Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/7ad5b3d8-33fa-3cad-9698-cd5ace9fe9ed.roa
File:                     7ad5b3d8-33fa-3cad-9698-cd5ace9fe9ed.roa (raw, json)
Hash identifier:          eMAJmQZOhKvjiUsGmb7Zawq0tLa99kbkWpDfTtfCWEQ=
Subject key identifier:   A0:8A:99:C4:70:04:D0:3A:AB:41:19:D9:BE:E4:64:A7:CC:D9:11:36
Certificate issuer:       /CN=b1898100-f40c-4002-b68a-8a97b548e69d
Certificate serial:       010D0C9F4328584CE1FCC5C283EFC2D27CFA1B20
Authority key identifier: 89:4C:F8:BD:0D:34:34:87:18:70:33:F9:00:70:4A:CB:0F:78:52:53
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/7ad5b3d8-33fa-3cad-9698-cd5ace9fe9ed.roa
Signing time:             Mon 16 Feb 2026 14:00:40 +0000
ROA not before:           Mon 16 Feb 2026 14:00:40 +0000
ROA not after:            Sun 17 May 2026 13:00:40 +0000
asID:                     63150
IP address blocks:        2602:fd6f:1f::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/b1898100-f40c-4002-b68a-8a97b548e69d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/b1898100-f40c-4002-b68a-8a97b548e69d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:e1:fc:c5:c2:83:ef:c2:d2:7c:fa:1b:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1898100-f40c-4002-b68a-8a97b548e69d
        Validity
            Not Before: Feb 16 14:00:40 2026 GMT
            Not After : May 17 13:00:40 2026 GMT
        Subject: CN=3aec247c-dfe0-475e-8fd4-1ebec806bb46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:98:b9:86:22:0a:fa:1e:e0:56:70:ab:a9:60:
                    32:fc:51:19:6d:6b:72:0f:3e:3f:2b:b1:a4:f2:a1:
                    83:1a:e5:ab:a9:1e:21:f2:ac:a1:ab:e0:30:1f:73:
                    84:5d:99:7b:4d:b8:66:cf:55:6f:72:b4:ef:11:44:
                    1f:a7:41:56:5d:d0:58:f3:77:81:91:fe:d2:6a:7c:
                    80:bf:e0:4b:07:9a:b1:eb:42:f7:55:5c:ce:83:e8:
                    a8:5b:3b:8c:de:9c:78:7e:83:d6:5c:cb:6d:5d:7d:
                    90:b3:db:11:c5:cd:ba:25:80:d6:05:06:7e:94:8a:
                    1e:4c:4f:79:ad:2d:cb:50:a2:d7:d9:5a:c6:66:92:
                    1c:ea:22:c7:50:d2:3f:48:8c:3d:48:f2:ab:92:28:
                    e0:1a:5b:b6:cb:84:cd:f2:a5:2d:ca:92:46:4d:a3:
                    1c:da:dc:49:58:ab:90:17:93:67:d2:a7:61:c6:4a:
                    ca:ca:d5:77:be:50:c2:d5:44:15:bb:4c:66:97:d4:
                    04:2b:dc:b0:31:16:ff:26:d6:b7:87:da:d0:37:74:
                    81:e4:5e:f4:29:12:c2:72:cf:93:54:4f:1d:82:d8:
                    28:2d:2e:d9:a2:c2:30:90:a9:cc:12:31:ce:cd:9f:
                    c8:df:35:be:04:97:ee:36:ce:16:32:d1:f8:cb:de:
                    a1:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:8A:99:C4:70:04:D0:3A:AB:41:19:D9:BE:E4:64:A7:CC:D9:11:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/7ad5b3d8-33fa-3cad-9698-cd5ace9fe9ed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/b1898100-f40c-4002-b68a-8a97b548e69d.crl

            X509v3 Authority Key Identifier:
                keyid:89:4C:F8:BD:0D:34:34:87:18:70:33:F9:00:70:4A:CB:0F:78:52:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fd6f:1f::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:6e:22:5d:72:89:78:dd:32:28:87:79:cc:12:e7:26:a9:2d:
         a6:93:a0:db:1e:52:2e:6b:b7:81:e1:b3:d2:94:a9:c2:ba:1f:
         e4:63:94:07:8e:cc:4f:95:4e:b4:e3:9f:0b:79:8a:52:8a:61:
         1c:39:3d:d3:8e:50:5f:60:ad:de:1e:9c:0d:3e:4d:9e:cb:b5:
         e0:1b:16:2d:57:68:a1:8b:ec:14:f3:09:b8:28:d7:b9:b2:c9:
         4b:e7:d9:82:7a:f4:6d:30:4e:48:b6:5a:ed:46:f8:d8:42:0f:
         2d:c6:4a:f5:02:01:a2:e8:90:93:bb:e2:41:ec:7a:b9:08:56:
         29:57:3a:70:cd:7d:e8:bc:c5:8b:c4:e4:25:a4:ce:18:50:b4:
         ff:72:20:07:91:89:56:c4:31:d7:05:79:5d:ce:1c:50:0b:f8:
         d4:61:c1:01:3c:23:27:eb:84:97:ff:f5:91:34:a5:9c:aa:7f:
         fc:4e:32:ae:39:c9:a1:7e:f5:81:22:a5:07:5f:47:72:1d:fe:
         d9:c4:50:b5:1d:c1:98:51:cf:42:43:37:0e:cc:09:9c:f4:b0:
         07:c3:6b:e1:50:73:3c:36:54:36:b8:96:c8:3c:9c:e5:a4:19:
         f8:41:91:4f:c1:47:5f:d8:1f:4c:a5:62:a5:ab:bf:2b:fd:a9:
         1c:9d:60:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:33:04 2026 by rpki-client