Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d012b221-dd69-4313-997f-ea1837a71efd/ce81ec48-0d30-3d32-922e-4006b5434b3e.roa
File:                     ce81ec48-0d30-3d32-922e-4006b5434b3e.roa (raw, json)
Hash identifier:          +omefoepqRDo5NHMoF5ckO2Ezh5SZdQr8NWYyp40V0A=
Subject key identifier:   B8:3F:04:1F:95:5A:CC:DA:BC:6A:F9:69:C3:F8:1B:AD:85:92:A6:5F
Certificate issuer:       /CN=d012b221-dd69-4313-997f-ea1837a71efd
Certificate serial:       010D0C9F4328584CAAB7095AC84897F7AC74B908
Authority key identifier: 9A:CC:D8:34:61:3B:A2:9E:D9:E3:9A:84:DA:B7:17:80:41:EB:03:94
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d012b221-dd69-4313-997f-ea1837a71efd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d012b221-dd69-4313-997f-ea1837a71efd/ce81ec48-0d30-3d32-922e-4006b5434b3e.roa
Signing time:             Tue 27 Jan 2026 18:50:51 +0000
ROA not before:           Tue 27 Jan 2026 18:50:51 +0000
ROA not after:            Mon 27 Apr 2026 17:50:51 +0000
asID:                     35976
IP address blocks:        2602:f7ff::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d012b221-dd69-4313-997f-ea1837a71efd/d012b221-dd69-4313-997f-ea1837a71efd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d012b221-dd69-4313-997f-ea1837a71efd/d012b221-dd69-4313-997f-ea1837a71efd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d012b221-dd69-4313-997f-ea1837a71efd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Feb 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:aa:b7:09:5a:c8:48:97:f7:ac:74:b9:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d012b221-dd69-4313-997f-ea1837a71efd
        Validity
            Not Before: Jan 27 18:50:51 2026 GMT
            Not After : Apr 27 17:50:51 2026 GMT
        Subject: CN=f2101807-e0b1-460b-8074-b28a30117c82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:75:f5:85:2b:b3:af:03:d7:6a:1f:fc:53:16:
                    16:69:a1:b4:da:82:7e:ed:09:65:59:6c:00:dd:f1:
                    61:b5:c3:48:ce:ee:06:a4:b0:45:0e:b1:64:91:84:
                    f8:8b:2d:2d:4c:0c:c7:6f:fe:77:30:88:ec:ef:d2:
                    51:5c:be:40:6d:c5:3a:45:66:e2:28:ab:3a:ea:95:
                    cb:cc:30:df:53:03:2b:f7:12:68:8a:69:4b:88:09:
                    cd:a0:8b:99:73:98:92:cf:90:0a:10:fb:4b:8f:36:
                    ef:d5:0d:ac:28:9f:59:3c:53:b9:55:ca:67:6a:a4:
                    b2:ee:04:37:9b:3c:53:ac:60:33:02:b8:ca:39:dc:
                    9e:4a:d0:8c:42:ca:eb:e8:3a:93:bb:a5:14:f8:6a:
                    e8:b4:93:22:a8:a1:40:bd:4a:7b:2d:a7:f7:1a:06:
                    ce:24:35:81:01:3d:83:1e:dd:44:7b:b1:04:ec:f0:
                    06:f5:07:4b:4f:85:a1:d9:18:b2:2b:9d:87:c3:27:
                    8c:aa:03:87:a4:43:d7:9a:c9:d4:be:18:f0:ae:57:
                    4c:b9:46:06:80:15:9d:54:3c:2b:88:aa:1e:13:60:
                    ab:6a:1a:b6:3d:47:91:98:c2:95:11:f0:fd:cb:0f:
                    91:10:95:fb:ff:54:2a:95:1c:97:ed:76:75:47:04:
                    a5:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:3F:04:1F:95:5A:CC:DA:BC:6A:F9:69:C3:F8:1B:AD:85:92:A6:5F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d012b221-dd69-4313-997f-ea1837a71efd/ce81ec48-0d30-3d32-922e-4006b5434b3e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d012b221-dd69-4313-997f-ea1837a71efd/d012b221-dd69-4313-997f-ea1837a71efd.crl

            X509v3 Authority Key Identifier:
                keyid:9A:CC:D8:34:61:3B:A2:9E:D9:E3:9A:84:DA:B7:17:80:41:EB:03:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d012b221-dd69-4313-997f-ea1837a71efd.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f7ff::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:5a:43:c5:14:d0:dd:54:15:3f:d1:0f:4f:17:bd:47:96:db:
         36:45:4c:36:54:44:9c:36:fb:46:84:2a:c1:84:58:8a:4e:4b:
         a9:6c:31:b3:35:89:7c:b7:5f:39:c6:d3:fe:51:fc:b2:76:68:
         ca:1f:1a:32:3d:84:00:bd:5c:7c:91:61:cb:36:10:67:3a:7c:
         56:c0:36:ae:47:b2:c6:b5:2f:ed:75:7f:1f:b9:29:af:c9:14:
         81:97:d1:e1:b1:6e:6c:94:b8:54:19:fc:67:87:74:50:f0:bd:
         bb:be:d8:05:df:d9:2a:c6:6a:6b:eb:34:03:0a:89:52:46:21:
         07:7d:9c:bb:c4:1c:63:eb:16:eb:59:f0:ef:7c:7e:e1:f8:5a:
         67:f4:d9:12:9a:bd:1f:27:67:66:9c:f2:4f:7f:98:9a:ac:21:
         97:01:b8:75:0e:f3:54:d8:e1:02:0e:55:1c:35:9d:65:5c:f3:
         29:25:c2:97:cf:4e:88:84:2b:89:c8:79:83:68:d0:c3:92:ee:
         4f:85:0f:0c:0e:4a:5b:23:30:f0:0b:f9:43:34:7e:f9:3e:c2:
         25:1c:f3:8a:a2:5f:bb:b5:e8:0b:7c:25:c0:78:c9:63:cb:53:
         21:75:4a:fa:f2:67:e2:5b:30:bd:22:e4:8e:94:a0:11:e2:0c:
         6e:e4:9c:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 26 22:49:27 2026 by rpki-client