Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f767ea16-72b4-402a-9b2f-7583fe390bb7/2f7b05e6-3713-3454-b0fe-a2b1a7a25654.roa
File:                     2f7b05e6-3713-3454-b0fe-a2b1a7a25654.roa (raw, json)
Hash identifier:          rWBTZ+NWFcoVvPeOUw0f5fJWuEbZtPaMyuZfZf+fE5E=
Subject key identifier:   42:39:79:33:5F:8E:6F:72:80:39:F0:90:8A:31:66:56:58:C9:45:EF
Certificate issuer:       /CN=f767ea16-72b4-402a-9b2f-7583fe390bb7
Certificate serial:       010D0C9F4328584C794C482338D8E6335BFBFAE0
Authority key identifier: 7A:C6:2E:73:FB:82:27:31:62:5F:C0:8E:76:FB:20:55:A6:05:B9:29
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f767ea16-72b4-402a-9b2f-7583fe390bb7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f767ea16-72b4-402a-9b2f-7583fe390bb7/2f7b05e6-3713-3454-b0fe-a2b1a7a25654.roa
Signing time:             Sat 10 Jan 2026 02:00:31 +0000
ROA not before:           Sat 10 Jan 2026 02:00:31 +0000
ROA not after:            Fri 10 Apr 2026 01:00:31 +0000
asID:                     14773
IP address blocks:        2620:1d5:100::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f767ea16-72b4-402a-9b2f-7583fe390bb7/f767ea16-72b4-402a-9b2f-7583fe390bb7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f767ea16-72b4-402a-9b2f-7583fe390bb7/f767ea16-72b4-402a-9b2f-7583fe390bb7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f767ea16-72b4-402a-9b2f-7583fe390bb7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:79:4c:48:23:38:d8:e6:33:5b:fb:fa:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f767ea16-72b4-402a-9b2f-7583fe390bb7
        Validity
            Not Before: Jan 10 02:00:31 2026 GMT
            Not After : Apr 10 01:00:31 2026 GMT
        Subject: CN=8b85f6bd-ddb4-49d5-b16c-bdad0e126b01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:14:5e:ba:af:22:ec:0d:05:4c:58:7d:d9:86:
                    ea:df:40:07:ae:99:68:fc:6a:a4:ec:73:a3:b5:e5:
                    df:6b:a4:9d:45:f3:e2:46:78:c1:84:32:a9:ce:76:
                    a8:15:54:56:56:92:6b:9b:02:5b:38:51:ca:28:de:
                    e1:16:b9:2f:93:bc:58:cb:d6:b0:36:d6:f8:a6:c1:
                    e7:6e:78:bc:7f:df:ac:dd:a9:05:c3:fd:60:80:fe:
                    a6:9b:4b:24:11:ae:a4:81:d1:db:9c:6e:96:8f:e5:
                    4d:70:97:04:41:93:03:72:a6:50:9f:54:e8:07:45:
                    3a:d3:37:c3:ce:8f:a9:30:7a:3f:ec:fc:04:bb:5f:
                    eb:9b:33:cc:4d:82:56:5a:c3:e4:e4:20:91:0c:e9:
                    2e:e8:2d:10:8d:13:f5:8d:97:10:60:da:b1:1b:70:
                    89:ef:52:32:f5:f7:c9:1b:2a:9c:95:08:bd:ff:30:
                    15:88:7f:73:58:7f:77:50:1a:46:89:49:00:2e:81:
                    9f:fc:41:ca:3d:6a:25:55:eb:ca:8c:6e:0c:aa:c3:
                    04:7e:30:04:0f:77:29:00:a5:40:86:31:14:dc:17:
                    8b:1e:36:92:b3:4c:fd:ab:c9:fe:44:56:cc:02:36:
                    ab:b5:34:b8:0a:10:0b:6a:2b:75:72:c3:ca:21:e6:
                    42:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:39:79:33:5F:8E:6F:72:80:39:F0:90:8A:31:66:56:58:C9:45:EF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f767ea16-72b4-402a-9b2f-7583fe390bb7/2f7b05e6-3713-3454-b0fe-a2b1a7a25654.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f767ea16-72b4-402a-9b2f-7583fe390bb7/f767ea16-72b4-402a-9b2f-7583fe390bb7.crl

            X509v3 Authority Key Identifier:
                keyid:7A:C6:2E:73:FB:82:27:31:62:5F:C0:8E:76:FB:20:55:A6:05:B9:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f767ea16-72b4-402a-9b2f-7583fe390bb7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:1d5:100::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:75:a6:89:55:8a:10:35:f4:c0:5a:66:88:29:1d:84:b3:28:
         91:07:9c:2c:b9:9e:8d:79:d9:21:77:2e:79:d7:1e:d8:63:5d:
         7e:f9:ab:d9:84:9c:72:2a:e8:19:1c:fd:ad:94:ad:a0:b7:dd:
         3f:ff:d1:17:20:5e:26:2e:f5:a6:fd:c5:17:78:a4:d7:81:ed:
         4b:0f:cd:00:44:9a:7a:4d:e7:77:55:b6:52:4b:47:73:ce:51:
         e7:7c:89:aa:a2:85:18:0f:b9:c4:b9:3b:52:91:b7:11:c8:16:
         a5:e3:20:32:03:d1:f5:59:b4:a4:80:60:73:24:f6:a4:84:22:
         22:08:17:6f:4d:d5:bc:1a:1a:4b:1e:51:fc:f6:12:00:f5:b9:
         48:9d:7d:cd:20:0e:22:e9:56:b8:c2:ec:da:44:91:01:9c:12:
         36:7c:20:39:ef:e7:91:42:c0:4a:b7:67:38:d8:06:b2:b5:72:
         16:55:9e:9c:9c:b3:2f:04:2d:8e:90:8c:cb:40:ea:04:91:8e:
         84:ec:a8:c5:b7:c2:76:16:78:9b:9e:30:a8:3e:7e:3a:c3:de:
         17:b6:01:ea:57:55:f7:9d:d8:0b:a6:10:77:72:83:e2:37:c6:
         56:28:6c:5f:49:28:86:10:9b:99:b4:e6:35:15:1c:94:8f:7d:
         c7:05:55:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 21:06:12 2026 by rpki-client