Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/81ba1b8e-9c4e-3d8d-87fd-be5da5d2369e.roa
File:                     81ba1b8e-9c4e-3d8d-87fd-be5da5d2369e.roa (raw, json)
Hash identifier:          pcoj70VX5R0OL4uxqiTqEAhF2AM8pcBMahOrK44Qqk0=
Subject key identifier:   5E:AB:52:E8:A4:E4:1D:92:67:D8:CD:2B:8C:CE:2E:80:01:C6:3D:FC
Certificate issuer:       /CN=3aba2284-9d24-4b6f-bc96-aa407d7a426f
Certificate serial:       010D0C9F4328584CFF4CD04FD27A0DD29FFC3E80
Authority key identifier: B5:BE:EE:25:A1:3A:DA:9E:A2:53:19:6E:15:87:43:3E:67:0B:53:58
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/81ba1b8e-9c4e-3d8d-87fd-be5da5d2369e.roa
Signing time:             Fri 27 Feb 2026 02:00:31 +0000
ROA not before:           Fri 27 Feb 2026 02:00:31 +0000
ROA not after:            Thu 28 May 2026 01:00:31 +0000
asID:                     16740
IP address blocks:        2602:f5c1:13::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/3aba2284-9d24-4b6f-bc96-aa407d7a426f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/3aba2284-9d24-4b6f-bc96-aa407d7a426f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ff:4c:d0:4f:d2:7a:0d:d2:9f:fc:3e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3aba2284-9d24-4b6f-bc96-aa407d7a426f
        Validity
            Not Before: Feb 27 02:00:31 2026 GMT
            Not After : May 28 01:00:31 2026 GMT
        Subject: CN=473ade72-f9a5-4c12-aa83-9334cedf90af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:3c:6c:b9:27:c8:95:cd:42:d4:e1:39:62:11:
                    2c:8f:f0:b4:76:97:0a:62:e2:20:23:eb:6a:63:65:
                    ea:51:0b:78:ae:f4:3f:18:58:8e:3d:ab:4b:a8:0e:
                    bf:06:e9:96:3c:01:1a:d7:76:c5:fa:35:f1:21:61:
                    ea:f1:ce:7c:81:23:7a:d4:ed:d1:a9:57:79:24:da:
                    80:52:af:59:f7:c0:ef:b6:0b:8d:95:63:3c:9b:79:
                    9f:a0:26:d8:75:8e:45:d4:d5:20:17:e0:e2:66:1f:
                    c1:69:08:32:6a:d1:3d:52:56:9e:fd:43:21:f5:1b:
                    67:2e:32:a7:64:fa:5d:a7:14:70:61:d0:15:b6:53:
                    7a:55:93:3b:ae:2a:e7:c5:b2:76:b8:ac:80:81:a3:
                    d1:52:47:51:98:47:a1:12:b1:38:24:0e:8a:8d:a3:
                    51:92:ce:0a:84:52:ed:ff:51:8a:7d:2e:e6:f5:16:
                    6d:3f:6b:91:7d:c9:41:91:9f:19:52:9c:25:43:84:
                    5d:a4:df:0e:a1:7c:85:1c:65:76:df:26:24:cb:0e:
                    4d:2e:b3:c6:02:b3:5b:5a:3c:13:ed:69:c8:5d:f2:
                    b5:4f:cd:8f:5a:e9:0b:bb:3b:8e:d3:61:6f:47:ea:
                    92:a7:32:10:91:1d:a2:ca:49:0e:42:40:0b:b2:87:
                    10:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:AB:52:E8:A4:E4:1D:92:67:D8:CD:2B:8C:CE:2E:80:01:C6:3D:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/81ba1b8e-9c4e-3d8d-87fd-be5da5d2369e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/3aba2284-9d24-4b6f-bc96-aa407d7a426f.crl

            X509v3 Authority Key Identifier:
                keyid:B5:BE:EE:25:A1:3A:DA:9E:A2:53:19:6E:15:87:43:3E:67:0B:53:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f5c1:13::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:e5:b7:85:fe:95:bd:9d:63:c7:36:ff:10:37:1a:15:98:5d:
         32:1d:a6:3c:68:8c:07:c2:7c:0b:12:33:a8:29:2a:48:a2:9d:
         5a:71:76:96:23:f5:ca:e4:32:82:d0:b0:a6:52:8b:5b:7b:03:
         15:a0:a6:96:f0:a8:c1:f8:20:74:f4:66:2a:80:f8:69:21:51:
         a7:79:e7:b5:5f:ef:81:ee:5a:ac:93:07:b9:b9:56:6e:f2:2c:
         e6:22:f8:89:53:8a:42:e6:8f:9a:47:32:42:60:f8:68:e7:65:
         65:32:39:05:50:e7:a8:1c:7c:f4:83:56:6f:87:01:98:05:9d:
         6e:b0:7c:1a:39:07:7b:74:eb:11:fa:63:91:ef:65:50:58:3b:
         33:ad:8f:32:29:e0:49:d7:cb:b2:8d:b6:cc:86:02:99:fa:c6:
         77:02:3c:a0:6f:a5:17:e4:bc:02:64:37:f7:ed:0f:0b:03:84:
         86:4b:1f:21:30:31:03:ae:83:89:9d:2c:4b:8e:b0:97:2b:c5:
         3d:31:b6:ea:3f:a8:7c:ed:6d:16:82:52:89:ed:c9:59:7f:cf:
         a5:8d:a3:8d:0e:bb:54:86:cc:a0:1e:c0:f4:8c:f9:ee:2d:e7:
         f3:58:94:4f:ca:0c:e0:6f:3c:79:36:b2:57:3a:5f:fc:f6:5d:
         c5:8d:93:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:14:03 2026 by rpki-client