Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/2e103ad3-eb2d-3740-9c54-04a4beea00a7.roa
File:                     2e103ad3-eb2d-3740-9c54-04a4beea00a7.roa (raw, json)
Hash identifier:          oRUxOkY852OennZsHrL2SFZDw3HQNWbRaRHHiMi/OU8=
Subject key identifier:   8B:76:60:FC:FC:7C:6E:94:C4:29:7D:35:1A:67:9E:61:E6:AC:C7:FB
Certificate issuer:       /CN=5b71e83d-2828-4f34-ba3e-648d01ef173a
Certificate serial:       010D0C9F4328584CCA41F60DEF16001545BE0C80
Authority key identifier: 0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/2e103ad3-eb2d-3740-9c54-04a4beea00a7.roa
Signing time:             Sun 08 Feb 2026 02:00:32 +0000
ROA not before:           Sun 08 Feb 2026 02:00:32 +0000
ROA not after:            Sat 09 May 2026 01:00:32 +0000
asID:                     20473
IP address blocks:        2606:f180:17::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 25 Feb 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ca:41:f6:0d:ef:16:00:15:45:be:0c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b71e83d-2828-4f34-ba3e-648d01ef173a
        Validity
            Not Before: Feb  8 02:00:32 2026 GMT
            Not After : May  9 01:00:32 2026 GMT
        Subject: CN=61b2e32d-41fc-4f0b-ba12-ccafc459ac4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:e0:c6:04:ff:ce:3b:b9:89:44:8c:cb:f1:93:
                    fb:08:86:1e:c7:e0:e8:03:1f:e8:60:06:b4:c0:77:
                    81:62:c9:66:24:a3:7c:0c:95:80:36:12:80:18:9e:
                    71:b1:c8:c0:54:b8:7e:00:22:fc:33:bc:28:bc:5a:
                    17:ee:7b:2d:63:b4:17:3c:7d:04:31:b2:55:89:9d:
                    2f:ae:99:00:c0:0f:89:04:12:74:0d:59:d3:f2:09:
                    cc:11:81:ae:52:3d:2c:0e:23:ba:37:c9:dc:49:aa:
                    c9:bb:bc:62:36:55:a1:c3:e1:30:96:7e:3c:0f:07:
                    8d:07:07:9f:c0:52:b4:c2:c1:49:19:83:4c:a1:52:
                    be:6d:b8:88:cc:04:f3:1c:3f:6a:e7:6c:01:99:e4:
                    35:ba:8b:9d:36:97:91:69:b8:8e:8b:d6:c4:0f:e4:
                    b2:2e:82:48:31:a3:45:37:ff:e2:cb:57:bf:02:16:
                    58:22:2a:de:cc:c9:61:ba:05:96:89:8e:e9:88:46:
                    53:8c:a9:88:25:10:2d:3b:b7:3f:57:89:37:34:8d:
                    3b:8d:2b:c9:82:9b:c0:a5:4c:e1:08:cb:27:b7:23:
                    ff:72:65:67:cd:b6:a6:e8:f4:7b:5e:e0:21:3d:7b:
                    69:71:8b:0d:3f:49:3f:f6:4f:77:4c:bb:31:72:a1:
                    ff:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:76:60:FC:FC:7C:6E:94:C4:29:7D:35:1A:67:9E:61:E6:AC:C7:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/2e103ad3-eb2d-3740-9c54-04a4beea00a7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl

            X509v3 Authority Key Identifier:
                keyid:0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:f180:17::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:e9:fa:16:1a:65:33:7a:d5:05:79:32:c1:5e:1f:e6:18:56:
         af:1f:44:6b:a3:69:ce:83:17:31:51:81:60:c0:d9:bc:50:2f:
         76:12:27:fc:77:43:08:4d:ea:e9:26:a4:35:7c:a7:54:95:e9:
         1e:6d:90:dc:52:2e:ae:e5:ec:69:52:0f:24:47:7f:13:09:1f:
         bb:46:8d:82:c3:13:47:ee:f5:c6:8e:8c:c6:26:07:1d:72:21:
         c4:fc:7d:16:a7:aa:51:f5:b1:35:5c:ce:a3:08:81:89:4d:54:
         35:69:af:72:8d:3c:c6:55:3d:d7:49:55:b7:f6:1b:f6:7d:b2:
         95:82:92:87:0a:7a:61:00:0f:3f:25:4b:0b:5f:a5:1a:7a:aa:
         ac:c4:62:18:6b:99:f7:ac:e6:04:e7:ef:50:f6:be:be:85:b7:
         a4:32:c9:b3:13:df:86:28:e7:e0:60:40:99:cc:2a:b3:b0:1c:
         37:95:98:b1:f2:1f:bc:13:88:07:bb:82:12:58:ae:f3:5c:37:
         8d:86:70:c9:34:36:7d:97:f7:cd:53:ea:28:ea:8d:ae:fd:01:
         9d:4d:d2:9a:b1:32:ab:e3:5b:29:a9:42:c7:c7:d6:eb:3f:c0:
         4a:81:26:08:c6:7d:a8:7d:74:6f:26:d1:6e:fc:bc:20:9b:65:
         65:f1:1e:db
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEzKQfYN7xYAFUW+DIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWI3MWU4M2QtMjgyOC00ZjM0LWJhM2UtNjQ4ZDAxZWYx
NzNhMB4XDTI2MDIwODAyMDAzMloXDTI2MDUwOTAxMDAzMlowLzEtMCsGA1UEAxMk
NjFiMmUzMmQtNDFmYy00ZjBiLWJhMTItY2NhZmM0NTlhYzRmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyeDGBP/OO7mJRIzL8ZP7CIYex+DoAx/oYAa0
wHeBYslmJKN8DJWANhKAGJ5xscjAVLh+ACL8M7wovFoX7nstY7QXPH0EMbJViZ0v
rpkAwA+JBBJ0DVnT8gnMEYGuUj0sDiO6N8ncSarJu7xiNlWhw+Ewln48DweNBwef
wFK0wsFJGYNMoVK+bbiIzATzHD9q52wBmeQ1uoudNpeRabiOi9bED+SyLoJIMaNF
N//iy1e/AhZYIirezMlhugWWiY7piEZTjKmIJRAtO7c/V4k3NI07jSvJgpvApUzh
CMsntyP/cmVnzbam6PR7XuAhPXtpcYsNP0k/9k93TLsxcqH/pQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFIt2YPz8fG6UxCl9NRpnnmHmrMf7MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi81Yjcx
ZTgzZC0yODI4LTRmMzQtYmEzZS02NDhkMDFlZjE3M2EvMmUxMDNhZDMtZWIyZC0z
NzQwLTljNTQtMDRhNGJlZWEwMGE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNWI3MWU4M2QtMjgyOC00ZjM0LWJh
M2UtNjQ4ZDAxZWYxNzNhLzViNzFlODNkLTI4MjgtNGYzNC1iYTNlLTY0OGQwMWVm
MTczYS5jcmwwHwYDVR0jBBgwFoAUCrKywYEk2VOJsQx6TCDGKHhTv54wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi81YjcxZTgzZC0yODI4LTRmMzQtYmEzZS02NDhk
MDFlZjE3M2EuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgbxgAAX
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAArp+hYaZTN61QV5MsFeH+YYVq8fRGujac6DFzFRgWDA2bxQL3YS
J/x3QwhN6ukmpDV8p1SV6R5tkNxSLq7l7GlSDyRHfxMJH7tGjYLDE0fu9caOjMYm
Bx1yIcT8fRanqlH1sTVczqMIgYlNVDVpr3KNPMZVPddJVbf2G/Z9spWCkocKemEA
Dz8lSwtfpRp6qqzEYhhrmfes5gTn71D2vr6Ft6QyybMT34Yo5+BgQJnMKrOwHDeV
mLHyH7wTiAe7ghJYrvNcN42GcMk0Nn2X981T6ijqja79AZ1N0pqxMqvjWympQsfH
1us/wEqBJgjGfah9dG8m0W78vCCbZWXxHts=
-----END CERTIFICATE-----
Generated at Tue Feb 24 03:49:43 2026 by rpki-client