Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/acaade25-9776-4234-a203-4f2776b69f08/3373b409-dc7f-33d9-aa1d-16771300f34e.roa
File:                     3373b409-dc7f-33d9-aa1d-16771300f34e.roa (raw, json)
Hash identifier:          zOH0jIVY7W3p0omr4AJw2c5WiIkSSuZTtpZsgjJWYSw=
Subject key identifier:   62:85:47:D0:53:EC:E5:A5:E7:F2:98:55:A3:17:D4:F8:7F:5E:8D:F7
Certificate issuer:       /CN=acaade25-9776-4234-a203-4f2776b69f08
Certificate serial:       010D0C9F4328584CE7922F401190B5D345416200
Authority key identifier: DB:FF:D1:2D:6B:EF:C7:60:BA:4D:B2:7E:8B:96:22:45:0E:04:E6:C5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/acaade25-9776-4234-a203-4f2776b69f08.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/acaade25-9776-4234-a203-4f2776b69f08/3373b409-dc7f-33d9-aa1d-16771300f34e.roa
Signing time:             Wed 18 Feb 2026 14:00:41 +0000
ROA not before:           Wed 18 Feb 2026 14:00:41 +0000
ROA not after:            Tue 19 May 2026 13:00:41 +0000
asID:                     14874
IP address blocks:        2602:f825::/40 maxlen: 124
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/acaade25-9776-4234-a203-4f2776b69f08/acaade25-9776-4234-a203-4f2776b69f08.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/acaade25-9776-4234-a203-4f2776b69f08/acaade25-9776-4234-a203-4f2776b69f08.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/acaade25-9776-4234-a203-4f2776b69f08.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:e7:92:2f:40:11:90:b5:d3:45:41:62:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=acaade25-9776-4234-a203-4f2776b69f08
        Validity
            Not Before: Feb 18 14:00:41 2026 GMT
            Not After : May 19 13:00:41 2026 GMT
        Subject: CN=f4285268-bb02-4058-a481-15ae7e4993a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:89:cb:fa:81:af:97:62:0f:20:6a:73:5f:ce:
                    51:e1:36:4f:e7:93:66:a9:7a:60:85:49:04:59:09:
                    05:64:9a:e3:59:8d:c7:7b:88:af:0a:f5:6d:87:97:
                    9f:39:9c:59:4d:9f:a1:b6:06:31:75:78:2a:6b:c9:
                    47:18:fa:93:81:f0:59:f7:0c:a3:ec:a8:b6:76:e6:
                    f8:e7:71:01:4b:e0:25:87:b7:83:26:b3:9d:8a:e2:
                    dd:5a:11:c9:cb:81:42:98:c2:7e:3b:fc:93:0f:23:
                    17:57:3a:66:41:fa:11:b7:f6:71:88:23:ca:2e:4d:
                    1b:b3:21:b5:60:26:30:93:6f:f4:0d:30:f1:bd:65:
                    b7:d4:84:0f:16:4c:e5:c0:ff:67:82:85:8c:d0:20:
                    2f:e2:b7:ab:a3:80:4b:41:04:74:a4:5c:a9:0c:23:
                    ce:00:f5:69:ca:23:8e:f4:94:d1:7b:75:e7:de:85:
                    e4:26:6b:50:20:3c:ec:72:25:fa:3a:8e:04:f2:c9:
                    e2:63:e7:5b:5c:5c:33:2a:72:e1:f9:9b:e7:27:f5:
                    9f:8f:1e:80:89:7b:0f:82:ca:b8:f1:00:d3:2c:47:
                    2c:96:77:e0:57:a7:13:18:5a:0a:c6:05:02:e2:27:
                    52:6e:f4:59:29:d6:6d:2f:9d:93:b3:67:f5:6d:c7:
                    c5:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:85:47:D0:53:EC:E5:A5:E7:F2:98:55:A3:17:D4:F8:7F:5E:8D:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/acaade25-9776-4234-a203-4f2776b69f08/3373b409-dc7f-33d9-aa1d-16771300f34e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/acaade25-9776-4234-a203-4f2776b69f08/acaade25-9776-4234-a203-4f2776b69f08.crl

            X509v3 Authority Key Identifier:
                keyid:DB:FF:D1:2D:6B:EF:C7:60:BA:4D:B2:7E:8B:96:22:45:0E:04:E6:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/acaade25-9776-4234-a203-4f2776b69f08.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f825::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:bb:81:4d:51:38:32:d0:c7:9f:b6:96:93:50:d6:07:5e:59:
         7d:3f:22:50:76:10:ec:d1:82:4d:44:8b:19:81:5f:4f:54:6f:
         13:d0:dd:b8:1f:a1:4d:3a:3e:60:9a:70:76:01:c7:25:91:fb:
         b8:c8:42:bd:5f:92:82:75:a0:2b:09:d2:3a:cc:ba:67:a1:95:
         08:7e:78:8c:38:22:7f:8f:f6:ec:8f:72:c8:4e:f4:49:d5:01:
         36:78:68:4f:94:f4:4e:61:0f:53:b9:3d:f8:d8:56:d7:25:df:
         00:21:6c:ea:56:95:6e:f0:47:ac:a3:9d:b3:40:32:90:a7:70:
         fe:29:93:e4:d2:f4:3d:4d:08:c5:8c:61:19:b5:e7:58:35:0d:
         43:a9:f3:29:ac:89:fa:44:40:95:80:cd:ad:3e:64:50:c9:44:
         47:3a:58:04:1e:9a:a8:5c:2a:0c:ec:fa:52:b8:a0:07:79:48:
         30:fd:3d:9c:65:d9:f2:07:35:66:95:01:f3:8c:3e:0b:64:ea:
         a8:d4:7e:13:4e:c6:91:04:d9:15:69:a7:f8:77:43:b8:f7:e4:
         59:e2:49:f4:b0:7f:8e:b6:bb:cd:61:22:36:c5:99:7d:eb:6f:
         74:77:6d:16:86:94:f7:7d:a3:a0:b9:ef:98:b4:a4:c2:4d:84:
         ad:d1:b5:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 19:09:55 2026 by rpki-client