Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b3f5323f-8bea-48c6-aa03-949255dd1997/bf744f62-002d-32f9-bc1d-e9b424b6bf96.roa
File:                     bf744f62-002d-32f9-bc1d-e9b424b6bf96.roa (raw, json)
Hash identifier:          4MBCKNuXbxTthlqSr4TCVcrGnSHBuOSr1qNnofe8uG0=
Subject key identifier:   B3:34:FF:DA:FE:1E:8B:51:69:35:BA:94:35:DE:E4:27:D4:88:9B:2A
Certificate issuer:       /CN=b3f5323f-8bea-48c6-aa03-949255dd1997
Certificate serial:       010D0C9F4328584D00B24FCC11094932259C9500
Authority key identifier: 53:81:0B:8B:1F:54:1E:2F:82:1C:4A:DD:C0:3E:70:B0:62:95:EC:5D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b3f5323f-8bea-48c6-aa03-949255dd1997.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b3f5323f-8bea-48c6-aa03-949255dd1997/bf744f62-002d-32f9-bc1d-e9b424b6bf96.roa
Signing time:             Fri 27 Feb 2026 14:00:40 +0000
ROA not before:           Fri 27 Feb 2026 14:00:40 +0000
ROA not after:            Thu 28 May 2026 13:00:40 +0000
asID:                     46474
IP address blocks:        2602:819:e003::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b3f5323f-8bea-48c6-aa03-949255dd1997/b3f5323f-8bea-48c6-aa03-949255dd1997.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b3f5323f-8bea-48c6-aa03-949255dd1997/b3f5323f-8bea-48c6-aa03-949255dd1997.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b3f5323f-8bea-48c6-aa03-949255dd1997.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:00:b2:4f:cc:11:09:49:32:25:9c:95:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3f5323f-8bea-48c6-aa03-949255dd1997
        Validity
            Not Before: Feb 27 14:00:40 2026 GMT
            Not After : May 28 13:00:40 2026 GMT
        Subject: CN=fe4094c0-bf9b-4d05-a06f-4bbebeaf79ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:1b:a8:6b:e2:61:e0:c3:b2:ff:6a:87:f2:24:
                    a7:8a:a4:cb:14:a3:f4:a0:5f:aa:4c:20:3d:00:98:
                    0b:aa:06:28:a8:7e:d3:f0:a3:dc:2a:66:ca:d8:59:
                    1d:8d:54:c1:44:4b:d2:62:db:81:54:fb:37:91:76:
                    e0:11:85:b3:6b:f8:ba:6c:7e:2b:50:88:56:f6:f0:
                    38:db:7a:c0:8f:92:86:61:ac:43:d6:95:3a:0d:af:
                    b4:4e:b5:9e:f6:ea:74:73:99:b4:0a:1a:42:b2:e0:
                    27:61:7a:87:e7:de:6a:59:d0:e4:c9:d4:fa:f1:66:
                    e4:56:ec:60:86:7d:f7:74:cb:b9:0d:a7:b4:0f:c4:
                    d6:e8:e8:ae:bb:48:70:3c:2b:77:86:34:ce:d2:09:
                    e1:0d:b5:f8:7b:46:7c:cb:0d:25:2b:14:3a:92:52:
                    d0:84:ca:8e:3d:a6:58:20:75:1c:0e:04:9d:73:f4:
                    99:35:bf:03:08:89:37:3a:d6:27:4b:b7:c3:b4:68:
                    ba:f9:0a:cc:ed:02:78:e6:1e:aa:44:b8:94:d7:64:
                    20:43:0b:a3:55:d9:c1:56:ae:0d:07:50:e4:0d:f0:
                    0a:fc:67:99:37:00:b5:4e:01:a2:4b:53:7e:76:88:
                    f7:9a:d9:10:b1:42:1e:1b:ab:33:2a:bc:76:28:91:
                    88:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:34:FF:DA:FE:1E:8B:51:69:35:BA:94:35:DE:E4:27:D4:88:9B:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b3f5323f-8bea-48c6-aa03-949255dd1997/bf744f62-002d-32f9-bc1d-e9b424b6bf96.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b3f5323f-8bea-48c6-aa03-949255dd1997/b3f5323f-8bea-48c6-aa03-949255dd1997.crl

            X509v3 Authority Key Identifier:
                keyid:53:81:0B:8B:1F:54:1E:2F:82:1C:4A:DD:C0:3E:70:B0:62:95:EC:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b3f5323f-8bea-48c6-aa03-949255dd1997.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:819:e003::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:cc:0d:c4:3f:96:18:1e:43:a9:62:7c:e7:8e:09:73:f6:a5:
         12:28:8c:8e:d8:bd:56:ab:b7:3a:fa:ce:d9:15:41:49:c3:1f:
         39:1c:a0:c1:95:ac:b3:f1:16:e1:3c:6f:a4:06:80:11:f4:c4:
         dd:de:a6:44:35:bc:01:7d:09:79:ef:40:39:df:77:c0:37:d2:
         58:b9:2b:0a:b5:81:51:fe:ab:17:08:d0:76:db:4a:15:54:64:
         79:47:8a:90:35:27:f9:a0:65:af:22:b3:b7:11:c7:23:20:71:
         6e:e7:b7:2e:38:23:d9:39:7d:67:cd:4e:c7:90:a8:61:03:27:
         a7:1e:97:16:09:fb:5e:e9:6a:71:f2:1e:08:34:25:e9:eb:eb:
         53:cf:e3:e1:6a:c3:52:ec:fb:8b:49:be:6b:00:d9:79:7f:c2:
         1e:02:45:ad:b3:89:1c:c8:c8:67:8d:b7:16:cf:47:51:f5:c1:
         10:92:9b:ae:e4:fe:5b:8c:a6:51:fd:d6:ee:4e:01:c5:c3:b9:
         e1:75:cb:08:89:ee:b0:10:16:b2:ac:a3:65:22:6d:d1:1d:40:
         5e:0f:27:10:6d:21:77:b8:10:4c:7a:4f:84:2f:6b:02:67:8b:
         a8:b9:a8:94:74:b1:49:ec:c6:d3:48:bb:bf:a9:ee:06:f4:52:
         02:30:0b:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:06:25 2026 by rpki-client