Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2b2ccef-7c30-4a40-90ca-ce1703a22a1d/668a0aeb-328b-3b87-9b83-66ab809813fb.roa
File:                     668a0aeb-328b-3b87-9b83-66ab809813fb.roa (raw, json)
Hash identifier:          nD52mUmDWYjmrACPkAFrIXsOisQ7oG/sdls91sAnOwE=
Subject key identifier:   C6:EB:06:62:A8:EE:ED:D0:0C:3A:77:A1:FE:C9:4E:78:1A:19:8A:33
Certificate issuer:       /CN=a2b2ccef-7c30-4a40-90ca-ce1703a22a1d
Certificate serial:       010D0C9F4328584CBAE73A6241C546CEFC1D4980
Authority key identifier: 6F:F3:A5:0D:A3:51:FB:B5:47:EB:8B:B8:3C:68:4F:B0:5C:64:1C:15
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2b2ccef-7c30-4a40-90ca-ce1703a22a1d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2b2ccef-7c30-4a40-90ca-ce1703a22a1d/668a0aeb-328b-3b87-9b83-66ab809813fb.roa
Signing time:             Mon 02 Feb 2026 14:00:40 +0000
ROA not before:           Mon 02 Feb 2026 14:00:40 +0000
ROA not after:            Sun 03 May 2026 13:00:40 +0000
asID:                     401385
IP address blocks:        2602:f8d4::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2b2ccef-7c30-4a40-90ca-ce1703a22a1d/a2b2ccef-7c30-4a40-90ca-ce1703a22a1d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2b2ccef-7c30-4a40-90ca-ce1703a22a1d/a2b2ccef-7c30-4a40-90ca-ce1703a22a1d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2b2ccef-7c30-4a40-90ca-ce1703a22a1d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ba:e7:3a:62:41:c5:46:ce:fc:1d:49:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a2b2ccef-7c30-4a40-90ca-ce1703a22a1d
        Validity
            Not Before: Feb  2 14:00:40 2026 GMT
            Not After : May  3 13:00:40 2026 GMT
        Subject: CN=ebf31aa2-0e2e-4e5f-bb2e-b722b59211bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:3a:70:71:d2:e4:36:db:9c:ea:c6:e6:cf:87:
                    61:64:b0:9d:4f:83:81:3f:80:bf:75:f1:89:bc:ad:
                    f0:86:36:cf:c0:cf:81:e6:f9:2d:00:13:c5:98:6e:
                    00:ca:90:16:f8:e2:e7:0e:79:85:e1:51:63:c1:35:
                    91:b4:40:96:ab:be:c1:b3:3d:94:cb:98:d4:36:95:
                    b0:91:6b:b6:b3:11:18:44:03:9d:f5:a2:5d:96:29:
                    e7:5f:94:02:d0:aa:c3:0c:9f:82:86:0c:17:2c:3c:
                    bb:dd:30:fe:2d:39:4e:e2:3d:c4:9c:97:22:5d:7f:
                    42:94:81:7f:93:76:a8:fa:fe:e3:ad:2c:73:d4:43:
                    42:62:32:5e:91:31:9b:8f:ac:57:54:67:f6:2e:9f:
                    61:b8:92:9c:66:e2:48:80:b8:9c:dc:98:73:fd:1e:
                    2b:35:5f:80:2b:78:b3:89:21:ba:2d:27:45:c4:43:
                    52:bf:ac:ba:47:bf:52:27:06:25:8c:14:06:30:ca:
                    f9:5c:e2:4a:b6:8a:87:cd:e9:83:43:47:93:19:be:
                    26:1d:d8:6d:50:60:e3:35:75:55:6c:64:8e:71:bc:
                    08:16:9d:e7:8a:30:2a:18:40:bb:64:97:0f:b3:1a:
                    ea:f5:6d:bb:7d:62:7e:b4:7e:ac:e7:6d:54:22:52:
                    f5:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:EB:06:62:A8:EE:ED:D0:0C:3A:77:A1:FE:C9:4E:78:1A:19:8A:33
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2b2ccef-7c30-4a40-90ca-ce1703a22a1d/668a0aeb-328b-3b87-9b83-66ab809813fb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2b2ccef-7c30-4a40-90ca-ce1703a22a1d/a2b2ccef-7c30-4a40-90ca-ce1703a22a1d.crl

            X509v3 Authority Key Identifier:
                keyid:6F:F3:A5:0D:A3:51:FB:B5:47:EB:8B:B8:3C:68:4F:B0:5C:64:1C:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2b2ccef-7c30-4a40-90ca-ce1703a22a1d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f8d4::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:99:ef:b5:a1:05:70:97:0b:26:c3:5f:b6:bb:5f:ef:e0:8e:
         3c:b7:32:5a:15:70:20:42:aa:b3:c0:20:be:35:c7:7b:8c:15:
         e5:02:4d:88:5c:2f:ab:ff:77:d3:f6:e6:dd:b7:55:94:f7:b0:
         db:94:35:0c:4d:6a:fc:0a:b0:a0:92:33:ce:95:e8:8a:fe:d2:
         66:85:df:cb:5d:29:81:13:57:17:59:7b:80:e6:91:09:52:c1:
         8f:e4:4a:88:e7:98:64:5b:d3:5d:d7:ad:86:cf:25:19:9f:7d:
         01:8f:8e:a5:4a:22:58:56:50:66:4a:80:b8:30:60:dc:bf:ee:
         64:b1:c0:c8:43:90:31:2e:48:cf:be:07:07:56:2c:0e:87:6c:
         a9:4d:8a:5b:38:e5:a8:1a:be:aa:6c:82:c5:82:31:ec:39:01:
         04:03:fc:08:b5:3e:2f:0e:f4:c5:a8:4d:73:d4:be:b5:63:c3:
         49:a1:9c:98:eb:0b:05:d0:c2:79:cc:eb:c1:0b:f2:ea:31:2c:
         47:9b:db:22:76:13:92:82:61:b1:c3:83:8e:65:3d:e0:e3:6a:
         7b:fc:17:9c:06:2e:5a:77:4d:7d:31:dd:db:58:c3:cf:01:68:
         22:be:7a:12:11:6f:3b:ee:c3:76:e8:fc:4b:0e:16:32:c8:d2:
         f3:53:d3:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:33:06 2026 by rpki-client