Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/587caab5-9a25-30da-9e15-5913b1da1936.roa
File:                     587caab5-9a25-30da-9e15-5913b1da1936.roa (raw, json)
Hash identifier:          gpkhCzaZAL89vKHPN9D6ffp8oiAQwZrlq6yhzM3ynmI=
Subject key identifier:   0A:8F:77:A7:E0:C2:28:66:8D:2B:47:A8:95:89:AC:90:1E:00:25:50
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584D00B28D957D4D276F19CF3C80
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/587caab5-9a25-30da-9e15-5913b1da1936.roa
Signing time:             Fri 27 Feb 2026 14:00:40 +0000
ROA not before:           Fri 27 Feb 2026 14:00:40 +0000
ROA not after:            Thu 28 May 2026 13:00:40 +0000
asID:                     20940
IP address blocks:        2600:1404:6c00::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:00:b2:8d:95:7d:4d:27:6f:19:cf:3c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Feb 27 14:00:40 2026 GMT
            Not After : May 28 13:00:40 2026 GMT
        Subject: CN=443c37d8-c6c8-4214-8270-fd10721458e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:3b:af:36:d5:06:ca:ea:cc:b5:c5:25:c6:91:
                    1f:17:23:a9:4f:b6:5d:2c:60:3e:7c:73:df:61:b7:
                    43:a3:ba:44:24:dc:2a:5c:7c:1a:60:b9:58:00:aa:
                    58:f7:2a:48:53:e4:5c:a7:6d:36:3c:64:42:8d:78:
                    af:2e:a3:d7:30:f3:e4:a8:8a:61:2f:39:dc:1b:59:
                    cb:c0:af:0e:33:32:d4:08:de:fd:f4:71:d3:14:2d:
                    d2:d8:54:bb:b6:ab:05:91:be:9b:10:15:66:32:45:
                    c8:a4:b8:34:8b:0e:de:f9:93:1e:98:9a:ad:be:60:
                    06:83:53:a8:10:dd:0e:bc:d1:42:c1:ff:45:4d:fd:
                    13:25:6c:12:ec:e1:1e:8d:70:24:dc:30:f8:36:47:
                    04:e3:7e:a9:5a:72:c0:41:c1:b6:40:37:74:b0:bb:
                    31:5c:fe:79:58:a4:69:81:ce:3c:9f:3b:5a:ec:b6:
                    bb:8d:3e:cd:25:51:36:3a:90:6c:52:28:62:db:d6:
                    a6:29:73:e0:3c:42:a6:b9:d2:50:79:95:8b:83:45:
                    7a:4c:0f:37:8b:f2:b8:58:0e:e6:56:54:09:16:5b:
                    cd:fe:f6:a8:5f:9c:f9:95:80:e6:ee:0f:6b:03:a7:
                    13:69:ab:6c:57:aa:5f:53:2e:c9:95:79:16:0c:9d:
                    58:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:8F:77:A7:E0:C2:28:66:8D:2B:47:A8:95:89:AC:90:1E:00:25:50
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/587caab5-9a25-30da-9e15-5913b1da1936.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1404:6c00::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:c4:4d:9d:a7:92:39:fb:4f:08:c1:94:8f:ae:88:ab:0d:ae:
         8a:11:90:38:f1:a6:ea:be:bc:56:44:73:01:cc:7f:2d:70:07:
         81:c2:e7:8d:a1:f9:70:51:c5:9e:68:fc:c6:da:93:68:4d:32:
         10:f0:87:87:74:44:cd:35:50:55:97:a6:10:fa:60:de:87:41:
         2f:d3:d3:82:db:11:c2:6e:91:79:88:ad:38:e7:00:72:3f:cf:
         a8:fd:ae:da:16:9b:93:20:b3:35:eb:de:8d:10:aa:bb:85:84:
         13:57:11:96:0c:de:e3:09:93:92:ef:4e:3e:04:df:db:c3:2b:
         1b:2c:4e:c9:c5:7e:96:6e:7f:8a:2b:de:f8:7a:99:66:88:41:
         8c:bf:33:8a:2d:fb:83:ff:7c:7a:56:01:3a:58:b5:3a:63:67:
         1a:a7:3d:19:3a:6a:65:cf:f3:d5:4e:ea:ee:15:4f:e8:ef:ae:
         8f:3b:10:7f:c7:5b:22:61:41:e2:56:53:46:60:9d:1e:5f:27:
         08:aa:28:6a:62:42:77:f0:dd:97:d6:e7:40:32:0b:67:cc:a6:
         6e:a9:f8:83:5f:81:4b:21:32:30:40:c3:17:7c:16:b8:62:f8:
         00:36:a4:80:47:ca:0d:1d:95:2b:0f:a3:44:b7:39:85:1d:53:
         11:89:b0:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:14:54 2026 by rpki-client