Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/879f8f15-9dc9-4663-aff8-bf62864b859c/2b41fdec-a039-3dcd-ae4f-a1cbbea76664.roa
File:                     2b41fdec-a039-3dcd-ae4f-a1cbbea76664.roa (raw, json)
Hash identifier:          A9kUOE3yZI6j/YtNNhtFnu4W4UbRPCzapspyRtPPiVc=
Subject key identifier:   BC:0D:3C:75:CB:9D:6B:7F:3E:63:11:23:14:B2:D4:9A:2B:5B:12:6D
Certificate issuer:       /CN=879f8f15-9dc9-4663-aff8-bf62864b859c
Certificate serial:       010D0C9F4328584C42DBEF3B42DF5FC0DEB1F780
Authority key identifier: 86:B2:CD:FC:31:BA:34:57:EA:64:CB:E1:DE:50:AF:13:98:CF:C9:C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/879f8f15-9dc9-4663-aff8-bf62864b859c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/879f8f15-9dc9-4663-aff8-bf62864b859c/2b41fdec-a039-3dcd-ae4f-a1cbbea76664.roa
Signing time:             Sun 21 Dec 2025 14:00:40 +0000
ROA not before:           Sun 21 Dec 2025 14:00:40 +0000
ROA not after:            Sat 21 Mar 2026 13:00:40 +0000
asID:                     398296
IP address blocks:        2606:8280::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/879f8f15-9dc9-4663-aff8-bf62864b859c/879f8f15-9dc9-4663-aff8-bf62864b859c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/879f8f15-9dc9-4663-aff8-bf62864b859c/879f8f15-9dc9-4663-aff8-bf62864b859c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/879f8f15-9dc9-4663-aff8-bf62864b859c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:42:db:ef:3b:42:df:5f:c0:de:b1:f7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=879f8f15-9dc9-4663-aff8-bf62864b859c
        Validity
            Not Before: Dec 21 14:00:40 2025 GMT
            Not After : Mar 21 13:00:40 2026 GMT
        Subject: CN=25f0cb6d-a7c2-4cf2-aee1-1ba022d4328a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:34:18:e4:d1:dc:11:2f:74:b2:75:cd:2b:af:
                    d5:ed:a8:ef:5a:b4:4a:d1:bf:67:73:7f:25:b3:13:
                    f2:5c:67:26:04:f3:e7:21:bf:41:f8:8c:32:8c:db:
                    85:f9:fb:b6:c9:af:35:75:4b:89:d7:29:ea:20:a3:
                    b2:f9:29:e1:71:93:80:b9:b2:1e:f5:52:f8:3a:b3:
                    b8:d9:26:2d:54:1c:c4:e7:14:3e:ce:c4:9b:47:c4:
                    1d:0d:59:83:6a:50:9e:74:3e:63:eb:7d:f8:88:c6:
                    28:ab:9c:a1:b9:2f:e5:b4:94:b4:c4:a4:ba:d4:97:
                    09:c2:f9:6c:ce:a2:74:6d:41:3a:ae:96:d9:13:01:
                    7b:0e:9f:20:00:aa:4a:1f:07:39:eb:9f:66:44:bc:
                    23:1a:b7:33:6e:c7:e7:ea:0c:5e:ad:59:72:87:e1:
                    bb:73:bb:b4:32:d2:c5:20:bd:b0:fd:8a:a1:bb:71:
                    f3:4f:31:51:21:ba:55:ea:be:c1:b3:40:1d:1d:1d:
                    e8:68:6a:f6:c7:ee:92:f7:73:df:7e:54:19:4d:24:
                    ea:c9:3b:e8:87:c0:98:d2:26:78:c1:c5:7e:bc:e7:
                    88:d2:e3:d3:ed:e5:c4:46:e8:d8:6e:de:26:21:59:
                    3a:49:6e:db:c5:a5:41:90:8f:c8:44:fd:1a:4f:29:
                    3f:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:0D:3C:75:CB:9D:6B:7F:3E:63:11:23:14:B2:D4:9A:2B:5B:12:6D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/879f8f15-9dc9-4663-aff8-bf62864b859c/2b41fdec-a039-3dcd-ae4f-a1cbbea76664.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/879f8f15-9dc9-4663-aff8-bf62864b859c/879f8f15-9dc9-4663-aff8-bf62864b859c.crl

            X509v3 Authority Key Identifier:
                keyid:86:B2:CD:FC:31:BA:34:57:EA:64:CB:E1:DE:50:AF:13:98:CF:C9:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/879f8f15-9dc9-4663-aff8-bf62864b859c.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:8280::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:83:9e:d3:10:85:05:a1:b6:ec:f7:2e:55:be:61:65:c2:b4:
         d9:b0:5e:35:1f:47:9f:53:bc:3e:f8:df:5f:17:03:ec:40:50:
         45:10:54:f0:e8:57:0c:c3:a8:c1:ba:c0:f7:33:d3:65:86:36:
         d1:b2:f1:0d:26:da:4d:f9:ee:f0:d6:a1:64:8c:1c:87:16:40:
         d3:f8:b2:48:1f:54:4f:fb:01:1a:9e:fd:b3:20:19:cd:5e:85:
         5b:60:d8:f8:4c:47:9c:64:07:5e:74:3e:2f:c4:24:11:5d:02:
         f5:19:87:e0:38:46:4d:a0:8e:7d:ae:52:55:a8:c0:63:aa:63:
         05:8e:34:16:26:51:56:a4:1a:cb:c0:41:a1:84:ca:af:ac:4b:
         41:a1:ca:59:dc:c8:4b:0d:1f:e2:13:6f:11:78:f3:f8:c8:61:
         5e:de:f4:70:da:00:24:87:95:1c:5d:ba:52:ec:0b:2e:f4:fd:
         d8:82:5b:5b:a7:59:a7:25:08:aa:ed:65:c5:e3:51:38:f6:9f:
         88:97:1a:f3:31:a7:56:d2:60:dd:82:f3:11:c0:b7:3f:23:5e:
         09:83:26:9d:6e:17:ff:68:6b:27:32:1e:70:ae:e8:42:6a:2b:
         1f:94:67:98:93:7f:aa:52:dd:ee:e9:4d:77:26:99:fd:04:e6:
         fd:5a:12:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:29:12 2026 by rpki-client