Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ed313ca7-81e7-42e2-bf38-c96bb839ecf4/2d0656bc-69dc-3fdf-aef4-4051d5b70831.roa
File:                     2d0656bc-69dc-3fdf-aef4-4051d5b70831.roa (raw, json)
Hash identifier:          cWsHRj+XtQ145fx3nkjmgGkPwaI/Iwb7Gpx1yLrFnDs=
Subject key identifier:   9A:F6:87:7B:CF:39:04:DE:88:94:9C:73:DA:08:27:F6:F7:BE:C7:CB
Certificate issuer:       /CN=ed313ca7-81e7-42e2-bf38-c96bb839ecf4
Certificate serial:       010D0C9F4328584CAE5716025EAC5A8D0D7B4300
Authority key identifier: 5D:97:76:7A:E5:5A:DA:95:2E:FE:14:AC:9E:8B:EE:E4:E8:FD:92:DF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ed313ca7-81e7-42e2-bf38-c96bb839ecf4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ed313ca7-81e7-42e2-bf38-c96bb839ecf4/2d0656bc-69dc-3fdf-aef4-4051d5b70831.roa
Signing time:             Thu 29 Jan 2026 02:00:32 +0000
ROA not before:           Thu 29 Jan 2026 02:00:32 +0000
ROA not after:            Wed 29 Apr 2026 01:00:32 +0000
asID:                     8038
IP address blocks:        2607:fae0:b000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ed313ca7-81e7-42e2-bf38-c96bb839ecf4/ed313ca7-81e7-42e2-bf38-c96bb839ecf4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ed313ca7-81e7-42e2-bf38-c96bb839ecf4/ed313ca7-81e7-42e2-bf38-c96bb839ecf4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ed313ca7-81e7-42e2-bf38-c96bb839ecf4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ae:57:16:02:5e:ac:5a:8d:0d:7b:43:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed313ca7-81e7-42e2-bf38-c96bb839ecf4
        Validity
            Not Before: Jan 29 02:00:32 2026 GMT
            Not After : Apr 29 01:00:32 2026 GMT
        Subject: CN=1f575926-2bc2-4846-aa54-ba7fe1540ee8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:d4:71:36:e3:e7:d3:bd:29:49:69:b6:09:c0:
                    91:6d:44:21:51:3f:9a:a8:93:3f:10:c7:c9:cf:91:
                    e4:b5:2b:67:75:f2:ad:c5:04:5b:c2:f8:0a:6b:19:
                    b9:fb:16:b2:fe:29:d6:49:e0:04:e4:e2:06:6d:c9:
                    0c:0c:66:89:f9:e7:f2:ee:f3:75:22:cd:97:e7:59:
                    77:1d:b1:7b:01:52:6f:7d:92:59:8d:2a:10:0a:4b:
                    71:56:48:6b:f7:0c:bb:cb:6d:8f:6e:fa:f5:de:eb:
                    1f:b2:b9:24:65:3b:bf:c4:d5:af:d2:75:f5:db:c7:
                    85:11:79:5e:e0:11:8d:0e:c5:32:ad:bd:c8:39:41:
                    c3:ce:3e:43:e6:4b:e1:1a:58:d9:63:94:4e:0a:39:
                    8f:b0:3b:4e:5e:cb:37:ca:6f:c3:83:e0:82:86:2b:
                    d3:46:90:ca:1e:66:25:1d:da:05:c0:a7:2b:8e:d4:
                    44:9f:ae:8d:6d:2a:cc:bc:d1:73:08:bc:3e:21:d6:
                    72:a5:5d:d5:3e:77:c8:6f:da:05:76:88:92:b9:16:
                    77:99:ce:68:e2:78:b3:08:8e:17:c6:5b:59:94:ce:
                    51:99:8f:8a:8b:66:97:57:d2:d3:b7:cc:f5:44:1c:
                    25:29:1e:f6:52:ee:bc:16:c5:3c:8b:09:00:34:bf:
                    88:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:F6:87:7B:CF:39:04:DE:88:94:9C:73:DA:08:27:F6:F7:BE:C7:CB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ed313ca7-81e7-42e2-bf38-c96bb839ecf4/2d0656bc-69dc-3fdf-aef4-4051d5b70831.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ed313ca7-81e7-42e2-bf38-c96bb839ecf4/ed313ca7-81e7-42e2-bf38-c96bb839ecf4.crl

            X509v3 Authority Key Identifier:
                keyid:5D:97:76:7A:E5:5A:DA:95:2E:FE:14:AC:9E:8B:EE:E4:E8:FD:92:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ed313ca7-81e7-42e2-bf38-c96bb839ecf4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:fae0:b000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:0b:a3:08:4f:a4:46:37:a8:97:46:ec:54:73:48:1b:e2:e1:
         15:e9:e8:d1:5f:f9:e9:ad:b5:00:04:30:54:ee:ce:9a:e3:e5:
         88:ff:9a:e2:b3:80:a3:1f:1c:9a:38:da:61:12:1c:6b:ae:5f:
         40:6d:c2:d7:81:fd:93:47:f8:cd:d7:8c:b8:4c:38:22:38:a3:
         d1:38:72:08:10:62:91:f9:9b:94:89:c8:9e:40:50:37:63:4c:
         b8:34:58:a3:48:ac:ce:29:92:5b:ac:d8:e5:cd:9e:e0:8d:a9:
         d2:8f:c1:8f:86:08:9c:24:88:7f:8a:e3:f7:24:5b:5d:70:e9:
         d3:a3:2e:1d:0a:1d:7a:95:f9:e3:5e:e0:ad:63:d3:15:2c:a4:
         d9:ac:37:4a:c8:d0:41:67:a2:aa:45:7d:f6:16:7f:96:81:c1:
         6a:11:d8:ac:9d:ae:4e:a5:b1:07:09:05:0b:ba:81:7b:81:c2:
         1e:87:e1:56:74:c5:f7:2c:e5:65:e6:22:5f:55:89:4d:38:9b:
         32:41:cd:ef:60:ff:42:00:81:4c:f4:be:14:62:b4:f4:4b:3d:
         3f:0f:4a:11:ff:e7:33:26:98:d3:9b:71:a1:cf:7e:0e:40:dc:
         1c:17:56:20:d0:6b:10:91:f1:ca:02:76:30:89:be:dc:d9:89:
         24:1e:54:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:22:21 2026 by rpki-client