Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5482ccc0-e4dd-479e-a029-460a79acc9cc/8812799f-a40f-3a70-8dce-9bf172d21bea.roa
File:                     8812799f-a40f-3a70-8dce-9bf172d21bea.roa (raw, json)
Hash identifier:          tEKf0CdIsNXy/6j7OVQdLT/G8XS4gx3vNBWC4wRMDW4=
Subject key identifier:   44:6B:CD:6A:67:FA:E0:AE:E9:E2:2F:E4:09:85:FE:5C:0B:3F:3A:B1
Certificate issuer:       /CN=5482ccc0-e4dd-479e-a029-460a79acc9cc
Certificate serial:       010D0C9F4328584CDF32428F4CA527307DA5B780
Authority key identifier: 69:9D:15:4F:E0:F2:33:FA:3E:5F:B7:BD:22:BF:A1:B0:3E:95:8D:EC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5482ccc0-e4dd-479e-a029-460a79acc9cc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5482ccc0-e4dd-479e-a029-460a79acc9cc/8812799f-a40f-3a70-8dce-9bf172d21bea.roa
Signing time:             Sun 15 Feb 2026 14:00:41 +0000
ROA not before:           Sun 15 Feb 2026 14:00:41 +0000
ROA not after:            Sat 16 May 2026 13:00:41 +0000
asID:                     32809
IP address blocks:        2607:f0f8::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5482ccc0-e4dd-479e-a029-460a79acc9cc/5482ccc0-e4dd-479e-a029-460a79acc9cc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5482ccc0-e4dd-479e-a029-460a79acc9cc/5482ccc0-e4dd-479e-a029-460a79acc9cc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5482ccc0-e4dd-479e-a029-460a79acc9cc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:df:32:42:8f:4c:a5:27:30:7d:a5:b7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5482ccc0-e4dd-479e-a029-460a79acc9cc
        Validity
            Not Before: Feb 15 14:00:41 2026 GMT
            Not After : May 16 13:00:41 2026 GMT
        Subject: CN=aff89c19-f5ab-485b-8d0e-5f0d2332fd2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:dd:1c:8d:72:0b:b2:cf:cc:fc:6e:ba:ed:e1:
                    0d:74:ee:bf:12:6d:58:31:46:29:61:a4:b5:df:15:
                    1c:89:62:0a:bf:97:af:b9:6a:24:ce:3a:11:65:2c:
                    44:9e:61:cc:51:16:45:34:0c:6b:ca:9b:2f:8f:36:
                    e8:3f:5b:04:f8:31:4e:5f:c3:cd:e7:2d:d7:66:8c:
                    ea:2c:46:2d:50:a7:6a:95:44:60:9c:4b:3e:e5:95:
                    78:01:27:00:34:ea:1b:ff:da:a5:d1:1f:a5:bd:d3:
                    86:ed:30:2b:39:72:c8:ce:7e:16:00:fb:34:ba:f0:
                    a0:fb:15:fb:c6:cb:8b:08:d2:da:68:cf:33:d3:66:
                    f2:9b:b3:5d:cc:a4:0c:2b:5e:40:6e:b9:b5:b6:1d:
                    77:5f:17:33:11:ee:a9:2a:72:73:24:41:b7:79:4d:
                    01:27:85:4f:d2:58:af:df:0c:8e:01:28:36:d4:86:
                    30:56:27:ab:49:a5:0c:bf:45:ae:a5:12:74:4d:4d:
                    e2:8a:66:10:cd:cc:6f:c7:79:48:76:56:fa:d7:25:
                    2f:73:64:23:a5:4d:52:17:00:a1:18:af:42:1a:88:
                    01:06:7a:b4:d8:59:ca:36:f1:e7:e6:c2:ae:35:f3:
                    28:42:e5:18:60:45:0e:1f:27:d4:7b:06:2a:bf:cd:
                    75:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:6B:CD:6A:67:FA:E0:AE:E9:E2:2F:E4:09:85:FE:5C:0B:3F:3A:B1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5482ccc0-e4dd-479e-a029-460a79acc9cc/8812799f-a40f-3a70-8dce-9bf172d21bea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5482ccc0-e4dd-479e-a029-460a79acc9cc/5482ccc0-e4dd-479e-a029-460a79acc9cc.crl

            X509v3 Authority Key Identifier:
                keyid:69:9D:15:4F:E0:F2:33:FA:3E:5F:B7:BD:22:BF:A1:B0:3E:95:8D:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5482ccc0-e4dd-479e-a029-460a79acc9cc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f0f8::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a0:52:d2:88:f2:05:0f:b7:a8:54:3e:4c:e2:b4:81:7e:6f:7f:
         e9:18:a2:22:df:0d:7b:0d:a4:de:a1:59:b2:75:c0:69:b8:de:
         d2:ff:03:d5:3a:b5:41:a2:48:c8:8b:51:7c:71:12:03:c3:bc:
         fc:f8:05:7d:94:8c:6f:42:e0:9c:92:ad:bb:7f:ba:20:96:39:
         a4:cb:4b:72:20:76:2d:4d:50:36:32:bc:77:c0:1b:d8:b5:06:
         2d:b8:ad:62:1e:e8:78:a1:87:fd:3a:8f:b5:b8:88:b4:4b:f4:
         01:e4:8f:62:cb:f8:6c:4d:9c:a6:98:ff:36:7a:fb:ab:b7:cf:
         9e:86:e0:e9:bc:56:11:7e:27:57:9e:93:1e:31:b2:92:1a:c2:
         c2:24:1c:b3:54:91:fa:63:12:83:7d:d5:26:f4:d4:24:4e:8b:
         d4:68:f8:a3:a3:02:03:24:28:08:35:1b:ff:db:c2:2c:40:0e:
         d2:c9:5c:06:b9:c7:2f:36:d2:6a:02:63:96:77:5d:68:1b:32:
         f6:cc:e5:fd:3b:db:0c:ec:f8:18:68:7f:d3:3c:53:8e:ef:33:
         2c:58:9b:4b:7d:94:5f:38:ea:fd:1b:68:92:0a:15:22:cc:24:
         b0:76:39:b5:26:b4:50:ee:34:c4:70:fd:98:56:9b:36:43:7a:
         ee:e5:60:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:35:16 2026 by rpki-client