Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a7863c09-ccd2-4add-8ef3-7337f98763d7/f8acd7aa-b951-38c2-b4da-01d6dc220b2d.roa
File:                     f8acd7aa-b951-38c2-b4da-01d6dc220b2d.roa (raw, json)
Hash identifier:          NAug9XJLZw+keRJ5/95DaAiYp1kGAqWwH4Li7Ef7Z3k=
Subject key identifier:   C4:0C:84:14:70:8F:2E:07:8D:3D:BA:B9:08:EA:C9:AA:92:79:C2:A7
Certificate issuer:       /CN=a7863c09-ccd2-4add-8ef3-7337f98763d7
Certificate serial:       010D0C9F4328584D38D501EDB92123F2E785E680
Authority key identifier: BF:45:11:17:58:15:BC:BB:72:2E:70:79:FB:BF:5E:74:A3:27:B7:40
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a7863c09-ccd2-4add-8ef3-7337f98763d7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a7863c09-ccd2-4add-8ef3-7337f98763d7/f8acd7aa-b951-38c2-b4da-01d6dc220b2d.roa
Signing time:             Mon 16 Feb 2026 14:00:40 +0000
ROA not before:           Mon 16 Feb 2026 14:00:40 +0000
ROA not after:            Sun 17 May 2026 13:00:40 +0000
asID:                     40893
IP address blocks:        2620:ae:a000::/44 maxlen: 44
                          2620:ae:a000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a7863c09-ccd2-4add-8ef3-7337f98763d7/a7863c09-ccd2-4add-8ef3-7337f98763d7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a7863c09-ccd2-4add-8ef3-7337f98763d7/a7863c09-ccd2-4add-8ef3-7337f98763d7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a7863c09-ccd2-4add-8ef3-7337f98763d7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:38:d5:01:ed:b9:21:23:f2:e7:85:e6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a7863c09-ccd2-4add-8ef3-7337f98763d7
        Validity
            Not Before: Feb 16 14:00:40 2026 GMT
            Not After : May 17 13:00:40 2026 GMT
        Subject: CN=b6a978a3-02ab-44c8-9463-48cd1a210b5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:62:ba:0b:1d:91:45:ee:31:c0:85:04:a6:08:
                    30:6e:d8:3d:76:2f:4a:9f:fc:23:fe:14:b6:f4:34:
                    3a:a4:22:3b:c3:32:d1:41:1c:69:37:10:95:db:4e:
                    81:66:0e:39:cf:00:f4:73:c2:80:94:1a:8f:4a:71:
                    64:82:1e:49:54:88:3a:9a:4f:ef:37:33:03:5d:98:
                    06:e7:35:8d:8c:fd:84:a2:d3:34:cf:9f:2b:6f:4d:
                    2f:56:40:1c:f6:45:4b:bd:e9:c3:60:5e:43:90:f9:
                    60:71:e4:fc:e4:4a:69:a9:55:ff:22:bf:b1:5d:a4:
                    4f:0c:e7:f2:8b:77:77:e7:fc:cb:ef:8e:1e:99:f1:
                    f3:0c:6a:80:df:05:49:88:d8:85:a7:3d:41:4b:e8:
                    e9:e2:af:2f:bc:b0:a1:d8:aa:62:c2:0f:a0:a6:7b:
                    ac:f6:92:5a:59:d2:cc:80:d5:64:e1:f2:c7:42:8d:
                    a3:c6:8f:de:a3:c9:30:16:88:85:fd:58:48:20:cd:
                    99:b7:d1:6f:ab:03:9b:01:07:30:0b:9e:23:57:18:
                    a7:5c:2f:ca:8c:ca:79:9d:19:39:a2:54:fc:b5:cb:
                    d9:9b:1e:93:75:98:77:5a:c8:2a:d3:05:bb:4d:a3:
                    20:1b:a2:42:e2:f5:e6:fc:f5:9f:8c:23:92:ce:b9:
                    f5:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:0C:84:14:70:8F:2E:07:8D:3D:BA:B9:08:EA:C9:AA:92:79:C2:A7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a7863c09-ccd2-4add-8ef3-7337f98763d7/f8acd7aa-b951-38c2-b4da-01d6dc220b2d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a7863c09-ccd2-4add-8ef3-7337f98763d7/a7863c09-ccd2-4add-8ef3-7337f98763d7.crl

            X509v3 Authority Key Identifier:
                keyid:BF:45:11:17:58:15:BC:BB:72:2E:70:79:FB:BF:5E:74:A3:27:B7:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a7863c09-ccd2-4add-8ef3-7337f98763d7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:ae:a000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:7f:31:5a:0e:a8:30:28:4c:98:7d:09:ac:9e:56:c2:c9:5e:
         46:51:37:37:6a:60:ac:b5:ff:4c:d9:ac:26:5f:bc:37:58:f4:
         82:fa:6f:20:d7:1a:55:18:6b:81:0f:f3:1f:73:13:fe:51:e8:
         ea:ff:54:9c:75:c2:a8:4d:e0:18:b6:c2:84:13:f2:b1:5d:05:
         f3:cd:34:bc:42:78:23:ea:b4:b6:00:17:83:60:ae:dc:ee:a1:
         04:6b:40:d2:6a:36:d1:ad:62:99:17:09:38:42:6a:4c:9c:48:
         d2:52:5b:af:f6:ed:67:df:6c:63:f0:7c:42:ba:c1:bc:37:29:
         17:05:ef:6f:16:88:b9:2a:bb:f5:3c:70:31:41:4b:bb:d9:b0:
         3e:72:80:ba:2e:6b:1b:a3:3c:5a:70:23:94:ab:a1:5e:ee:c9:
         d1:33:af:73:06:a3:9e:70:c1:47:74:0c:b4:7b:34:93:20:d5:
         84:0f:78:92:89:5d:00:60:47:b8:f1:c3:05:f1:f4:d7:fc:51:
         29:eb:68:2a:b0:be:0b:01:c5:cb:27:07:12:d3:24:6f:8d:bc:
         56:01:57:71:62:63:ca:3c:36:77:0a:30:b5:53:0c:81:78:ab:
         bf:49:ff:58:6e:9e:8e:21:77:62:37:e4:bd:85:ed:dc:19:b1:
         eb:4b:91:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:11:24 2026 by rpki-client