Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/6e46b3f4-2936-48ea-9a4e-365f1653802c/5cb03cd3-fb77-3bb3-817e-61cfef974637.roa
File:                     5cb03cd3-fb77-3bb3-817e-61cfef974637.roa (raw, json)
Hash identifier:          tz57TdVX52a8qLtAkt1u3s0EHlA/bJJ9fmMd16uaqcE=
Subject key identifier:   04:49:72:64:46:E6:EF:0F:56:56:6D:87:1C:D9:B9:A3:AA:91:EB:A9
Certificate issuer:       /CN=6e46b3f4-2936-48ea-9a4e-365f1653802c
Certificate serial:       010D0C9F4328584CF8EF45ABEC694003A2026E00
Authority key identifier: 93:30:8B:EF:D3:8F:5D:99:EB:B0:C3:4A:DE:55:F0:77:43:3B:35:2E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/6e46b3f4-2936-48ea-9a4e-365f1653802c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/6e46b3f4-2936-48ea-9a4e-365f1653802c/5cb03cd3-fb77-3bb3-817e-61cfef974637.roa
Signing time:             Tue 24 Feb 2026 19:17:13 +0000
ROA not before:           Tue 24 Feb 2026 19:17:13 +0000
ROA not after:            Mon 25 May 2026 18:17:13 +0000
asID:                     13614
IP address blocks:        2604:a200::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/6e46b3f4-2936-48ea-9a4e-365f1653802c/6e46b3f4-2936-48ea-9a4e-365f1653802c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/6e46b3f4-2936-48ea-9a4e-365f1653802c/6e46b3f4-2936-48ea-9a4e-365f1653802c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/6e46b3f4-2936-48ea-9a4e-365f1653802c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:f8:ef:45:ab:ec:69:40:03:a2:02:6e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e46b3f4-2936-48ea-9a4e-365f1653802c
        Validity
            Not Before: Feb 24 19:17:13 2026 GMT
            Not After : May 25 18:17:13 2026 GMT
        Subject: CN=c4ff8910-b7ea-4c92-a739-fa84e1dd4a50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:22:3e:7a:37:4b:4d:51:7f:f3:13:6c:98:94:
                    b6:a0:51:0d:00:6a:6f:53:f2:83:f8:a1:1f:5f:72:
                    72:71:20:5b:82:dd:02:47:9b:cb:1b:cf:f5:15:ae:
                    04:b3:ec:27:0a:20:5b:65:8f:d5:48:9e:55:1f:69:
                    e4:e1:6d:1b:4f:cf:04:f2:c9:e9:ff:94:57:5e:de:
                    8e:6a:ff:cb:9e:9f:66:ec:45:30:46:3a:48:65:03:
                    ec:ad:1f:4b:ae:13:50:a8:85:54:17:9d:8e:74:b3:
                    de:ce:f8:50:6e:e7:1c:77:0c:86:98:03:fd:45:9c:
                    e0:16:ac:8b:fb:2f:dd:56:b7:cd:1d:6d:7c:35:1a:
                    d1:0c:5c:29:dc:26:64:07:00:26:76:d3:e2:72:26:
                    cb:2d:f9:9d:bb:a1:4d:9b:81:f7:92:a5:1b:cd:8a:
                    60:f0:60:e3:8b:b3:2f:8a:d6:aa:77:a9:2b:e6:2c:
                    e8:86:ec:40:dd:36:da:86:7e:09:93:d1:33:7a:89:
                    5b:ea:9e:94:ae:cc:1e:fc:12:07:3f:23:f7:1d:57:
                    ac:2e:66:a8:8a:96:2b:46:19:49:11:e6:e8:85:63:
                    df:62:24:89:51:54:71:b8:82:85:08:6b:10:6a:5d:
                    79:74:d4:09:a9:44:2c:74:d9:c6:ab:a5:32:08:b1:
                    fd:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:49:72:64:46:E6:EF:0F:56:56:6D:87:1C:D9:B9:A3:AA:91:EB:A9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/6e46b3f4-2936-48ea-9a4e-365f1653802c/5cb03cd3-fb77-3bb3-817e-61cfef974637.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/6e46b3f4-2936-48ea-9a4e-365f1653802c/6e46b3f4-2936-48ea-9a4e-365f1653802c.crl

            X509v3 Authority Key Identifier:
                keyid:93:30:8B:EF:D3:8F:5D:99:EB:B0:C3:4A:DE:55:F0:77:43:3B:35:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/6e46b3f4-2936-48ea-9a4e-365f1653802c.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:a200::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:ac:a5:8d:48:ab:fc:ea:c6:5b:dc:d0:93:41:bc:af:57:f8:
         5c:70:78:20:13:f1:0e:5b:57:97:82:8d:c2:c5:f5:d5:0a:64:
         07:a5:b0:20:d7:c1:dc:51:ae:ad:6c:88:e9:3f:7d:cd:39:71:
         43:13:21:ab:c2:3d:72:3c:65:8d:14:47:28:66:7d:66:ff:db:
         35:b4:19:e4:4e:31:35:eb:b5:84:16:90:8a:17:80:86:1d:1e:
         e5:ca:3f:60:58:96:3d:7c:df:df:ab:bb:25:e8:3c:36:df:ba:
         5b:9b:60:77:d6:7c:7b:67:e4:e4:fd:92:f9:e7:87:ea:b3:75:
         57:48:08:79:ce:b6:52:93:8c:78:75:4a:d7:41:bb:19:96:39:
         77:ae:ff:8a:0b:84:7b:c7:60:55:ee:96:e6:51:6c:38:53:2f:
         4f:c6:b5:ca:18:d4:73:bf:80:b8:d7:5a:45:d6:95:79:5f:f8:
         2b:96:07:af:f8:04:ba:92:84:e4:6d:48:52:b4:12:91:ac:9a:
         29:9e:f2:8c:35:98:72:e3:c9:f4:d9:f2:55:17:ac:b0:70:18:
         a1:46:0b:d0:04:6d:39:b8:45:0c:07:2e:ab:f4:e4:cb:cd:e0:
         3c:35:44:fd:ca:fd:e2:23:c3:43:74:ea:11:84:8c:d8:5b:d9:
         74:67:ee:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:07:00 2026 by rpki-client