Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/557dbdc0-f0ba-3acc-8972-3be50d73ecc0.roa
File:                     557dbdc0-f0ba-3acc-8972-3be50d73ecc0.roa (raw, json)
Hash identifier:          sanid0cZ3sf01xXd3vkX3UUfRqgUChrAZH7k7nhN58c=
Subject key identifier:   DB:58:64:AE:B9:6F:82:6E:40:71:FB:9E:B0:E1:00:B1:EC:0A:24:0B
Certificate issuer:       /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9
Certificate serial:       010D0C9F4328584CDF3274DF149EADB91EE25620
Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/557dbdc0-f0ba-3acc-8972-3be50d73ecc0.roa
Signing time:             Sun 15 Feb 2026 14:00:41 +0000
ROA not before:           Sun 15 Feb 2026 14:00:41 +0000
ROA not after:            Sat 16 May 2026 13:00:41 +0000
asID:                     16417
IP address blocks:        2620:101:200c::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:df:32:74:df:14:9e:ad:b9:1e:e2:56:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9
        Validity
            Not Before: Feb 15 14:00:41 2026 GMT
            Not After : May 16 13:00:41 2026 GMT
        Subject: CN=63ae2a1b-9969-47b9-8198-334c405fadd3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:18:5e:f3:94:f8:61:b8:bf:1a:ae:27:b9:66:
                    68:0b:77:fe:f7:12:9b:a0:17:12:b0:a8:83:61:c7:
                    71:ed:d1:28:7e:5c:01:10:61:e7:79:47:06:bd:ed:
                    cb:a3:b3:a1:b9:e3:a1:d2:59:05:f0:2a:5d:a4:c1:
                    1d:18:e0:76:82:b0:c5:c7:96:26:06:8d:3e:2a:14:
                    d3:f3:89:db:7e:bd:b8:5a:00:d4:72:36:d1:a5:53:
                    d2:90:29:93:10:54:9a:d4:60:79:51:97:f9:94:8c:
                    9e:88:a3:8c:0d:ae:6f:09:27:b2:71:40:9e:95:af:
                    19:45:ae:58:cf:d2:a2:40:ae:39:7b:18:7b:a6:d1:
                    bc:de:75:7a:e0:22:ce:bd:9e:d0:b7:fc:29:5e:e9:
                    99:15:35:89:bd:1f:7e:3e:08:47:58:76:62:a4:1e:
                    fd:e5:4a:ff:f6:3a:ca:5a:25:ef:cc:40:f4:b9:20:
                    ef:c0:d1:1b:c5:6c:de:fd:f4:78:ec:fb:a7:be:f3:
                    9a:d3:80:43:18:cd:45:53:9a:74:da:35:5f:14:24:
                    fc:fe:e2:c7:ec:90:89:e6:bb:62:69:b2:90:36:c7:
                    ac:0a:bb:36:41:70:3b:5a:3f:4a:98:a6:9c:8e:b4:
                    e4:96:ee:93:47:b0:6c:60:c6:53:96:6e:09:9e:17:
                    a6:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:58:64:AE:B9:6F:82:6E:40:71:FB:9E:B0:E1:00:B1:EC:0A:24:0B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/557dbdc0-f0ba-3acc-8972-3be50d73ecc0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl

            X509v3 Authority Key Identifier:
                keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:101:200c::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:1f:40:3c:14:fe:4c:1f:16:9b:2e:f7:42:35:14:52:a0:60:
         d8:59:ae:c8:5d:56:39:e6:65:36:92:23:07:b6:ad:86:17:a3:
         68:2f:3f:ee:48:99:7f:6c:4a:02:45:ea:9d:98:3e:20:84:e5:
         7a:0e:26:93:cf:2b:1c:bd:87:47:ed:51:bc:9f:d2:98:fc:b1:
         4a:a5:d4:93:4c:88:4f:58:89:e8:2d:56:f6:41:16:e6:39:b6:
         20:9a:1b:d7:0b:e4:5f:e2:83:c8:41:54:85:85:b0:5e:9e:9a:
         57:cf:6d:e9:e8:a1:95:6e:d7:47:ba:9c:03:6a:b8:5d:67:89:
         d1:dc:6b:3e:eb:31:30:d2:00:85:a8:0b:fd:96:8a:20:27:a8:
         b7:d8:a4:b8:89:da:80:5c:57:5d:d8:7b:c6:b8:51:d4:62:43:
         0d:25:30:4f:dc:61:cd:dd:80:1a:31:36:25:45:6e:70:bb:30:
         53:0c:e4:a8:d5:d9:a7:ea:54:61:74:d3:57:83:90:af:1b:5c:
         71:1c:79:fe:34:fe:92:58:56:b9:11:85:14:a9:f5:b6:bd:d7:
         e4:49:04:9c:d3:7e:64:70:4f:47:57:58:e7:da:e1:3d:a3:27:
         35:18:90:fb:c1:b6:93:59:64:ab:8b:78:fb:16:fc:d7:3a:2d:
         bb:48:24:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:02:23 2026 by rpki-client