Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a30b207-de04-425f-94e9-ee12d4529f56/7ca29c9a-2db3-3389-9694-82aabb8b564d.roa
File:                     7ca29c9a-2db3-3389-9694-82aabb8b564d.roa (raw, json)
Hash identifier:          qA1cEf1NLdO+6jLY69BUHGBhp7EuS7t1pakj5W69x9Q=
Subject key identifier:   38:6C:BE:B7:9F:03:35:A3:64:1A:52:9F:2C:D8:EB:DC:D3:11:F1:7C
Certificate issuer:       /CN=6a30b207-de04-425f-94e9-ee12d4529f56
Certificate serial:       010D0C9F4328584CFC823BDB8E2FC17D7A242680
Authority key identifier: 4F:F2:3E:B1:27:37:0C:2A:E1:E4:CE:A1:85:CE:AC:EC:21:4B:75:D6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a30b207-de04-425f-94e9-ee12d4529f56.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a30b207-de04-425f-94e9-ee12d4529f56/7ca29c9a-2db3-3389-9694-82aabb8b564d.roa
Signing time:             Thu 26 Feb 2026 02:00:32 +0000
ROA not before:           Thu 26 Feb 2026 02:00:32 +0000
ROA not after:            Wed 27 May 2026 01:00:32 +0000
asID:                     3527
IP address blocks:        2601:9400::/24 maxlen: 48
                          2607:f220:400::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a30b207-de04-425f-94e9-ee12d4529f56/6a30b207-de04-425f-94e9-ee12d4529f56.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a30b207-de04-425f-94e9-ee12d4529f56/6a30b207-de04-425f-94e9-ee12d4529f56.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a30b207-de04-425f-94e9-ee12d4529f56.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:fc:82:3b:db:8e:2f:c1:7d:7a:24:26:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6a30b207-de04-425f-94e9-ee12d4529f56
        Validity
            Not Before: Feb 26 02:00:32 2026 GMT
            Not After : May 27 01:00:32 2026 GMT
        Subject: CN=4eef3cfd-5a1a-42e9-a28d-3ad3994b0b96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:d6:d7:f3:fe:ad:c4:23:f8:c1:bb:0f:92:8e:
                    6e:20:95:ed:54:88:21:f0:08:31:22:24:af:6e:09:
                    25:3b:81:1a:0d:d4:46:09:c3:b5:18:cf:46:d6:94:
                    f7:b5:25:46:bb:12:6d:80:15:75:a8:2f:98:7a:aa:
                    7f:29:b5:fd:b9:7c:46:3e:11:ca:86:c3:8d:3f:ab:
                    23:59:de:72:d9:a4:2f:7d:ae:20:d5:c3:37:f9:ba:
                    1e:05:df:db:85:61:cf:8e:4a:6f:3e:4a:5f:11:e1:
                    c3:bd:18:e9:08:9c:04:9f:9d:50:56:e0:df:5c:c3:
                    c4:90:4a:12:30:ef:53:c7:6d:a7:5b:a2:a1:fa:79:
                    1c:39:e7:38:9f:4c:a3:9c:6f:90:a0:84:97:7b:9e:
                    35:3c:03:35:ab:00:08:4a:04:7e:28:4e:ed:0d:1e:
                    26:98:32:6c:d5:0a:ff:f8:e9:85:d8:c6:16:db:a1:
                    5e:77:cf:2f:bf:2d:28:72:a7:00:37:12:7d:f8:7c:
                    7f:51:5f:5c:c1:9f:62:d0:a8:d5:1a:c5:61:3a:fb:
                    d8:22:cd:6f:1c:66:e7:cd:b5:2a:d3:d7:87:59:df:
                    97:73:b7:9c:a7:e6:5a:bb:bd:44:7e:f5:01:79:04:
                    81:f5:f9:46:07:64:2b:54:0a:96:4c:2b:d1:08:94:
                    e5:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:6C:BE:B7:9F:03:35:A3:64:1A:52:9F:2C:D8:EB:DC:D3:11:F1:7C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a30b207-de04-425f-94e9-ee12d4529f56/7ca29c9a-2db3-3389-9694-82aabb8b564d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a30b207-de04-425f-94e9-ee12d4529f56/6a30b207-de04-425f-94e9-ee12d4529f56.crl

            X509v3 Authority Key Identifier:
                keyid:4F:F2:3E:B1:27:37:0C:2A:E1:E4:CE:A1:85:CE:AC:EC:21:4B:75:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a30b207-de04-425f-94e9-ee12d4529f56.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2601:9400::/24
                  2607:f220:400::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:a0:e8:46:19:10:41:27:ed:ae:94:d2:f6:c6:17:81:0a:8a:
         bc:0e:11:52:db:37:57:82:05:68:ff:26:83:93:fa:47:8f:be:
         36:1e:aa:24:c1:14:b0:2f:e8:20:43:e5:74:c5:9f:90:dc:7e:
         8d:b8:64:07:c3:54:bb:50:c8:68:fd:02:8e:e9:87:a6:7d:d8:
         a6:0d:81:19:3d:13:d7:d3:c5:5e:39:51:c6:a2:0c:99:0f:64:
         f7:54:8d:36:be:e9:29:1b:93:8e:b0:0f:8f:ef:3f:cc:d3:84:
         1f:61:aa:34:60:31:e7:c8:19:b8:5a:e5:7f:51:25:aa:24:1d:
         e8:2b:d5:96:1e:a4:dd:54:23:45:27:7b:3d:0e:53:1a:13:52:
         b5:be:7b:40:55:97:d4:ea:fa:34:70:85:4b:f0:3e:b8:c7:21:
         e0:58:0d:50:f2:4b:f7:b6:9b:10:ff:5e:8e:ba:c7:ad:33:c9:
         df:5a:45:14:d1:a0:74:d7:6b:0c:42:1e:b8:3e:e8:cd:7b:18:
         74:66:59:a2:c7:c8:2b:d7:e1:2d:a0:35:88:97:73:21:76:fd:
         91:10:8d:07:52:35:b1:fe:25:b8:a9:09:3b:2e:98:3d:32:bd:
         57:9b:75:bd:45:44:eb:83:24:5b:8f:a0:16:e2:1a:c6:49:2b:
         b9:71:e6:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:33:16 2026 by rpki-client