Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/959a22b2-95d2-48c0-8feb-819d877ee1e3/76998c08-9ed9-3d5a-a403-0ea9a43b56d4.roa
File:                     76998c08-9ed9-3d5a-a403-0ea9a43b56d4.roa (raw, json)
Hash identifier:          42Z4rVNWfD+TuYgJYSgSnPnW7vWk7dx+SOlVjiBVOD8=
Subject key identifier:   91:14:59:5B:55:5E:32:04:FF:6C:5D:CA:30:36:65:3F:65:14:41:0A
Certificate issuer:       /CN=959a22b2-95d2-48c0-8feb-819d877ee1e3
Certificate serial:       010D0C9F4328584CED27BE5D09FC8ABD5AC6917C
Authority key identifier: 63:9E:16:CE:FE:54:7B:5B:F3:03:85:B9:B9:C5:F6:6A:34:06:3A:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/959a22b2-95d2-48c0-8feb-819d877ee1e3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/959a22b2-95d2-48c0-8feb-819d877ee1e3/76998c08-9ed9-3d5a-a403-0ea9a43b56d4.roa
Signing time:             Fri 20 Feb 2026 14:00:41 +0000
ROA not before:           Fri 20 Feb 2026 14:00:41 +0000
ROA not after:            Thu 21 May 2026 13:00:41 +0000
asID:                     19523
IP address blocks:        2620:9e:a000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/959a22b2-95d2-48c0-8feb-819d877ee1e3/959a22b2-95d2-48c0-8feb-819d877ee1e3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/959a22b2-95d2-48c0-8feb-819d877ee1e3/959a22b2-95d2-48c0-8feb-819d877ee1e3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/959a22b2-95d2-48c0-8feb-819d877ee1e3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Feb 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ed:27:be:5d:09:fc:8a:bd:5a:c6:91:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=959a22b2-95d2-48c0-8feb-819d877ee1e3
        Validity
            Not Before: Feb 20 14:00:41 2026 GMT
            Not After : May 21 13:00:41 2026 GMT
        Subject: CN=c96c3b13-6c63-4b9c-a54c-708ebd733e95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:d2:93:1b:48:e7:d9:09:a5:77:57:32:d9:89:
                    3f:55:b3:72:5b:32:18:22:ee:47:a1:c0:c1:e8:dc:
                    88:58:7e:c8:95:87:9a:54:51:5c:0b:b6:c5:55:e2:
                    96:d8:1d:0f:a9:3d:de:ca:2d:ec:91:e3:41:65:40:
                    93:02:7b:40:98:aa:f5:c6:94:9a:d4:b7:8d:98:41:
                    91:c1:38:36:32:9a:30:8a:ec:00:de:4a:90:b3:f7:
                    fa:cf:da:ab:ef:1f:a7:a2:8c:0f:46:b8:67:ca:c6:
                    05:b8:0d:55:34:2d:c2:77:42:07:06:88:63:a5:d9:
                    17:9b:ad:00:7f:be:21:48:88:12:c5:36:28:67:4b:
                    37:75:8d:55:96:68:97:f1:b4:36:df:ea:34:c4:bc:
                    86:37:a8:35:ef:cd:b6:b2:e2:d9:f3:12:87:98:22:
                    f1:eb:87:4c:94:dc:cc:55:55:10:a9:e4:96:aa:f7:
                    44:d2:09:40:36:49:64:7e:53:5d:e6:7f:b5:fd:8f:
                    3f:01:e7:89:3c:91:30:4f:b7:0d:26:f8:98:6f:8f:
                    4a:de:96:a8:b1:e5:4c:22:2b:35:2c:56:25:61:6a:
                    50:de:e2:90:13:04:2f:56:d5:41:4b:eb:6d:e6:c9:
                    e2:09:0c:d4:b8:f2:78:01:4f:e1:b2:fc:9d:c4:76:
                    bf:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:14:59:5B:55:5E:32:04:FF:6C:5D:CA:30:36:65:3F:65:14:41:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/959a22b2-95d2-48c0-8feb-819d877ee1e3/76998c08-9ed9-3d5a-a403-0ea9a43b56d4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/959a22b2-95d2-48c0-8feb-819d877ee1e3/959a22b2-95d2-48c0-8feb-819d877ee1e3.crl

            X509v3 Authority Key Identifier:
                keyid:63:9E:16:CE:FE:54:7B:5B:F3:03:85:B9:B9:C5:F6:6A:34:06:3A:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/959a22b2-95d2-48c0-8feb-819d877ee1e3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:9e:a000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:37:e3:0c:2c:3f:68:b6:a0:0a:69:ee:dd:c2:84:24:3e:1a:
         c7:f6:d3:5a:4f:16:81:b4:25:3f:3b:72:f5:7d:2d:35:4b:46:
         3f:d3:c7:bb:e5:a8:6f:f5:bd:a6:37:28:c4:1b:2f:21:6d:72:
         0d:5f:f0:28:9c:85:40:cd:63:72:4a:00:c0:59:5a:08:2f:bc:
         28:e0:7c:d3:76:6c:af:89:c8:c0:30:b6:16:73:72:bd:e9:77:
         16:a2:27:3a:75:8e:96:81:3f:ed:ce:ef:a1:f6:28:2f:ab:eb:
         d7:86:9a:94:88:5d:43:05:10:f0:0a:ee:ef:d7:82:be:13:e2:
         9a:13:ae:64:2d:8d:5d:30:cd:d2:ab:57:ca:d2:96:25:34:7d:
         30:ef:f4:c5:be:cc:13:98:a6:c9:cf:2e:ad:01:16:34:04:b8:
         48:73:a6:75:56:8b:3a:3e:ba:f3:a0:68:60:64:62:d0:aa:fb:
         62:60:d1:d8:c6:13:01:64:c6:ee:f3:48:8c:3e:8d:35:af:ff:
         bc:d5:41:b2:58:6d:6b:2a:ef:fd:35:be:e5:9b:ef:e7:51:8b:
         88:26:e5:d1:a5:7e:0f:88:93:3d:68:5d:30:80:be:69:ef:50:
         c3:0e:b9:34:28:63:ec:74:24:1a:fa:08:f1:12:7b:ba:8d:be:
         81:a0:12:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 27 10:39:19 2026 by rpki-client