Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8962fffc-1831-44b7-9aec-c89910749170/2989ed6a-2248-33ad-9445-b1a3e6d227dc.roa
File:                     2989ed6a-2248-33ad-9445-b1a3e6d227dc.roa (raw, json)
Hash identifier:          XthqVh8HiPr+fsENkOZU5hnkfst2ZQg+Upy+WiV2hNY=
Subject key identifier:   31:DF:B2:53:5B:00:2A:E3:E2:E1:21:E1:D5:40:B9:77:5F:E4:D4:64
Certificate issuer:       /CN=8962fffc-1831-44b7-9aec-c89910749170
Certificate serial:       010D0C9F4328584D1DE495305E50FF95857E6240
Authority key identifier: A2:1F:C5:6A:98:96:6E:A6:66:71:B3:15:D1:8D:9E:5A:9E:6B:92:C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8962fffc-1831-44b7-9aec-c89910749170.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8962fffc-1831-44b7-9aec-c89910749170/2989ed6a-2248-33ad-9445-b1a3e6d227dc.roa
Signing time:             Tue 10 Mar 2026 01:00:31 +0000
ROA not before:           Tue 10 Mar 2026 01:00:31 +0000
ROA not after:            Mon 08 Jun 2026 01:00:31 +0000
asID:                     13335
IP address blocks:        2602:81c:e000::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8962fffc-1831-44b7-9aec-c89910749170/8962fffc-1831-44b7-9aec-c89910749170.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8962fffc-1831-44b7-9aec-c89910749170/8962fffc-1831-44b7-9aec-c89910749170.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8962fffc-1831-44b7-9aec-c89910749170.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:1d:e4:95:30:5e:50:ff:95:85:7e:62:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8962fffc-1831-44b7-9aec-c89910749170
        Validity
            Not Before: Mar 10 01:00:31 2026 GMT
            Not After : Jun  8 01:00:31 2026 GMT
        Subject: CN=ef4be427-35f9-40a9-a98b-c6f985ec5332
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:98:c7:84:e6:54:aa:af:43:e5:0f:5e:12:57:
                    0d:4a:4a:ff:2c:cc:82:87:93:ef:85:76:7d:20:86:
                    f5:b2:ed:4c:a6:8c:94:c5:d4:b7:f0:1d:b8:16:3b:
                    96:55:af:0c:b5:64:5b:79:c3:00:50:fc:38:b1:a2:
                    04:49:51:95:3a:37:4b:f0:47:b1:2a:3a:55:50:f2:
                    a4:f5:36:68:83:e4:e6:e4:ec:27:68:91:0c:c0:46:
                    fa:b3:d5:1c:e4:e7:00:69:d6:5f:68:e2:3d:14:dd:
                    66:4f:f0:1f:ad:d9:59:5d:dd:26:a9:24:b9:b7:de:
                    b0:27:c0:7a:08:bb:26:03:98:5b:18:ba:b5:32:f0:
                    77:1d:f5:3a:95:6d:43:46:9d:d9:92:65:f6:d0:c4:
                    74:02:33:40:39:35:f0:ba:47:a1:77:2a:2e:c7:d0:
                    b9:59:b1:c9:ef:7a:01:a6:e7:1f:a2:6f:fa:b2:6c:
                    d7:0d:a4:60:b1:5a:94:4e:b7:fd:d6:91:37:2b:58:
                    26:ca:e2:0c:70:05:f9:37:a5:e3:54:4d:b7:23:b8:
                    24:a4:ea:40:e1:1d:4d:09:70:ac:00:c7:0a:28:70:
                    15:30:23:8c:e0:64:a2:0b:2b:11:e3:77:db:90:bb:
                    24:d5:de:5b:46:50:49:bf:38:7c:9e:14:48:c4:74:
                    30:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:DF:B2:53:5B:00:2A:E3:E2:E1:21:E1:D5:40:B9:77:5F:E4:D4:64
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8962fffc-1831-44b7-9aec-c89910749170/2989ed6a-2248-33ad-9445-b1a3e6d227dc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8962fffc-1831-44b7-9aec-c89910749170/8962fffc-1831-44b7-9aec-c89910749170.crl

            X509v3 Authority Key Identifier:
                keyid:A2:1F:C5:6A:98:96:6E:A6:66:71:B3:15:D1:8D:9E:5A:9E:6B:92:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8962fffc-1831-44b7-9aec-c89910749170.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:81c:e000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:db:e3:2a:be:ee:4a:d7:a5:da:51:f6:0a:4b:72:87:c4:ff:
         90:50:09:04:2b:25:19:b5:93:98:bb:b3:3c:07:74:7a:0a:a8:
         20:1c:39:9d:c0:3e:7b:6a:24:f2:e7:d6:01:15:09:39:af:53:
         ff:56:a2:37:bc:60:71:25:5a:0c:0a:09:0c:4e:e7:6f:45:38:
         2b:13:5c:09:63:2f:34:05:25:1e:ba:f0:fd:0f:77:fd:2f:83:
         84:e7:af:de:59:09:0d:fc:6a:d8:9f:c1:b0:5c:7c:9b:53:30:
         df:ef:99:9f:23:d9:fb:52:14:c3:a3:37:63:31:a2:7f:5b:72:
         76:a7:90:ba:80:14:09:1a:4f:c8:0e:dc:c5:c1:68:05:da:8a:
         54:ea:85:04:ba:4a:7d:1a:18:bd:a9:05:b5:c3:b3:f2:58:13:
         22:2e:f4:e1:20:32:30:c5:cc:94:ae:b2:15:98:aa:d1:4c:0c:
         58:83:ff:5b:27:b3:98:26:aa:bf:f9:e2:97:56:19:d7:55:cf:
         1c:e3:61:43:1f:8b:18:5c:72:70:d7:04:5b:52:72:c7:0c:d9:
         f6:c0:cb:c8:71:a7:fc:30:6b:04:17:8f:1a:61:4f:31:2e:f4:
         dc:32:4c:61:2f:fb:5e:e2:d2:44:41:35:b7:c2:d1:14:38:91:
         d6:ab:33:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 03:36:49 2026 by rpki-client