Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d26c3804-e085-3629-922f-ac44a211053f.roa
File:                     d26c3804-e085-3629-922f-ac44a211053f.roa (raw, json)
Hash identifier:          M7kk01bX9GdAsgsGWcbLcrgPnMHNf8HjjUJ9E1amEH8=
Subject key identifier:   17:D7:95:A9:B4:D5:C5:C8:1A:BC:27:0E:51:38:CA:80:DD:0C:79:EB
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584D09127120DE6A2397F1157E00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d26c3804-e085-3629-922f-ac44a211053f.roa
Signing time:             Mon 02 Mar 2026 14:00:41 +0000
ROA not before:           Mon 02 Mar 2026 14:00:41 +0000
ROA not after:            Sun 31 May 2026 13:00:41 +0000
asID:                     20940
IP address blocks:        2600:1488:5fc4::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 08 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:09:12:71:20:de:6a:23:97:f1:15:7e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Mar  2 14:00:41 2026 GMT
            Not After : May 31 13:00:41 2026 GMT
        Subject: CN=a49e8c43-b077-4c5b-b872-0ac0a49bb7a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:0f:5d:79:41:f9:e7:34:bb:c9:f9:73:ae:05:
                    a8:3b:76:4c:19:3d:c0:b0:a3:f7:00:68:10:42:0a:
                    0c:28:63:2b:3c:07:c3:8f:7a:ee:5a:34:f9:63:85:
                    48:d0:78:3e:e5:f8:9f:93:c9:e1:28:1a:10:bd:bf:
                    b9:4e:01:56:42:7d:74:a8:e8:17:06:04:5d:dc:da:
                    6c:31:ea:8d:12:a2:c1:3a:6a:d0:1f:20:4b:86:5c:
                    30:7f:cd:22:59:ff:4d:b7:b1:8b:4b:11:14:d7:99:
                    4b:d2:eb:0f:7a:55:69:74:04:59:64:47:32:6e:30:
                    79:72:e0:4c:ad:6b:e6:7e:a9:96:1c:c1:e9:23:ba:
                    44:36:e7:5f:79:b3:88:cf:00:6d:aa:62:a2:cb:13:
                    09:74:57:f6:4e:ab:31:bf:44:96:d9:3e:e3:f5:48:
                    60:c6:a5:f5:3c:fd:5b:3c:a9:70:9b:06:cb:65:05:
                    9c:62:a2:4d:4b:75:71:ba:a1:05:77:8d:16:31:90:
                    0c:2e:c2:0a:2e:d3:6c:b9:63:11:fe:a4:f7:8f:04:
                    8a:2c:4a:16:25:08:91:94:9b:65:54:e5:43:cb:73:
                    98:88:b2:18:60:7e:2a:0a:1f:4b:e3:09:3a:f2:b2:
                    d9:f5:97:04:37:74:31:14:c1:ee:d9:0c:9c:4c:26:
                    2d:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:D7:95:A9:B4:D5:C5:C8:1A:BC:27:0E:51:38:CA:80:DD:0C:79:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d26c3804-e085-3629-922f-ac44a211053f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1488:5fc4::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:db:15:dc:4b:30:55:d4:a6:8d:5a:68:e5:e3:61:93:09:2d:
         38:ea:77:e8:c1:7a:5e:c2:77:07:78:7f:c1:1c:2d:74:97:83:
         d6:0c:c8:e6:f4:1d:9d:d2:dc:c2:f7:7b:91:80:a8:b2:32:82:
         34:7d:78:de:e1:db:6e:34:76:9e:8a:58:85:c4:4d:10:8b:1d:
         aa:c3:84:a5:21:f7:22:ad:a5:7b:71:cf:1b:72:92:25:f7:93:
         dd:f1:33:ed:87:2a:c6:71:7b:ca:7c:72:f4:e4:3b:8a:26:9f:
         bc:fe:48:b0:bf:f3:24:e8:53:95:92:c9:a8:4b:bb:75:b5:fc:
         62:b7:d4:f9:39:13:56:d9:a0:13:6b:8c:17:07:d5:2b:f2:8e:
         47:60:40:f4:d0:cc:c8:6a:d2:67:f6:9d:24:94:5f:3b:85:31:
         63:77:89:2c:d0:6d:08:9f:3c:1f:5a:a8:bf:5c:13:64:35:d5:
         55:63:6e:97:d8:59:f5:8d:e4:a2:73:66:53:69:ce:14:0b:2b:
         38:af:01:e4:db:42:77:a0:2d:86:74:e4:52:e8:ac:18:27:e1:
         23:25:2d:56:a3:7c:6e:cb:1a:0e:1b:6e:a5:fa:30:a0:95:52:
         55:08:80:c4:8b:74:21:83:4d:1c:39:fb:e7:27:02:96:55:a5:
         df:4a:92:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 08:42:08 2026 by rpki-client