Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/e11f50fe-e6b7-3b3a-8cd2-96f8c4a124cc.roa
File:                     e11f50fe-e6b7-3b3a-8cd2-96f8c4a124cc.roa (raw, json)
Hash identifier:          3OVb+YRFTHvAXgETIf6WliUXvA9UtG2Cw4lC/shke1E=
Subject key identifier:   2D:0E:03:7A:55:0F:31:96:ED:B1:5E:3A:4A:8D:4A:7A:7F:66:08:E9
Certificate issuer:       /CN=788d2b41-bb64-40d8-b274-ba4704d79ddf
Certificate serial:       010D0C9F4328584CC6120DDF6161428AEAD39DC0
Authority key identifier: AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/e11f50fe-e6b7-3b3a-8cd2-96f8c4a124cc.roa
Signing time:             Fri 06 Feb 2026 14:00:40 +0000
ROA not before:           Fri 06 Feb 2026 14:00:40 +0000
ROA not after:            Thu 07 May 2026 13:00:40 +0000
asID:                     13445
IP address blocks:        2607:fcf0:2100::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Feb 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:c6:12:0d:df:61:61:42:8a:ea:d3:9d:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=788d2b41-bb64-40d8-b274-ba4704d79ddf
        Validity
            Not Before: Feb  6 14:00:40 2026 GMT
            Not After : May  7 13:00:40 2026 GMT
        Subject: CN=b3593579-6b58-4d27-b5df-d4daf2399a69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:43:b9:f3:d2:58:5a:19:92:5c:32:92:4f:d9:
                    8b:c9:8f:05:ef:c1:45:29:ae:77:ee:0b:01:fb:75:
                    5a:80:c4:0c:31:72:54:63:78:f5:99:88:93:09:89:
                    2c:92:e5:ba:fd:0e:ce:90:18:c2:4d:86:7f:95:72:
                    66:65:67:86:7b:5d:a8:34:15:b8:53:62:f1:41:ed:
                    43:32:1d:55:c6:36:84:35:bb:64:f3:a0:47:eb:45:
                    42:3e:3d:8f:2f:44:b6:16:04:f4:a0:7d:8a:16:da:
                    89:90:5a:55:82:23:1e:6b:6d:28:99:1f:30:72:65:
                    b1:0f:ff:2e:8f:48:b1:c8:52:e5:31:d7:f5:56:50:
                    e8:c6:4a:48:06:5a:8a:8c:b7:5d:65:53:0e:ea:f9:
                    27:bf:a1:10:97:57:c6:a5:cb:95:f8:65:8c:f4:2d:
                    39:71:36:ee:3c:fc:23:bf:32:f0:58:38:f1:81:97:
                    25:af:4f:e5:3b:a9:69:a4:49:59:d6:04:ed:03:57:
                    e1:e1:6f:73:82:59:5c:12:1e:e7:97:40:79:13:38:
                    37:d7:7d:25:e7:c6:e3:4f:74:a0:65:17:b5:d7:6e:
                    7c:72:53:e0:f4:e3:66:96:8b:55:6c:a6:5c:03:5c:
                    a7:be:5b:64:d9:9c:68:29:75:49:ed:79:02:ff:59:
                    2d:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:0E:03:7A:55:0F:31:96:ED:B1:5E:3A:4A:8D:4A:7A:7F:66:08:E9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/e11f50fe-e6b7-3b3a-8cd2-96f8c4a124cc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl

            X509v3 Authority Key Identifier:
                keyid:AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:fcf0:2100::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:db:fa:c8:57:2a:5d:f3:c1:16:12:13:fb:54:5d:de:37:50:
         5a:79:18:cd:23:b4:ea:39:bf:f3:79:5a:6a:2d:20:0f:dc:ad:
         37:fd:fe:0a:7a:e7:12:cc:ca:23:c0:87:52:0b:bd:97:c4:e8:
         95:b0:9f:c8:21:99:93:e7:aa:4b:73:99:18:87:2d:f6:3c:74:
         32:65:67:9a:e7:a5:90:5c:41:6a:1b:a1:01:94:8b:f6:ea:27:
         e5:92:1e:53:13:60:f1:4b:1c:dd:ea:8a:ba:ee:2f:34:20:f2:
         4c:56:07:4f:08:61:56:af:f7:8f:a4:da:9c:bb:2b:48:7b:44:
         b2:56:86:a1:3f:6a:82:88:04:1f:38:d0:d6:f1:c0:bc:a3:68:
         a3:4c:55:1e:2f:9d:ab:e3:f8:ce:a8:c7:ca:25:b8:ed:01:03:
         29:9a:2d:eb:37:91:1f:5d:a2:30:50:d0:64:1c:41:e7:19:75:
         5e:94:a7:72:bd:7a:21:01:79:d7:51:f3:09:a3:fb:af:dd:2d:
         ba:7e:f8:32:95:d9:10:5d:1a:f7:b3:bc:3a:2e:7c:c8:82:0a:
         95:74:6c:ae:7f:95:54:20:67:d7:fd:23:47:60:b9:13:7f:a1:
         b1:63:8e:56:1c:bd:da:2d:86:d5:72:b7:06:10:2c:ad:f5:08:
         72:20:97:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 26 10:43:05 2026 by rpki-client