Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0d1af089-3ace-488d-8f52-6b375c813ba2/0504ab19-51ee-3aee-8913-da5b1dbe59e8.roa
File:                     0504ab19-51ee-3aee-8913-da5b1dbe59e8.roa (raw, json)
Hash identifier:          jVb1Uo+xwK5/h8CplacJbWkMee7mmg8Yi5zGCmD/5lo=
Subject key identifier:   B6:0D:30:BC:4B:B3:C7:21:AE:0F:2C:25:1B:A2:2B:14:90:5B:77:C5
Certificate issuer:       /CN=0d1af089-3ace-488d-8f52-6b375c813ba2
Certificate serial:       010D0C9F4328584CCA41E2FDE738979ED0FBD3A0
Authority key identifier: A6:9C:CE:F2:D7:BC:3F:8C:EE:2F:16:34:59:64:85:BD:CE:1E:2E:94
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0d1af089-3ace-488d-8f52-6b375c813ba2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0d1af089-3ace-488d-8f52-6b375c813ba2/0504ab19-51ee-3aee-8913-da5b1dbe59e8.roa
Signing time:             Sun 08 Feb 2026 02:00:32 +0000
ROA not before:           Sun 08 Feb 2026 02:00:32 +0000
ROA not after:            Sat 09 May 2026 01:00:32 +0000
asID:                     33600
IP address blocks:        2620:88:6000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0d1af089-3ace-488d-8f52-6b375c813ba2/0d1af089-3ace-488d-8f52-6b375c813ba2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0d1af089-3ace-488d-8f52-6b375c813ba2/0d1af089-3ace-488d-8f52-6b375c813ba2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0d1af089-3ace-488d-8f52-6b375c813ba2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ca:41:e2:fd:e7:38:97:9e:d0:fb:d3:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d1af089-3ace-488d-8f52-6b375c813ba2
        Validity
            Not Before: Feb  8 02:00:32 2026 GMT
            Not After : May  9 01:00:32 2026 GMT
        Subject: CN=14fe04e3-174e-4c7b-8ab1-45a6432eb797
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:38:8b:29:c1:ef:bb:81:3d:e4:bd:ef:85:ea:
                    66:ca:16:25:6a:65:ec:36:0a:b1:00:ae:8f:30:f1:
                    01:cb:cc:c6:24:f4:28:89:aa:34:3d:83:77:91:8f:
                    6c:dd:b4:85:eb:31:f5:db:ce:c8:b8:c1:d3:b9:ed:
                    aa:dd:04:4e:c1:4f:48:d0:dc:68:60:b2:41:47:59:
                    a5:5a:f7:6c:ca:aa:b2:89:2f:fe:70:46:4b:23:ec:
                    a1:52:6a:09:4e:3e:04:80:f1:fa:c0:27:97:07:34:
                    94:40:44:e8:99:ef:ca:fc:0a:95:57:7a:d4:4f:4a:
                    ac:06:82:f0:2f:56:78:25:68:04:0f:f3:c6:99:c4:
                    dc:a5:26:6b:99:7f:f4:f6:52:37:bd:c0:ca:ee:ac:
                    2c:36:6a:eb:a2:04:34:88:ef:5a:0f:6e:e3:88:40:
                    16:37:56:f7:12:b0:bb:05:1e:ba:3d:a1:62:79:e0:
                    81:ed:03:4d:db:ff:2d:2c:35:a5:3e:e1:04:5d:90:
                    55:f0:fa:e2:48:09:84:8d:de:6b:6b:6a:92:ee:b7:
                    51:fe:72:c7:07:83:bc:f4:73:4e:25:61:41:ec:0d:
                    e0:a3:b6:63:0a:2b:79:0d:83:f9:ea:90:00:34:4b:
                    ea:cc:ac:b1:41:05:40:a4:f5:f5:12:45:41:1e:ea:
                    7e:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:0D:30:BC:4B:B3:C7:21:AE:0F:2C:25:1B:A2:2B:14:90:5B:77:C5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0d1af089-3ace-488d-8f52-6b375c813ba2/0504ab19-51ee-3aee-8913-da5b1dbe59e8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0d1af089-3ace-488d-8f52-6b375c813ba2/0d1af089-3ace-488d-8f52-6b375c813ba2.crl

            X509v3 Authority Key Identifier:
                keyid:A6:9C:CE:F2:D7:BC:3F:8C:EE:2F:16:34:59:64:85:BD:CE:1E:2E:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0d1af089-3ace-488d-8f52-6b375c813ba2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:88:6000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:8e:a4:3c:41:da:80:63:4d:e7:0b:8a:b5:f7:14:1c:87:cd:
         e6:fd:d6:67:39:8b:4f:d9:01:39:02:5d:78:58:48:e8:ec:ba:
         12:6b:4f:73:e7:9f:17:eb:98:47:13:97:f5:ba:3c:04:5c:21:
         96:ac:db:69:55:2c:3c:24:64:85:ac:d4:08:a6:9c:78:e3:a1:
         c8:8c:9d:ec:da:6b:26:fd:fb:48:1b:17:12:7c:2c:ac:76:88:
         63:5c:66:86:8d:45:f4:8a:82:d5:d7:12:b6:30:2d:66:fe:2f:
         d7:3c:03:f4:fe:20:85:cf:9c:c9:d5:03:02:26:24:49:19:83:
         b8:b5:f7:c5:4b:3f:dc:68:37:5e:ad:57:71:85:b4:be:60:56:
         53:c6:ab:ed:83:34:29:b8:3e:69:07:29:12:af:51:5c:fa:07:
         0a:75:10:c7:36:cf:e1:25:9a:6a:06:4d:0d:d6:e3:45:07:00:
         91:d1:da:62:ca:fe:06:69:af:4a:1e:54:27:64:6b:ca:88:84:
         08:53:70:86:04:64:b3:d1:a4:5b:d6:30:1c:d5:54:ad:1a:99:
         4d:22:d3:b0:7e:8b:33:68:c1:02:62:30:89:61:53:56:4f:14:
         f3:64:b2:51:3c:73:ec:95:53:5f:62:fa:05:d3:59:ba:bd:ec:
         f1:8d:f3:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:13:15 2026 by rpki-client