Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cb48baa8-6c83-45eb-b09b-5fbd1e42c57d/8e29d75c-ea6f-32dc-ad7f-56d0f4a3195f.roa
File:                     8e29d75c-ea6f-32dc-ad7f-56d0f4a3195f.roa (raw, json)
Hash identifier:          EsGuL46H/sg94q7xVB786gHK8SbK1AtXYenOt2bKGnM=
Subject key identifier:   1E:82:82:75:97:97:4C:80:A3:0C:B3:7F:07:20:E1:67:41:78:D2:DA
Certificate issuer:       /CN=cb48baa8-6c83-45eb-b09b-5fbd1e42c57d
Certificate serial:       010D0C9F4328584CDB01FF7048582C5D17F12800
Authority key identifier: E9:36:DC:58:66:FC:68:02:BF:A6:99:DE:B4:DD:13:5E:4C:D1:27:CE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cb48baa8-6c83-45eb-b09b-5fbd1e42c57d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cb48baa8-6c83-45eb-b09b-5fbd1e42c57d/8e29d75c-ea6f-32dc-ad7f-56d0f4a3195f.roa
Signing time:             Sat 14 Feb 2026 02:00:32 +0000
ROA not before:           Sat 14 Feb 2026 02:00:32 +0000
ROA not after:            Fri 15 May 2026 01:00:32 +0000
asID:                     237
IP address blocks:        2001:48a8::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cb48baa8-6c83-45eb-b09b-5fbd1e42c57d/cb48baa8-6c83-45eb-b09b-5fbd1e42c57d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cb48baa8-6c83-45eb-b09b-5fbd1e42c57d/cb48baa8-6c83-45eb-b09b-5fbd1e42c57d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cb48baa8-6c83-45eb-b09b-5fbd1e42c57d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:db:01:ff:70:48:58:2c:5d:17:f1:28:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cb48baa8-6c83-45eb-b09b-5fbd1e42c57d
        Validity
            Not Before: Feb 14 02:00:32 2026 GMT
            Not After : May 15 01:00:32 2026 GMT
        Subject: CN=457c1726-5efa-41a4-8b8e-b857669d3722
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:f3:43:5c:f5:07:7c:08:dd:cb:17:63:a7:3c:
                    17:56:82:29:f4:0d:f4:f4:bf:a6:fd:16:19:06:ef:
                    f5:9b:b9:8d:c7:1e:ce:2b:38:c2:45:82:bc:c6:c1:
                    04:3d:79:00:97:1b:28:7d:d5:5f:62:8f:f9:aa:22:
                    dd:db:6c:86:10:5d:59:a5:47:da:24:62:10:7d:a3:
                    06:f7:19:02:9d:22:c2:2f:04:f2:00:60:50:44:51:
                    b2:25:34:8f:69:e9:f2:96:5b:2a:7a:e5:da:73:5b:
                    97:92:bc:d7:99:ca:6a:06:3c:b4:fb:e8:98:60:b3:
                    66:0c:b3:9e:9b:a3:97:0c:33:74:62:94:06:21:dc:
                    0c:b6:65:27:c3:b9:5e:bb:53:df:c8:d0:fc:0a:7f:
                    f7:d3:0f:63:ed:39:6a:28:1d:a6:73:52:71:51:ea:
                    cb:cd:75:04:ec:72:a6:8a:37:21:91:8d:51:f8:d1:
                    71:69:d8:2b:50:90:ae:b4:bb:f8:0b:36:c1:90:ed:
                    0e:3b:b5:a2:34:1b:5c:bc:1c:4d:e7:9a:f7:a8:98:
                    67:ab:42:58:c7:ff:4a:fa:62:d5:18:df:7f:53:72:
                    bb:65:a1:db:47:ac:6d:26:39:0a:b5:35:1b:cd:00:
                    fe:fd:88:15:ad:db:1a:08:fa:43:88:db:d8:e3:86:
                    9f:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:82:82:75:97:97:4C:80:A3:0C:B3:7F:07:20:E1:67:41:78:D2:DA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cb48baa8-6c83-45eb-b09b-5fbd1e42c57d/8e29d75c-ea6f-32dc-ad7f-56d0f4a3195f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cb48baa8-6c83-45eb-b09b-5fbd1e42c57d/cb48baa8-6c83-45eb-b09b-5fbd1e42c57d.crl

            X509v3 Authority Key Identifier:
                keyid:E9:36:DC:58:66:FC:68:02:BF:A6:99:DE:B4:DD:13:5E:4C:D1:27:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cb48baa8-6c83-45eb-b09b-5fbd1e42c57d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:48a8::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:58:6a:bc:c9:b4:1d:50:34:c1:96:13:b8:05:67:95:1b:d4:
         5a:84:1b:f4:da:88:a2:96:4a:95:c6:ef:c3:bf:51:4c:36:37:
         25:f8:01:62:00:9c:5a:47:0d:4d:dd:14:04:01:dc:f7:63:68:
         ec:45:3a:19:04:3f:13:ae:48:63:88:94:be:5f:f6:6d:1e:69:
         fe:65:12:f7:3f:3a:8d:c0:68:be:21:0b:c2:4b:9a:b4:42:2e:
         a0:ad:16:de:01:98:97:bd:a7:44:8c:6d:02:66:ac:1a:c0:0d:
         a0:cc:59:7b:25:b7:a2:0a:c0:b6:bb:24:28:f9:9b:0e:99:df:
         5f:a7:cd:d8:5d:44:12:4c:96:9f:ae:52:84:f9:cf:2f:07:de:
         70:49:2c:27:18:b3:af:6e:56:8f:1f:d1:2b:0f:76:55:2d:c4:
         c6:ab:fc:c0:20:21:45:b7:03:6d:04:3f:5b:10:d2:b1:aa:37:
         5f:a1:13:e3:e8:c7:0c:66:78:77:b5:04:05:d7:ff:d5:85:bc:
         d5:34:c1:d4:88:a4:af:96:bd:32:6d:08:df:72:a4:73:3a:1f:
         8e:e7:0e:62:fd:3c:81:c3:db:67:18:4e:63:8f:05:bc:3d:b5:
         32:a1:4a:2a:2a:1b:e6:7a:f4:57:12:31:27:15:ab:09:67:b7:
         48:5a:20:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:37:37 2026 by rpki-client