Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb2c27ca-fb7c-4cad-9f9b-4f754f864263/ce6a152a-815e-3aab-bfed-ee1327436f1e.roa
File:                     ce6a152a-815e-3aab-bfed-ee1327436f1e.roa (raw, json)
Hash identifier:          fDBZ3ofvfAhGaCopHdUsvf7dHGTQ9IRaTB+WXKI99Ow=
Subject key identifier:   F7:80:81:D4:95:EF:F0:1D:D0:5F:5C:9D:6C:B6:4E:A2:38:5C:68:CD
Certificate issuer:       /CN=eb2c27ca-fb7c-4cad-9f9b-4f754f864263
Certificate serial:       010D0C9F4328584CAA27303CC5F956040AACF480
Authority key identifier: CF:B9:5A:A2:3C:1B:20:FF:10:CA:74:8F:25:5C:F5:09:89:A2:BE:51
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb2c27ca-fb7c-4cad-9f9b-4f754f864263.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb2c27ca-fb7c-4cad-9f9b-4f754f864263/ce6a152a-815e-3aab-bfed-ee1327436f1e.roa
Signing time:             Tue 27 Jan 2026 14:00:36 +0000
ROA not before:           Tue 27 Jan 2026 14:00:36 +0000
ROA not after:            Mon 27 Apr 2026 13:00:36 +0000
asID:                     396908
IP address blocks:        2602:f956:7c::/46 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb2c27ca-fb7c-4cad-9f9b-4f754f864263/eb2c27ca-fb7c-4cad-9f9b-4f754f864263.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb2c27ca-fb7c-4cad-9f9b-4f754f864263/eb2c27ca-fb7c-4cad-9f9b-4f754f864263.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb2c27ca-fb7c-4cad-9f9b-4f754f864263.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 21 Feb 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:aa:27:30:3c:c5:f9:56:04:0a:ac:f4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb2c27ca-fb7c-4cad-9f9b-4f754f864263
        Validity
            Not Before: Jan 27 14:00:36 2026 GMT
            Not After : Apr 27 13:00:36 2026 GMT
        Subject: CN=4b19bb77-f095-478e-a347-af973f50c8fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:2c:fb:2e:f7:e0:9f:69:f1:21:89:e4:97:39:
                    3d:5e:66:02:ad:6d:ec:61:de:b6:f7:4d:01:d4:97:
                    36:7e:55:51:bd:6b:cf:01:3f:a7:31:43:93:5a:d5:
                    c3:39:84:6e:bc:93:e3:1a:32:f5:f8:50:54:8f:0e:
                    b3:9f:ee:7c:19:d9:57:2d:c9:cb:bc:4a:7c:ab:ec:
                    f0:fb:72:6d:b3:55:06:2f:49:df:c2:80:2f:de:78:
                    fc:46:5b:b1:07:6d:fd:77:60:db:c4:06:41:41:79:
                    13:88:69:59:c5:cb:63:8e:2f:cf:93:9d:ad:20:ae:
                    ac:9e:e5:25:2a:0d:a9:84:45:8e:74:08:4a:10:58:
                    5d:aa:f0:40:48:a6:83:4e:2b:ec:46:a9:3f:a9:7e:
                    b1:b9:d9:c7:d8:68:48:a8:ae:19:d2:74:2e:e5:98:
                    08:8f:b3:f0:0a:b8:e1:6b:0c:63:e1:09:6c:75:0a:
                    e4:ab:a9:9e:4f:0f:88:64:dd:17:89:cf:99:81:91:
                    ac:ec:c7:ba:c2:18:a6:76:e6:21:0b:11:68:57:ce:
                    7b:47:77:8a:75:6b:2a:8d:cb:17:18:bd:66:54:63:
                    a3:1d:0b:53:0e:4c:fc:ab:7a:f9:54:7d:9c:c2:52:
                    7d:b7:04:25:fe:29:33:18:33:34:df:5b:95:6e:5b:
                    a4:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:80:81:D4:95:EF:F0:1D:D0:5F:5C:9D:6C:B6:4E:A2:38:5C:68:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb2c27ca-fb7c-4cad-9f9b-4f754f864263/ce6a152a-815e-3aab-bfed-ee1327436f1e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb2c27ca-fb7c-4cad-9f9b-4f754f864263/eb2c27ca-fb7c-4cad-9f9b-4f754f864263.crl

            X509v3 Authority Key Identifier:
                keyid:CF:B9:5A:A2:3C:1B:20:FF:10:CA:74:8F:25:5C:F5:09:89:A2:BE:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb2c27ca-fb7c-4cad-9f9b-4f754f864263.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f956:7c::/46

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:97:cc:4e:12:e3:a4:3e:79:c6:7c:b7:c3:c6:86:fa:ec:d6:
         80:18:74:58:0a:37:5a:45:3f:07:aa:0e:30:21:3e:8c:2b:1c:
         0f:73:e1:41:e7:ca:e1:63:2f:ca:14:5f:d0:d2:e3:cc:47:71:
         c0:76:82:71:49:e2:9f:d7:81:3c:dc:ef:29:3f:6e:8c:d1:2e:
         17:b8:32:e0:ec:00:d4:51:d3:c3:37:fd:7c:30:40:18:e3:26:
         24:74:7d:62:2c:c5:f6:e7:76:f2:db:4e:43:19:9d:09:be:fa:
         29:d0:5d:d2:e1:f0:b1:4b:ea:12:04:6c:6b:b6:33:31:a3:5d:
         57:27:c2:16:45:47:5c:a1:b3:10:84:9b:9f:0f:81:b2:cb:d9:
         47:7d:b5:85:7b:a2:46:c4:4c:9e:38:73:78:ce:bf:55:39:23:
         58:2a:a9:2f:4a:f3:ce:51:30:1c:22:d2:7a:a7:d5:d1:f8:d2:
         fd:f4:eb:f4:44:ef:e6:a3:01:5f:e1:b9:e6:8e:08:ed:86:b0:
         47:53:bd:95:88:0a:bf:ec:d6:93:0e:5f:cd:cf:58:b3:3f:13:
         e7:f9:ed:4f:6f:d0:dd:bb:66:26:86:de:ba:ec:f8:01:90:d7:
         25:01:95:66:23:ac:05:d4:b2:bc:76:cf:38:d6:90:02:cb:73:
         7f:56:18:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 21:14:06 2026 by rpki-client