Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/e8b05852-dfce-3dc0-99e9-c67b22ef38f0.roa
File:                     e8b05852-dfce-3dc0-99e9-c67b22ef38f0.roa (raw, json)
Hash identifier:          omkAk9HTgmr5JdnP0PFqLh6igysl3fQH7Xvf1u1g328=
Subject key identifier:   65:7A:CB:61:D9:94:4D:99:25:0B:99:89:C0:1E:17:E9:17:FE:95:7D
Certificate issuer:       /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989
Certificate serial:       010D0C9F4328584CCBA76A33BB2D44E4F28AC120
Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/e8b05852-dfce-3dc0-99e9-c67b22ef38f0.roa
Signing time:             Sun 08 Feb 2026 14:00:41 +0000
ROA not before:           Sun 08 Feb 2026 14:00:41 +0000
ROA not after:            Sat 09 May 2026 13:00:41 +0000
asID:                     11404
IP address blocks:        2607:f060:a000::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:cb:a7:6a:33:bb:2d:44:e4:f2:8a:c1:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989
        Validity
            Not Before: Feb  8 14:00:41 2026 GMT
            Not After : May  9 13:00:41 2026 GMT
        Subject: CN=dc261d91-739c-4cfa-9465-e6548b34c44e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:fb:dd:44:a5:e9:62:e4:00:1e:84:0c:89:54:
                    e3:58:02:86:ad:30:d4:2a:35:a4:1d:7e:03:f9:85:
                    4f:63:c0:ab:82:94:a3:06:e3:53:f5:bb:01:d3:14:
                    54:01:ba:df:0b:82:73:ce:d1:72:62:c5:94:8b:d5:
                    cc:cd:50:42:88:fb:f9:8c:e7:e4:9c:33:68:db:61:
                    28:67:26:cb:6c:9a:04:0b:22:df:95:c7:d2:a6:20:
                    d8:74:92:a1:1e:cc:9b:55:17:8e:75:3e:47:6c:c6:
                    5f:77:5a:a7:1f:16:ad:19:5d:67:03:c5:4b:6c:72:
                    59:06:d6:9d:a6:65:df:67:98:b0:3a:8b:45:21:2b:
                    d7:55:0f:09:75:0c:33:c7:08:e9:20:33:8c:6c:ef:
                    f3:e9:26:e9:10:9c:da:bc:c2:77:f3:22:62:67:bb:
                    48:a0:5d:b0:38:2c:1a:2a:c0:04:16:46:57:00:73:
                    d7:c6:95:df:1d:a2:54:67:49:08:a1:92:49:de:c9:
                    49:69:d1:bf:49:e7:9f:ea:32:2d:1f:a6:fb:a2:2c:
                    78:60:2c:9c:4f:7b:1a:99:93:6d:9a:d3:d9:0b:aa:
                    7e:80:a8:9c:d0:af:00:a4:36:6b:54:62:c8:4f:e0:
                    41:60:6c:96:da:a3:9c:3b:10:92:a8:50:74:0b:e5:
                    00:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:7A:CB:61:D9:94:4D:99:25:0B:99:89:C0:1E:17:E9:17:FE:95:7D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/e8b05852-dfce-3dc0-99e9-c67b22ef38f0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl

            X509v3 Authority Key Identifier:
                keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f060:a000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:e0:f3:59:dd:3d:22:30:4e:55:8b:f7:81:94:84:51:4b:5a:
         c9:4f:45:33:b4:d8:09:9e:7c:48:56:4b:3e:1f:88:e9:b7:b2:
         b1:5a:6d:ef:88:ec:7c:15:26:da:a4:e8:ab:27:d7:3c:77:b5:
         3b:44:a7:3e:4b:13:50:7d:70:f8:67:e6:8f:10:66:b4:f4:3e:
         8a:18:a6:21:38:a4:1b:76:ca:31:6c:16:49:50:a7:d6:79:e9:
         70:1b:8f:de:bd:ad:e1:cf:60:86:47:76:05:d0:dc:b4:0b:7f:
         45:cc:68:ab:ad:0b:89:ad:52:7b:e6:9b:7e:0a:26:17:ef:b7:
         ef:b7:0c:3a:90:f6:4b:77:49:f9:2f:59:0b:9a:56:fb:ce:8b:
         5f:5a:d7:5a:bc:8a:ca:05:bc:d5:13:80:64:6b:1c:86:ae:96:
         33:e4:8d:47:16:70:d9:8f:7f:ed:dc:55:95:5e:17:bc:ad:cc:
         28:c3:03:72:d1:d5:23:b6:d0:8e:06:b9:9f:db:97:a5:3a:4c:
         fc:81:f1:d1:e7:2d:d3:6e:7a:99:1f:51:10:49:19:a9:bc:23:
         f2:e9:4c:4b:b9:ba:e7:9b:7d:57:0d:c4:57:59:8e:3e:ff:92:
         dc:f9:cc:fa:69:3c:f6:ca:b3:14:d5:b5:87:cb:e9:1d:b7:83:
         16:c5:11:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:28:48 2026 by rpki-client