Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/959a22b2-95d2-48c0-8feb-819d877ee1e3/17922156-b32e-3f9a-8bc5-25eb9f4add68.roa
File:                     17922156-b32e-3f9a-8bc5-25eb9f4add68.roa (raw, json)
Hash identifier:          24icIA4BS4lN0lBF/jFmcCnnfppj1xEit4vKaRkAG1c=
Subject key identifier:   99:3B:92:AD:7C:4E:57:1D:82:0B:61:B9:18:E5:48:A9:13:2B:55:8D
Certificate issuer:       /CN=959a22b2-95d2-48c0-8feb-819d877ee1e3
Certificate serial:       010D0C9F4328584CED2788CDB610CAFC7427BE00
Authority key identifier: 63:9E:16:CE:FE:54:7B:5B:F3:03:85:B9:B9:C5:F6:6A:34:06:3A:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/959a22b2-95d2-48c0-8feb-819d877ee1e3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/959a22b2-95d2-48c0-8feb-819d877ee1e3/17922156-b32e-3f9a-8bc5-25eb9f4add68.roa
Signing time:             Fri 20 Feb 2026 14:00:41 +0000
ROA not before:           Fri 20 Feb 2026 14:00:41 +0000
ROA not after:            Thu 21 May 2026 13:00:41 +0000
asID:                     400085
IP address blocks:        2620:9e:a000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/959a22b2-95d2-48c0-8feb-819d877ee1e3/959a22b2-95d2-48c0-8feb-819d877ee1e3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/959a22b2-95d2-48c0-8feb-819d877ee1e3/959a22b2-95d2-48c0-8feb-819d877ee1e3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/959a22b2-95d2-48c0-8feb-819d877ee1e3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Feb 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ed:27:88:cd:b6:10:ca:fc:74:27:be:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=959a22b2-95d2-48c0-8feb-819d877ee1e3
        Validity
            Not Before: Feb 20 14:00:41 2026 GMT
            Not After : May 21 13:00:41 2026 GMT
        Subject: CN=0ef2162c-142c-4d24-b92a-0c1e4a7dea76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:9a:c4:40:1f:6f:da:37:66:45:05:e0:6e:64:
                    4b:6b:89:81:aa:9b:2b:46:28:3a:fb:f4:83:20:e2:
                    ef:27:36:5b:86:e9:95:f1:21:c3:d6:12:3b:b6:a6:
                    27:58:49:54:c8:e5:e7:c6:1f:0a:1a:9b:63:74:11:
                    15:21:ca:e6:a0:25:ec:da:82:f3:d6:68:f3:ec:c2:
                    64:c8:5f:7a:15:e3:89:79:da:96:cb:af:a6:6a:7f:
                    c4:71:54:41:c7:15:b6:b3:9a:0c:0e:10:eb:0e:fb:
                    1a:14:69:e9:04:5a:57:6d:36:98:2a:d0:65:cc:35:
                    aa:38:1a:6f:5d:b1:fd:a8:97:f9:30:7e:bc:fa:9e:
                    a9:a6:51:c9:2a:55:eb:28:3b:16:0d:19:f6:fb:2c:
                    e9:41:a8:0b:34:52:8c:b3:99:95:d4:6a:81:c4:cc:
                    ef:cd:d3:13:05:8c:d8:c6:7a:bf:4e:29:15:8d:a3:
                    7d:1e:40:77:57:11:4d:f4:5f:c6:55:f8:61:73:ad:
                    ae:ab:08:a1:bc:6b:ca:81:5e:47:32:ea:70:82:6d:
                    f1:49:40:83:15:6a:c5:74:e4:4c:e3:4c:2e:f6:08:
                    27:95:46:37:f3:fe:ee:46:a8:e6:20:ae:72:af:29:
                    20:14:93:7a:04:f7:56:b0:5f:98:be:6f:15:0a:94:
                    d8:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:3B:92:AD:7C:4E:57:1D:82:0B:61:B9:18:E5:48:A9:13:2B:55:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/959a22b2-95d2-48c0-8feb-819d877ee1e3/17922156-b32e-3f9a-8bc5-25eb9f4add68.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/959a22b2-95d2-48c0-8feb-819d877ee1e3/959a22b2-95d2-48c0-8feb-819d877ee1e3.crl

            X509v3 Authority Key Identifier:
                keyid:63:9E:16:CE:FE:54:7B:5B:F3:03:85:B9:B9:C5:F6:6A:34:06:3A:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/959a22b2-95d2-48c0-8feb-819d877ee1e3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:9e:a000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:b5:21:d3:f0:3f:c9:53:2f:a4:1c:7b:a3:d1:a1:80:d1:f8:
         a3:75:61:4d:bc:f6:6e:b2:99:6d:55:6b:ef:74:0d:a6:57:41:
         b1:be:20:5f:23:05:d0:f8:7e:51:b7:65:1d:be:19:bf:50:4c:
         e8:1e:f1:fc:4b:07:90:c9:c6:e4:29:7a:12:58:99:2f:f3:8d:
         54:4a:8c:57:d9:77:e0:89:69:ff:0c:b5:41:4f:6e:de:59:2c:
         3e:9d:29:5c:28:08:c4:ff:17:64:f4:6d:09:6a:a8:99:29:de:
         29:14:ee:c4:15:a3:ff:4c:09:d7:3e:76:5a:e4:f7:4e:0d:c6:
         f1:fc:08:a1:f3:c4:d3:7b:9a:0a:31:14:b2:5d:1b:38:8a:13:
         71:fa:2b:7c:03:a4:0e:10:c6:40:71:02:80:5a:c4:85:7d:db:
         7a:7a:17:6a:4e:03:fe:b7:99:ec:5c:a0:80:9c:a5:4b:10:92:
         f0:dd:f6:be:9f:c4:44:82:31:44:37:d0:fc:49:5b:11:bf:18:
         7f:67:0e:4b:7b:5d:f7:42:de:59:93:2f:b3:8a:bf:c2:58:1a:
         01:90:42:5f:68:c4:05:e9:36:88:16:0c:fb:88:60:02:e8:61:
         9e:cb:f8:2a:a9:1f:64:70:11:3f:71:88:8e:0e:7a:b5:cc:91:
         cb:b2:30:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 27 10:38:55 2026 by rpki-client