Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afa8b068-97b2-4c52-904f-d78c4e46fb8c/af12206c-6e5f-3fc4-b92d-64245cdab0b0.roa
File:                     af12206c-6e5f-3fc4-b92d-64245cdab0b0.roa (raw, json)
Hash identifier:          qoGwQkRUaZBuf6VN43mA82WJGiBZ9NgZKUc5jv4Yu+k=
Subject key identifier:   20:44:94:55:20:15:4D:7A:28:71:C4:76:27:54:6F:97:82:92:17:77
Certificate issuer:       /CN=afa8b068-97b2-4c52-904f-d78c4e46fb8c
Certificate serial:       010D0C9F4328584CCA41EADA2E785DC023957880
Authority key identifier: 06:8A:44:11:76:8D:69:EA:42:55:0C:15:AD:78:BB:AD:A7:F1:62:5A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afa8b068-97b2-4c52-904f-d78c4e46fb8c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afa8b068-97b2-4c52-904f-d78c4e46fb8c/af12206c-6e5f-3fc4-b92d-64245cdab0b0.roa
Signing time:             Sun 08 Feb 2026 02:00:32 +0000
ROA not before:           Sun 08 Feb 2026 02:00:32 +0000
ROA not after:            Sat 09 May 2026 01:00:32 +0000
asID:                     985
IP address blocks:        2602:fb4a:a0::/44 maxlen: 48
                          2602:fb4a:b0::/44 maxlen: 48
                          2602:fb4a:c0::/44 maxlen: 48
                          2602:fb4a:d0::/44 maxlen: 48
                          2602:fb4a:e0::/44 maxlen: 48
                          2602:fb4a:f0::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afa8b068-97b2-4c52-904f-d78c4e46fb8c/afa8b068-97b2-4c52-904f-d78c4e46fb8c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afa8b068-97b2-4c52-904f-d78c4e46fb8c/afa8b068-97b2-4c52-904f-d78c4e46fb8c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afa8b068-97b2-4c52-904f-d78c4e46fb8c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 25 Feb 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ca:41:ea:da:2e:78:5d:c0:23:95:78:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=afa8b068-97b2-4c52-904f-d78c4e46fb8c
        Validity
            Not Before: Feb  8 02:00:32 2026 GMT
            Not After : May  9 01:00:32 2026 GMT
        Subject: CN=27335226-ba3e-4fa8-8939-70c00d106aac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:ca:3b:db:95:b8:70:d4:c3:2a:7a:27:ca:5d:
                    1d:58:b5:31:32:08:bf:2f:38:00:c2:be:61:39:7b:
                    7c:b3:e4:98:a8:14:20:e0:e4:f4:99:3a:a7:12:86:
                    eb:9d:fe:2d:be:a0:69:fc:64:51:04:3d:3a:df:88:
                    59:79:71:1e:e8:bd:dd:55:0c:e8:30:a5:c4:58:7c:
                    24:75:d2:d9:f3:ea:c4:31:df:78:13:bb:2d:e4:db:
                    c4:0c:41:e6:14:13:d4:b2:94:53:3e:cb:c6:6d:cc:
                    b7:f2:9b:63:ff:a7:64:4c:5a:76:d7:11:e1:7b:0c:
                    4c:03:99:d8:5f:a2:80:ed:ef:99:b5:28:db:93:1b:
                    4e:1b:52:c6:9d:97:2d:34:58:68:45:e2:34:ab:74:
                    0f:d5:91:34:23:1d:40:a7:92:9f:26:38:6c:df:02:
                    3a:b9:3d:28:01:ac:64:73:79:24:d6:1e:80:17:d3:
                    b6:69:ce:cf:15:a5:7e:75:ee:1c:c2:33:e3:91:22:
                    6b:f1:38:ee:05:1e:0c:24:1b:9d:b5:46:c0:5d:26:
                    4c:05:0a:5d:27:9c:2a:e8:a1:00:a3:3f:ca:87:79:
                    db:db:0d:07:29:92:b9:f2:ff:61:5c:cd:c3:bc:d2:
                    ca:5e:a9:30:a8:16:21:39:c2:09:e0:12:29:1a:a5:
                    cc:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:44:94:55:20:15:4D:7A:28:71:C4:76:27:54:6F:97:82:92:17:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afa8b068-97b2-4c52-904f-d78c4e46fb8c/af12206c-6e5f-3fc4-b92d-64245cdab0b0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afa8b068-97b2-4c52-904f-d78c4e46fb8c/afa8b068-97b2-4c52-904f-d78c4e46fb8c.crl

            X509v3 Authority Key Identifier:
                keyid:06:8A:44:11:76:8D:69:EA:42:55:0C:15:AD:78:BB:AD:A7:F1:62:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afa8b068-97b2-4c52-904f-d78c4e46fb8c.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fb4a:a0::-2602:fb4a:ff:ffff:ffff:ffff:ffff:ffff

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:4b:c5:5d:ca:9d:37:3b:1d:49:1c:70:59:9a:8a:45:43:ad:
         ef:8b:07:23:7e:24:af:bb:7f:88:6f:43:b3:37:0d:1a:61:6c:
         17:37:25:90:b5:87:9a:91:9b:4c:a5:8b:37:e5:44:69:a1:8f:
         5f:a7:eb:c6:35:a9:89:ea:5b:f0:85:a7:66:ee:6f:bb:fc:ae:
         76:ce:41:e3:10:f4:89:50:70:9e:ae:dc:ff:7b:d4:81:09:e7:
         79:57:4e:5f:f4:ac:dc:96:a7:59:e8:7e:90:57:e3:69:ba:91:
         b4:9f:f5:b8:bf:e6:d5:80:28:05:9c:7e:48:f9:e3:b2:39:ef:
         cf:ff:e0:32:b5:57:91:48:b4:8b:d7:01:e6:ec:2f:e8:f0:05:
         4f:9b:95:41:b5:79:39:c5:9b:b5:e3:4d:0b:f6:cb:c3:17:4b:
         b6:06:17:11:c4:e9:f7:65:9c:cc:82:05:d9:c7:a1:2c:33:8f:
         ee:68:37:cc:9c:af:14:91:26:35:f0:ee:fd:ae:f7:16:64:4e:
         3a:3e:bb:fd:b0:e2:8e:d6:c0:dd:a4:e1:c6:3b:27:ef:09:c1:
         f8:6d:90:10:de:1c:13:5d:df:94:96:85:30:20:8b:99:c0:ab:
         b5:88:6c:08:33:52:5e:d2:9d:3f:2c:9f:72:37:e0:a7:64:d4:
         dc:65:16:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 18:41:23 2026 by rpki-client