Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/774b14a5-e3e2-41ae-8c84-81f2c3864489/dc93f20b-d3f2-3d8e-8012-37c53d8efec3.roa
File:                     dc93f20b-d3f2-3d8e-8012-37c53d8efec3.roa (raw, json)
Hash identifier:          VNbyLQ4sikSz1sMRLsdXTWJBflz5vXdRqgUM8N5oxpc=
Subject key identifier:   3F:57:FF:A4:04:27:3A:C2:49:1D:BC:6E:17:98:28:C3:F2:50:E3:12
Certificate issuer:       /CN=774b14a5-e3e2-41ae-8c84-81f2c3864489
Certificate serial:       010D0C9F4328584CC611FFB0EDE11BD5FF325200
Authority key identifier: 32:77:AD:A7:33:C7:DC:CF:C6:F1:56:F2:68:C6:23:F1:CC:04:E4:BF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/774b14a5-e3e2-41ae-8c84-81f2c3864489.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/774b14a5-e3e2-41ae-8c84-81f2c3864489/dc93f20b-d3f2-3d8e-8012-37c53d8efec3.roa
Signing time:             Fri 06 Feb 2026 14:00:40 +0000
ROA not before:           Fri 06 Feb 2026 14:00:40 +0000
ROA not after:            Thu 07 May 2026 13:00:40 +0000
asID:                     399663
IP address blocks:        2602:815:f000::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/774b14a5-e3e2-41ae-8c84-81f2c3864489/774b14a5-e3e2-41ae-8c84-81f2c3864489.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/774b14a5-e3e2-41ae-8c84-81f2c3864489/774b14a5-e3e2-41ae-8c84-81f2c3864489.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/774b14a5-e3e2-41ae-8c84-81f2c3864489.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 25 Feb 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:c6:11:ff:b0:ed:e1:1b:d5:ff:32:52:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=774b14a5-e3e2-41ae-8c84-81f2c3864489
        Validity
            Not Before: Feb  6 14:00:40 2026 GMT
            Not After : May  7 13:00:40 2026 GMT
        Subject: CN=9a63fad7-2600-410c-a0cd-ff6d21883bc5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:f1:17:c1:8b:3a:a6:30:2c:98:f9:11:c3:8e:
                    27:f6:d0:9a:bd:85:4e:d4:94:05:fa:2f:57:cc:9d:
                    fc:58:3d:d3:24:6f:72:6f:0a:39:cc:2f:12:01:28:
                    bd:17:9f:8d:9c:42:2a:4e:9d:98:31:ef:86:a3:0a:
                    2c:56:7e:8b:cd:27:f7:47:e3:b6:bb:42:d6:47:4d:
                    34:b9:b0:01:17:3b:9a:5f:fe:2f:45:e9:7c:d2:92:
                    32:a1:c7:58:38:92:1d:af:11:e4:2f:aa:f0:70:03:
                    d9:c6:69:5d:80:b9:08:cd:5f:54:66:7c:78:aa:5e:
                    c7:86:0c:82:7c:8a:6a:cc:47:8f:43:8d:c3:33:b0:
                    c7:36:db:e5:87:7a:5d:ea:07:39:fd:5d:ab:d6:c8:
                    b5:93:ba:bd:2a:76:a2:e7:65:19:40:69:61:ef:25:
                    14:db:69:5d:25:bc:14:6d:a6:f2:d8:91:72:ea:b8:
                    23:e4:c1:0d:34:22:75:76:95:c3:c9:35:da:75:77:
                    d5:ce:19:cb:af:fe:78:61:f3:39:ef:a8:94:a2:09:
                    f2:82:ad:c8:2a:09:c9:e6:31:4b:28:e7:8e:fb:93:
                    91:90:16:13:36:09:7d:ff:96:07:62:37:cb:26:86:
                    38:86:6d:8f:88:2b:aa:75:fe:c9:c1:55:0e:cb:76:
                    1f:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:57:FF:A4:04:27:3A:C2:49:1D:BC:6E:17:98:28:C3:F2:50:E3:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/774b14a5-e3e2-41ae-8c84-81f2c3864489/dc93f20b-d3f2-3d8e-8012-37c53d8efec3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/774b14a5-e3e2-41ae-8c84-81f2c3864489/774b14a5-e3e2-41ae-8c84-81f2c3864489.crl

            X509v3 Authority Key Identifier:
                keyid:32:77:AD:A7:33:C7:DC:CF:C6:F1:56:F2:68:C6:23:F1:CC:04:E4:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/774b14a5-e3e2-41ae-8c84-81f2c3864489.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:815:f000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:78:75:cf:29:83:91:7c:fe:62:b6:8c:a3:0d:b8:f8:ba:3a:
         0e:a7:d4:db:35:67:c9:80:bd:c7:92:ab:42:1b:01:4a:da:4d:
         ea:54:ae:6f:a3:a1:77:f3:ed:56:a0:e0:96:be:34:1d:52:e5:
         01:85:93:34:9a:02:1b:d1:a6:38:c3:2e:50:23:7e:39:e9:e2:
         3a:c0:8e:32:aa:dd:d9:e7:e9:39:87:ae:ca:69:f1:58:18:4c:
         70:fd:4b:96:2e:c6:db:b0:50:ed:c5:b1:85:51:47:34:4e:56:
         9d:f7:05:cc:e6:cf:f4:af:32:3c:12:58:e9:3f:1b:59:73:f9:
         d7:a2:1c:e3:db:a1:c7:15:d7:c7:c8:8e:be:99:65:ad:50:e9:
         4f:b0:b3:2c:8b:e6:f8:95:b8:8a:97:36:4f:53:7f:46:f0:c7:
         f6:d8:20:a2:49:23:78:59:94:0e:97:73:07:69:05:85:84:0e:
         98:61:c3:94:f6:99:22:5e:b2:67:1f:b1:11:dd:d7:6c:fa:f8:
         86:93:2a:08:92:4e:77:61:61:c0:29:fb:81:74:5d:b5:1b:10:
         73:88:8c:73:b5:40:e3:dc:fc:70:03:2a:62:f0:df:c7:55:c2:
         fd:75:1a:8f:ae:e0:a6:84:86:f7:1e:13:b9:f7:23:aa:20:de:
         60:aa:a5:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 18:40:37 2026 by rpki-client