Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/563a7f22-13a9-45ac-b309-56ee9c8904ce/9202c2b1-28db-30f0-bc1c-a38e7548d21f.roa
File:                     9202c2b1-28db-30f0-bc1c-a38e7548d21f.roa (raw, json)
Hash identifier:          47tfNFlYAkPSCFSYutc7U9z8tLg3K99mvAPvboONbL0=
Subject key identifier:   43:BE:88:9F:CA:BC:AD:85:95:8A:F2:DE:CA:AF:EF:E5:BF:E7:14:07
Certificate issuer:       /CN=563a7f22-13a9-45ac-b309-56ee9c8904ce
Certificate serial:       010D0C9F4328584CD2213A292D789F8670BCE580
Authority key identifier: 3E:6F:CB:F4:3B:06:63:F1:05:5C:AE:1A:2C:B7:BF:05:69:8D:77:52
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/563a7f22-13a9-45ac-b309-56ee9c8904ce.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/563a7f22-13a9-45ac-b309-56ee9c8904ce/9202c2b1-28db-30f0-bc1c-a38e7548d21f.roa
Signing time:             Tue 10 Feb 2026 21:41:20 +0000
ROA not before:           Tue 10 Feb 2026 21:41:20 +0000
ROA not after:            Mon 11 May 2026 20:41:20 +0000
asID:                     402196
IP address blocks:        2602:f5c6:20::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/563a7f22-13a9-45ac-b309-56ee9c8904ce/563a7f22-13a9-45ac-b309-56ee9c8904ce.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/563a7f22-13a9-45ac-b309-56ee9c8904ce/563a7f22-13a9-45ac-b309-56ee9c8904ce.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/563a7f22-13a9-45ac-b309-56ee9c8904ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Feb 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:d2:21:3a:29:2d:78:9f:86:70:bc:e5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=563a7f22-13a9-45ac-b309-56ee9c8904ce
        Validity
            Not Before: Feb 10 21:41:20 2026 GMT
            Not After : May 11 20:41:20 2026 GMT
        Subject: CN=18145845-db84-46b0-a480-8f9588500a52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:4e:b3:47:62:46:40:da:fe:74:d6:6b:6c:91:
                    b8:68:72:30:d6:e2:69:fa:d5:98:39:47:91:99:b6:
                    3f:ea:c0:2c:00:ac:54:c4:f8:78:11:15:2b:0d:a4:
                    46:e3:de:9f:36:5f:10:fd:66:f1:73:2d:7b:e9:9f:
                    f3:5e:2f:f3:21:d8:c7:06:7d:d2:6e:4b:01:1b:ab:
                    97:54:94:0a:27:07:71:2f:48:cc:06:a8:88:84:cb:
                    e0:9b:dc:d2:d9:4d:e0:da:fd:70:e4:94:79:a6:0e:
                    e2:ac:db:e0:ce:e1:1d:96:10:d3:e9:d8:1c:5e:1c:
                    6b:b3:9a:d3:67:59:ec:a8:25:5e:1c:30:a0:97:28:
                    3d:49:03:cd:4b:73:a1:ba:85:b3:6b:97:93:94:12:
                    c1:25:9d:fc:a4:ce:a4:7c:74:fd:05:f1:a2:96:04:
                    33:47:da:a6:c7:bf:40:07:21:09:48:60:91:e8:5c:
                    ce:3c:87:68:5e:ea:4c:f5:8a:5f:3e:55:05:28:eb:
                    e7:c0:3f:c8:7c:82:26:23:30:5d:cc:15:87:81:d0:
                    64:bc:75:64:86:b6:1f:1a:24:59:41:90:99:86:d0:
                    71:0e:23:07:3b:fd:30:6e:01:7e:58:44:38:2d:2b:
                    2b:5f:b1:5a:9c:29:d8:28:10:fd:a8:89:7f:9c:6c:
                    ae:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:BE:88:9F:CA:BC:AD:85:95:8A:F2:DE:CA:AF:EF:E5:BF:E7:14:07
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/563a7f22-13a9-45ac-b309-56ee9c8904ce/9202c2b1-28db-30f0-bc1c-a38e7548d21f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/563a7f22-13a9-45ac-b309-56ee9c8904ce/563a7f22-13a9-45ac-b309-56ee9c8904ce.crl

            X509v3 Authority Key Identifier:
                keyid:3E:6F:CB:F4:3B:06:63:F1:05:5C:AE:1A:2C:B7:BF:05:69:8D:77:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/563a7f22-13a9-45ac-b309-56ee9c8904ce.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f5c6:20::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:6a:50:9b:57:cd:ec:08:49:c3:e3:b1:8c:11:59:73:39:8a:
         ce:34:91:b6:03:46:7c:a9:bd:06:b5:e9:d6:18:53:bb:5f:c5:
         26:f3:ca:85:49:ba:9a:89:2a:42:36:b3:a8:b3:3d:26:58:44:
         fd:46:9e:3e:67:ab:0a:c6:0c:2e:e7:35:e2:ed:10:55:f4:cc:
         fc:64:a4:c5:a8:f5:8a:17:d1:00:52:5a:c6:a2:bb:27:38:3c:
         9a:10:8d:f2:31:4a:04:a1:29:48:0d:da:ff:96:c6:3f:46:16:
         bf:29:18:d2:01:54:e7:f4:fd:15:f8:96:5b:9e:6e:b8:60:6b:
         93:0c:da:15:5f:e8:c5:d6:2a:ba:25:9e:06:99:0c:c9:61:32:
         74:75:6e:f5:73:b0:a5:78:ea:32:1d:39:3e:35:a6:dc:42:15:
         99:d7:4f:b0:d5:1c:46:fd:4f:85:25:61:93:39:e0:84:09:96:
         1b:c0:b3:e5:3c:a9:8f:3d:a7:a3:b3:ff:20:79:51:fe:14:85:
         50:a9:a1:95:4a:b8:37:52:f4:1a:32:34:9d:3d:a7:55:f5:25:
         40:0f:b3:cc:ff:75:a4:2f:4d:68:8f:ca:de:13:a0:ff:9a:82:
         83:38:e7:84:ac:4a:e6:02:20:d9:22:a9:53:10:99:b2:fb:f6:
         a3:f5:b6:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 26 20:20:05 2026 by rpki-client