Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082/6a75522c-675d-3b8d-bf4d-c445fde3eac6.roa
File:                     6a75522c-675d-3b8d-bf4d-c445fde3eac6.roa (raw, json)
Hash identifier:          YYllbqAM0aNBIbzJBn0K0laqrkXRNkSZk+5FIS5iCDA=
Subject key identifier:   F5:9C:82:56:4C:D8:04:2C:62:63:E9:05:F5:22:B2:EF:EE:ED:3C:37
Certificate issuer:       /CN=8eda9035-7c9b-45a0-b98b-a45be535f082
Certificate serial:       010D0C9F4328584CD13CA4DB178E93149ACEA980
Authority key identifier: 64:FD:D2:B4:D5:A9:0A:A0:F5:66:68:E4:2B:96:51:54:E7:7A:66:73
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082/6a75522c-675d-3b8d-bf4d-c445fde3eac6.roa
Signing time:             Tue 10 Feb 2026 14:00:41 +0000
ROA not before:           Tue 10 Feb 2026 14:00:41 +0000
ROA not after:            Mon 11 May 2026 13:00:41 +0000
asID:                     399728
IP address blocks:        2620:98:e007::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082/8eda9035-7c9b-45a0-b98b-a45be535f082.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082/8eda9035-7c9b-45a0-b98b-a45be535f082.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:d1:3c:a4:db:17:8e:93:14:9a:ce:a9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8eda9035-7c9b-45a0-b98b-a45be535f082
        Validity
            Not Before: Feb 10 14:00:41 2026 GMT
            Not After : May 11 13:00:41 2026 GMT
        Subject: CN=3884b526-0880-429a-83b9-a8e9cc9cbe78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:7e:4d:c5:15:cb:02:af:54:cf:e4:8b:4d:fb:
                    6d:bc:f1:9d:63:7b:b1:ed:77:00:9e:5b:0c:88:92:
                    ea:ba:15:ce:60:a2:fb:89:fe:a8:1b:88:bc:01:54:
                    12:09:a1:b0:b8:d0:2a:af:81:62:06:c7:ac:11:71:
                    35:2b:c6:8f:f9:e0:03:5e:d4:84:db:60:65:a5:2e:
                    4d:2f:8a:7c:89:53:80:58:16:03:3c:a8:92:79:7e:
                    18:40:54:aa:21:50:31:ad:9f:d4:79:33:1b:5e:ec:
                    26:28:9d:a3:2f:a7:1e:b7:dd:64:5f:a7:f4:69:a6:
                    4a:e2:13:f5:8f:3f:84:8c:8d:a7:b0:5f:cc:25:02:
                    77:a9:da:bb:b0:a7:8d:27:d7:1b:45:6b:06:ff:d3:
                    d7:fe:1c:b8:af:e5:dc:48:4d:58:ef:3a:80:b2:5e:
                    92:2a:e6:86:57:c8:0b:bf:92:68:ec:2b:a6:73:89:
                    2b:f9:bc:34:8b:c5:e8:f1:c0:a7:3e:b7:6d:70:86:
                    c8:78:d2:80:3a:17:e5:4e:a9:8a:67:30:9e:94:93:
                    03:db:79:b6:53:bd:4f:12:51:40:f4:da:5a:d5:79:
                    92:37:86:cc:00:6e:3d:33:25:c1:40:09:74:27:de:
                    74:a1:c0:76:64:a1:1d:b7:b4:e8:2b:ae:f4:96:98:
                    cb:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:9C:82:56:4C:D8:04:2C:62:63:E9:05:F5:22:B2:EF:EE:ED:3C:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082/6a75522c-675d-3b8d-bf4d-c445fde3eac6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082/8eda9035-7c9b-45a0-b98b-a45be535f082.crl

            X509v3 Authority Key Identifier:
                keyid:64:FD:D2:B4:D5:A9:0A:A0:F5:66:68:E4:2B:96:51:54:E7:7A:66:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:98:e007::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bb:16:e0:4f:8a:5f:b9:3e:2c:f3:7d:c8:c7:e7:2a:a0:f7:36:
         0e:5c:d5:05:3d:71:88:ed:08:a8:9b:0f:e8:b9:62:0d:4f:73:
         48:81:27:b0:f1:66:05:ae:4a:43:a2:7a:37:ab:ad:c6:dc:31:
         9e:b2:f4:26:d3:1b:b8:b1:42:5c:6a:8f:b4:93:2b:11:ca:20:
         15:2e:d1:cc:5f:cd:fc:be:f2:7a:30:2f:35:e4:32:ea:cf:58:
         18:63:af:33:78:db:72:cb:83:78:ca:bd:25:bd:b5:5d:96:c5:
         bb:36:92:53:a9:b2:c6:6d:dd:00:4c:36:66:db:ec:ce:c4:bc:
         99:6e:6d:bc:69:51:df:01:59:90:53:34:9f:ff:96:e8:62:75:
         01:74:5e:2b:ce:50:3c:f0:77:8d:d4:ab:4a:4d:56:6a:10:53:
         3c:62:fb:24:79:43:a4:cc:92:51:bd:33:c2:7b:f6:4d:f6:d5:
         3b:5a:aa:25:d6:c1:e6:b2:ba:0d:ba:27:c2:cd:ef:b5:f5:7b:
         19:94:0b:40:04:57:3f:53:70:60:02:b3:dd:a2:d3:43:42:6b:
         d5:8c:b3:dc:ed:02:c3:8a:dc:c0:73:fe:ee:fb:53:1b:2c:2c:
         4c:7d:31:13:50:8d:02:8e:fc:b0:87:1c:75:ff:1c:06:d5:8e:
         34:2c:d0:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 16:31:06 2026 by rpki-client