Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/286e84d2-4ed8-4fae-8d3b-745fc993eaa1/c46b0c81-723c-3db5-a787-071d8144bf3c.roa
File:                     c46b0c81-723c-3db5-a787-071d8144bf3c.roa (raw, json)
Hash identifier:          kDreu+NfWxSTbYnNakTfrnnDw52OKPjkaw69AohRjQw=
Subject key identifier:   F1:D0:C6:92:3F:72:C2:A8:DF:83:50:F1:84:84:83:26:60:1F:B1:1B
Certificate issuer:       /CN=286e84d2-4ed8-4fae-8d3b-745fc993eaa1
Certificate serial:       010D0C9F4328584CFEC63AF0868D3417AEADDC40
Authority key identifier: 84:2D:05:B5:45:43:82:DD:F5:8C:81:AE:B0:AD:59:6B:CF:02:54:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/286e84d2-4ed8-4fae-8d3b-745fc993eaa1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/286e84d2-4ed8-4fae-8d3b-745fc993eaa1/c46b0c81-723c-3db5-a787-071d8144bf3c.roa
Signing time:             Thu 26 Feb 2026 21:29:22 +0000
ROA not before:           Thu 26 Feb 2026 21:29:22 +0000
ROA not after:            Wed 27 May 2026 20:29:22 +0000
asID:                     402123
IP address blocks:        68.67.123.0/24 maxlen: 24
                          2602:fbe2::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/286e84d2-4ed8-4fae-8d3b-745fc993eaa1/286e84d2-4ed8-4fae-8d3b-745fc993eaa1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/286e84d2-4ed8-4fae-8d3b-745fc993eaa1/286e84d2-4ed8-4fae-8d3b-745fc993eaa1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/286e84d2-4ed8-4fae-8d3b-745fc993eaa1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:fe:c6:3a:f0:86:8d:34:17:ae:ad:dc:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=286e84d2-4ed8-4fae-8d3b-745fc993eaa1
        Validity
            Not Before: Feb 26 21:29:22 2026 GMT
            Not After : May 27 20:29:22 2026 GMT
        Subject: CN=526e1765-1e92-401d-8047-50bdc71d2f8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:9f:95:a6:25:13:8b:09:95:a4:da:61:29:0a:
                    5f:50:4a:0b:62:c2:eb:27:0e:1b:21:1c:c6:aa:c6:
                    38:b8:fe:10:c6:e2:81:b4:b8:66:cc:35:e6:ac:2c:
                    13:9e:a8:82:1a:bf:fb:51:02:d1:ff:3c:b3:fa:12:
                    7b:85:d9:3d:a8:4a:7d:80:36:8b:e4:54:f2:05:ef:
                    15:38:8c:d0:d3:66:0a:4a:a5:04:20:d1:92:df:7f:
                    94:03:bd:90:4d:d8:30:f6:ed:b6:c2:39:09:4b:56:
                    22:0b:08:21:0d:6c:72:45:fe:2e:07:ea:5c:2e:d0:
                    af:25:62:65:f3:9b:ff:fa:0c:ee:1e:c9:a5:4c:e8:
                    63:05:20:57:73:b8:e5:b2:82:89:a1:e9:61:b9:7d:
                    13:11:e8:28:67:0d:23:eb:62:09:39:df:20:6c:8d:
                    b0:df:20:d0:d1:07:db:b0:5c:a9:b2:21:39:9a:ca:
                    d5:76:c9:60:0f:0b:e9:49:a7:c4:94:5a:0d:3a:94:
                    97:c1:34:db:1b:05:90:98:da:20:2f:70:ac:51:5c:
                    29:01:83:96:53:14:ce:56:cd:6f:31:8f:34:af:65:
                    5f:23:a2:6b:18:87:e7:c3:f8:cd:8b:aa:12:97:de:
                    23:3e:29:40:9f:f6:53:b5:32:8f:07:ea:f6:42:00:
                    3e:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:D0:C6:92:3F:72:C2:A8:DF:83:50:F1:84:84:83:26:60:1F:B1:1B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/286e84d2-4ed8-4fae-8d3b-745fc993eaa1/c46b0c81-723c-3db5-a787-071d8144bf3c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/286e84d2-4ed8-4fae-8d3b-745fc993eaa1/286e84d2-4ed8-4fae-8d3b-745fc993eaa1.crl

            X509v3 Authority Key Identifier:
                keyid:84:2D:05:B5:45:43:82:DD:F5:8C:81:AE:B0:AD:59:6B:CF:02:54:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/286e84d2-4ed8-4fae-8d3b-745fc993eaa1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.67.123.0/24
                IPv6:
                  2602:fbe2::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:66:3f:9d:58:e1:5b:5b:a1:74:87:0e:ec:ca:66:2f:75:f4:
         73:d3:b4:a9:69:71:1b:0e:a1:8c:0d:a6:48:28:18:b3:3c:d9:
         42:7a:e1:b4:c7:70:3c:83:9e:08:ad:29:d3:2c:d3:3b:73:ec:
         6a:17:a0:04:80:02:c6:8a:6b:75:7b:ed:a2:bd:66:13:dd:33:
         43:b2:0e:2a:a9:f8:84:9b:2b:c4:7a:37:99:e5:bb:2b:28:c8:
         75:39:8f:58:6c:e1:c1:dd:35:9a:5b:ca:d4:59:85:1d:32:e6:
         01:95:78:a1:f9:d9:17:29:6e:c4:48:94:03:32:95:ca:18:81:
         65:1d:bc:ff:ac:70:bc:47:88:c9:44:d7:83:0b:73:63:ec:ee:
         13:c9:cc:61:8f:ac:fd:4e:0a:1f:8f:17:87:7e:4f:21:a9:42:
         8d:0f:f3:3a:51:dd:e2:09:56:ce:57:4f:a7:7d:11:d8:d1:f9:
         5e:38:0e:17:fe:81:cd:c2:f8:66:97:a5:74:d0:91:b0:ca:61:
         ab:a9:a4:1a:3f:17:79:0e:b8:e3:4e:0d:a9:2a:c6:6a:e6:98:
         81:3a:4a:08:27:a6:5c:66:21:00:4d:8a:28:f5:1d:a0:2d:a4:
         53:31:d4:ff:23:54:51:78:b0:83:ea:e6:9c:3f:b7:8a:78:fc:
         47:54:f4:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:53:04 2026 by rpki-client