Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f71ab410-ccbd-4ac3-8b4e-4b3c9a119054/fa32809d-7023-34cc-93b8-668261b64807.roa
File:                     fa32809d-7023-34cc-93b8-668261b64807.roa (raw, json)
Hash identifier:          YDwZ3XjYzhyPVvb26d3VNam5lgpgSu3xjSQqH8ypYtA=
Subject key identifier:   4E:20:94:CB:87:CA:3C:41:68:B8:09:62:9E:51:84:30:CE:BC:03:47
Certificate issuer:       /CN=f71ab410-ccbd-4ac3-8b4e-4b3c9a119054
Certificate serial:       010D0C9F4328584CEE8CB9F149448C0F8CD6E600
Authority key identifier: AC:B8:8F:B9:35:55:7B:9D:8B:C9:5E:6F:E8:3F:01:AA:77:1C:F2:75
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f71ab410-ccbd-4ac3-8b4e-4b3c9a119054.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f71ab410-ccbd-4ac3-8b4e-4b3c9a119054/fa32809d-7023-34cc-93b8-668261b64807.roa
Signing time:             Sat 21 Feb 2026 02:00:32 +0000
ROA not before:           Sat 21 Feb 2026 02:00:32 +0000
ROA not after:            Fri 22 May 2026 01:00:32 +0000
asID:                     401413
IP address blocks:        2604:d20::/32 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f71ab410-ccbd-4ac3-8b4e-4b3c9a119054/f71ab410-ccbd-4ac3-8b4e-4b3c9a119054.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f71ab410-ccbd-4ac3-8b4e-4b3c9a119054/f71ab410-ccbd-4ac3-8b4e-4b3c9a119054.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f71ab410-ccbd-4ac3-8b4e-4b3c9a119054.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Feb 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ee:8c:b9:f1:49:44:8c:0f:8c:d6:e6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f71ab410-ccbd-4ac3-8b4e-4b3c9a119054
        Validity
            Not Before: Feb 21 02:00:32 2026 GMT
            Not After : May 22 01:00:32 2026 GMT
        Subject: CN=f9846fb4-77d9-4987-b4e0-b4137112a352
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:71:59:c3:99:57:4e:25:0a:c1:a4:1b:73:86:
                    ed:73:30:b3:f5:e4:52:ba:21:ab:b5:cb:27:d9:52:
                    c7:9f:eb:00:84:03:b6:49:2b:1f:b0:fd:9e:63:9f:
                    31:48:4d:07:9b:74:e4:c2:1f:8f:cc:ab:32:8e:2d:
                    b9:2c:90:32:0e:3c:18:bd:f1:50:3e:78:7f:50:71:
                    61:b0:49:6b:50:62:14:24:a0:07:60:1e:51:82:4a:
                    50:76:a3:5c:7b:d8:08:5b:f4:47:fd:00:fb:03:af:
                    e7:90:06:9a:0e:c6:b2:b1:4b:73:e3:62:3d:52:47:
                    1c:6f:d5:a4:d9:ba:d5:e4:8c:e6:ec:e3:d3:a7:df:
                    19:c3:12:04:f8:bc:c3:72:28:51:20:dd:57:3c:fd:
                    62:d2:61:4a:65:35:db:d5:94:4f:4a:5e:16:ac:77:
                    bb:27:c6:0b:8d:11:68:42:65:a3:98:c3:41:90:b7:
                    c4:c9:36:9f:98:a2:77:ea:6e:f6:a0:1c:ec:ad:45:
                    6b:78:e3:46:65:1f:8b:6a:70:38:c0:7e:4b:74:ac:
                    bd:fd:aa:e1:63:01:3c:1d:10:6c:1d:1d:35:2b:d3:
                    7e:72:52:dd:e1:5a:a2:61:08:72:1e:2d:c5:44:7a:
                    76:e3:07:8c:f2:6f:19:8e:83:c5:57:28:82:e0:ea:
                    c4:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:20:94:CB:87:CA:3C:41:68:B8:09:62:9E:51:84:30:CE:BC:03:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f71ab410-ccbd-4ac3-8b4e-4b3c9a119054/fa32809d-7023-34cc-93b8-668261b64807.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f71ab410-ccbd-4ac3-8b4e-4b3c9a119054/f71ab410-ccbd-4ac3-8b4e-4b3c9a119054.crl

            X509v3 Authority Key Identifier:
                keyid:AC:B8:8F:B9:35:55:7B:9D:8B:C9:5E:6F:E8:3F:01:AA:77:1C:F2:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f71ab410-ccbd-4ac3-8b4e-4b3c9a119054.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:d20::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:7f:74:a9:43:86:37:40:d5:4e:ad:12:a4:75:de:77:fa:3e:
         1e:53:05:d9:df:f5:c7:49:7c:e1:f4:a1:7f:65:b6:ca:db:87:
         d5:93:c4:14:00:26:17:69:9a:02:87:06:f7:6e:70:1e:22:af:
         8c:be:03:84:83:12:db:b4:c3:0f:1a:3a:5b:00:6b:95:fa:67:
         5f:1e:d4:56:8e:46:ff:2b:1a:ae:c9:5f:08:82:b6:14:0a:6d:
         5e:b4:40:63:24:52:81:74:c4:61:95:d6:97:06:ae:dc:d9:fe:
         36:ae:ab:62:eb:f3:c4:2f:c9:15:9a:1b:16:a3:22:1a:05:53:
         ec:5a:51:ed:8b:b8:f3:c3:9b:e9:fe:6e:59:40:42:70:50:e6:
         b1:c4:f1:92:8c:53:f2:7c:57:4b:59:e0:31:13:04:bc:fc:8d:
         26:68:45:1f:4c:53:cf:97:5f:93:9c:83:51:3c:75:ea:c1:e3:
         70:8c:52:24:f8:55:9d:b6:06:de:3a:52:a7:f7:aa:7f:df:b2:
         b6:84:8a:1a:34:84:8f:8b:a9:ac:93:08:3c:d9:82:19:36:55:
         7b:8e:b6:3e:67:b1:8e:85:09:79:05:d6:f9:f0:f0:4b:72:27:
         22:8a:f3:01:7a:89:8f:3b:08:03:3c:56:5e:c7:f5:73:d1:02:
         2a:09:c2:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 26 22:54:11 2026 by rpki-client