Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/fba7bf9c-bab9-39fb-aae9-4982f49bc283.roa
File:                     fba7bf9c-bab9-39fb-aae9-4982f49bc283.roa (raw, json)
Hash identifier:          kMKFpBx3RoPwN/KM/XzQfB7BPr3CSX0lDJFPbn3NZwI=
Subject key identifier:   D9:9D:53:3D:84:99:8C:EB:B6:1E:AC:E9:94:B1:3C:4C:68:13:50:EE
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584CF587A1D94B60039A1BBE0080
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/fba7bf9c-bab9-39fb-aae9-4982f49bc283.roa
Signing time:             Mon 23 Feb 2026 14:00:41 +0000
ROA not before:           Mon 23 Feb 2026 14:00:41 +0000
ROA not after:            Sun 24 May 2026 13:00:41 +0000
asID:                     20940
IP address blocks:        2600:1417:1b::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:f5:87:a1:d9:4b:60:03:9a:1b:be:00:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Feb 23 14:00:41 2026 GMT
            Not After : May 24 13:00:41 2026 GMT
        Subject: CN=2d67963a-1ba0-4db3-b173-2dd25448f8b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:33:73:df:6a:ec:19:f1:ff:ea:6d:ab:7a:5a:
                    45:4b:91:15:0e:7b:e4:b8:f1:af:32:d8:6d:5d:2b:
                    75:27:a0:8e:28:1d:64:88:b5:b7:ae:2d:d3:d3:57:
                    e2:6d:78:01:fe:d1:fe:18:8b:19:24:fd:c6:4e:8d:
                    1c:dd:3c:a0:75:27:92:ff:6e:54:1e:c1:a9:de:72:
                    d7:21:16:ed:4a:95:21:ef:d3:b2:70:64:34:ce:70:
                    6d:ea:f9:e1:c8:f6:78:b8:4e:c9:f8:3f:89:f6:8c:
                    24:8f:2b:b8:2d:44:8a:f3:23:21:d6:99:ca:af:bf:
                    7a:21:cb:03:a7:dc:08:89:7d:80:dc:57:3c:07:c2:
                    84:ee:3f:dc:ee:55:23:fb:b5:1b:59:71:43:2d:75:
                    2a:ae:97:6e:64:3f:90:6e:fa:25:07:9d:05:6e:d2:
                    8d:33:90:33:ac:2a:e9:cd:22:0e:cf:d4:03:dd:8d:
                    bc:52:f2:25:e7:e9:ba:ca:de:b0:82:8b:be:1e:16:
                    29:c5:4d:7c:c7:21:8f:3b:3e:f0:b4:d4:80:18:6d:
                    f4:aa:d1:7b:ba:cc:a3:f1:be:a0:81:80:0a:59:1c:
                    93:89:7c:69:b1:bd:bb:61:36:f2:b9:92:be:9a:00:
                    cf:35:0b:10:5a:f4:f3:ff:10:37:68:df:8c:47:79:
                    cd:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:9D:53:3D:84:99:8C:EB:B6:1E:AC:E9:94:B1:3C:4C:68:13:50:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/fba7bf9c-bab9-39fb-aae9-4982f49bc283.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1417:1b::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:66:8b:b9:5d:0d:68:dd:ca:5b:f8:2f:75:28:43:83:c7:a1:
         94:14:4b:9d:1b:c6:21:78:aa:7f:aa:f1:c1:bb:96:a1:62:82:
         33:c2:5a:85:40:2a:b1:b4:ab:09:ba:4c:6f:fb:88:42:36:74:
         98:c1:c3:22:82:8d:52:9d:85:1e:ec:2c:01:92:1f:6c:09:d7:
         54:c5:47:d0:1f:53:8d:ed:f9:d9:aa:80:b5:c5:85:ff:13:31:
         13:c6:ae:14:aa:68:25:ac:b3:8a:ea:ef:61:d3:62:9c:0f:dd:
         da:31:3d:41:4c:10:12:bf:03:87:a7:e3:6b:3d:a3:83:46:23:
         01:dd:6d:9f:07:b9:ae:fd:6e:e1:95:ef:e9:6a:6b:5a:02:62:
         84:77:cd:9c:ad:a6:4c:3d:a0:39:a2:8c:6a:6a:2b:54:c5:b3:
         6e:e7:3d:4d:33:5e:b1:68:e6:1e:fd:b0:60:a3:4e:3f:98:48:
         2c:3a:1e:53:84:aa:3a:94:b0:61:1b:64:2b:46:9c:3e:42:d2:
         ee:68:1f:42:7b:47:19:28:48:f8:4e:48:4b:40:1b:94:6f:fa:
         81:fe:52:10:29:75:9a:f1:dc:3e:b8:2d:8e:76:df:3f:3f:85:
         2d:0e:4c:ec:8c:6d:98:47:49:ce:73:49:87:41:ad:de:0e:31:
         c3:e1:35:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:43:07 2026 by rpki-client