Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/090cf75b-f998-45e2-a8ea-c4d882201d24/96098ee4-76c4-334f-bdaa-05fc194d6cee.roa
File:                     96098ee4-76c4-334f-bdaa-05fc194d6cee.roa (raw, json)
Hash identifier:          tNylN8nguk1fbqkdOnVs4m2jc1BZ8Gij/Vkyy9YBkA8=
Subject key identifier:   D3:AE:65:A9:C3:06:97:52:85:87:CB:AA:9A:99:E2:31:00:61:E9:AA
Certificate issuer:       /CN=090cf75b-f998-45e2-a8ea-c4d882201d24
Certificate serial:       010D0C9F4328584CD99CBF75A374324E700E1280
Authority key identifier: 14:9C:C7:07:9A:90:D7:69:1D:47:04:E9:AD:6D:E7:D7:CE:2C:7D:01
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/090cf75b-f998-45e2-a8ea-c4d882201d24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/090cf75b-f998-45e2-a8ea-c4d882201d24/96098ee4-76c4-334f-bdaa-05fc194d6cee.roa
Signing time:             Fri 13 Feb 2026 14:00:41 +0000
ROA not before:           Fri 13 Feb 2026 14:00:41 +0000
ROA not after:            Thu 14 May 2026 13:00:41 +0000
asID:                     397085
IP address blocks:        2602:fd63::/36 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/090cf75b-f998-45e2-a8ea-c4d882201d24/090cf75b-f998-45e2-a8ea-c4d882201d24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/090cf75b-f998-45e2-a8ea-c4d882201d24/090cf75b-f998-45e2-a8ea-c4d882201d24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/090cf75b-f998-45e2-a8ea-c4d882201d24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:d9:9c:bf:75:a3:74:32:4e:70:0e:12:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=090cf75b-f998-45e2-a8ea-c4d882201d24
        Validity
            Not Before: Feb 13 14:00:41 2026 GMT
            Not After : May 14 13:00:41 2026 GMT
        Subject: CN=03fd0354-76d7-4dd7-87c4-637efbb90f89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:dc:9e:f6:fd:c2:8b:e4:29:5a:be:63:b6:54:
                    6a:28:3b:38:49:81:d0:9e:02:df:ef:61:0a:7d:4d:
                    f5:53:61:9a:19:a9:60:f6:ab:ed:c8:0a:85:05:63:
                    44:cf:47:4a:85:c2:09:e5:04:fb:ee:c7:8b:63:21:
                    b4:70:9f:a2:a9:ca:bb:1b:c4:a4:e1:4c:86:7b:8b:
                    38:d6:06:99:ba:55:af:48:fa:8b:db:b9:14:e7:54:
                    2b:13:cf:8a:c8:33:a1:5b:82:0f:a3:db:a0:30:39:
                    e0:b8:e6:bf:67:71:3a:8a:bb:85:58:77:1e:cc:64:
                    c8:ca:26:01:26:08:9a:e8:14:49:0d:b6:23:4b:01:
                    54:ba:71:b7:3a:6b:54:61:4f:2c:20:24:8c:5e:9b:
                    79:39:0b:5d:99:2f:32:c5:ed:2d:8e:63:8c:af:e8:
                    dc:24:84:86:e1:8e:a4:9a:95:dd:82:5d:3b:89:a6:
                    ea:03:07:65:f4:8e:cd:93:6e:b2:6e:65:7e:a1:d6:
                    e3:35:57:ef:a3:77:cc:93:67:80:66:48:65:61:82:
                    ac:41:2a:e4:3f:07:e6:98:ba:d3:7d:1c:15:e7:e8:
                    8c:d5:01:23:8e:2c:ab:3f:b8:ee:52:95:7e:68:74:
                    2d:c4:04:81:ee:c6:44:bb:ee:c3:c7:32:b2:f8:76:
                    5c:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:AE:65:A9:C3:06:97:52:85:87:CB:AA:9A:99:E2:31:00:61:E9:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/090cf75b-f998-45e2-a8ea-c4d882201d24/96098ee4-76c4-334f-bdaa-05fc194d6cee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/090cf75b-f998-45e2-a8ea-c4d882201d24/090cf75b-f998-45e2-a8ea-c4d882201d24.crl

            X509v3 Authority Key Identifier:
                keyid:14:9C:C7:07:9A:90:D7:69:1D:47:04:E9:AD:6D:E7:D7:CE:2C:7D:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/090cf75b-f998-45e2-a8ea-c4d882201d24.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fd63::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:f2:22:1a:2f:55:1a:ef:36:36:cf:74:42:88:40:b6:da:f9:
         7a:e1:79:b0:57:79:fe:f5:1d:a9:82:16:3c:f2:f7:e2:a1:29:
         8b:3a:c5:63:0b:ee:0f:8a:cd:0d:1c:cd:21:f2:b7:9c:a0:55:
         dd:a2:45:a8:69:4d:6b:f7:fa:79:f7:83:75:94:b9:f5:2a:dd:
         3c:f4:33:bb:f8:dd:51:5a:35:e4:4c:10:6f:46:86:06:1c:cc:
         69:0c:bd:54:62:68:a9:c1:40:ad:9a:bc:50:62:a0:60:c8:2d:
         c2:da:cb:a0:e8:62:70:87:dc:c2:a3:47:28:20:ad:85:9c:0b:
         4c:66:3b:1b:76:f2:f6:69:36:e6:14:ef:51:c2:7e:54:0a:56:
         f3:1e:01:9a:c3:54:9f:f4:12:e9:52:b1:44:c9:f6:6f:3e:db:
         ee:4b:39:dd:6c:e0:b0:08:e5:20:62:49:05:41:64:41:ef:61:
         7a:2a:53:2d:39:51:89:5d:76:a4:c6:ad:63:c0:dc:93:df:19:
         39:ba:a2:18:7f:b6:af:8d:01:9f:7e:e8:a2:01:1d:45:e1:73:
         31:86:ee:e3:2a:54:0d:0e:26:70:fd:2d:71:86:23:d2:40:d1:
         6e:46:a1:fc:51:a4:58:e4:61:62:5d:3f:8a:a8:68:4c:32:27:
         5d:3f:95:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:41:30 2026 by rpki-client