Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f083b6ed-9939-3aa4-a0d5-c0a4e33de441.roa
File:                     f083b6ed-9939-3aa4-a0d5-c0a4e33de441.roa (raw, json)
Hash identifier:          AspWpGkYmyqXfojJTGt/iLF4zZTm7u3nXgozM/9a66k=
Subject key identifier:   1F:4B:0E:8C:82:49:02:56:85:3A:93:66:6F:FF:EF:37:EA:89:C4:D3
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584CF8524FA9C191C2BC61216680
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f083b6ed-9939-3aa4-a0d5-c0a4e33de441.roa
Signing time:             Tue 24 Feb 2026 14:00:41 +0000
ROA not before:           Tue 24 Feb 2026 14:00:41 +0000
ROA not after:            Mon 25 May 2026 13:00:41 +0000
asID:                     20940
IP address blocks:        2600:1417:8000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:f8:52:4f:a9:c1:91:c2:bc:61:21:66:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Feb 24 14:00:41 2026 GMT
            Not After : May 25 13:00:41 2026 GMT
        Subject: CN=8fe1501a-a6e7-4e0d-8654-025ff8a5efd7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:9f:b2:43:08:63:f0:2b:f1:7c:ba:28:ef:34:
                    09:c6:68:a7:5f:16:f0:71:01:bb:dd:f3:9d:5f:32:
                    40:9a:91:64:75:87:d9:7b:f4:26:b5:b6:09:cd:49:
                    14:cc:c1:ce:d4:d2:72:4b:0e:9b:4f:1d:b8:77:35:
                    73:00:26:06:59:1a:00:38:3e:87:9f:1c:56:a6:32:
                    3a:cf:d7:e9:43:2c:ea:db:96:b0:1f:f8:74:3f:c2:
                    fa:b9:c6:dd:45:cc:a1:4a:c5:54:25:a0:94:fe:21:
                    87:07:e9:0d:46:61:22:79:d6:6c:28:56:0b:de:e8:
                    65:7e:09:f3:ed:22:6e:44:2c:4c:90:5b:04:e0:55:
                    4b:fa:d0:b4:0d:7b:ba:f0:e1:9c:d1:28:c4:e5:d7:
                    45:2c:23:c5:6d:42:a2:77:32:5d:bd:62:3c:f6:f8:
                    9f:49:5a:29:a0:0b:b7:ee:8d:ca:42:14:d9:cd:70:
                    11:ec:e4:4c:e5:21:dd:40:e0:af:41:51:b6:d9:af:
                    fa:e6:dc:a6:b5:08:2c:6f:76:d4:22:6b:44:04:f6:
                    ab:dd:32:31:7d:d6:d6:2c:51:a2:bf:99:3b:cc:a4:
                    44:a0:e2:76:61:94:fd:cc:8a:e8:0a:1f:4c:23:e2:
                    b1:11:fd:b0:f6:f5:55:7b:49:4d:fc:ab:f6:2e:df:
                    bf:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:4B:0E:8C:82:49:02:56:85:3A:93:66:6F:FF:EF:37:EA:89:C4:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f083b6ed-9939-3aa4-a0d5-c0a4e33de441.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1417:8000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:46:c5:53:e6:d8:8b:6e:17:76:92:60:2c:c9:65:44:21:e1:
         e2:b0:16:d4:ff:e2:7e:7a:57:86:a4:82:23:f3:2b:c9:af:ef:
         6d:ab:56:91:b6:8b:61:75:71:d6:93:02:8d:93:82:af:c6:33:
         36:67:43:43:13:29:3e:81:8e:27:c8:97:17:08:51:c9:f3:db:
         6e:4b:e0:0a:5b:7b:79:d3:0f:71:8a:c7:f3:86:9d:c9:0d:10:
         71:4c:61:ab:95:d9:0d:15:05:9e:21:c5:78:a9:af:63:f6:f2:
         f8:38:1d:81:b9:5d:00:30:d1:48:c3:0e:46:6e:3e:ee:d9:a8:
         ef:d9:43:51:b3:1f:1f:6f:47:ec:d6:29:22:9f:78:9f:d5:b4:
         68:67:f0:c8:ca:7d:7d:64:74:e3:90:ce:0b:5b:23:d9:95:00:
         be:6f:ed:40:ff:63:43:ee:dd:01:bb:77:09:6b:b2:39:cc:e1:
         5a:2d:31:a3:52:04:b3:19:7a:06:4a:50:f5:b7:72:4b:87:6e:
         62:4e:10:7b:eb:ac:1e:47:e2:f6:6f:d5:3f:f9:a4:0a:2d:5a:
         7f:19:e7:8e:f4:3d:78:ac:c4:ff:c0:ed:29:5a:ec:20:00:fb:
         fe:22:cb:79:c4:28:9b:6b:65:c7:03:d9:4b:99:d9:41:71:70:
         33:f7:8a:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:05:36 2026 by rpki-client