Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22d5f618-5b64-4804-88ef-e125dd90d7e2/30f12f48-f8e6-3f07-81e9-14e29d06f85d.roa
File:                     30f12f48-f8e6-3f07-81e9-14e29d06f85d.roa (raw, json)
Hash identifier:          lbKzRAJuAr17P5jpkfxH5jqqb69IFWtdwGnRg5g0iIQ=
Subject key identifier:   C5:00:26:0A:B7:D6:32:8E:A2:1A:C2:01:12:DF:60:92:08:39:5C:16
Certificate issuer:       /CN=22d5f618-5b64-4804-88ef-e125dd90d7e2
Certificate serial:       010D0C9F4328584CCBA74D82D53667DB0BD2DB80
Authority key identifier: 51:F3:B4:5D:AB:73:A3:7E:EC:9A:47:7B:05:74:05:B7:39:6D:E9:2C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22d5f618-5b64-4804-88ef-e125dd90d7e2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22d5f618-5b64-4804-88ef-e125dd90d7e2/30f12f48-f8e6-3f07-81e9-14e29d06f85d.roa
Signing time:             Sun 08 Feb 2026 14:00:41 +0000
ROA not before:           Sun 08 Feb 2026 14:00:41 +0000
ROA not after:            Sat 09 May 2026 13:00:41 +0000
asID:                     988
IP address blocks:        2602:fb4b::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22d5f618-5b64-4804-88ef-e125dd90d7e2/22d5f618-5b64-4804-88ef-e125dd90d7e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22d5f618-5b64-4804-88ef-e125dd90d7e2/22d5f618-5b64-4804-88ef-e125dd90d7e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22d5f618-5b64-4804-88ef-e125dd90d7e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 25 Feb 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:cb:a7:4d:82:d5:36:67:db:0b:d2:db:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22d5f618-5b64-4804-88ef-e125dd90d7e2
        Validity
            Not Before: Feb  8 14:00:41 2026 GMT
            Not After : May  9 13:00:41 2026 GMT
        Subject: CN=38628a70-7d7b-4b1f-97bb-6cec91f5f68f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:b0:90:d7:95:e4:1d:35:7d:82:8e:82:7d:44:
                    42:f0:0d:1a:4d:d7:44:17:49:32:5a:3a:77:7a:c2:
                    2a:08:6b:03:10:72:a9:06:e0:29:94:d7:1b:6b:5c:
                    98:43:83:14:f6:40:e4:8f:4e:34:87:a8:57:3f:2f:
                    da:9d:3f:5c:70:c5:8b:1a:bb:13:26:8b:10:f8:05:
                    19:60:06:af:d6:b8:05:6c:4f:44:e7:df:5c:8d:84:
                    27:f2:56:14:eb:80:b8:91:1d:ce:32:3f:bb:f9:58:
                    79:6f:ba:d5:87:1d:7f:bf:19:b9:a5:58:94:47:4d:
                    92:30:f3:a9:6f:2d:5f:cc:f2:82:0e:38:e3:b8:63:
                    1e:dc:02:e6:b4:4b:db:c9:a3:20:dc:0f:fd:47:68:
                    d1:22:34:4f:96:1b:02:85:41:a2:b3:09:1f:b4:b4:
                    6f:b5:06:f9:79:d5:72:13:33:d7:fe:9e:b9:80:9e:
                    09:86:5f:6a:27:65:2d:bd:66:6e:0a:6b:ac:85:72:
                    8a:9b:bd:b1:67:64:aa:20:da:e5:65:99:3e:56:18:
                    8e:73:8c:0f:30:fc:95:2a:d7:b6:13:e7:ac:31:c1:
                    53:07:22:f9:8b:d3:d4:24:88:d9:f4:ef:50:f7:d2:
                    9c:d9:10:b4:62:05:1a:0d:ec:93:cc:95:5f:39:56:
                    5d:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:00:26:0A:B7:D6:32:8E:A2:1A:C2:01:12:DF:60:92:08:39:5C:16
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22d5f618-5b64-4804-88ef-e125dd90d7e2/30f12f48-f8e6-3f07-81e9-14e29d06f85d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22d5f618-5b64-4804-88ef-e125dd90d7e2/22d5f618-5b64-4804-88ef-e125dd90d7e2.crl

            X509v3 Authority Key Identifier:
                keyid:51:F3:B4:5D:AB:73:A3:7E:EC:9A:47:7B:05:74:05:B7:39:6D:E9:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22d5f618-5b64-4804-88ef-e125dd90d7e2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fb4b::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:02:56:31:ed:58:af:7f:21:14:c5:ed:a7:d9:63:b2:d7:70:
         99:c1:03:e9:8d:ac:7a:fd:a6:8f:e4:ee:c8:cc:c9:52:e3:10:
         aa:33:e2:3f:4e:06:da:85:87:25:e1:39:3e:49:dc:34:73:b9:
         34:a9:7c:48:2c:8e:a0:00:7e:fc:0e:83:b2:d4:bb:0b:8e:bc:
         1a:b4:f4:c9:4c:39:2a:1a:8c:50:4c:90:b6:47:7c:ae:d9:e6:
         ce:51:6e:fb:92:e2:a0:e7:9c:65:6b:b4:42:b2:51:19:a7:e7:
         3b:8d:52:2a:27:f9:45:a9:d4:22:b1:0f:c3:46:9f:d2:9a:19:
         2e:30:a1:a0:d9:8d:d4:15:f9:bc:0f:eb:13:23:05:7a:38:d2:
         0c:8a:c8:99:b4:67:a6:36:ce:40:e3:07:8b:73:89:7a:d4:a2:
         c7:e0:4f:d9:69:92:5a:d1:a5:bd:e5:ba:f1:7b:24:5e:f8:37:
         0d:b2:00:f8:7c:06:7c:07:2c:b0:fd:d0:72:cb:05:9e:16:4a:
         e2:4b:03:24:f0:ff:df:f0:79:66:ab:46:69:cd:ef:d6:e9:30:
         ff:b2:5e:e5:f8:21:ee:9c:5c:bf:3d:27:9e:58:9e:b0:b2:9a:
         c8:b6:5e:33:c4:4a:ac:78:d9:e5:1e:31:4a:bf:77:d9:88:6f:
         bc:5f:8d:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 18:41:35 2026 by rpki-client