Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/35ccbd7e-0844-48b1-88d7-0a8ef46e8168/175ad2b2-07c2-3132-bd39-ad9050a1af8f.roa
File:                     175ad2b2-07c2-3132-bd39-ad9050a1af8f.roa (raw, json)
Hash identifier:          3SNeb1xmW/bCQAlB00Ao/gELiFNB6M5VbSVpz+RzpFc=
Subject key identifier:   A5:D7:DC:B1:66:46:93:2D:F4:52:58:52:F9:66:70:82:84:F5:EF:87
Certificate issuer:       /CN=35ccbd7e-0844-48b1-88d7-0a8ef46e8168
Certificate serial:       010D0C9F4328584CDC678CE6E85F97E4AC158700
Authority key identifier: 31:67:54:B4:BF:16:7E:AD:F1:F4:10:C1:D9:D2:FA:DA:AA:85:3C:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/35ccbd7e-0844-48b1-88d7-0a8ef46e8168.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/35ccbd7e-0844-48b1-88d7-0a8ef46e8168/175ad2b2-07c2-3132-bd39-ad9050a1af8f.roa
Signing time:             Sat 14 Feb 2026 14:00:41 +0000
ROA not before:           Sat 14 Feb 2026 14:00:41 +0000
ROA not after:            Fri 15 May 2026 13:00:41 +0000
asID:                     14511
IP address blocks:        2610:188::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/35ccbd7e-0844-48b1-88d7-0a8ef46e8168/35ccbd7e-0844-48b1-88d7-0a8ef46e8168.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/35ccbd7e-0844-48b1-88d7-0a8ef46e8168/35ccbd7e-0844-48b1-88d7-0a8ef46e8168.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/35ccbd7e-0844-48b1-88d7-0a8ef46e8168.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:dc:67:8c:e6:e8:5f:97:e4:ac:15:87:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35ccbd7e-0844-48b1-88d7-0a8ef46e8168
        Validity
            Not Before: Feb 14 14:00:41 2026 GMT
            Not After : May 15 13:00:41 2026 GMT
        Subject: CN=24385d77-0a7e-45cc-b390-178d40335427
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:63:10:b1:58:db:fd:4f:ad:98:65:5e:df:de:
                    7b:98:49:c6:dc:39:69:a7:60:d4:fb:05:49:76:c0:
                    44:9e:3d:24:ab:c0:2f:2c:1c:e0:8d:3d:80:f5:ba:
                    27:49:ed:25:2f:57:5d:74:2c:c6:ca:76:ab:3d:88:
                    c9:3c:6b:f4:4c:df:05:fe:5b:60:77:7f:7e:4a:db:
                    c2:d5:af:a1:d8:fa:e1:6f:cf:73:bc:fb:10:16:12:
                    65:9c:74:10:36:29:8f:4b:82:b4:f7:ed:ab:7a:2d:
                    04:1f:0d:ed:69:99:eb:a2:34:aa:8f:d6:0b:ed:e2:
                    56:ae:8d:ae:27:a1:a3:d9:94:ab:07:9a:1e:e1:cd:
                    0c:7c:61:d5:50:85:3e:af:38:21:20:98:d3:72:76:
                    7c:e3:dc:f8:8b:e3:56:d8:cc:c1:d9:b3:82:97:75:
                    61:02:39:c3:91:d4:cf:21:6d:29:40:5a:20:27:60:
                    b2:b0:f2:ee:e5:ee:16:39:6e:93:3d:89:98:38:97:
                    ba:17:36:82:90:07:65:1f:19:3b:11:8b:73:4b:2b:
                    c3:86:f9:48:03:c2:03:95:28:ff:37:6c:c7:ff:8a:
                    ed:12:19:79:df:b5:9a:d6:19:07:e4:83:bc:0d:3a:
                    9c:40:26:6e:43:86:29:d3:ae:d8:6c:9f:d0:26:5c:
                    6e:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:D7:DC:B1:66:46:93:2D:F4:52:58:52:F9:66:70:82:84:F5:EF:87
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/35ccbd7e-0844-48b1-88d7-0a8ef46e8168/175ad2b2-07c2-3132-bd39-ad9050a1af8f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/35ccbd7e-0844-48b1-88d7-0a8ef46e8168/35ccbd7e-0844-48b1-88d7-0a8ef46e8168.crl

            X509v3 Authority Key Identifier:
                keyid:31:67:54:B4:BF:16:7E:AD:F1:F4:10:C1:D9:D2:FA:DA:AA:85:3C:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/35ccbd7e-0844-48b1-88d7-0a8ef46e8168.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2610:188::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:09:9d:eb:d3:8b:ac:36:e9:1a:da:34:bd:49:8f:e5:80:8b:
         b7:11:f8:27:5a:49:c8:f4:b7:fb:e7:25:d3:a9:8a:d3:e3:82:
         7c:8d:2c:ed:9e:89:5e:56:ce:e9:af:27:e5:8f:a0:0c:93:17:
         e8:2c:8b:9f:61:51:89:c1:a8:17:cb:e2:da:bb:ef:d4:7d:e1:
         66:43:4d:22:9e:c6:77:2b:aa:a5:76:29:f0:0a:2d:27:11:65:
         7a:7e:43:5a:9a:cb:5f:67:46:07:64:80:6f:a2:15:b6:7d:a7:
         54:13:35:d3:d9:05:70:32:69:02:a3:e2:2f:ed:3f:cc:df:1e:
         03:7e:ff:0c:eb:e9:13:56:b1:d9:d2:fc:1e:37:5c:b7:1b:69:
         f3:c9:e3:89:17:2a:87:79:fd:ba:48:0d:50:14:e7:00:68:f5:
         57:01:ae:94:82:e8:55:d7:3f:ae:3b:33:4b:88:c9:ba:03:76:
         89:36:e9:ac:6e:17:8f:db:95:fa:f8:e1:7d:03:f5:d8:26:32:
         13:de:35:89:62:9d:c1:c0:9c:38:2c:03:46:f5:e6:4c:62:e6:
         67:6a:1f:67:64:3c:1e:55:0f:48:41:60:bb:aa:09:bc:77:d5:
         79:9a:23:0b:81:65:11:cc:72:f4:55:70:70:a2:5e:91:23:5f:
         fa:2e:94:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:55:10 2026 by rpki-client