Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/484f9c2c-238b-4d23-8e8b-ab2f5a0147c1/a8ef8ebe-92a7-3667-b275-a0fed342786e.roa
File:                     a8ef8ebe-92a7-3667-b275-a0fed342786e.roa (raw, json)
Hash identifier:          /mUSHffol6BLt6vaaAE0s0sZ3ZlW3q/16n3G+CHUyjQ=
Subject key identifier:   EF:DF:2A:26:D3:72:87:C9:46:9C:E1:F3:9A:23:84:14:DB:CC:45:EC
Certificate issuer:       /CN=484f9c2c-238b-4d23-8e8b-ab2f5a0147c1
Certificate serial:       010D0C9F4328584CDF3274707C435605309398F0
Authority key identifier: 26:F6:14:C7:B3:38:B8:E6:D8:99:68:03:01:DA:B2:3A:77:33:B3:D0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/484f9c2c-238b-4d23-8e8b-ab2f5a0147c1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/484f9c2c-238b-4d23-8e8b-ab2f5a0147c1/a8ef8ebe-92a7-3667-b275-a0fed342786e.roa
Signing time:             Sun 15 Feb 2026 14:00:41 +0000
ROA not before:           Sun 15 Feb 2026 14:00:41 +0000
ROA not after:            Sat 16 May 2026 13:00:41 +0000
asID:                     32554
IP address blocks:        2607:6b40::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/484f9c2c-238b-4d23-8e8b-ab2f5a0147c1/484f9c2c-238b-4d23-8e8b-ab2f5a0147c1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/484f9c2c-238b-4d23-8e8b-ab2f5a0147c1/484f9c2c-238b-4d23-8e8b-ab2f5a0147c1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/484f9c2c-238b-4d23-8e8b-ab2f5a0147c1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 02 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:df:32:74:70:7c:43:56:05:30:93:98:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=484f9c2c-238b-4d23-8e8b-ab2f5a0147c1
        Validity
            Not Before: Feb 15 14:00:41 2026 GMT
            Not After : May 16 13:00:41 2026 GMT
        Subject: CN=02d28738-9724-4c93-a059-099d8d8e38e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:57:1f:af:4e:4e:18:c8:cc:13:6a:83:f2:7c:
                    d7:ef:03:5b:de:c9:a2:1c:29:06:43:9f:dc:13:7c:
                    5f:f5:37:e0:47:66:7c:48:23:70:16:96:10:00:3b:
                    22:c3:24:33:25:2a:6d:4f:41:d8:16:7e:92:f8:40:
                    33:16:2e:d6:82:db:20:ad:e5:a0:89:47:ab:e8:9d:
                    50:07:4f:74:c8:3b:52:88:fd:55:c4:62:16:25:0b:
                    0e:9a:ca:a9:09:35:fd:50:9b:05:15:be:74:83:12:
                    ab:2e:ac:e2:f4:e6:4e:ee:db:a2:a1:da:6b:b2:a2:
                    7c:68:fe:b9:99:8f:8c:9a:74:a3:f5:fc:42:46:3f:
                    f0:10:a3:cc:3a:33:cc:d1:3e:c3:27:88:76:fd:bc:
                    91:a0:07:4c:d4:4f:6b:b2:75:f3:09:7f:0e:39:ce:
                    d7:42:50:d7:12:06:f0:b8:14:d5:07:5e:ca:f1:f1:
                    f4:b3:94:e0:24:fc:d3:ad:6e:92:8e:5a:ad:01:b8:
                    13:a8:64:0c:74:54:db:c0:51:3b:74:44:f0:9a:85:
                    1e:72:2a:67:b9:00:72:8a:82:81:bf:d7:d9:87:3c:
                    55:ad:ed:6b:c9:43:1b:b1:ca:60:31:47:b1:7c:5d:
                    22:69:a6:bd:04:9b:cf:91:70:c2:8b:94:76:24:2b:
                    28:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:DF:2A:26:D3:72:87:C9:46:9C:E1:F3:9A:23:84:14:DB:CC:45:EC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/484f9c2c-238b-4d23-8e8b-ab2f5a0147c1/a8ef8ebe-92a7-3667-b275-a0fed342786e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/484f9c2c-238b-4d23-8e8b-ab2f5a0147c1/484f9c2c-238b-4d23-8e8b-ab2f5a0147c1.crl

            X509v3 Authority Key Identifier:
                keyid:26:F6:14:C7:B3:38:B8:E6:D8:99:68:03:01:DA:B2:3A:77:33:B3:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/484f9c2c-238b-4d23-8e8b-ab2f5a0147c1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:6b40::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:fb:c0:bf:4c:e8:28:fe:4c:94:ea:5b:9f:24:43:61:df:1b:
         1d:02:88:a0:e2:39:c6:33:37:76:db:95:30:4d:67:d7:e2:48:
         35:39:90:66:91:fd:e7:e7:32:36:71:00:e1:81:ea:94:a3:b8:
         7e:b9:cd:ae:0c:22:74:8e:6b:db:5a:51:d9:f8:9e:a9:60:8a:
         6d:65:bc:9f:76:97:1a:48:6a:e5:aa:79:33:c2:06:49:92:ab:
         56:3b:11:8e:db:2f:03:51:7f:f3:b0:07:97:98:c4:b6:88:6a:
         9f:ac:ff:72:41:88:01:28:0d:f4:0d:73:88:77:d3:b1:28:a7:
         26:50:08:91:01:57:ae:de:4a:2e:8a:46:23:0c:24:7f:6c:a6:
         69:80:27:13:00:8b:36:b6:85:fe:d5:12:75:ea:3a:f2:c1:1b:
         1d:a3:66:4b:a4:8f:17:17:18:12:e3:9e:8d:db:3b:b3:9f:e1:
         ce:f3:f3:cb:25:d5:45:a4:14:74:59:37:65:dc:49:01:b5:15:
         c3:bd:9b:8d:cf:73:b1:ac:88:d1:5f:6f:33:d4:3f:2a:db:78:
         07:40:c8:95:0b:5b:5d:36:f8:ef:1c:35:e8:4e:6c:0b:b5:75:
         e1:35:f3:c1:e9:64:b4:d5:87:b4:47:7c:14:24:d9:fb:a7:2d:
         0d:ec:36:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 14:58:08 2026 by rpki-client