Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/82528836-9be8-3f5c-9eca-d49ce8c153b0.roa
File:                     82528836-9be8-3f5c-9eca-d49ce8c153b0.roa (raw, json)
Hash identifier:          R+Dn+YGkJJzy4IPCZn06Rvo3xJCvLrrHUQ8HRCmBYs4=
Subject key identifier:   25:87:33:F9:F3:FE:F4:44:6B:70:49:51:81:C9:DB:46:7C:FE:2A:F1
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584CC07C864A105C12445B2DFFC0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/82528836-9be8-3f5c-9eca-d49ce8c153b0.roa
Signing time:             Wed 04 Feb 2026 14:00:39 +0000
ROA not before:           Wed 04 Feb 2026 14:00:39 +0000
ROA not after:            Tue 05 May 2026 13:00:39 +0000
asID:                     20940
IP address blocks:        2600:1488:4007::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:c0:7c:86:4a:10:5c:12:44:5b:2d:ff:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Feb  4 14:00:39 2026 GMT
            Not After : May  5 13:00:39 2026 GMT
        Subject: CN=51bb1d77-bd12-4f9e-9e7c-512289056c54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:b4:49:79:7a:37:f5:c1:6c:f4:9e:5f:47:21:
                    6c:18:aa:a4:06:d6:62:f4:a3:8f:ad:4e:72:3e:ef:
                    59:e9:1f:7b:e4:46:26:c8:22:2c:1d:64:67:49:cc:
                    b3:a8:3e:89:3f:63:90:30:41:d3:77:b2:fb:96:fb:
                    00:3d:31:47:54:e5:99:db:49:bb:78:c8:76:e3:60:
                    aa:3c:9e:1d:79:bd:1f:9f:c6:e9:6d:e3:97:39:8a:
                    7d:cb:e9:17:3a:f2:85:f0:3a:29:46:b0:13:1c:e2:
                    ed:3c:80:9c:22:e6:bd:09:1e:86:95:f3:a5:19:31:
                    cd:37:e1:a9:15:bc:54:e1:cd:c2:15:27:41:b4:6b:
                    85:5e:47:71:3d:02:4c:64:d9:b4:5d:27:2a:c1:ed:
                    75:39:d6:3f:73:0a:4b:62:9f:53:3a:5c:6f:9b:a6:
                    96:ee:5c:d0:31:e5:5d:1e:e3:75:0f:56:37:0b:f7:
                    21:dd:32:68:4c:7f:02:a7:93:ee:c0:8a:d2:f9:a8:
                    7d:8e:0d:31:74:33:d5:2b:8a:4a:cf:b2:86:9c:1a:
                    7d:ce:33:15:a8:8a:55:79:97:91:6b:b7:0b:68:84:
                    94:6a:d4:60:cf:23:22:98:16:b5:83:4a:1e:83:7b:
                    d0:db:ee:3b:ea:51:8d:09:38:ac:74:03:11:cf:26:
                    6d:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:87:33:F9:F3:FE:F4:44:6B:70:49:51:81:C9:DB:46:7C:FE:2A:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/82528836-9be8-3f5c-9eca-d49ce8c153b0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1488:4007::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:a9:86:7d:8c:2e:42:17:c1:d1:b3:c8:7b:7b:55:88:c8:b0:
         ed:ce:71:c1:7d:e8:17:58:b1:67:ef:8f:68:61:eb:74:9c:91:
         dc:d1:3c:4c:b4:96:7f:01:dc:79:10:d0:9a:66:2f:a3:4d:16:
         2a:0c:21:dc:27:1c:a7:a4:6b:a4:6c:6e:74:c3:d7:a9:88:a9:
         78:e6:69:b4:d1:10:c6:fb:72:e9:3f:c8:8b:76:5e:2d:b9:7f:
         3d:62:0c:7d:a0:ea:bb:f1:68:64:01:16:d2:ef:94:49:ed:d4:
         4d:87:63:bd:ec:f5:1f:4a:ed:1e:42:0d:6f:38:8a:63:ce:b8:
         74:98:ca:e0:26:01:02:ac:1c:00:e9:aa:da:8f:e1:7e:d3:ab:
         0c:ce:74:d4:b4:a0:4c:ae:d1:e3:d4:76:1f:5e:26:dc:cb:fc:
         b8:76:7f:e1:20:5b:d6:2f:64:be:56:95:22:97:b7:59:1f:f2:
         e3:89:ee:2e:0b:05:3a:d2:2c:5e:ff:e6:7c:76:5e:66:d1:3e:
         aa:fb:0e:1b:71:e4:ce:4f:45:d5:af:88:3b:91:1b:1a:54:c8:
         a9:c2:3d:79:cc:98:6e:1f:7d:0a:9f:b9:b2:ae:ab:70:bc:69:
         01:32:d7:a3:3c:6b:dc:07:b8:1d:87:6b:4e:16:56:35:3d:25:
         0c:2e:c1:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:24:23 2026 by rpki-client