Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7/4391cfe2-c442-38a3-bc5b-60cea8f4e631.roa
File:                     4391cfe2-c442-38a3-bc5b-60cea8f4e631.roa (raw, json)
Hash identifier:          E3HXLUrCOk3q4Av9zKtnq0LN8k8VpI9WeI84/UeaT1A=
Subject key identifier:   2A:A9:79:C5:72:D6:0D:EC:A6:B5:5A:FA:68:37:D7:D5:2B:94:B0:8F
Certificate issuer:       /CN=472e527a-848a-4f3d-b7a0-4f001e757ee7
Certificate serial:       010D0C9F4328584CDB02389A4621C0ED33F6AAC0
Authority key identifier: 2C:3A:2F:6B:C8:5B:37:1A:29:05:9B:D1:83:82:B5:85:4D:45:C5:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7/4391cfe2-c442-38a3-bc5b-60cea8f4e631.roa
Signing time:             Sat 14 Feb 2026 02:00:32 +0000
ROA not before:           Sat 14 Feb 2026 02:00:32 +0000
ROA not after:            Fri 15 May 2026 01:00:32 +0000
asID:                     212001
IP address blocks:        2602:fd50:8000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7/472e527a-848a-4f3d-b7a0-4f001e757ee7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7/472e527a-848a-4f3d-b7a0-4f001e757ee7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Feb 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:db:02:38:9a:46:21:c0:ed:33:f6:aa:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=472e527a-848a-4f3d-b7a0-4f001e757ee7
        Validity
            Not Before: Feb 14 02:00:32 2026 GMT
            Not After : May 15 01:00:32 2026 GMT
        Subject: CN=3e6292a5-5f1d-4a28-8a9a-911cd45ad1c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:70:5f:49:04:e9:4c:42:d3:ac:8c:ec:6e:f3:
                    c8:ee:85:7a:62:27:60:af:66:24:c9:ea:1b:93:34:
                    84:d9:34:e4:79:20:ad:98:c1:93:be:46:c4:c7:83:
                    b6:fd:d2:51:2b:bd:c3:6b:a1:1b:af:3d:70:c4:9d:
                    e1:bc:33:85:ea:b0:c0:fc:68:e9:dc:2b:34:8b:8a:
                    bf:e3:d8:8a:7f:1e:ff:5f:00:96:da:f2:2e:c0:bc:
                    b2:5a:29:a1:b3:47:7a:fa:6e:32:19:e9:a5:17:3a:
                    37:1f:66:9f:15:f7:39:48:6d:09:b9:4a:f5:f5:be:
                    cb:bb:6e:85:2d:a9:1e:47:4d:71:64:9f:85:44:3c:
                    f9:52:60:93:d2:05:a1:c3:39:49:55:ab:f4:df:e2:
                    e7:02:82:7e:f7:ce:f7:31:24:be:e5:ec:8f:fd:30:
                    9b:a2:83:ff:48:29:5f:03:f1:1d:24:d3:cb:11:29:
                    42:54:77:ad:01:2a:9b:33:ee:cd:db:23:5a:4a:21:
                    3e:f2:23:21:3a:97:94:e1:fb:09:2f:2c:cc:1f:fc:
                    8a:fe:79:31:07:2c:19:06:03:96:52:96:f7:81:1f:
                    67:ba:c0:1c:a3:5c:85:7d:a0:5d:98:65:73:c5:a1:
                    60:f8:cc:30:46:d2:1b:50:ff:72:66:c6:00:22:fa:
                    5a:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:A9:79:C5:72:D6:0D:EC:A6:B5:5A:FA:68:37:D7:D5:2B:94:B0:8F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7/4391cfe2-c442-38a3-bc5b-60cea8f4e631.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7/472e527a-848a-4f3d-b7a0-4f001e757ee7.crl

            X509v3 Authority Key Identifier:
                keyid:2C:3A:2F:6B:C8:5B:37:1A:29:05:9B:D1:83:82:B5:85:4D:45:C5:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fd50:8000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ab:ef:ca:c6:4d:71:c4:72:a7:3d:fe:99:52:92:af:d9:fe:a3:
         e9:72:52:58:2b:70:11:15:46:bb:3e:f2:ec:88:2a:d6:6f:9f:
         aa:68:40:2b:1c:9b:74:a0:87:73:3b:6e:27:1e:f8:5f:e6:25:
         a8:a7:59:33:02:0d:85:f2:0d:36:43:67:0c:a1:33:21:97:09:
         6b:48:77:b0:94:b6:88:2c:8d:37:93:12:81:ea:b8:03:3c:49:
         53:24:72:85:32:20:60:46:9b:66:75:1b:7f:e7:df:29:9f:58:
         0a:c7:14:22:98:13:99:00:23:c1:f9:ad:70:5b:21:f9:32:55:
         68:9d:b7:f0:68:2e:af:8c:ce:ec:c4:fb:f6:51:6b:49:90:cb:
         4a:59:fc:ac:5e:f3:de:16:e9:6f:06:5c:e3:9c:67:92:a5:0c:
         b9:b6:a0:69:ef:d4:41:f5:c7:c5:12:25:10:a7:bf:62:1b:15:
         07:68:1d:3e:10:dc:d3:e7:19:fe:33:4d:13:8b:85:c5:d2:1e:
         2e:89:be:29:2c:fc:46:c2:e8:69:5f:ff:be:51:97:f3:3d:94:
         a7:97:c9:e4:0d:b7:af:e7:59:c8:a3:0e:99:a0:42:d2:51:a7:
         bf:1d:d6:4e:5d:4a:02:72:86:72:07:fe:cd:47:40:b2:54:a8:
         f2:7c:b2:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 26 12:32:22 2026 by rpki-client