Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4848cc9b-e46f-485e-b3f2-4f393b5d92d6/43d41a34-62e7-3694-95c2-94d2452f5f65.roa
File:                     43d41a34-62e7-3694-95c2-94d2452f5f65.roa (raw, json)
Hash identifier:          ORaNDHPWggLD+3MhWjp6bWjxksgHvV9bq+3R7NjyY0o=
Subject key identifier:   C7:D2:50:37:E9:55:33:1F:6D:81:52:67:C4:0F:E3:D6:47:BF:FF:7E
Certificate issuer:       /CN=4848cc9b-e46f-485e-b3f2-4f393b5d92d6
Certificate serial:       010D0C9F4328584D037D1AE395E23B7E43E3D540
Authority key identifier: B6:2A:40:95:87:55:AF:8F:01:A4:40:13:3D:22:F2:15:2B:B6:8D:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4848cc9b-e46f-485e-b3f2-4f393b5d92d6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4848cc9b-e46f-485e-b3f2-4f393b5d92d6/43d41a34-62e7-3694-95c2-94d2452f5f65.roa
Signing time:             Sat 28 Feb 2026 14:00:40 +0000
ROA not before:           Sat 28 Feb 2026 14:00:40 +0000
ROA not after:            Fri 29 May 2026 13:00:40 +0000
asID:                     401009
IP address blocks:        2602:f919::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4848cc9b-e46f-485e-b3f2-4f393b5d92d6/4848cc9b-e46f-485e-b3f2-4f393b5d92d6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4848cc9b-e46f-485e-b3f2-4f393b5d92d6/4848cc9b-e46f-485e-b3f2-4f393b5d92d6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4848cc9b-e46f-485e-b3f2-4f393b5d92d6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:03:7d:1a:e3:95:e2:3b:7e:43:e3:d5:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4848cc9b-e46f-485e-b3f2-4f393b5d92d6
        Validity
            Not Before: Feb 28 14:00:40 2026 GMT
            Not After : May 29 13:00:40 2026 GMT
        Subject: CN=cbf9394a-ca2a-4ac7-b23f-eb4ba46a4d80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:cb:9d:b0:16:f0:75:26:dc:5f:56:0a:3c:6e:
                    8c:98:60:a8:48:a2:3b:b6:5b:01:23:9f:d7:6b:f5:
                    2d:47:e6:17:c4:84:69:23:3f:e8:cf:66:2c:16:ac:
                    44:00:e7:39:e4:19:3b:10:a6:a4:21:51:a2:82:04:
                    b8:97:17:3e:21:d1:69:b4:76:be:cd:69:d6:d2:78:
                    8f:1a:42:06:d0:53:e3:2c:3a:b0:02:1b:f9:e7:04:
                    ce:dd:b5:90:35:26:e5:e8:e9:6c:18:a2:4e:eb:ad:
                    4f:e8:c8:59:a4:87:e2:d9:8d:a5:c6:29:04:62:11:
                    13:c7:4b:20:d0:da:c8:33:59:de:98:58:f3:02:e9:
                    be:89:66:17:ba:c9:f4:ab:4a:31:74:d1:6d:97:26:
                    6b:9a:cf:12:f7:60:aa:5e:eb:a2:61:d5:95:bb:81:
                    0d:36:6d:97:56:8a:2d:8b:70:b7:80:22:ef:9f:7b:
                    33:09:8a:22:51:cc:3d:14:50:b5:7e:df:87:ac:8a:
                    bd:f8:1a:ba:2d:78:7c:0f:53:67:3f:5b:81:d0:44:
                    45:d0:e0:b4:73:18:20:65:19:81:2f:82:1d:f4:68:
                    b2:71:a8:4e:d2:86:5d:57:0a:b0:a2:0f:77:66:17:
                    c9:16:8a:80:8a:de:16:f2:91:cb:a9:9c:eb:3a:f6:
                    d7:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:D2:50:37:E9:55:33:1F:6D:81:52:67:C4:0F:E3:D6:47:BF:FF:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4848cc9b-e46f-485e-b3f2-4f393b5d92d6/43d41a34-62e7-3694-95c2-94d2452f5f65.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4848cc9b-e46f-485e-b3f2-4f393b5d92d6/4848cc9b-e46f-485e-b3f2-4f393b5d92d6.crl

            X509v3 Authority Key Identifier:
                keyid:B6:2A:40:95:87:55:AF:8F:01:A4:40:13:3D:22:F2:15:2B:B6:8D:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4848cc9b-e46f-485e-b3f2-4f393b5d92d6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f919::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:68:07:a9:69:73:88:6b:41:ca:79:3d:64:ad:7b:b1:d8:98:
         30:1a:ab:83:d4:7b:bf:8b:1b:c4:32:3a:14:58:12:68:37:4a:
         db:36:2e:c6:8a:59:ba:d8:d6:f5:1e:09:c6:9c:2e:45:71:d9:
         d6:44:2a:d5:02:e7:af:6c:58:71:c9:7d:a3:16:79:9c:46:42:
         1d:f9:b7:55:35:7c:82:be:56:a7:96:c2:d8:c6:21:52:47:c2:
         ac:12:11:d7:d8:f0:86:01:41:16:86:df:ed:be:7c:ea:57:84:
         90:40:f6:e4:a2:a7:2d:02:10:89:c6:96:7a:32:d6:cc:29:a3:
         af:fc:38:80:3c:4a:56:f2:ad:40:1c:2d:b8:ca:fc:a7:ad:cf:
         f6:62:60:c9:cb:c7:31:c1:4d:fe:4a:7c:28:24:3d:a7:1d:c6:
         58:7b:7f:20:b6:ff:69:c1:8a:49:9e:f1:0f:9f:b4:cb:0a:62:
         74:00:b1:34:88:bd:77:67:ad:ee:06:19:d2:ec:ab:17:b2:40:
         be:8e:95:05:4c:79:b7:76:e7:c1:ce:c6:87:f2:61:62:eb:31:
         8e:6d:10:b5:8f:81:47:47:71:35:3a:ae:a0:cb:2a:69:1a:8a:
         25:cd:ca:44:a1:c1:0b:a2:48:09:98:3a:2b:d4:2d:f3:56:9a:
         66:bb:b7:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:42:50 2026 by rpki-client