Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/39b6b2fc-3422-46e7-b637-7b8dcb84bff1/9afd18ab-d4f1-3dcb-b555-4330caae0138.roa
File:                     9afd18ab-d4f1-3dcb-b555-4330caae0138.roa (raw, json)
Hash identifier:          Ob094XKw45rbvJywZxm2GoFyp761TuCg41IwAl7BKng=
Subject key identifier:   24:CB:93:BB:60:A7:39:6F:FE:A7:11:9B:3A:55:D5:55:16:9E:A3:83
Certificate issuer:       /CN=39b6b2fc-3422-46e7-b637-7b8dcb84bff1
Certificate serial:       010D0C9F4328584CC07C93944D28594E7503FB00
Authority key identifier: F5:79:B5:2B:5C:12:7C:0B:C8:CD:00:75:42:2C:15:FC:6F:A6:37:73
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/39b6b2fc-3422-46e7-b637-7b8dcb84bff1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/39b6b2fc-3422-46e7-b637-7b8dcb84bff1/9afd18ab-d4f1-3dcb-b555-4330caae0138.roa
Signing time:             Wed 04 Feb 2026 14:00:39 +0000
ROA not before:           Wed 04 Feb 2026 14:00:39 +0000
ROA not after:            Tue 05 May 2026 13:00:39 +0000
asID:                     897
IP address blocks:        2620:ab:a004::/48 maxlen: 48
                          2620:ab:a005::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/39b6b2fc-3422-46e7-b637-7b8dcb84bff1/39b6b2fc-3422-46e7-b637-7b8dcb84bff1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/39b6b2fc-3422-46e7-b637-7b8dcb84bff1/39b6b2fc-3422-46e7-b637-7b8dcb84bff1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/39b6b2fc-3422-46e7-b637-7b8dcb84bff1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:c0:7c:93:94:4d:28:59:4e:75:03:fb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39b6b2fc-3422-46e7-b637-7b8dcb84bff1
        Validity
            Not Before: Feb  4 14:00:39 2026 GMT
            Not After : May  5 13:00:39 2026 GMT
        Subject: CN=48fe4c94-a007-4200-b134-d83d3b5bf30b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:7c:85:eb:e2:46:11:7a:62:83:6d:4a:85:3f:
                    f7:03:f2:28:8e:06:b1:75:95:1c:27:7d:78:2a:7b:
                    6d:90:0d:15:0c:64:5e:dd:ac:11:6e:97:c6:d8:af:
                    53:63:42:5f:a9:1b:1f:91:58:a8:c2:2e:53:eb:17:
                    8a:d8:cb:63:a5:35:da:b2:e7:ab:7b:3c:e3:43:9b:
                    2f:67:34:7a:66:50:e5:3d:0c:04:22:97:1b:99:6b:
                    7d:a8:36:f7:d3:ed:c4:5c:4a:de:d6:5d:90:e5:c5:
                    0a:d2:27:07:eb:0a:38:9c:07:58:04:51:7c:d9:ba:
                    ef:7c:c8:23:4d:37:9a:b3:11:8f:9d:be:3e:5a:a8:
                    71:96:0e:49:d1:1c:0e:9a:49:dd:b0:6d:4d:14:cc:
                    91:ee:9c:a2:83:54:c3:12:1e:4a:f8:2b:f5:0c:63:
                    98:9a:90:fc:27:fa:97:d2:e5:c1:ff:ee:5d:e9:7e:
                    5a:ba:47:1d:bb:22:4d:9f:d2:10:18:40:de:c6:85:
                    c4:33:e7:8c:9e:e2:58:e1:cd:de:24:59:21:fb:47:
                    8a:fd:3b:f8:7c:ec:2f:5c:41:6d:7c:b2:2d:82:71:
                    c6:1b:3c:f1:03:78:55:89:35:d8:ec:16:42:74:1d:
                    05:0e:0e:32:e3:a7:74:21:a2:80:83:ca:38:73:a4:
                    a7:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:CB:93:BB:60:A7:39:6F:FE:A7:11:9B:3A:55:D5:55:16:9E:A3:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/39b6b2fc-3422-46e7-b637-7b8dcb84bff1/9afd18ab-d4f1-3dcb-b555-4330caae0138.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/39b6b2fc-3422-46e7-b637-7b8dcb84bff1/39b6b2fc-3422-46e7-b637-7b8dcb84bff1.crl

            X509v3 Authority Key Identifier:
                keyid:F5:79:B5:2B:5C:12:7C:0B:C8:CD:00:75:42:2C:15:FC:6F:A6:37:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/39b6b2fc-3422-46e7-b637-7b8dcb84bff1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:ab:a004::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:a4:fd:6c:99:a6:bd:27:e5:84:20:ac:63:8a:42:15:3b:7d:
         70:bc:c7:1f:5d:3f:0f:63:cb:dd:9a:8b:96:ab:3f:23:5c:80:
         24:9b:73:1e:5c:5c:b7:b0:bd:62:46:b8:c0:f8:ca:df:3b:fd:
         fd:ae:b7:6e:e6:8c:8b:5a:7b:c2:88:cf:4b:e3:e0:18:ec:07:
         98:29:0a:1e:bf:27:e3:13:7e:b6:ba:ad:57:4e:3f:e6:31:fe:
         ec:01:3f:75:7e:b6:75:07:55:0d:08:97:83:33:94:3d:d9:7a:
         e5:85:19:c1:7d:fe:6a:95:17:b5:25:69:48:be:8b:0b:f2:5e:
         8e:79:a5:ef:c5:ba:3a:30:2f:74:91:1f:86:26:a7:60:15:49:
         b9:e7:27:ef:71:ca:2b:38:f3:8c:16:97:37:d4:5d:7c:67:d0:
         6a:b8:20:72:e4:29:b6:dc:52:bb:3d:88:ec:42:87:da:66:a4:
         1c:49:9b:4f:f1:56:35:7b:8a:d0:7c:fc:53:f2:e2:6e:e9:0a:
         b8:a5:af:ff:b5:dd:2e:94:fd:a7:d3:f3:f3:97:fc:57:f2:7c:
         74:a8:ca:8d:98:e2:d7:dc:c3:d8:2e:56:fa:13:22:82:5d:8c:
         75:2d:b8:8d:e6:e7:5e:a3:20:98:ee:64:12:90:9f:3e:3d:6d:
         6c:d8:fe:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:22:13 2026 by rpki-client