Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8c2a8d95-0290-4218-9b08-d157e5f127f9/d779b9b9-5804-3150-8ebf-8baf0661eeaf.roa
File:                     d779b9b9-5804-3150-8ebf-8baf0661eeaf.roa (raw, json)
Hash identifier:          2R02wcR6mbh6Etuzp5E3qrmn8RpdzjgX+ApSMbpx4hQ=
Subject key identifier:   0C:C4:4E:91:F5:DB:A2:22:BB:E4:A6:F0:65:D0:59:D9:A0:28:20:ED
Certificate issuer:       /CN=8c2a8d95-0290-4218-9b08-d157e5f127f9
Certificate serial:       010D0C9F4328584CD83743ABE7025BFB2A018A80
Authority key identifier: D9:14:6A:25:0B:CC:BD:BE:46:97:7E:E1:6E:9A:B5:D6:32:82:E9:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8c2a8d95-0290-4218-9b08-d157e5f127f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8c2a8d95-0290-4218-9b08-d157e5f127f9/d779b9b9-5804-3150-8ebf-8baf0661eeaf.roa
Signing time:             Fri 13 Feb 2026 02:00:31 +0000
ROA not before:           Fri 13 Feb 2026 02:00:31 +0000
ROA not after:            Thu 14 May 2026 01:00:31 +0000
asID:                     46733
IP address blocks:        2602:f9f4:10::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8c2a8d95-0290-4218-9b08-d157e5f127f9/8c2a8d95-0290-4218-9b08-d157e5f127f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8c2a8d95-0290-4218-9b08-d157e5f127f9/8c2a8d95-0290-4218-9b08-d157e5f127f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8c2a8d95-0290-4218-9b08-d157e5f127f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:d8:37:43:ab:e7:02:5b:fb:2a:01:8a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8c2a8d95-0290-4218-9b08-d157e5f127f9
        Validity
            Not Before: Feb 13 02:00:31 2026 GMT
            Not After : May 14 01:00:31 2026 GMT
        Subject: CN=f5710969-4fda-4706-b7f9-640d174edbe5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:17:72:ab:52:c0:75:9e:20:1b:e9:88:e8:95:
                    cf:0d:04:5c:cc:ad:2a:2a:2a:54:4f:49:fc:d0:b8:
                    25:b1:ca:19:1d:7e:09:6e:65:fc:b0:46:8f:d2:4c:
                    0f:56:f2:af:29:20:a0:12:31:df:b0:1d:98:5b:61:
                    b5:f1:86:f2:c4:f4:e6:6b:ce:9f:23:33:f2:8b:f4:
                    74:d1:72:e5:94:60:17:1e:85:e1:49:97:20:a7:4e:
                    06:ef:be:d5:3b:3e:8f:f5:52:2b:04:2e:55:80:0e:
                    45:20:d9:54:89:2c:fb:0c:20:ae:c9:23:48:29:e7:
                    91:91:b8:c1:50:20:d5:19:41:b1:b4:60:7c:92:01:
                    5a:6c:c1:d4:46:80:ff:01:b5:36:67:f1:0d:8b:e9:
                    3f:5e:8e:9b:f0:a3:a8:13:74:6c:ce:c2:0b:27:08:
                    dc:9c:4d:7f:3b:e6:69:38:42:42:1d:89:7a:78:d5:
                    75:e9:c3:0a:73:33:39:0f:57:63:6a:8f:20:dd:c9:
                    89:4c:7e:1e:12:e8:3b:e3:c4:39:36:1c:bd:75:59:
                    2c:07:3a:09:fb:c0:e3:cd:f4:9d:f2:e0:cd:10:1b:
                    00:3e:33:ca:f7:46:da:2c:50:a5:42:2f:c9:a7:e9:
                    a6:01:9d:06:62:2c:0b:a2:3d:50:8e:75:9b:14:1e:
                    98:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:C4:4E:91:F5:DB:A2:22:BB:E4:A6:F0:65:D0:59:D9:A0:28:20:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8c2a8d95-0290-4218-9b08-d157e5f127f9/d779b9b9-5804-3150-8ebf-8baf0661eeaf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8c2a8d95-0290-4218-9b08-d157e5f127f9/8c2a8d95-0290-4218-9b08-d157e5f127f9.crl

            X509v3 Authority Key Identifier:
                keyid:D9:14:6A:25:0B:CC:BD:BE:46:97:7E:E1:6E:9A:B5:D6:32:82:E9:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8c2a8d95-0290-4218-9b08-d157e5f127f9.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f9f4:10::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:6e:aa:8c:3c:4e:82:0c:90:dc:e3:88:04:6d:59:c4:e8:32:
         f0:5e:68:7d:a2:e9:c5:b0:45:e9:44:62:27:b3:1e:8e:73:1d:
         96:71:7a:03:70:46:ad:fc:43:c7:44:af:5a:9c:9d:90:61:d8:
         99:20:e6:b2:87:a8:df:13:d4:50:6e:49:36:9a:9b:0f:a2:c1:
         88:a4:bd:22:0d:85:af:13:fe:72:ba:be:8d:91:25:f0:6e:02:
         59:17:6e:1a:48:4e:22:76:d1:af:db:be:76:4c:b9:a2:fd:46:
         6c:fa:6c:2e:ed:5d:9e:70:6a:aa:f7:b3:95:80:9b:d0:64:27:
         17:a4:e9:ca:90:a8:e0:48:6d:cb:b1:2a:bf:73:91:f7:b7:46:
         ea:db:eb:18:e4:5e:61:36:15:6f:fc:9c:75:fa:03:4d:92:2d:
         d5:e7:2c:6a:b6:e7:d8:87:70:b7:04:43:e9:c8:58:1b:a8:59:
         c9:84:b0:c6:55:c5:c6:de:46:b3:b3:9c:8d:05:57:56:5f:5b:
         d7:30:59:c4:7b:c2:51:9f:34:1c:5b:c4:84:89:e0:71:16:0a:
         3e:15:5b:67:df:a2:fd:05:5c:d6:d7:71:7e:34:5f:2c:0a:c3:
         6b:a4:97:14:16:92:d7:ac:d2:28:8b:17:7c:4c:f2:6a:ee:91:
         0b:15:c9:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 21:57:11 2026 by rpki-client