Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/3411e9b9-a14f-3453-8232-9d7197938dd4.roa
File:                     3411e9b9-a14f-3453-8232-9d7197938dd4.roa (raw, json)
Hash identifier:          hVJRvl5JWFf5jNVtAGw44n1faGKXI0Y9/JNvIWMV6jQ=
Subject key identifier:   61:0A:CB:5E:52:64:73:D7:74:DE:A6:EA:11:CB:A3:F3:4B:F3:6D:84
Certificate issuer:       /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial:       010D0C9F4328584CD407808DCA521F12A4D4B400
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/3411e9b9-a14f-3453-8232-9d7197938dd4.roa
Signing time:             Wed 11 Feb 2026 14:00:41 +0000
ROA not before:           Wed 11 Feb 2026 14:00:41 +0000
ROA not after:            Tue 12 May 2026 13:00:41 +0000
asID:                     54113
IP address blocks:        2620:11a:c008::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:d4:07:80:8d:ca:52:1f:12:a4:d4:b4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
        Validity
            Not Before: Feb 11 14:00:41 2026 GMT
            Not After : May 12 13:00:41 2026 GMT
        Subject: CN=5136b6d1-159e-4bfe-944c-5c99cc24ecde
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:d6:62:87:07:96:12:55:1f:9c:1f:ee:04:ba:
                    72:a3:3f:de:89:8d:86:43:44:fb:0b:85:91:66:f1:
                    27:65:b1:64:2b:b1:cf:27:fe:c3:6a:fb:40:ab:e6:
                    84:bc:bf:3d:5f:5b:e2:4d:7b:df:b8:69:2a:f0:25:
                    72:d3:eb:51:ec:11:33:64:8f:07:7a:c7:5f:09:72:
                    20:22:7e:cf:a7:c8:7f:4c:e9:c4:d3:9a:a5:ce:c2:
                    51:d0:99:36:9c:b9:fa:1f:03:07:ce:81:e3:32:f5:
                    e6:14:bf:27:7d:2e:14:7e:21:d4:28:5c:7e:9f:e4:
                    7b:19:2d:ac:cb:d1:11:d6:3f:1a:34:95:a9:1e:1c:
                    ff:b7:3c:99:75:5e:3e:38:7b:9a:8c:df:a0:5d:37:
                    be:23:32:b4:3a:ea:6b:ed:20:f2:68:ae:7c:c8:41:
                    43:e1:84:46:29:51:40:06:03:5b:d1:f9:f0:28:17:
                    b5:62:99:af:c5:3d:b4:a8:46:71:d1:ae:1f:79:ac:
                    a6:1e:fe:d7:a1:fa:e2:69:78:ac:0e:5c:1b:3a:99:
                    30:39:7f:2e:a2:76:06:4f:bf:54:e7:14:03:60:cd:
                    d3:4f:85:7e:77:96:9a:01:1b:9e:cb:6b:13:94:4d:
                    85:de:99:61:66:35:36:b5:59:57:cc:c6:f9:3e:69:
                    29:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:0A:CB:5E:52:64:73:D7:74:DE:A6:EA:11:CB:A3:F3:4B:F3:6D:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/3411e9b9-a14f-3453-8232-9d7197938dd4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl

            X509v3 Authority Key Identifier:
                keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:11a:c008::/46

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:f1:15:78:15:3d:0a:ed:40:3c:d5:7c:6e:7b:fa:61:52:00:
         5a:13:b9:d9:dc:66:07:7c:74:2a:96:94:e2:eb:de:5b:c5:6a:
         28:ef:60:82:8c:7a:dc:b0:73:b1:c5:44:09:27:3a:a5:c9:4b:
         d1:ac:64:d6:1e:0c:f0:37:95:5f:8a:e4:cd:3a:3c:6e:4f:fb:
         1b:04:91:6f:51:24:de:c3:70:ba:6d:d1:f8:c3:89:79:c9:9c:
         3b:6e:ce:ea:ed:7e:21:d6:95:b3:2f:07:e7:a8:3d:3f:c0:34:
         b9:86:77:dc:f4:3d:93:1b:9f:76:e0:79:d3:a5:8d:9b:65:e8:
         6b:d9:33:69:b7:40:6e:6b:47:c5:c8:1b:9e:98:87:89:98:44:
         06:0d:fb:54:4f:c0:4c:1d:29:83:4f:c7:c2:cf:a3:f3:85:67:
         a9:f6:11:ba:7d:ad:43:51:00:d6:05:42:c8:9a:50:2b:f0:04:
         9d:1d:6a:a1:58:e3:88:14:e0:10:00:0d:d1:4e:c3:1f:03:a4:
         45:fe:6f:ba:70:d9:58:34:34:f8:82:7b:0b:b6:7e:dc:64:21:
         3d:fe:c2:94:84:d8:76:57:e0:7d:2c:a0:51:91:11:89:cc:46:
         ad:a9:bd:b0:90:97:49:c0:72:7f:21:a9:e6:ab:86:75:5a:f6:
         d1:65:eb:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:53:11 2026 by rpki-client