Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5fc522ea-3703-4aaa-9fa0-d8f99a720536/dafd9971-626b-322d-9b3c-613672dbce51.roa
File:                     dafd9971-626b-322d-9b3c-613672dbce51.roa (raw, json)
Hash identifier:          q6hYBh5Kx13AezyQvmvoUsCk+7IKTDYqG6gEXzp3tKI=
Subject key identifier:   79:CB:67:4A:E2:EB:22:EC:3F:85:D9:0C:D2:AB:D3:FE:EC:09:F7:69
Certificate issuer:       /CN=5fc522ea-3703-4aaa-9fa0-d8f99a720536
Certificate serial:       010D0C9F4328584CB981CF3CEB51A79B254D9580
Authority key identifier: AC:18:9F:D1:96:01:0B:F4:19:CD:D5:73:7C:6E:FD:C9:D1:A8:95:A0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5fc522ea-3703-4aaa-9fa0-d8f99a720536.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5fc522ea-3703-4aaa-9fa0-d8f99a720536/dafd9971-626b-322d-9b3c-613672dbce51.roa
Signing time:             Mon 02 Feb 2026 02:00:32 +0000
ROA not before:           Mon 02 Feb 2026 02:00:32 +0000
ROA not after:            Sun 03 May 2026 01:00:32 +0000
asID:                     26523
IP address blocks:        2604:2f80::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5fc522ea-3703-4aaa-9fa0-d8f99a720536/5fc522ea-3703-4aaa-9fa0-d8f99a720536.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5fc522ea-3703-4aaa-9fa0-d8f99a720536/5fc522ea-3703-4aaa-9fa0-d8f99a720536.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5fc522ea-3703-4aaa-9fa0-d8f99a720536.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:b9:81:cf:3c:eb:51:a7:9b:25:4d:95:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5fc522ea-3703-4aaa-9fa0-d8f99a720536
        Validity
            Not Before: Feb  2 02:00:32 2026 GMT
            Not After : May  3 01:00:32 2026 GMT
        Subject: CN=23338bd1-27ee-47a9-a81d-45f2b147f1a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fb:80:01:70:ca:6d:62:b8:8d:91:97:a4:9e:a0:
                    64:a5:d8:df:0d:b0:51:86:76:73:2a:be:74:6d:9b:
                    73:30:82:5b:ff:81:3d:74:63:e9:61:27:a8:98:46:
                    90:2d:9d:e4:fc:3e:e1:4b:04:c1:f1:cc:c9:cd:2d:
                    7b:b3:f4:c7:26:25:4f:68:f2:cf:13:27:8f:1c:a1:
                    db:dd:f1:d8:80:00:f7:71:68:b2:57:a5:33:79:45:
                    f3:fe:77:c2:33:7d:dc:ce:f8:3d:81:0a:a4:35:e3:
                    c5:cb:d9:ae:be:3e:e7:77:fd:0b:04:c7:db:71:c7:
                    d7:0c:d3:4c:86:6e:81:cb:ee:d4:11:20:80:40:62:
                    eb:20:00:a8:17:76:6a:fd:4c:4f:4c:8d:48:b8:90:
                    68:d2:e4:e7:be:5c:a0:fc:f5:dd:aa:89:6f:42:1a:
                    8f:f5:07:32:55:fb:3d:6e:f5:fa:98:d0:a1:d2:df:
                    1c:7d:d5:c1:74:71:60:89:8a:95:82:be:16:22:76:
                    f4:01:70:71:66:af:81:0a:c6:bc:dc:4e:d0:dd:69:
                    41:b2:e0:5f:db:68:6a:fe:3f:b6:ab:ff:7e:be:65:
                    d1:e0:8c:0c:25:3a:bf:f3:33:a7:94:aa:c7:11:87:
                    f6:5e:f6:6d:7f:d6:9a:3e:47:9b:80:0e:e2:59:56:
                    70:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:CB:67:4A:E2:EB:22:EC:3F:85:D9:0C:D2:AB:D3:FE:EC:09:F7:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5fc522ea-3703-4aaa-9fa0-d8f99a720536/dafd9971-626b-322d-9b3c-613672dbce51.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5fc522ea-3703-4aaa-9fa0-d8f99a720536/5fc522ea-3703-4aaa-9fa0-d8f99a720536.crl

            X509v3 Authority Key Identifier:
                keyid:AC:18:9F:D1:96:01:0B:F4:19:CD:D5:73:7C:6E:FD:C9:D1:A8:95:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5fc522ea-3703-4aaa-9fa0-d8f99a720536.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2f80::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:c7:37:67:91:cf:d3:da:c0:5f:61:92:a8:b9:31:d7:3d:b8:
         99:87:43:46:49:35:17:0a:bb:1d:bd:cc:9d:1a:34:43:54:2e:
         8c:a4:88:22:92:a3:7b:a8:e0:11:2f:6a:6a:a8:f0:84:72:eb:
         d4:a4:1d:0d:50:41:6c:08:11:cf:b7:ff:5f:81:ec:44:5f:82:
         72:e8:a1:9b:cf:df:bf:70:52:bb:63:63:ee:33:40:d7:f3:bf:
         21:0f:da:eb:29:23:2e:ce:96:89:02:a5:7d:28:0e:3d:01:b5:
         28:bd:ab:f7:20:db:ff:81:0a:2c:46:de:eb:34:8f:0a:92:8d:
         eb:68:2d:42:90:85:dd:b0:79:06:79:24:28:98:78:06:75:92:
         9c:06:70:7e:d1:d7:59:24:93:9f:e5:9d:50:f5:ed:b9:97:1d:
         01:f3:57:2b:55:55:85:bd:28:11:f7:6e:54:26:30:b8:d1:c3:
         cb:4c:d4:7f:1e:f0:e5:2f:14:1e:3d:a7:86:0b:06:ea:3b:c5:
         de:82:6f:ca:ff:39:ec:ba:47:3a:ee:59:3b:45:23:e9:99:b6:
         d3:d6:cb:be:be:c3:2b:c2:a2:d1:45:84:9b:7d:b3:36:cf:71:
         7c:92:d1:5f:e1:46:61:a7:e3:f5:b5:c8:6f:b7:0a:b6:12:ff:
         aa:9d:38:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:22:50 2026 by rpki-client