +0000
ROA not after:            Thu 21 May 2026 13:00:41 +0000
asID:                     25697
IP address blocks:        2605:7380:8000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311/d5ebadbb-b63c-4e95-8e76-fd22cc861311.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311/d5ebadbb-b63c-4e95-8e76-fd22cc861311.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ed:27:8b:c5:bf:36:34:d9:66:5f:76:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5ebadbb-b63c-4e95-8e76-fd22cc861311
        Validity
            Not Before: Feb 20 14:00:41 2026 GMT
            Not After : May 21 13:00:41 2026 GMT
        Subject: CN=ec7864b0-d258-4f88-a084-8fd547d01cb0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:41:56:cd:58:10:95:7d:bd:06:07:3c:6e:6d:
                    e4:54:d3:36:5c:5c:f8:07:68:22:4f:d9:e4:99:d6:
                    c8:15:13:35:6c:b9:aa:be:53:3f:2c:88:a8:78:3b:
                    2b:7e:82:a7:6f:86:74:6d:fb:25:d5:8f:ce:72:da:
                    d0:c0:32:bb:07:74:58:47:f5:2b:df:82:20:2d:91:
                    8a:09:32:8b:2a:65:83:93:3b:95:28:2a:85:4d:92:
                    ab:73:43:c1:fa:1b:e9:75:fe:d7:74:66:42:2a:6a:
                    59:96:8f:89:bb:66:fa:f2:46:b7:69:9b:f9:ff:b1:
                    cf:00:3e:2c:5f:d7:78:80:59:23:98:6c:66:24:5b:
                    da:37:0a:a5:bb:1e:96:d0:ad:17:74:16:4c:91:2e:
                    8a:73:25:99:e3:d0:01:38:ea:c0:c2:03:49:00:70:
                    14:52:cb:5b:70:6a:74:03:e1:5b:af:52:0f:7a:f7:
                    c7:e0:9b:b2:16:74:92:79:41:78:b6:bf:b1:96:c9:
                    ee:76:4b:36:32:a6:95:bc:0e:64:e8:b5:3b:fc:a7:
                    d9:7a:d6:b4:ec:ae:33:1b:63:d6:a5:66:bb:09:d2:
                    ab:6c:b3:36:5d:9b:d2:01:0a:13:29:4c:62:6f:80:
                    88:99:b4:3c:7c:44:23:d4:59:1f:13:d8:43:dd:8d:
                    ee:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:20:28:20:AD:B6:71:F9:F5:C2:F6:FE:4B:0F:F2:1A:72:CE:AC:7D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311/fc7e1ab8-f5a6-34aa-9832-6462cf544893.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311/d5ebadbb-b63c-4e95-8e76-fd22cc861311.crl

            X509v3 Authority Key Identifier:
                keyid:0A:5D:E7:3A:9A:58:CA:C5:9D:F6:05:BC:E3:F2:1E:CC:23:F8:D7:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:7380:8000::/34

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:ed:21:6e:0b:42:ff:0f:45:18:c0:f5:b3:09:7a:57:15:1c:
         63:dd:54:ea:d3:2e:3f:92:66:db:5c:96:8b:57:4d:b0:c2:67:
         9e:0b:2e:f5:fc:23:85:fa:e0:e1:23:51:fe:29:8d:68:9e:45:
         8c:7b:03:0a:78:44:b5:0a:a7:65:df:d4:56:7f:71:0d:d4:b6:
         78:ba:36:3c:e2:47:99:68:74:01:32:ee:0b:d9:4d:e9:f4:8d:
         90:32:e1:53:4c:5c:6d:f6:54:a2:c9:26:f1:47:9f:7d:cc:7c:
         9a:e5:d9:7e:3a:4d:c6:e0:e2:c9:0f:e5:e1:4d:4a:c1:11:eb:
         19:8f:e5:69:03:c2:cc:aa:88:f1:5b:fa:88:1b:d1:5c:35:01:
         21:5d:e0:7d:90:76:4f:cc:68:ee:89:66:27:34:aa:55:4d:c7:
         ca:73:2d:7f:fc:c5:e2:b4:57:62:30:ad:85:52:f8:79:c3:44:
         b6:ef:be:e8:28:07:11:c6:33:d6:fc:64:ec:73:59:90:a0:a2:
         97:98:6b:74:06:fb:96:e2:af:fd:9a:de:c0:66:57:ec:01:d4:
         d7:9f:2f:dc:5d:4c:6b:d9:17:27:c8:da:8a:ce:ff:68:53:10:
         b5:a0:96:84:e1:96:ca:2b:ce:ad:da:1b:06:6b:38:84:a6:cb:
         4e:97:e1:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:40:07 2026 by rpki-client