Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/d8b2a98e-474a-337a-a0e2-1fd039511cbf.roa
File:                     d8b2a98e-474a-337a-a0e2-1fd039511cbf.roa (raw, json)
Hash identifier:          +YVQ96D6F/PovN7AzZOlajTwuyElB5K7pyWWHvnifyE=
Subject key identifier:   85:02:81:44:5E:E7:4C:FD:D2:1A:B2:A5:0E:F1:C7:57:7A:9B:59:4A
Certificate issuer:       /CN=6e9c5894-f794-4209-a00d-cf232363d7c6
Certificate serial:       010D0C9F4328584CBDB213729F148235219AB300
Authority key identifier: EB:6D:3E:D4:C8:21:B9:96:11:9E:0C:09:FF:5D:B7:88:80:52:94:85
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/d8b2a98e-474a-337a-a0e2-1fd039511cbf.roa
Signing time:             Tue 03 Feb 2026 14:00:39 +0000
ROA not before:           Tue 03 Feb 2026 14:00:39 +0000
ROA not after:            Mon 04 May 2026 13:00:39 +0000
asID:                     14618
IP address blocks:        2605:b040:d::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/6e9c5894-f794-4209-a00d-cf232363d7c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/6e9c5894-f794-4209-a00d-cf232363d7c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:bd:b2:13:72:9f:14:82:35:21:9a:b3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e9c5894-f794-4209-a00d-cf232363d7c6
        Validity
            Not Before: Feb  3 14:00:39 2026 GMT
            Not After : May  4 13:00:39 2026 GMT
        Subject: CN=06572ab3-b6a8-4ce8-b107-fd1c1e2321c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:a1:73:c2:6f:83:d0:b7:e2:aa:16:31:b4:4f:
                    53:7c:ea:c0:54:e9:17:05:59:96:dd:8e:47:f3:cb:
                    03:42:d6:3e:e8:50:ec:aa:cd:0a:f3:fd:d9:a4:c6:
                    a7:fb:ff:68:88:06:3f:37:19:be:78:29:b4:36:89:
                    54:1b:49:66:66:67:bb:d8:49:a8:b0:ae:a9:85:8f:
                    3e:df:e1:7a:50:c6:b5:ce:d5:59:c1:93:70:c5:98:
                    8f:b8:ee:67:05:ec:65:29:d7:8c:4f:a5:9e:f7:ec:
                    e8:f2:b6:ac:41:77:64:d2:91:4b:81:cd:74:34:8e:
                    79:3e:34:f9:c6:88:92:fa:6b:04:d5:37:50:58:94:
                    a0:91:87:16:60:5f:46:9d:8d:28:c7:9d:57:18:61:
                    80:96:29:9f:ac:d3:61:5f:f5:06:07:67:79:80:41:
                    5c:2f:ae:49:b8:99:e7:69:6f:01:1f:a9:19:86:65:
                    26:10:a3:44:47:c3:ca:99:83:57:04:f2:79:ba:9e:
                    96:4e:6b:21:cc:d8:a7:a8:97:2a:ca:09:d6:84:a5:
                    bd:dd:c9:42:35:e6:f6:bb:03:98:2b:46:e6:e2:16:
                    23:48:dd:7c:1b:6d:99:87:5b:32:14:f8:55:99:54:
                    10:7f:63:00:e2:23:5b:aa:39:14:d9:30:fd:eb:f0:
                    38:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:02:81:44:5E:E7:4C:FD:D2:1A:B2:A5:0E:F1:C7:57:7A:9B:59:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/d8b2a98e-474a-337a-a0e2-1fd039511cbf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/6e9c5894-f794-4209-a00d-cf232363d7c6.crl

            X509v3 Authority Key Identifier:
                keyid:EB:6D:3E:D4:C8:21:B9:96:11:9E:0C:09:FF:5D:B7:88:80:52:94:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:b040:d::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:4d:ae:b3:2e:d7:05:a7:2e:3c:09:03:0a:74:1a:a4:51:ca:
         15:d2:87:a0:05:1b:7a:e8:c3:8f:41:fd:22:02:10:d4:fe:69:
         61:04:e9:ad:86:7f:36:6c:7b:b6:f8:c4:98:b3:98:da:e7:91:
         a9:82:37:9c:97:0a:a9:48:95:10:eb:82:10:7c:12:f8:4f:f3:
         38:92:f5:89:0d:6a:62:fe:37:92:89:97:64:a9:41:71:f1:f3:
         a4:0e:c8:00:d8:85:08:83:7c:05:56:18:d2:55:91:1d:8b:a3:
         75:41:6f:18:65:80:d9:c0:a0:9d:b6:a6:60:9e:e5:f2:cb:f6:
         ac:95:fe:eb:78:64:a4:da:b3:a7:62:bf:95:78:b6:5a:0e:0b:
         31:7b:8c:8e:ee:a3:fc:e0:0c:10:d6:bb:5a:0a:e1:a5:61:fe:
         2a:58:fb:e1:38:31:93:f5:d3:81:7a:a7:19:a6:64:10:b3:8e:
         e3:fd:16:c5:b3:69:f9:82:26:74:c7:c7:7f:a2:a9:81:0b:b6:
         77:c7:14:78:5e:e7:66:a3:8f:70:96:bf:cd:da:90:4c:17:97:
         9a:74:8a:ae:5b:21:df:ac:ec:ff:20:8c:4b:29:7f:db:60:5c:
         d4:4d:d1:17:b3:c1:4a:70:0b:30:9b:b9:42:01:6d:f3:ca:3f:
         fd:1b:07:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:43:18 2026 by rpki-client