Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6f599815-aa39-4cb1-86b8-df65da50cb35/41e0b9c5-6931-3c27-a40c-78f04d0befb5.roa
File:                     41e0b9c5-6931-3c27-a40c-78f04d0befb5.roa (raw, json)
Hash identifier:          5+PyCGItyPfbhy9/2UaZ9JHUxiCO3rW8hdj/mgLATUE=
Subject key identifier:   42:2F:A1:2C:DB:77:B4:78:24:F7:F8:E7:E1:B5:C7:A2:9F:C1:9C:53
Certificate issuer:       /CN=6f599815-aa39-4cb1-86b8-df65da50cb35
Certificate serial:       010D0C9F4328584CFB1CE8473949461284783DC0
Authority key identifier: 00:F1:EF:2C:40:3D:8E:FB:D9:80:A7:22:2F:F6:54:88:97:A6:0C:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6f599815-aa39-4cb1-86b8-df65da50cb35.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6f599815-aa39-4cb1-86b8-df65da50cb35/41e0b9c5-6931-3c27-a40c-78f04d0befb5.roa
Signing time:             Wed 25 Feb 2026 14:00:39 +0000
ROA not before:           Wed 25 Feb 2026 14:00:39 +0000
ROA not after:            Tue 26 May 2026 13:00:39 +0000
asID:                     211977
IP address blocks:        2607:eb40:7777::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6f599815-aa39-4cb1-86b8-df65da50cb35/6f599815-aa39-4cb1-86b8-df65da50cb35.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6f599815-aa39-4cb1-86b8-df65da50cb35/6f599815-aa39-4cb1-86b8-df65da50cb35.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6f599815-aa39-4cb1-86b8-df65da50cb35.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:fb:1c:e8:47:39:49:46:12:84:78:3d:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f599815-aa39-4cb1-86b8-df65da50cb35
        Validity
            Not Before: Feb 25 14:00:39 2026 GMT
            Not After : May 26 13:00:39 2026 GMT
        Subject: CN=c7436a5d-13a9-4921-ae9e-6b8e97fe61cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:08:2a:5f:07:70:7c:17:79:e6:39:73:b8:11:
                    ba:cf:bf:46:fc:c4:1e:3d:8a:d9:5c:cd:f9:94:97:
                    66:69:92:94:e2:af:6f:b0:3f:8a:d2:75:a7:cd:6d:
                    8a:37:b2:87:c4:de:8c:5b:c1:41:93:50:18:de:f7:
                    56:0a:29:84:e0:8e:31:6c:9f:f0:5c:9b:33:e2:f8:
                    5a:c4:08:9d:3b:34:28:95:d8:65:83:b1:78:ca:24:
                    2d:aa:c9:ca:32:37:ca:a0:41:cf:2b:bb:9d:4c:c2:
                    aa:03:84:08:cc:06:65:8e:26:99:fd:f1:39:38:ed:
                    34:ec:ad:c7:6e:db:08:db:15:eb:70:8b:0d:97:cb:
                    be:de:15:78:3c:92:5c:8a:67:0b:2a:84:33:8c:f2:
                    e2:27:f6:86:5f:7d:b8:fb:54:12:ea:e1:fd:52:48:
                    3f:68:e0:1e:9b:be:46:d0:1c:30:e4:26:23:63:4b:
                    61:ec:db:35:6c:0f:ab:cd:00:78:43:00:a4:b6:1b:
                    fb:0b:e2:23:2f:c6:09:2b:6f:f2:b6:06:4b:38:c8:
                    72:7b:72:12:c6:18:d9:b0:6e:60:6d:5e:df:27:72:
                    90:0a:cb:e0:31:9f:37:1f:b9:cb:73:12:3c:24:62:
                    33:44:be:91:89:a8:87:8c:49:da:42:ca:ad:bb:23:
                    b7:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:2F:A1:2C:DB:77:B4:78:24:F7:F8:E7:E1:B5:C7:A2:9F:C1:9C:53
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6f599815-aa39-4cb1-86b8-df65da50cb35/41e0b9c5-6931-3c27-a40c-78f04d0befb5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6f599815-aa39-4cb1-86b8-df65da50cb35/6f599815-aa39-4cb1-86b8-df65da50cb35.crl

            X509v3 Authority Key Identifier:
                keyid:00:F1:EF:2C:40:3D:8E:FB:D9:80:A7:22:2F:F6:54:88:97:A6:0C:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6f599815-aa39-4cb1-86b8-df65da50cb35.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:eb40:7777::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         e1:99:8f:cc:1e:82:9b:05:ac:6f:5a:a4:80:e9:a6:3d:cc:7a:
         18:06:47:07:0d:f0:12:13:32:75:51:80:51:13:43:ae:44:30:
         d9:78:0f:50:b4:cd:11:ac:10:0c:24:9c:e7:7e:1f:cc:5b:f4:
         59:ba:e3:09:e1:35:c5:0f:37:34:18:ba:0f:25:62:c2:15:34:
         00:e3:30:a8:5f:d3:f7:cc:a2:6a:1f:69:83:36:0f:02:f5:f9:
         63:37:27:7b:5f:08:8d:0b:e6:ec:ae:ae:e4:6e:63:0d:f1:cb:
         70:1a:26:bf:49:98:e3:e2:24:dd:88:21:10:a2:96:ac:19:b4:
         70:f2:d8:13:d9:6b:5b:41:14:2d:9f:c6:1b:2b:f1:39:3e:52:
         6d:0c:14:0d:a6:07:38:f1:71:70:23:7d:18:7d:24:52:71:64:
         09:e1:4e:14:6e:15:93:87:13:f2:5b:ab:d0:9e:69:30:09:e2:
         d9:6f:7e:2e:ee:3b:24:1b:94:c7:a3:eb:c2:4c:99:74:6e:b2:
         ee:82:9a:02:3a:7e:39:53:4d:dd:37:3e:b4:8b:db:28:6e:1a:
         78:cd:54:f1:93:d9:90:f0:83:b1:23:68:9b:93:c6:d2:96:9d:
         30:6e:4f:20:72:1f:3f:e0:a9:91:d8:59:29:c1:66:4f:36:8c:
         38:8d:86:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:41:20 2026 by rpki-client