Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/1c7d5816-715c-3b3f-a2ae-713cc668588e.roa
File:                     1c7d5816-715c-3b3f-a2ae-713cc668588e.roa (raw, json)
Hash identifier:          9OBDxcpZ549eU80ZbddtGxTJJPQxIGgY03ImaiGMGk8=
Subject key identifier:   98:A3:E3:93:24:0B:CE:EF:53:A3:03:BA:C9:BA:3A:84:75:92:7E:CF
Certificate issuer:       /CN=f375140c-52cc-401f-b3a0-476ffa367076
Certificate serial:       010D0C9F4328584CB551E2FD8B64D151E8C2F3C0
Authority key identifier: 44:EA:00:A7:AC:0D:83:8E:EC:A5:10:EE:B1:42:FF:0B:98:5E:06:F3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/1c7d5816-715c-3b3f-a2ae-713cc668588e.roa
Signing time:             Sat 31 Jan 2026 14:00:39 +0000
ROA not before:           Sat 31 Jan 2026 14:00:39 +0000
ROA not after:            Fri 01 May 2026 13:00:39 +0000
asID:                     399976
IP address blocks:        2602:80c:20a0::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:b5:51:e2:fd:8b:64:d1:51:e8:c2:f3:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f375140c-52cc-401f-b3a0-476ffa367076
        Validity
            Not Before: Jan 31 14:00:39 2026 GMT
            Not After : May  1 13:00:39 2026 GMT
        Subject: CN=bb4ad435-c986-4700-a915-845844c06a07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:3f:b2:de:6e:04:51:df:bb:3b:99:c3:ee:1e:
                    18:98:e2:72:e4:2c:ee:84:e3:2f:eb:7d:3d:8f:f2:
                    c3:df:ca:f4:28:99:d0:31:cb:b4:9e:f4:2b:8e:65:
                    1a:a2:74:1d:5c:3e:df:28:a0:7c:16:1a:29:37:f8:
                    e3:9a:f6:23:d6:55:a7:c3:ee:34:b5:13:89:6f:7a:
                    d8:84:67:a7:35:2a:a1:5a:db:04:5f:64:c6:5d:5e:
                    8c:19:76:36:a8:1d:a8:36:5f:80:b6:ce:4e:fc:36:
                    0e:0f:10:6a:20:cf:83:4d:1b:a4:0a:57:a5:39:29:
                    06:49:2c:1e:fe:12:ed:5a:cf:fd:4e:79:82:f3:4c:
                    26:77:fc:0f:c9:d2:24:bf:a6:b6:71:2e:89:8d:ac:
                    55:c3:58:38:68:0e:ef:4e:3b:3f:8b:2d:15:af:29:
                    12:34:84:37:dc:d2:1d:5e:f9:29:37:cc:d1:4b:19:
                    cc:a6:5b:25:be:e5:87:ea:71:ce:bc:bb:f8:49:9f:
                    34:ab:8f:52:f6:a9:4b:2b:67:f5:61:f5:b6:b9:7c:
                    ce:75:b6:32:97:2f:11:1a:0b:b0:ec:e6:a4:55:1b:
                    59:16:91:4c:a7:fe:d9:15:2b:ba:d0:9f:7c:bc:75:
                    ea:ef:e9:92:cc:43:a3:16:4e:bc:de:37:d1:a7:56:
                    15:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:A3:E3:93:24:0B:CE:EF:53:A3:03:BA:C9:BA:3A:84:75:92:7E:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/1c7d5816-715c-3b3f-a2ae-713cc668588e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.crl

            X509v3 Authority Key Identifier:
                keyid:44:EA:00:A7:AC:0D:83:8E:EC:A5:10:EE:B1:42:FF:0B:98:5E:06:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:80c:20a0::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:4e:bc:11:4e:fb:7e:83:65:d4:8b:a8:30:aa:eb:6a:b0:74:
         1a:37:79:d9:77:0f:e0:77:29:fb:e6:e9:d3:74:15:46:f6:58:
         4f:64:3d:6b:46:5d:31:1e:f8:18:81:e6:dc:21:bf:97:82:cd:
         f5:0a:ff:ab:69:b7:fb:4b:ae:3d:ed:10:c3:02:83:73:34:72:
         b7:de:5a:a2:13:68:de:c0:26:77:4e:25:10:22:3e:7c:cb:7b:
         9e:4a:e8:4c:84:2d:6a:1c:ee:58:57:cd:3b:fb:7d:fb:d9:17:
         db:98:55:e9:aa:0f:d0:32:1d:b9:1c:05:e9:37:56:bd:3d:2e:
         36:e7:b0:8f:c9:57:56:1b:5f:e4:e7:f6:e9:98:77:1f:f0:72:
         c0:23:52:57:3d:e2:4a:2e:ac:93:38:ec:f6:9d:6a:8c:e1:7d:
         0a:cf:0c:3b:91:24:40:35:ab:99:39:df:76:1d:f1:48:ab:01:
         b5:eb:de:13:36:d5:99:0f:34:55:eb:c9:e7:86:ed:47:cc:df:
         7e:c5:65:0f:65:ca:fc:a8:2e:52:2d:28:38:ca:2a:b9:53:e0:
         29:36:5d:29:2b:21:74:eb:f0:20:2e:af:7d:0e:33:dd:8a:8d:
         21:42:c4:72:ab:db:46:64:4b:e0:59:84:af:e5:9b:e1:fa:71:
         a8:1c:eb:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:54:23 2026 by rpki-client