Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ac65e460-1633-4b44-9dc5-be303c8b3f09/100bd445-11b8-324b-bf41-5a5c61b7658a.roa
File:                     100bd445-11b8-324b-bf41-5a5c61b7658a.roa (raw, json)
Hash identifier:          aKxmJhM/N7Eji+9IfAm+HsLsdfeKpp5sS19NSqWKFh8=
Subject key identifier:   FE:8A:D5:95:24:5A:E9:37:DE:A5:E8:A1:BC:AB:87:A4:68:4F:0B:13
Certificate issuer:       /CN=ac65e460-1633-4b44-9dc5-be303c8b3f09
Certificate serial:       010D0C9F4328584CFC823AA45F5E6FDDD8815980
Authority key identifier: 20:A0:6F:E0:40:2F:37:1F:59:03:00:DD:95:67:73:32:9F:7E:CC:2D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ac65e460-1633-4b44-9dc5-be303c8b3f09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ac65e460-1633-4b44-9dc5-be303c8b3f09/100bd445-11b8-324b-bf41-5a5c61b7658a.roa
Signing time:             Thu 26 Feb 2026 02:00:32 +0000
ROA not before:           Thu 26 Feb 2026 02:00:32 +0000
ROA not after:            Wed 27 May 2026 01:00:32 +0000
asID:                     46386
IP address blocks:        2602:f700:c0::/43 maxlen: 43
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ac65e460-1633-4b44-9dc5-be303c8b3f09/ac65e460-1633-4b44-9dc5-be303c8b3f09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ac65e460-1633-4b44-9dc5-be303c8b3f09/ac65e460-1633-4b44-9dc5-be303c8b3f09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ac65e460-1633-4b44-9dc5-be303c8b3f09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 02 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:fc:82:3a:a4:5f:5e:6f:dd:d8:81:59:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ac65e460-1633-4b44-9dc5-be303c8b3f09
        Validity
            Not Before: Feb 26 02:00:32 2026 GMT
            Not After : May 27 01:00:32 2026 GMT
        Subject: CN=919a64a4-90ed-43e6-a5ac-d422d42b48fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:19:1a:4f:66:37:29:05:92:6f:d2:1f:ca:05:
                    ca:4f:93:78:8a:89:4f:5d:a7:85:7b:f2:76:d8:2e:
                    c3:ac:19:c5:35:f1:e8:a9:43:cf:dd:4f:21:70:ff:
                    32:3f:79:62:b0:e5:a5:82:9a:4f:16:53:5e:77:b9:
                    e7:13:23:01:17:89:32:16:51:1f:66:03:65:79:94:
                    ac:7f:5b:fc:5f:a1:7e:71:ca:98:c2:c1:54:c3:be:
                    a9:13:fe:ac:d6:9b:46:d0:5b:dc:15:a7:ea:56:50:
                    7a:ea:06:e6:48:3b:70:f0:c0:2a:04:17:40:e7:2c:
                    44:5b:05:23:a6:b0:20:81:a9:9e:bf:3e:b2:46:bb:
                    71:37:66:2a:9c:ae:29:9b:9b:7e:e5:9a:dc:f7:2b:
                    72:b5:54:f7:b5:a9:40:dc:05:78:c2:1e:29:97:75:
                    10:24:7e:72:5b:05:d9:67:0c:7a:45:b7:91:3a:cf:
                    af:50:ae:6b:d9:47:7a:38:21:db:a6:42:0a:a2:f1:
                    47:ee:2b:5f:df:7c:f1:33:47:d1:e9:1f:97:b1:3a:
                    71:c5:89:1e:d4:bb:97:e6:14:61:ef:50:55:61:fe:
                    13:bb:e8:14:3b:09:a5:ea:41:88:d9:28:da:84:fc:
                    8b:94:7f:70:4d:e5:c1:be:0f:5c:10:43:ea:59:97:
                    e3:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:8A:D5:95:24:5A:E9:37:DE:A5:E8:A1:BC:AB:87:A4:68:4F:0B:13
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ac65e460-1633-4b44-9dc5-be303c8b3f09/100bd445-11b8-324b-bf41-5a5c61b7658a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ac65e460-1633-4b44-9dc5-be303c8b3f09/ac65e460-1633-4b44-9dc5-be303c8b3f09.crl

            X509v3 Authority Key Identifier:
                keyid:20:A0:6F:E0:40:2F:37:1F:59:03:00:DD:95:67:73:32:9F:7E:CC:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ac65e460-1633-4b44-9dc5-be303c8b3f09.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f700:c0::/43

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:70:ff:ba:29:81:5f:79:d7:1a:3f:b3:00:cb:0f:96:fe:ed:
         61:db:00:19:3f:ba:bf:e0:30:26:05:f4:b4:0a:15:db:9b:b0:
         07:93:63:b1:cc:8c:19:83:d4:ac:38:1d:94:bf:c1:a9:89:1a:
         a7:73:08:90:0a:a5:f0:d0:79:fc:73:dd:40:43:ab:5e:2f:b9:
         4f:41:80:8f:b8:50:16:fc:a4:55:d6:39:c2:d6:94:6d:8f:6f:
         af:78:d8:33:04:1a:bc:34:d0:13:d9:5d:75:b6:e9:51:a0:01:
         de:5f:fe:db:6d:be:f3:a8:aa:5d:d3:9a:fc:84:56:c6:a8:61:
         ee:6a:e0:3a:1b:1a:d9:b8:12:66:a6:86:18:70:4b:45:c8:08:
         69:d0:2a:2f:5a:00:31:1f:18:cb:06:54:2e:bf:27:39:a3:1d:
         89:db:f4:52:fa:2c:a3:18:81:8f:c6:00:44:b4:5a:64:b4:40:
         ef:04:ed:07:77:ea:04:97:96:8f:93:27:a6:35:4c:f6:27:8f:
         34:65:ef:36:7d:ec:ba:6a:11:c1:46:62:7b:45:c5:f4:d1:7d:
         4f:43:79:6a:58:f6:e1:90:f2:4c:00:ab:1f:9b:72:8f:14:7e:
         d1:ad:60:bc:e7:38:32:a0:a6:47:b6:85:74:57:7f:1c:dd:47:
         47:51:2a:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 14:47:57 2026 by rpki-client