Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa/2a220a55-1cb7-31df-a588-4923f4577b36.roa
File:                     2a220a55-1cb7-31df-a588-4923f4577b36.roa (raw, json)
Hash identifier:          +bKnHsXLJLuj040zhwXLWbbjLo3y5QAFQldNfwfh70w=
Subject key identifier:   E2:5D:76:5B:7F:81:07:23:42:CF:1D:5B:DC:FE:38:AD:D8:F3:03:31
Certificate issuer:       /CN=f7798abb-711d-4f10-bc46-bceed055e1fa
Certificate serial:       010D0C9F4328584D07ACEDDE92499FE75C576E78
Authority key identifier: CC:90:3D:D7:AA:39:05:EC:E7:35:08:AC:CB:45:F4:6E:65:BC:1D:E1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa/2a220a55-1cb7-31df-a588-4923f4577b36.roa
Signing time:             Mon 02 Mar 2026 02:00:31 +0000
ROA not before:           Mon 02 Mar 2026 02:00:31 +0000
ROA not after:            Sun 31 May 2026 01:00:31 +0000
asID:                     31786
IP address blocks:        2602:fb54:146::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa/f7798abb-711d-4f10-bc46-bceed055e1fa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa/f7798abb-711d-4f10-bc46-bceed055e1fa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:07:ac:ed:de:92:49:9f:e7:5c:57:6e:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f7798abb-711d-4f10-bc46-bceed055e1fa
        Validity
            Not Before: Mar  2 02:00:31 2026 GMT
            Not After : May 31 01:00:31 2026 GMT
        Subject: CN=315f7973-60b4-4fae-b8ee-215ebee89482
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:89:d9:ba:c8:2e:56:9e:46:7d:4b:76:ad:84:
                    5e:ef:5e:90:da:21:4f:2d:73:b2:19:ff:73:ac:83:
                    e6:97:ae:8f:9d:85:03:98:26:85:3d:be:4e:cd:37:
                    5d:4e:93:8b:4b:79:7f:0a:e9:0a:53:76:13:6b:cb:
                    36:e6:4b:dc:6d:0f:23:61:6b:19:0d:ef:32:4d:29:
                    1f:44:47:66:ee:72:58:71:1f:98:94:dd:2c:77:3e:
                    30:04:13:b4:b0:57:59:5f:af:3b:8c:5a:af:fe:32:
                    c5:88:d1:29:ff:79:2b:7d:24:ef:db:3e:fb:ea:57:
                    7b:13:15:95:55:98:2e:27:52:bb:c9:69:24:6d:c5:
                    2f:64:98:77:87:88:da:5b:f1:b5:79:83:df:22:18:
                    80:2e:a6:8b:f7:ed:1b:db:a7:09:c6:37:1b:b4:2a:
                    f9:ee:cb:bc:63:fd:05:74:9f:ec:b2:fa:cc:d7:c8:
                    c7:ea:18:e5:eb:31:6a:72:89:9e:35:14:b1:3b:f0:
                    b3:3d:da:33:1b:f0:96:01:96:0e:ed:37:7e:19:52:
                    a3:f7:b8:72:c7:85:33:b7:fe:f3:29:f4:6d:28:ed:
                    3a:24:00:b4:df:88:4d:a5:13:44:ae:ea:4c:8c:ed:
                    f1:c2:53:ee:22:36:2a:8d:21:73:95:6e:ae:ad:d5:
                    73:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:5D:76:5B:7F:81:07:23:42:CF:1D:5B:DC:FE:38:AD:D8:F3:03:31
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa/2a220a55-1cb7-31df-a588-4923f4577b36.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa/f7798abb-711d-4f10-bc46-bceed055e1fa.crl

            X509v3 Authority Key Identifier:
                keyid:CC:90:3D:D7:AA:39:05:EC:E7:35:08:AC:CB:45:F4:6E:65:BC:1D:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fb54:146::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c3:87:5c:0f:7f:b1:3c:b1:f9:02:8e:c1:94:d9:a0:cf:1a:bf:
         11:fc:db:84:30:a6:01:b9:89:c6:ce:e2:4c:51:67:10:d7:96:
         06:dc:9e:37:ed:c3:92:dc:e1:59:ef:5b:a1:0e:04:23:53:d6:
         fe:83:bb:73:31:65:03:29:2d:a4:31:de:f8:42:eb:63:b9:7b:
         59:af:61:d0:4f:e6:59:83:12:5e:3b:4f:8b:a1:ef:3e:83:76:
         40:95:3c:02:bc:28:d5:6d:e8:43:a1:38:39:51:5d:45:34:3a:
         f3:72:25:fe:3f:da:18:96:f8:bf:e8:44:90:bd:15:72:ef:8f:
         3d:17:be:e4:4f:7b:d8:bc:68:84:bf:88:b8:24:6f:0a:c6:9a:
         ed:0e:69:a2:23:6e:6e:6b:46:d4:32:ab:c3:27:bc:a5:da:fc:
         f4:92:54:22:15:92:05:26:7a:55:50:73:57:24:62:2f:3c:d3:
         6d:8a:c8:fd:f3:48:e7:46:4c:e9:1a:70:49:4b:14:2b:77:07:
         b6:13:17:63:a8:1b:1b:43:04:be:41:3d:35:4c:77:c5:10:58:
         d0:cd:0e:bd:a8:b1:ff:0b:e7:ad:75:40:5b:0e:a5:1b:22:91:
         21:99:cc:be:f2:8e:3a:19:68:1b:ea:8b:3b:58:e5:4c:77:72:
         87:53:b4:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:43:23 2026 by rpki-client