Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/293283ce-c8b2-3ca8-8fa3-ff57676a820d.roa
File:                     293283ce-c8b2-3ca8-8fa3-ff57676a820d.roa (raw, json)
Hash identifier:          IKrkk9xIqTk6ZMr5U3OvcqQxFp8qPr3IWz0bA+1R73Q=
Subject key identifier:   28:5C:D1:CE:3A:20:68:2C:5E:D0:54:C6:60:57:26:6D:03:BE:D8:1D
Certificate issuer:       /CN=f375140c-52cc-401f-b3a0-476ffa367076
Certificate serial:       010D0C9F4328584CB551F2B6A730AAE0926CD400
Authority key identifier: 44:EA:00:A7:AC:0D:83:8E:EC:A5:10:EE:B1:42:FF:0B:98:5E:06:F3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/293283ce-c8b2-3ca8-8fa3-ff57676a820d.roa
Signing time:             Sat 31 Jan 2026 14:00:39 +0000
ROA not before:           Sat 31 Jan 2026 14:00:39 +0000
ROA not after:            Fri 01 May 2026 13:00:39 +0000
asID:                     399976
IP address blocks:        2602:80c:2045::/48 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:b5:51:f2:b6:a7:30:aa:e0:92:6c:d4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f375140c-52cc-401f-b3a0-476ffa367076
        Validity
            Not Before: Jan 31 14:00:39 2026 GMT
            Not After : May  1 13:00:39 2026 GMT
        Subject: CN=7ccbbfb2-0b10-4f6c-95de-c1b2ef0c84c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:6b:80:ad:06:a2:a8:ad:ef:65:0a:35:1c:ec:
                    de:98:c2:78:99:1e:ae:b0:a5:f8:15:38:59:0c:9b:
                    ac:b9:44:5f:3e:c1:d0:88:18:5f:e4:a8:7d:25:31:
                    91:07:ab:5b:e1:20:ea:ca:e0:24:4f:fb:af:42:f6:
                    56:0f:dd:a4:b7:47:d9:ea:a1:ae:36:ed:ca:da:d6:
                    d5:b7:e5:65:3f:1a:32:bf:97:86:bf:a9:3d:47:dd:
                    4c:cc:a8:3a:3a:5e:0f:52:82:ad:e0:92:bf:08:b7:
                    93:0e:a8:78:e1:15:97:03:fd:ea:96:5e:a2:3c:a1:
                    3d:6b:d2:86:ff:ca:29:f2:c0:0a:c3:f9:fb:91:a8:
                    3a:79:37:55:6f:0f:bc:0d:af:2a:7f:26:a5:e1:7a:
                    b7:3e:d3:be:6a:89:bd:a1:e3:70:23:34:b7:5d:fd:
                    43:42:a6:86:d1:b0:bd:3e:c8:02:23:9a:46:2e:bf:
                    af:a5:49:81:08:4a:35:d0:ee:52:d3:a6:83:d6:99:
                    d4:10:7a:1d:97:e4:87:a8:36:5a:69:92:c6:41:70:
                    b8:00:55:7b:9e:ee:c5:40:31:30:0c:59:e7:88:e9:
                    cd:64:35:5d:9b:b4:28:99:71:d4:56:79:4f:92:41:
                    8b:84:ba:74:f4:47:ab:3b:51:b0:64:bd:35:09:53:
                    20:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:5C:D1:CE:3A:20:68:2C:5E:D0:54:C6:60:57:26:6D:03:BE:D8:1D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/293283ce-c8b2-3ca8-8fa3-ff57676a820d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.crl

            X509v3 Authority Key Identifier:
                keyid:44:EA:00:A7:AC:0D:83:8E:EC:A5:10:EE:B1:42:FF:0B:98:5E:06:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:80c:2045::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:53:f6:23:99:c6:96:03:5c:51:a7:d2:2a:8a:4d:69:52:34:
         91:09:42:08:92:79:92:19:86:d8:d9:26:53:de:5a:6e:97:25:
         25:2a:e4:29:fc:28:80:ed:f9:5d:74:af:96:f6:e6:16:ac:a3:
         71:b4:5d:ae:9d:0c:4b:4a:39:23:0d:34:c5:22:c5:dc:e0:29:
         d1:07:b2:82:27:63:e5:2a:a6:56:0d:40:1b:97:76:09:3a:b5:
         be:5e:a7:49:36:28:c5:fc:29:71:32:fb:78:7c:12:b8:2b:ca:
         3e:d2:c4:b6:2a:2e:a0:5e:81:d4:32:e1:d3:bf:5b:b5:12:7c:
         11:72:4f:a9:64:f6:f1:13:cf:7c:3c:17:b2:6f:90:42:c9:59:
         60:19:c1:00:97:8d:88:60:85:7d:cb:0b:95:bd:28:b6:dd:df:
         f3:c6:f7:c0:4e:d2:a6:4f:eb:67:2b:2d:05:96:91:47:39:89:
         54:b7:a7:be:c9:d1:ef:66:cc:ad:84:f5:ea:bd:a1:e2:ef:3b:
         ce:c1:40:35:ab:6b:25:0a:9f:86:17:29:29:a0:93:44:c8:6f:
         87:b8:87:87:1f:67:bf:de:04:5a:e8:6b:43:42:68:9b:f2:42:
         c9:a9:08:b3:1a:08:88:3a:1c:b0:8d:cf:66:d7:d8:ad:25:c0:
         a0:aa:f1:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:01:48 2026 by rpki-client