Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1fc4ff9c-434b-3aa2-a723-2d5afc39b4b7.roa
File:                     1fc4ff9c-434b-3aa2-a723-2d5afc39b4b7.roa (raw, json)
Hash identifier:          Hi+CBR5/6JjIxepxFTHaIP0oZbUNfMooV1fcMd1TyJ0=
Subject key identifier:   C5:B8:A4:75:98:C9:D1:5E:78:2A:60:CA:45:B2:E3:D1:18:C2:8E:A9
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584D0BDD10A95D859F7587EA6C40
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1fc4ff9c-434b-3aa2-a723-2d5afc39b4b7.roa
Signing time:             Tue 03 Mar 2026 14:00:40 +0000
ROA not before:           Tue 03 Mar 2026 14:00:40 +0000
ROA not after:            Mon 01 Jun 2026 13:00:40 +0000
asID:                     35994
IP address blocks:        2600:141b:c::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:0b:dd:10:a9:5d:85:9f:75:87:ea:6c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Mar  3 14:00:40 2026 GMT
            Not After : Jun  1 13:00:40 2026 GMT
        Subject: CN=6ee4e1dd-83ed-45d0-b039-0a1ef122776d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:a4:7b:df:25:6f:7c:7e:04:b1:2b:fc:a7:c0:
                    83:a1:3e:a9:5c:69:44:f4:cd:8f:97:0c:77:b2:d9:
                    0d:f2:1a:13:f3:87:b3:fa:9d:66:6d:38:21:ab:13:
                    85:f9:57:77:af:69:e4:91:85:e0:12:2e:9a:e4:99:
                    66:e5:b4:78:31:6c:f8:89:c8:3f:00:0d:b0:16:34:
                    ae:27:32:34:c8:e0:4d:2e:cf:46:e7:c3:80:df:a9:
                    3c:af:4c:97:cd:19:59:fe:48:d6:00:c7:fb:8f:c0:
                    0f:ab:91:6c:03:cf:a0:0a:1b:47:97:27:38:74:d6:
                    34:14:58:42:b8:62:d8:8a:6c:8e:ec:3c:19:ef:e0:
                    e3:85:89:8b:cd:29:58:7a:f5:08:17:d8:e9:51:50:
                    5e:1d:81:22:c1:27:a5:9f:16:9d:0e:5b:38:c7:d2:
                    3e:ae:bc:f2:d2:08:b5:dc:0b:b4:ae:89:cb:4a:70:
                    04:66:f7:d7:19:a9:7d:18:75:6f:d2:f7:91:04:71:
                    9a:54:fc:2b:5b:7f:30:61:69:ce:4d:2a:51:f6:bd:
                    eb:90:ca:28:2d:a8:c9:96:aa:a2:f3:31:da:34:7f:
                    65:ba:11:fd:49:10:f5:e4:92:ec:56:8f:47:79:94:
                    9d:9f:01:09:73:34:1d:7f:30:f9:31:2c:7b:1f:90:
                    8b:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:B8:A4:75:98:C9:D1:5E:78:2A:60:CA:45:B2:E3:D1:18:C2:8E:A9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1fc4ff9c-434b-3aa2-a723-2d5afc39b4b7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:141b:c::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:7c:47:b4:5c:1b:0d:a5:e1:92:5b:31:63:86:61:12:a3:3b:
         37:4c:81:96:8f:9a:5f:39:e5:92:35:41:ec:45:68:22:26:ae:
         e5:36:b7:30:e8:65:fe:bd:81:5c:fe:e9:a6:f1:5b:de:3d:6a:
         b9:e0:9b:ae:37:c4:c2:a8:a9:f9:ea:f3:b0:57:a5:79:2b:3c:
         89:64:73:81:0d:6b:9f:ce:73:60:7c:4f:6b:94:35:09:24:a0:
         a2:33:c5:fe:8a:97:06:5c:4d:0c:82:9a:10:19:c6:10:38:a5:
         95:5c:e6:33:3b:46:96:a7:3f:ee:de:7f:ee:20:0b:36:b9:18:
         09:cf:ac:3c:2f:52:d9:6b:05:f1:f0:85:85:5a:84:77:b3:ef:
         de:d8:33:86:56:f6:12:a5:34:6f:ce:3b:b5:4d:a4:ed:ed:0a:
         d2:8c:ad:21:77:af:8a:a0:e1:f3:74:f1:28:a8:c3:de:d3:6b:
         0b:99:85:d9:46:42:68:a5:64:ef:7b:98:41:8a:5e:93:b4:73:
         54:65:81:fb:04:77:dd:49:63:86:aa:b0:ca:bd:10:25:a4:ce:
         b0:53:b1:93:63:72:d6:cb:1b:4b:bc:0d:ea:cf:11:c8:d1:79:
         63:cd:94:85:f4:44:86:6e:79:26:dc:92:c7:3e:01:9b:0f:22:
         d3:3b:19:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 17:28:44 2026 by rpki-client