Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6bf0b484-94d2-490f-8a68-d7588d1f3683/dbc561d9-034b-30a7-9ba6-10729ea6ad3c.roa
File:                     dbc561d9-034b-30a7-9ba6-10729ea6ad3c.roa (raw, json)
Hash identifier:          WQ1nx1reH0fKqvgXmri6fpKMlMnvT1YzcwrOV+c/TsU=
Subject key identifier:   61:82:36:00:24:D7:EE:BC:80:6C:07:7D:EF:51:CD:E4:C7:E9:97:B6
Certificate issuer:       /CN=6bf0b484-94d2-490f-8a68-d7588d1f3683
Certificate serial:       010D0C9F4328584CD4E370424F14E75FEF020780
Authority key identifier: 2C:7F:1E:92:2A:96:B9:4C:13:5E:EB:5C:38:45:77:97:4A:C6:5E:5C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6bf0b484-94d2-490f-8a68-d7588d1f3683.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6bf0b484-94d2-490f-8a68-d7588d1f3683/dbc561d9-034b-30a7-9ba6-10729ea6ad3c.roa
Signing time:             Wed 11 Feb 2026 21:24:16 +0000
ROA not before:           Wed 11 Feb 2026 21:24:16 +0000
ROA not after:            Tue 12 May 2026 20:24:16 +0000
asID:                     402106
IP address blocks:        2620:6e:a0a0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6bf0b484-94d2-490f-8a68-d7588d1f3683/6bf0b484-94d2-490f-8a68-d7588d1f3683.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6bf0b484-94d2-490f-8a68-d7588d1f3683/6bf0b484-94d2-490f-8a68-d7588d1f3683.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6bf0b484-94d2-490f-8a68-d7588d1f3683.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Feb 2026 04:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:d4:e3:70:42:4f:14:e7:5f:ef:02:07:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6bf0b484-94d2-490f-8a68-d7588d1f3683
        Validity
            Not Before: Feb 11 21:24:16 2026 GMT
            Not After : May 12 20:24:16 2026 GMT
        Subject: CN=cc01b8fe-7ce5-4803-b0b9-7142eff29626
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:ce:7a:4d:36:d5:f1:7d:4b:8f:dd:92:19:52:
                    ae:95:86:e7:98:f1:b0:b7:35:af:a6:96:9a:33:77:
                    8d:9b:1f:bf:4e:30:cf:d2:18:66:02:7e:fb:3b:7a:
                    1a:b8:aa:c5:20:33:56:a0:01:dd:44:90:99:88:ef:
                    90:0a:ce:0c:cf:ef:28:4a:f9:43:79:9f:4f:2e:31:
                    b1:f1:89:d1:86:4e:42:d9:43:85:04:4f:70:ab:ea:
                    50:22:20:c9:80:04:91:e1:83:18:8b:16:33:dd:fa:
                    31:86:0c:7c:96:61:45:af:d3:78:3f:76:7a:a9:0a:
                    33:ed:77:e6:87:1e:0b:19:fb:76:5e:45:89:5c:87:
                    db:de:76:ca:37:dd:b1:db:cf:a4:16:db:42:e3:bd:
                    66:e6:d1:3b:4e:66:d9:6c:c3:b4:d2:09:00:aa:ba:
                    bc:66:17:a0:e1:9a:5d:1e:67:f5:18:59:86:89:e2:
                    35:6c:1b:46:9a:94:f2:80:ce:61:b8:37:e7:79:fd:
                    e8:7d:cf:69:b6:94:a9:1e:3e:fb:6c:40:c9:4f:1b:
                    66:52:7f:2a:f5:7d:f3:fd:c1:82:59:5c:8e:d4:d1:
                    0f:dc:ca:c2:6e:d6:d7:71:a7:2b:ff:8f:b6:e7:15:
                    3a:96:15:c3:60:02:a3:93:8f:6d:a5:d7:e8:f0:c8:
                    57:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:82:36:00:24:D7:EE:BC:80:6C:07:7D:EF:51:CD:E4:C7:E9:97:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6bf0b484-94d2-490f-8a68-d7588d1f3683/dbc561d9-034b-30a7-9ba6-10729ea6ad3c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6bf0b484-94d2-490f-8a68-d7588d1f3683/6bf0b484-94d2-490f-8a68-d7588d1f3683.crl

            X509v3 Authority Key Identifier:
                keyid:2C:7F:1E:92:2A:96:B9:4C:13:5E:EB:5C:38:45:77:97:4A:C6:5E:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6bf0b484-94d2-490f-8a68-d7588d1f3683.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:6e:a0a0::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c2:7e:96:5a:cd:fb:2a:69:24:e1:58:83:a5:8a:67:0e:99:de:
         9d:53:70:e3:69:1a:20:03:c1:0f:17:55:40:c4:30:de:70:05:
         4f:d0:84:b2:c5:20:cd:86:91:85:30:99:21:e0:1b:80:56:24:
         fd:74:a7:ae:68:2b:a2:eb:51:81:24:14:12:87:d4:59:3b:9a:
         b9:fa:2c:b2:3c:5e:b8:d5:a4:d1:09:51:f9:1a:75:46:2b:9d:
         55:40:dd:6c:6f:39:bd:af:15:d7:3a:22:aa:7d:98:42:df:13:
         d6:9a:ed:f9:82:95:c2:47:d6:eb:ba:53:55:8d:ba:32:da:86:
         0a:86:f8:28:7c:81:3d:0e:21:df:47:62:55:18:db:20:eb:6e:
         b0:19:5a:62:f9:92:e8:fa:0e:ce:a3:a6:4d:20:0b:e6:22:f5:
         1d:c9:88:14:bd:d0:73:2e:eb:29:b4:a8:41:5d:e6:9d:1b:8b:
         48:e7:b2:52:26:49:f3:38:8c:7c:a4:e8:60:dc:94:dd:2a:44:
         6f:3e:1d:b6:22:8d:d5:84:f2:9b:74:71:4d:6c:55:a4:4a:d7:
         90:4f:17:f3:ec:6e:f5:cb:6e:c0:f7:87:18:47:12:12:35:58:
         dc:56:fa:2d:25:33:3d:1b:11:88:1c:1c:22:ef:a0:cc:00:d1:
         2e:94:be:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 27 02:31:02 2026 by rpki-client