Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d1d97ce9-5a4c-441e-992e-39480606bb0f/a26d3019-2c2c-34d3-8455-56f702e3a295.roa
File:                     a26d3019-2c2c-34d3-8455-56f702e3a295.roa (raw, json)
Hash identifier:          efhUOWzSDkpZX33pfz3eCioGNekNDoPRbK6fJMec5XA=
Subject key identifier:   5D:34:B8:39:12:47:D3:92:A3:86:6E:F8:A0:FB:EF:67:D9:69:46:30
Certificate issuer:       /CN=d1d97ce9-5a4c-441e-992e-39480606bb0f
Certificate serial:       010D0C9F4328584D253F68A4D99A7AD039325B00
Authority key identifier: ED:AF:56:74:C3:55:48:03:79:4E:A3:FA:02:76:02:B5:FE:37:19:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d1d97ce9-5a4c-441e-992e-39480606bb0f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d1d97ce9-5a4c-441e-992e-39480606bb0f/a26d3019-2c2c-34d3-8455-56f702e3a295.roa
Signing time:             Sat 07 Mar 2026 23:28:01 +0000
ROA not before:           Sat 07 Mar 2026 23:28:01 +0000
ROA not after:            Fri 05 Jun 2026 22:28:01 +0000
asID:                     13804
IP address blocks:        2600:d800::/32 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d1d97ce9-5a4c-441e-992e-39480606bb0f/d1d97ce9-5a4c-441e-992e-39480606bb0f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d1d97ce9-5a4c-441e-992e-39480606bb0f/d1d97ce9-5a4c-441e-992e-39480606bb0f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d1d97ce9-5a4c-441e-992e-39480606bb0f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 18 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:25:3f:68:a4:d9:9a:7a:d0:39:32:5b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d1d97ce9-5a4c-441e-992e-39480606bb0f
        Validity
            Not Before: Mar  7 23:28:01 2026 GMT
            Not After : Jun  5 22:28:01 2026 GMT
        Subject: CN=8275c69d-3b25-49ed-9644-48beaf4962ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:af:50:fc:66:f1:5c:e5:15:1a:55:9d:f5:bb:
                    5b:4b:c1:fa:47:9f:bf:56:f6:74:fa:8d:1d:d7:fd:
                    43:e1:d6:00:6b:94:87:27:f7:8e:46:8e:18:88:c7:
                    1a:b6:43:bb:58:0b:a4:ad:1c:88:62:85:e5:ec:b4:
                    de:d4:93:0c:da:b3:07:9c:c4:0b:c8:2a:a4:2e:80:
                    9e:f9:85:63:41:89:ab:77:6f:05:e6:60:84:c3:48:
                    64:45:1a:af:d2:e8:f8:a5:f8:6d:d3:c6:57:e8:81:
                    7e:97:e2:8e:ce:d2:c3:92:25:c8:4e:c5:71:00:b7:
                    50:22:19:4c:7f:e5:79:9f:f7:77:fa:45:57:9f:b7:
                    48:ef:95:c2:c6:5d:0c:93:0d:d5:0a:e3:d2:7d:46:
                    f2:f8:80:f7:ac:1a:d5:cc:01:1a:55:b2:a3:48:c1:
                    2a:29:f0:87:a4:fa:e6:59:99:c8:7b:4c:14:85:75:
                    7a:a7:3b:6e:27:02:96:d6:13:4f:a4:18:23:05:8d:
                    d6:ec:86:80:dd:01:59:4e:d5:c6:d4:a9:fd:a9:6c:
                    68:dc:40:ff:82:f9:67:8b:f5:99:2a:b1:26:64:92:
                    9d:85:d2:d7:08:89:3b:fd:27:f7:0d:c9:7e:f5:1e:
                    89:a8:2b:0a:3b:51:ed:1e:67:f6:de:b1:cd:22:76:
                    b1:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:34:B8:39:12:47:D3:92:A3:86:6E:F8:A0:FB:EF:67:D9:69:46:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d1d97ce9-5a4c-441e-992e-39480606bb0f/a26d3019-2c2c-34d3-8455-56f702e3a295.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d1d97ce9-5a4c-441e-992e-39480606bb0f/d1d97ce9-5a4c-441e-992e-39480606bb0f.crl

            X509v3 Authority Key Identifier:
                keyid:ED:AF:56:74:C3:55:48:03:79:4E:A3:FA:02:76:02:B5:FE:37:19:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d1d97ce9-5a4c-441e-992e-39480606bb0f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:d800::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:69:18:64:49:b0:40:ca:be:c6:2f:61:df:aa:5a:1c:b4:85:
         b6:b9:9b:90:85:a6:20:02:69:20:23:46:65:14:22:ad:ea:c4:
         c0:97:e2:5c:e1:f1:c8:08:f9:df:e5:1d:5b:64:d9:35:ec:59:
         b2:e1:92:2c:d0:00:2f:f6:f6:45:d8:47:32:49:5f:0f:30:5b:
         cd:0d:48:e9:6a:57:3a:de:40:a9:5c:1f:60:43:e5:c7:e1:ed:
         1b:a0:2c:7d:c0:41:7c:b3:a9:a9:96:cd:ca:19:11:37:a8:0f:
         54:45:07:10:95:69:e2:5a:9a:3e:47:6f:62:e1:b7:45:18:6a:
         70:d6:81:b2:62:db:61:e0:95:1a:16:a2:a4:dd:da:74:56:85:
         ef:ec:e4:57:7a:53:58:7f:73:fa:b9:73:9f:ab:12:3b:0f:75:
         b5:e9:30:38:48:30:77:97:ee:2b:43:44:5c:70:96:7a:8a:31:
         da:43:91:61:83:d6:51:4d:7a:2f:02:13:47:9c:2e:9d:14:a0:
         b1:39:0e:c5:42:11:e8:78:82:e3:a9:f1:75:c1:ef:e6:30:59:
         49:b5:06:85:2c:6d:bd:f0:d6:be:dd:17:6b:d2:1a:ea:c6:d0:
         69:b7:30:09:8c:38:11:5f:28:43:04:f3:88:6a:0b:7e:c4:5b:
         25:9c:bc:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 16 08:00:27 2026 by rpki-client