Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/473aba48-e57f-40d4-b25e-8e59a1171ae8/46458d7f-8248-3067-a79d-c45984ab3f0a.roa
File:                     46458d7f-8248-3067-a79d-c45984ab3f0a.roa (raw, json)
Hash identifier:          wE7owv/RWSQbTBp3HosVgwgT5P9TNm3AZd7Q3m5yKQ4=
Subject key identifier:   4B:63:38:9D:4B:4D:7D:3B:A9:5A:91:23:2C:30:70:A9:44:C4:41:B3
Certificate issuer:       /CN=473aba48-e57f-40d4-b25e-8e59a1171ae8
Certificate serial:       010D0C9F4328584D037D02A149340179CD9F4A80
Authority key identifier: 31:D8:E4:89:EF:82:5A:7B:E9:37:04:AB:E6:B3:60:F1:3C:92:1D:4A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/473aba48-e57f-40d4-b25e-8e59a1171ae8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/473aba48-e57f-40d4-b25e-8e59a1171ae8/46458d7f-8248-3067-a79d-c45984ab3f0a.roa
Signing time:             Sat 28 Feb 2026 14:00:40 +0000
ROA not before:           Sat 28 Feb 2026 14:00:40 +0000
ROA not after:            Fri 29 May 2026 13:00:40 +0000
asID:                     399331
IP address blocks:        2606:25c0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/473aba48-e57f-40d4-b25e-8e59a1171ae8/473aba48-e57f-40d4-b25e-8e59a1171ae8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/473aba48-e57f-40d4-b25e-8e59a1171ae8/473aba48-e57f-40d4-b25e-8e59a1171ae8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/473aba48-e57f-40d4-b25e-8e59a1171ae8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:03:7d:02:a1:49:34:01:79:cd:9f:4a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=473aba48-e57f-40d4-b25e-8e59a1171ae8
        Validity
            Not Before: Feb 28 14:00:40 2026 GMT
            Not After : May 29 13:00:40 2026 GMT
        Subject: CN=73fec7bc-3221-447e-93b8-beb539087dde
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:68:0c:6b:b4:c1:a9:d4:ed:f4:0d:9a:01:98:
                    23:55:3b:57:56:aa:73:e7:c7:c6:9d:d3:56:41:27:
                    19:73:07:4b:09:f1:81:e2:75:b8:e0:62:7b:10:de:
                    11:f1:8e:d0:64:68:9e:7f:9c:32:b5:ee:16:aa:c7:
                    47:78:46:73:de:52:35:58:18:a8:3a:a3:3c:55:64:
                    95:26:a3:95:8c:6a:44:46:f5:44:0d:cb:85:fb:14:
                    22:25:31:f0:10:85:a4:ce:bc:30:dc:cf:53:a4:20:
                    2d:5d:3a:f2:2f:77:01:8d:5b:d5:16:38:45:e1:19:
                    ea:09:ad:eb:30:dc:2e:25:05:eb:84:e3:5f:0d:ff:
                    b4:96:30:cd:65:23:f4:f8:05:65:3c:a7:4e:3e:8c:
                    11:31:7e:2a:ab:45:13:36:9b:b4:99:45:8f:ec:76:
                    05:c9:19:0c:b3:c7:bd:ab:7b:62:0b:b6:a9:32:56:
                    6c:77:d6:83:ec:d4:5b:82:d7:fb:38:15:ac:37:a8:
                    62:b7:95:69:b4:d2:a8:71:de:df:06:d1:6f:d2:6c:
                    bc:6c:b9:a6:33:eb:84:bf:50:2f:09:98:eb:64:e9:
                    b8:82:b5:32:7f:25:d9:9e:5c:5b:9c:c6:4e:ef:ad:
                    74:94:7c:c1:e0:bb:fc:85:3f:a3:4a:fa:11:a9:da:
                    c8:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:63:38:9D:4B:4D:7D:3B:A9:5A:91:23:2C:30:70:A9:44:C4:41:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/473aba48-e57f-40d4-b25e-8e59a1171ae8/46458d7f-8248-3067-a79d-c45984ab3f0a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/473aba48-e57f-40d4-b25e-8e59a1171ae8/473aba48-e57f-40d4-b25e-8e59a1171ae8.crl

            X509v3 Authority Key Identifier:
                keyid:31:D8:E4:89:EF:82:5A:7B:E9:37:04:AB:E6:B3:60:F1:3C:92:1D:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/473aba48-e57f-40d4-b25e-8e59a1171ae8.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:25c0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:db:d3:0e:b5:fd:39:26:a4:9c:4b:be:00:00:2d:b6:e0:fc:
         f7:da:51:5f:5c:96:97:9c:b4:a9:2f:9e:e1:d0:b4:2a:85:0e:
         08:45:2c:c2:db:7f:e3:c7:4e:7a:ec:df:41:e4:e1:6c:8e:78:
         fd:34:1a:52:d2:4a:df:a4:e5:5c:2f:cd:98:0b:f4:54:7a:d8:
         16:d0:03:69:59:c9:e0:b4:07:2b:b1:98:93:32:fd:c7:e8:98:
         8e:e9:e2:36:27:3d:00:5d:49:33:71:3a:9d:b9:13:35:fd:08:
         d7:8b:11:a4:18:e9:78:41:61:ab:e7:bb:c0:90:63:80:d6:3d:
         ce:06:68:e1:0c:12:e4:b2:ef:2b:33:2e:fa:a8:b9:85:bd:9d:
         cb:5d:a6:b2:4f:78:a2:1f:66:61:71:4c:26:46:26:b4:e2:07:
         fd:c6:6d:c6:bb:02:b8:5e:36:57:b9:1d:14:e8:72:c4:b7:66:
         b8:6e:fc:15:cd:31:2d:27:e3:2a:47:c9:7a:36:75:fe:cf:47:
         e7:f0:af:56:e6:05:13:82:99:bd:1e:34:b8:6a:18:23:23:b9:
         ce:e1:c3:70:7b:b9:0b:de:02:4a:d6:fa:fc:35:68:fa:06:2d:
         e9:9f:4f:16:94:bc:df:1e:5a:a2:6a:51:6d:1e:58:81:41:04:
         34:f0:0f:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:49:44 2026 by rpki-client