Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bb3e1744-5186-489a-9b86-cb31cef73874/9012ed63-878a-3814-ab32-db7d7578b57a.roa
File:                     9012ed63-878a-3814-ab32-db7d7578b57a.roa (raw, json)
Hash identifier:          fTuWFCHnu8yZ35wh9TNOldZjctRgzFGylVI+QWKkFng=
Subject key identifier:   13:04:D6:72:36:EE:25:7E:6D:A4:BA:53:11:CF:79:9A:59:73:9D:8F
Certificate issuer:       /CN=bb3e1744-5186-489a-9b86-cb31cef73874
Certificate serial:       010D0C9F4328584CA5F70576C56C81DCAAC79D80
Authority key identifier: 6F:2C:C6:AA:C8:5C:8C:82:ED:09:05:C9:E5:AD:0F:99:CE:1E:07:5B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bb3e1744-5186-489a-9b86-cb31cef73874.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bb3e1744-5186-489a-9b86-cb31cef73874/9012ed63-878a-3814-ab32-db7d7578b57a.roa
Signing time:             Mon 26 Jan 2026 02:00:32 +0000
ROA not before:           Mon 26 Jan 2026 02:00:32 +0000
ROA not after:            Sun 26 Apr 2026 01:00:32 +0000
asID:                     16509
IP address blocks:        2620:20:4000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bb3e1744-5186-489a-9b86-cb31cef73874/bb3e1744-5186-489a-9b86-cb31cef73874.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bb3e1744-5186-489a-9b86-cb31cef73874/bb3e1744-5186-489a-9b86-cb31cef73874.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bb3e1744-5186-489a-9b86-cb31cef73874.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 22 Feb 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:a5:f7:05:76:c5:6c:81:dc:aa:c7:9d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bb3e1744-5186-489a-9b86-cb31cef73874
        Validity
            Not Before: Jan 26 02:00:32 2026 GMT
            Not After : Apr 26 01:00:32 2026 GMT
        Subject: CN=38578b9f-f7f8-4379-8a29-f243f9e848e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:2a:cd:a4:26:46:52:76:0a:d8:4c:3d:d2:ad:
                    c3:28:af:c0:62:cf:dc:60:d2:b6:b7:71:aa:ea:1c:
                    43:81:9c:84:7c:47:a7:f1:52:ea:98:4d:af:b0:b7:
                    7a:cf:55:83:60:8e:20:29:4a:4b:4a:5e:74:3f:97:
                    d8:6e:40:99:08:db:f7:93:ec:78:cd:7d:5f:79:18:
                    91:3b:ea:c4:d0:cf:85:76:32:e4:9d:65:51:06:9e:
                    10:20:dc:64:a1:ad:bc:3e:cc:ba:a7:f7:9c:a9:26:
                    29:97:0e:ba:aa:d0:65:04:30:3d:0b:cd:07:3c:4b:
                    55:76:3b:4d:0f:06:4f:7b:c1:7b:7f:a1:5d:cd:2a:
                    04:ea:19:f4:e9:aa:95:c4:a2:f2:5c:f6:fe:b2:1b:
                    24:19:6a:e7:77:13:eb:0a:f1:bc:25:f0:1f:9c:56:
                    0d:66:ca:df:f0:ea:ec:55:6b:bb:d1:48:e0:72:0f:
                    d0:90:84:99:47:0c:06:85:8c:8e:a0:6a:f1:09:61:
                    36:87:7b:c4:26:d5:b2:7f:4c:1b:e8:e7:38:8f:b3:
                    ad:5c:7d:9f:0d:90:3d:96:1b:f3:7a:74:0b:66:81:
                    e6:67:aa:53:89:f3:30:a8:f3:76:7a:4c:89:e6:3e:
                    60:a1:57:a2:ef:8e:37:d8:07:fe:72:26:85:30:31:
                    34:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:04:D6:72:36:EE:25:7E:6D:A4:BA:53:11:CF:79:9A:59:73:9D:8F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bb3e1744-5186-489a-9b86-cb31cef73874/9012ed63-878a-3814-ab32-db7d7578b57a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bb3e1744-5186-489a-9b86-cb31cef73874/bb3e1744-5186-489a-9b86-cb31cef73874.crl

            X509v3 Authority Key Identifier:
                keyid:6F:2C:C6:AA:C8:5C:8C:82:ED:09:05:C9:E5:AD:0F:99:CE:1E:07:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bb3e1744-5186-489a-9b86-cb31cef73874.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:20:4000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:3b:9f:1c:ac:9e:e0:0a:b8:15:6f:f8:b9:17:87:da:72:53:
         a3:97:fc:2e:ce:a5:b4:b4:3b:20:ba:ef:7b:20:4a:e9:a7:38:
         28:c9:40:e4:57:b4:56:c1:71:b4:a0:48:3d:09:f0:7e:7e:08:
         7b:ec:e8:fb:ba:11:20:61:35:fa:1d:e2:d7:9e:27:2f:c8:89:
         d9:0c:fd:5f:a9:0e:d7:19:99:3d:81:13:d8:b0:70:63:a9:b1:
         22:c6:d3:33:e1:32:af:e3:be:4c:b3:f5:e1:5c:62:d7:4c:b5:
         66:ae:a2:50:ef:ef:f6:af:61:74:e6:a3:65:15:83:32:f2:90:
         69:12:83:09:45:d1:a0:c7:e3:ce:cf:ef:1b:34:da:d3:f8:19:
         b7:94:8d:26:5f:29:71:b3:04:7f:60:43:8a:2c:34:2d:ae:67:
         63:62:60:52:7b:05:59:a8:d8:74:8b:c0:b4:4d:ed:7f:4e:80:
         92:80:0a:06:7a:0f:9d:ff:bd:0f:ff:d9:e2:25:1b:e6:c3:7d:
         6a:bf:fe:a1:8f:cd:09:e8:94:d5:cb:1f:7d:82:b7:15:2f:33:
         61:8f:05:1b:06:5b:db:be:56:ca:45:2e:2f:e4:e5:43:e3:f4:
         d7:2d:3e:bf:82:a1:cc:6a:43:8f:38:a9:71:61:8b:d9:5b:ce:
         5f:60:d4:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 21 08:48:22 2026 by rpki-client