Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/eea6f9e7-09f9-3daa-b59a-727b0831513f.roa
File:                     eea6f9e7-09f9-3daa-b59a-727b0831513f.roa (raw, json)
Hash identifier:          ut8Mh5Q0ySO5VYCDS91/Pw6Sjwdjiede4vKvvCbHiJw=
Subject key identifier:   64:C7:E3:5F:92:1B:CE:C8:93:A3:F5:E3:9C:2D:75:A9:EC:5F:91:46
Certificate issuer:       /CN=9906748d-5823-4cd3-9a11-f3dc69a3e751
Certificate serial:       010D0C9F4328584CC61212585281A052F5C01300
Authority key identifier: A7:31:13:DA:A8:C2:6D:D3:40:47:B6:C3:2B:BA:78:43:31:2F:01:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/eea6f9e7-09f9-3daa-b59a-727b0831513f.roa
Signing time:             Fri 06 Feb 2026 14:00:40 +0000
ROA not before:           Fri 06 Feb 2026 14:00:40 +0000
ROA not after:            Thu 07 May 2026 13:00:40 +0000
asID:                     13778
IP address blocks:        2602:283::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:c6:12:12:58:52:81:a0:52:f5:c0:13:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9906748d-5823-4cd3-9a11-f3dc69a3e751
        Validity
            Not Before: Feb  6 14:00:40 2026 GMT
            Not After : May  7 13:00:40 2026 GMT
        Subject: CN=6718c04a-37b4-4f4a-a6ed-ff590003ae8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:8a:e8:1c:1a:d7:3a:0f:ba:fe:1b:ad:1c:94:
                    09:71:df:cf:17:b4:f4:c3:dc:75:db:db:46:10:fc:
                    b5:b8:db:68:0c:df:b8:bd:d1:54:aa:7c:2d:f9:de:
                    a0:32:5c:c5:b8:f3:08:ae:97:f5:ed:4a:06:9b:79:
                    bc:a6:3c:fb:05:25:97:9b:a8:63:5b:da:4a:00:10:
                    be:09:35:8b:62:bd:a9:30:0b:70:b5:89:f7:aa:e6:
                    e1:f3:3f:7f:24:41:9c:bd:3a:1b:d3:fc:15:7e:f7:
                    c9:fd:ea:6b:e3:74:6b:c0:54:a6:19:74:11:a4:44:
                    69:64:0d:81:68:d4:a6:79:03:c6:f8:57:82:8e:16:
                    ac:1e:16:3b:0d:90:19:d5:04:4c:ad:f5:71:79:01:
                    55:38:0b:37:5a:ab:3f:bb:84:58:66:d1:22:41:ed:
                    7c:0d:26:04:28:24:6b:22:8d:ef:57:c5:bd:14:bc:
                    d5:13:f5:db:96:da:5e:fb:70:10:da:a0:36:3c:91:
                    a8:f2:fe:13:07:ef:5a:bd:20:0c:c1:b1:c3:46:84:
                    97:7d:f1:c8:19:29:3d:4a:94:25:92:05:57:44:5c:
                    39:40:ff:e6:ff:b7:64:e5:83:c4:13:ef:9a:60:3f:
                    40:8d:af:1a:87:98:fe:53:29:3e:63:5f:72:ac:ef:
                    25:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:C7:E3:5F:92:1B:CE:C8:93:A3:F5:E3:9C:2D:75:A9:EC:5F:91:46
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/eea6f9e7-09f9-3daa-b59a-727b0831513f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.crl

            X509v3 Authority Key Identifier:
                keyid:A7:31:13:DA:A8:C2:6D:D3:40:47:B6:C3:2B:BA:78:43:31:2F:01:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:283::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:92:2f:2f:68:4d:ea:96:7d:18:41:bc:45:5f:c1:e3:12:42:
         99:7d:bf:d9:5d:1f:d9:8b:c7:99:08:dc:a1:40:68:1b:da:7f:
         4e:d3:66:a8:85:b9:d2:95:d0:ae:ea:29:10:88:16:a8:5e:a6:
         07:b2:07:13:c2:0c:bd:18:d9:75:9f:f0:01:ff:64:71:f3:9a:
         e8:3f:91:b2:ad:53:32:19:03:46:57:77:32:69:cc:3b:eb:4c:
         e6:8f:1d:25:78:e4:7e:b4:25:1c:12:2e:0f:82:9e:f7:33:b5:
         5a:02:f2:0d:87:de:57:c2:17:aa:9f:a6:d5:21:96:d4:95:b7:
         2e:fb:b3:25:d7:5b:7f:5a:b1:75:75:89:a6:ab:ab:e7:cd:44:
         a9:21:e2:e7:e2:c1:39:23:8c:58:f5:1b:c9:5e:7d:10:cd:ae:
         15:d4:0f:d0:4e:ee:64:ed:71:0c:6b:fe:57:3d:49:2e:db:d8:
         93:b9:8f:74:df:1c:78:d2:3b:18:ff:94:dd:9e:4c:14:50:c9:
         3f:ad:b5:f3:d1:4e:19:97:5f:40:cc:aa:3a:91:6d:4f:47:73:
         e4:b6:d5:76:a5:fc:5e:f8:51:99:c4:c6:78:92:55:b9:30:9a:
         d7:7a:04:4d:cd:ba:31:a8:eb:a9:52:cc:d5:76:e4:e8:2e:63:
         a2:7f:8a:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:44:15 2026 by rpki-client