Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/297cec36-53ae-3109-95ae-7f3a1452bc0f.roa
File:                     297cec36-53ae-3109-95ae-7f3a1452bc0f.roa (raw, json)
Hash identifier:          U9Ylr+3ywq7mq5aLvwgu9XzTpCWi3kc40hoA2Otg36w=
Subject key identifier:   AE:DC:B5:F3:3D:8D:77:9F:B0:9A:79:09:B5:49:00:85:F5:95:59:92
Certificate issuer:       /CN=f375140c-52cc-401f-b3a0-476ffa367076
Certificate serial:       010D0C9F4328584CB551F34BC01379B9DAC83800
Authority key identifier: 44:EA:00:A7:AC:0D:83:8E:EC:A5:10:EE:B1:42:FF:0B:98:5E:06:F3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/297cec36-53ae-3109-95ae-7f3a1452bc0f.roa
Signing time:             Sat 31 Jan 2026 14:00:39 +0000
ROA not before:           Sat 31 Jan 2026 14:00:39 +0000
ROA not after:            Fri 01 May 2026 13:00:39 +0000
asID:                     399976
IP address blocks:        2602:80c:204f::/48 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:b5:51:f3:4b:c0:13:79:b9:da:c8:38:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f375140c-52cc-401f-b3a0-476ffa367076
        Validity
            Not Before: Jan 31 14:00:39 2026 GMT
            Not After : May  1 13:00:39 2026 GMT
        Subject: CN=4297c0e2-1523-417c-b5fc-aa45048e9a0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:93:3b:e8:4f:e1:ea:48:fd:04:b2:5c:9c:46:
                    e2:15:7d:f7:d1:65:97:58:f8:54:fc:2d:e8:07:6c:
                    3d:89:8b:2f:c2:18:de:72:ee:74:e2:61:f1:c2:f8:
                    dd:1a:98:9f:51:4a:f1:8a:f8:f2:06:69:fc:71:20:
                    f8:84:8f:f6:dc:5d:90:4d:60:2e:48:d3:56:61:5b:
                    5e:69:dd:d9:79:1f:16:58:3e:2b:8a:91:60:23:a7:
                    c8:e3:5f:f9:e9:5e:0e:1b:4f:cc:fd:4e:fe:27:14:
                    12:3a:b1:93:79:0f:d9:91:ee:34:3a:5a:d8:6f:ac:
                    33:bc:43:a0:19:17:dc:18:de:4c:ca:64:d2:41:29:
                    da:be:4c:17:b1:7c:b6:86:81:9d:8d:e4:62:4e:a0:
                    41:c3:70:9a:0b:c6:74:f7:d1:09:48:dc:ff:74:b4:
                    b1:57:1f:67:4d:63:8f:94:40:a1:7b:84:17:20:8b:
                    26:df:92:72:03:66:7a:31:6d:f9:51:0e:91:58:b8:
                    16:97:f9:bc:6d:68:1f:25:8f:c6:d6:4c:c9:76:72:
                    9e:ff:57:98:c7:e3:58:ea:ea:43:7d:04:9b:64:a8:
                    bf:e6:13:37:34:d3:1e:41:38:0e:1e:a0:80:74:0c:
                    e1:93:91:91:55:bd:32:88:1f:a7:f9:3d:12:39:81:
                    45:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:DC:B5:F3:3D:8D:77:9F:B0:9A:79:09:B5:49:00:85:F5:95:59:92
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/297cec36-53ae-3109-95ae-7f3a1452bc0f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.crl

            X509v3 Authority Key Identifier:
                keyid:44:EA:00:A7:AC:0D:83:8E:EC:A5:10:EE:B1:42:FF:0B:98:5E:06:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:80c:204f::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:6e:bf:dd:80:59:b3:e8:c4:b5:0e:16:fb:3a:af:fb:6d:d3:
         d4:cd:d0:11:8a:2b:cb:90:3c:fc:b3:c5:7c:b9:d0:e0:90:44:
         65:d5:95:56:c0:b9:0a:be:df:ab:53:4c:0a:d2:94:d1:31:8c:
         a1:b5:a3:15:9a:e2:b2:9e:4a:4c:10:de:16:72:9d:94:85:bd:
         a9:10:0b:a8:95:65:2d:ea:fe:4f:08:95:5d:c5:b6:8d:45:b3:
         eb:67:20:60:dc:7b:6e:71:cf:fd:b4:55:a6:ac:cb:b5:98:8c:
         4c:7b:22:a3:9a:a8:e7:76:c2:da:e2:0a:a2:70:f3:8d:81:1b:
         7e:bb:bd:c1:36:fe:93:13:f4:db:80:9c:73:0f:02:b0:d6:af:
         16:c2:97:c6:d1:c3:41:15:5d:90:bf:c4:c8:78:b6:0a:2b:2c:
         28:5b:7a:39:4d:e0:4c:f6:70:39:b1:a6:a6:f3:b8:d7:1e:36:
         55:cb:14:f5:3d:99:b2:0f:44:3d:ae:9e:92:fc:0b:39:1f:12:
         a6:b6:3f:46:d3:a9:af:bc:a4:bd:de:a9:77:58:dd:88:ee:ea:
         51:50:89:aa:bf:c8:34:0d:9c:0f:30:8e:d2:56:c7:8f:35:6e:
         aa:4d:e5:cc:6f:4b:e1:49:a7:b5:b3:a7:ee:e6:d1:d9:93:e2:
         09:c2:40:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:47:45 2026 by rpki-client