Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa/df287de6-1914-3cd7-888e-504ff51dd500.roa
File:                     df287de6-1914-3cd7-888e-504ff51dd500.roa (raw, json)
Hash identifier:          Z456sudV9NCeQFkmUtbycv8l9qBKWMOfOEiCI0nDcbk=
Subject key identifier:   37:88:C3:60:92:44:F8:E4:9C:38:97:B4:90:9C:B4:4D:19:D8:9D:DD
Certificate issuer:       /CN=f7798abb-711d-4f10-bc46-bceed055e1fa
Certificate serial:       010D0C9F4328584CEFF23A4AB6BAD566A17E5600
Authority key identifier: CC:90:3D:D7:AA:39:05:EC:E7:35:08:AC:CB:45:F4:6E:65:BC:1D:E1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa/df287de6-1914-3cd7-888e-504ff51dd500.roa
Signing time:             Sat 21 Feb 2026 14:00:41 +0000
ROA not before:           Sat 21 Feb 2026 14:00:41 +0000
ROA not after:            Fri 22 May 2026 13:00:41 +0000
asID:                     23470
IP address blocks:        2602:fb54:149::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa/f7798abb-711d-4f10-bc46-bceed055e1fa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa/f7798abb-711d-4f10-bc46-bceed055e1fa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ef:f2:3a:4a:b6:ba:d5:66:a1:7e:56:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f7798abb-711d-4f10-bc46-bceed055e1fa
        Validity
            Not Before: Feb 21 14:00:41 2026 GMT
            Not After : May 22 13:00:41 2026 GMT
        Subject: CN=fefd8102-f04d-4b4d-9f79-f1941d7fa4df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:f3:ef:a5:08:2e:42:2e:35:75:11:c5:16:f5:
                    16:93:f8:df:47:ba:ca:e0:85:02:5b:5f:5e:be:9c:
                    2d:00:35:70:b9:f7:c2:bd:5a:07:fc:59:4b:fb:55:
                    9c:54:c4:5c:61:40:e3:b5:36:31:c5:b3:5b:36:47:
                    94:34:39:62:a4:dd:a5:e9:73:fe:28:8d:6e:45:ca:
                    d3:f4:64:3c:40:e1:b3:12:cb:02:6b:c5:3a:cf:56:
                    c3:4e:4d:df:11:18:70:79:cd:43:08:87:ad:8a:73:
                    b7:66:59:ef:80:2d:e8:ae:2e:dc:2f:e8:d4:54:6a:
                    ab:41:66:23:29:91:7d:2d:40:24:4b:cc:26:fb:84:
                    a0:47:7a:ff:be:bd:97:9f:6e:e8:15:bf:08:4f:d1:
                    76:c6:4f:43:e9:9b:d3:9d:19:0c:1c:13:5c:3b:2b:
                    fe:0e:eb:08:8d:97:92:bd:7a:1c:8a:1a:ee:8b:92:
                    78:a5:49:56:41:29:d2:87:82:6a:30:2e:08:bb:21:
                    0b:06:78:79:32:e9:56:58:5a:d5:05:09:79:27:05:
                    ad:b9:fe:4c:12:2a:0f:51:53:00:a2:2d:e4:d8:df:
                    e2:f3:9b:9d:39:94:d0:3d:6f:cd:83:62:96:26:8d:
                    22:d3:9c:3d:74:96:41:cd:5d:b4:3d:a4:6f:f3:56:
                    57:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:88:C3:60:92:44:F8:E4:9C:38:97:B4:90:9C:B4:4D:19:D8:9D:DD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa/df287de6-1914-3cd7-888e-504ff51dd500.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa/f7798abb-711d-4f10-bc46-bceed055e1fa.crl

            X509v3 Authority Key Identifier:
                keyid:CC:90:3D:D7:AA:39:05:EC:E7:35:08:AC:CB:45:F4:6E:65:BC:1D:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fb54:149::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:76:ee:4d:b7:27:d5:5e:83:1e:e2:62:43:d3:04:4d:24:09:
         a8:7d:90:b7:01:98:c0:9c:3a:29:7b:dc:7a:20:c3:16:b7:21:
         b0:f8:09:c3:b4:38:d4:fc:94:d4:d4:38:c4:2b:75:90:2f:57:
         89:0f:41:bf:96:ec:d5:c8:82:54:77:ad:ff:8b:ab:d2:fe:3b:
         65:d7:07:3f:06:37:4c:af:48:64:20:e4:fc:83:2a:74:11:06:
         79:92:a6:b4:59:2a:54:c5:0b:00:11:44:91:ae:15:54:5e:c0:
         d2:03:01:91:b2:52:36:37:65:43:22:a0:a8:3b:2b:5e:97:5e:
         1b:cb:49:f8:f1:0c:ea:ca:74:b8:96:2e:6b:05:15:b0:9d:62:
         4f:45:ed:7c:ba:49:b1:62:0d:e2:ea:af:d8:e7:c0:c0:c5:4b:
         f7:99:2c:8c:41:4f:07:65:35:77:fd:9a:74:ad:f2:15:38:63:
         97:71:b4:36:e1:60:52:86:b0:17:15:48:d2:61:62:bd:0f:44:
         73:be:04:87:25:8a:9d:74:d2:e0:88:be:db:e9:e4:2a:31:fb:
         7e:ea:e3:db:3a:13:50:4b:70:a3:f6:dc:85:fc:e6:6a:46:2f:
         47:37:35:82:bc:9e:5b:0e:51:ae:48:93:bb:9a:3a:72:1b:b2:
         6f:10:37:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:41:46 2026 by rpki-client