Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b2f3a854-344b-48e8-a9ff-7e128dbd261d/0a8b671e-a1c5-34fc-989f-ddcd5503d85e.roa
File:                     0a8b671e-a1c5-34fc-989f-ddcd5503d85e.roa (raw, json)
Hash identifier:          H63dZpZfAJ3gDBiD6/aEJDWvkmpA9tKC1HsXoRb6lNU=
Subject key identifier:   57:5B:99:DB:F4:9B:3A:BF:4F:5A:EC:EE:8D:EB:5A:AF:41:9B:A3:9E
Certificate issuer:       /CN=b2f3a854-344b-48e8-a9ff-7e128dbd261d
Certificate serial:       010D0C9F4328584CD407A448A7117ECD893B3200
Authority key identifier: 99:19:2E:F1:DE:93:EA:99:7F:EC:6C:13:BA:4E:CF:6F:05:D5:C9:7B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b2f3a854-344b-48e8-a9ff-7e128dbd261d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b2f3a854-344b-48e8-a9ff-7e128dbd261d/0a8b671e-a1c5-34fc-989f-ddcd5503d85e.roa
Signing time:             Wed 11 Feb 2026 14:00:41 +0000
ROA not before:           Wed 11 Feb 2026 14:00:41 +0000
ROA not after:            Tue 12 May 2026 13:00:41 +0000
asID:                     25693
IP address blocks:        2602:f6b0::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b2f3a854-344b-48e8-a9ff-7e128dbd261d/b2f3a854-344b-48e8-a9ff-7e128dbd261d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b2f3a854-344b-48e8-a9ff-7e128dbd261d/b2f3a854-344b-48e8-a9ff-7e128dbd261d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b2f3a854-344b-48e8-a9ff-7e128dbd261d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:d4:07:a4:48:a7:11:7e:cd:89:3b:32:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f3a854-344b-48e8-a9ff-7e128dbd261d
        Validity
            Not Before: Feb 11 14:00:41 2026 GMT
            Not After : May 12 13:00:41 2026 GMT
        Subject: CN=08db4b86-2866-4cdd-9f6f-e4899e6504d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:99:3e:50:99:93:a0:b8:3f:52:fd:78:58:15:
                    91:0c:a2:e6:03:00:a8:fc:f6:38:ff:3d:c1:53:47:
                    05:94:3e:85:6a:66:eb:db:89:ac:df:80:b7:6f:1c:
                    23:86:7f:21:a7:67:5c:14:97:a1:3b:84:6e:85:b0:
                    e7:f6:25:50:12:d4:b5:65:78:84:17:9c:6c:ef:ce:
                    27:7e:8d:4b:cc:80:ea:4a:a1:cf:81:89:00:44:67:
                    cb:4c:0b:12:66:c9:dc:32:85:57:bc:bc:24:25:00:
                    9d:5d:66:b0:22:64:6d:af:a3:5c:84:eb:3a:36:29:
                    6b:55:0b:8f:e3:50:71:9e:89:96:3a:66:12:0d:6c:
                    5e:3f:72:5f:fa:a3:59:00:78:7c:33:0e:91:48:47:
                    a0:29:4c:02:7f:2c:c8:f3:22:a9:bf:6e:eb:a8:68:
                    9a:db:18:36:ba:c7:47:5b:79:e1:f3:62:6c:b8:2f:
                    66:fc:13:c2:3a:e5:0e:4e:5f:8e:2f:f4:b7:4f:aa:
                    3f:4d:3b:a3:ee:2d:d5:5d:0e:90:e7:e3:4f:b5:d0:
                    5d:7a:7f:6c:81:a2:d9:1f:ac:c1:50:57:36:2d:34:
                    05:fc:a5:b4:3f:90:92:43:7a:83:4d:84:6b:b6:52:
                    22:dd:30:df:cd:8a:4c:f3:8c:2a:f0:e2:9c:71:cb:
                    66:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:5B:99:DB:F4:9B:3A:BF:4F:5A:EC:EE:8D:EB:5A:AF:41:9B:A3:9E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b2f3a854-344b-48e8-a9ff-7e128dbd261d/0a8b671e-a1c5-34fc-989f-ddcd5503d85e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b2f3a854-344b-48e8-a9ff-7e128dbd261d/b2f3a854-344b-48e8-a9ff-7e128dbd261d.crl

            X509v3 Authority Key Identifier:
                keyid:99:19:2E:F1:DE:93:EA:99:7F:EC:6C:13:BA:4E:CF:6F:05:D5:C9:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b2f3a854-344b-48e8-a9ff-7e128dbd261d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f6b0::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:3c:23:a4:58:ce:43:ac:6d:4a:c3:8d:9e:82:b9:62:bf:56:
         65:9d:a6:07:d4:2b:85:0f:21:4a:14:e0:5e:93:ac:2c:a2:82:
         ce:3e:98:22:18:98:bf:9b:60:a3:d1:98:3b:59:43:7f:23:f1:
         95:a9:c3:ae:d2:3d:52:34:31:c8:a1:8d:6a:a1:ae:1d:b7:56:
         a5:ca:72:43:be:ca:18:45:4b:41:7e:0e:b5:35:ad:f4:ac:94:
         f0:00:88:47:b7:64:77:ce:29:c7:22:2f:4a:e6:fb:f8:44:8c:
         39:79:3b:32:e9:74:75:a8:c3:56:dd:42:69:ec:33:66:7d:30:
         5c:3b:49:b1:69:90:4c:f3:72:5f:72:ea:e9:21:cc:6f:66:07:
         b0:5b:7d:2d:c8:0a:b8:c2:4f:28:58:d9:5b:23:8d:0d:79:e4:
         0a:90:a7:0e:ff:22:33:b3:01:6f:15:12:96:0c:be:aa:a3:11:
         04:4c:93:75:f4:f3:0d:42:90:ea:6e:20:d1:7d:c6:cd:2c:0c:
         a6:f5:22:01:a4:0d:36:b6:ab:8d:cc:da:25:ae:60:07:7e:90:
         78:d1:52:ed:e3:bf:d7:90:79:27:85:c8:f2:34:b5:cc:e4:1b:
         e1:0d:8b:9e:92:2d:a2:3b:17:7f:9e:14:51:00:e0:1c:6d:0f:
         41:7b:9c:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:19:24 2026 by rpki-client