Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9/6920a5d2-97bf-3fe2-a29e-10d959837927.roa
File:                     6920a5d2-97bf-3fe2-a29e-10d959837927.roa (raw, json)
Hash identifier:          /83QhafDHJ9dOWtCB7mNS0B1SoT253LTj6ds1L/XvPU=
Subject key identifier:   70:12:A2:F4:27:AE:0F:77:C1:A7:D6:56:28:DD:13:02:C1:C2:0F:FE
Certificate issuer:       /CN=aa912e91-41d3-4894-893c-8de4f94175f9
Certificate serial:       010D0C9F4328584CE2BD50A00633686901AE9220
Authority key identifier: 76:54:89:41:17:BD:71:F5:3E:44:87:AF:EB:98:7F:6D:B6:25:E6:55
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9/6920a5d2-97bf-3fe2-a29e-10d959837927.roa
Signing time:             Mon 16 Feb 2026 20:28:46 +0000
ROA not before:           Mon 16 Feb 2026 20:28:46 +0000
ROA not after:            Sun 17 May 2026 19:28:46 +0000
asID:                     16509
IP address blocks:        2602:fe40:1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9/aa912e91-41d3-4894-893c-8de4f94175f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9/aa912e91-41d3-4894-893c-8de4f94175f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:e2:bd:50:a0:06:33:68:69:01:ae:92:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa912e91-41d3-4894-893c-8de4f94175f9
        Validity
            Not Before: Feb 16 20:28:46 2026 GMT
            Not After : May 17 19:28:46 2026 GMT
        Subject: CN=96af9651-a72d-436a-bb41-17d480312ad8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:70:51:69:71:21:30:55:40:8a:7e:91:ec:23:
                    c0:7f:7d:6e:eb:0f:e9:51:34:9a:7b:9b:81:80:bb:
                    85:11:7e:55:a7:de:d3:e0:58:ae:f9:72:7a:56:74:
                    d4:63:87:51:8f:4f:61:53:3a:2c:a2:ac:96:cc:5e:
                    7f:ad:6f:ba:3e:bf:87:3d:09:17:d3:39:93:f5:28:
                    f8:ed:21:49:93:81:2e:d0:d9:5c:75:69:d7:02:b7:
                    a6:89:fa:74:23:cc:03:a5:21:a5:14:ce:12:29:bf:
                    4a:3c:6f:7f:67:80:18:f1:37:d9:29:be:c4:33:72:
                    d2:2f:6b:86:f3:d2:6d:cc:5e:c4:9c:37:94:ad:96:
                    eb:a4:32:ba:b7:96:11:10:0b:1a:8f:b3:10:29:c5:
                    07:ca:93:ad:f6:89:c5:f6:da:58:57:96:36:6e:93:
                    b5:21:50:59:70:b6:9a:cb:21:91:94:96:53:89:c6:
                    c1:de:4f:94:71:86:43:b5:ab:f1:cb:da:f6:25:6f:
                    7e:c4:a7:5e:6e:fa:b6:82:ea:1b:0e:66:a1:30:fc:
                    ea:d6:e2:a6:86:64:a3:fe:31:54:d0:1d:46:14:08:
                    33:5e:bc:ce:41:ca:4e:7d:14:9b:ca:e5:02:f5:9d:
                    a5:87:39:3c:26:d5:66:95:95:7f:f7:05:78:31:e4:
                    d7:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:12:A2:F4:27:AE:0F:77:C1:A7:D6:56:28:DD:13:02:C1:C2:0F:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9/6920a5d2-97bf-3fe2-a29e-10d959837927.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9/aa912e91-41d3-4894-893c-8de4f94175f9.crl

            X509v3 Authority Key Identifier:
                keyid:76:54:89:41:17:BD:71:F5:3E:44:87:AF:EB:98:7F:6D:B6:25:E6:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fe40:1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:2a:8c:8d:84:ae:0d:1e:9b:bb:63:2c:3d:9c:7e:67:10:9c:
         db:6c:a4:86:67:f6:ec:01:c0:69:70:d1:36:b7:af:6c:5e:eb:
         eb:bd:21:0b:39:80:e0:92:26:71:d6:cf:1b:31:f2:ba:04:39:
         5c:18:ac:2c:47:54:27:ec:cd:d1:1b:81:32:78:8a:68:81:b1:
         18:3a:57:9f:7b:01:5f:78:23:3a:5e:42:a1:bb:ed:8d:d8:6c:
         29:93:bf:8b:db:ba:e3:53:ef:38:d5:bc:e7:f9:af:da:13:f1:
         65:41:4e:db:9e:c5:ef:c5:0f:03:93:d6:8f:ac:29:c0:27:a0:
         01:58:4d:c9:d6:44:1d:51:4d:22:08:0a:c8:ee:c8:ab:24:67:
         ef:a4:17:a1:56:e3:8a:ac:ce:79:9c:05:ec:41:19:1c:53:23:
         ea:7b:2c:e9:57:29:5d:e5:c7:3c:8b:06:d0:61:e5:a7:d3:3c:
         d8:39:49:ca:d1:28:da:35:37:37:a0:f8:61:87:69:b8:a9:d5:
         f1:08:df:00:9a:d7:01:a5:07:34:bf:e0:17:2f:6b:92:22:bb:
         1d:ca:a3:84:49:96:61:81:f8:48:6a:89:59:71:04:19:4e:76:
         36:18:eb:7f:2e:5e:f0:28:d1:46:cf:a7:aa:c9:41:90:c5:71:
         35:86:1f:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:06:51 2026 by rpki-client