Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/72aadc42-a6b6-3f1e-a9b2-c3d46ec632da.roa
File:                     72aadc42-a6b6-3f1e-a9b2-c3d46ec632da.roa (raw, json)
Hash identifier:          /FB9LS5r2S4ddf6kR9bWsZfsMCb8NicqVRpoyn6VvaU=
Subject key identifier:   3F:92:4C:A2:E2:B8:CA:FB:E9:18:C1:3F:74:6E:D3:39:73:F7:6B:2D
Certificate issuer:       /CN=f375140c-52cc-401f-b3a0-476ffa367076
Certificate serial:       010D0C9F4328584CB551F255118C0CE78D34B4C0
Authority key identifier: 44:EA:00:A7:AC:0D:83:8E:EC:A5:10:EE:B1:42:FF:0B:98:5E:06:F3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/72aadc42-a6b6-3f1e-a9b2-c3d46ec632da.roa
Signing time:             Sat 31 Jan 2026 14:00:39 +0000
ROA not before:           Sat 31 Jan 2026 14:00:39 +0000
ROA not after:            Fri 01 May 2026 13:00:39 +0000
asID:                     399976
IP address blocks:        2602:80c:2000::/36 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:b5:51:f2:55:11:8c:0c:e7:8d:34:b4:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f375140c-52cc-401f-b3a0-476ffa367076
        Validity
            Not Before: Jan 31 14:00:39 2026 GMT
            Not After : May  1 13:00:39 2026 GMT
        Subject: CN=a04b50ab-9e1b-46aa-972f-496da20d84ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:7b:eb:65:c1:36:32:74:8d:71:71:f8:8a:23:
                    03:22:f3:8e:20:2f:5c:a7:5a:c4:c3:65:45:43:46:
                    b5:34:8f:fa:4f:a4:be:56:8c:64:a8:f2:04:af:11:
                    de:65:75:c2:ef:38:43:39:43:3c:5e:26:4d:0a:dc:
                    b9:ea:bf:69:44:2f:92:b2:4d:e0:de:ee:14:68:52:
                    38:9e:93:5c:0f:75:67:e2:8b:f4:c2:bb:28:87:fe:
                    f9:a2:ee:6a:7b:a7:46:08:e0:8f:45:0f:f4:4f:da:
                    aa:55:88:92:4b:d2:ff:5b:81:bb:38:32:27:f5:9c:
                    b2:a2:63:a2:42:3c:9c:15:4a:2f:4f:7e:71:37:6a:
                    5a:46:fb:7e:0d:d0:f4:4c:01:f4:86:d0:33:95:71:
                    1e:09:59:14:a0:3a:8b:1d:f8:5e:c9:95:39:bb:77:
                    46:92:0c:38:a4:43:2d:63:56:f8:7d:e0:1e:7a:bf:
                    1a:37:b5:5d:1f:ef:dd:2a:e2:4b:cc:0a:b8:9f:af:
                    d3:0d:7a:05:ef:69:ac:7c:d7:03:3d:15:58:88:92:
                    fe:d9:39:69:a1:b2:54:49:be:0c:e6:52:d0:35:84:
                    eb:58:cd:8f:c2:f6:94:40:23:fd:37:a1:f3:e9:0a:
                    e8:c9:a3:3a:43:54:84:ea:ba:4c:4e:33:70:45:88:
                    3c:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:92:4C:A2:E2:B8:CA:FB:E9:18:C1:3F:74:6E:D3:39:73:F7:6B:2D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/72aadc42-a6b6-3f1e-a9b2-c3d46ec632da.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.crl

            X509v3 Authority Key Identifier:
                keyid:44:EA:00:A7:AC:0D:83:8E:EC:A5:10:EE:B1:42:FF:0B:98:5E:06:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:80c:2000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:e2:37:05:66:c0:d3:e2:cc:7b:c3:5c:67:86:fb:bf:12:4f:
         e4:1a:7d:ab:ed:82:3e:97:63:b5:74:b7:63:15:8c:79:46:fe:
         b6:a4:97:1a:f4:a9:df:0e:45:96:7d:f8:cb:bd:c5:d7:e6:67:
         76:81:1c:91:61:1a:f0:b6:10:3a:f4:17:23:a2:7c:1c:3e:af:
         f9:71:b5:b2:76:b4:16:4d:fa:81:17:d8:b0:9e:b9:94:67:16:
         f0:ea:88:68:f4:92:99:f7:67:12:b5:91:63:49:a0:37:47:97:
         04:39:20:0d:76:4c:5b:ff:40:4f:a2:d1:29:d0:e7:60:1d:c5:
         a1:18:51:f8:ab:a1:9f:9a:51:8a:85:31:e9:13:91:2f:4f:bd:
         b0:34:cd:46:6c:e1:25:61:ef:0f:b5:9c:f9:07:09:50:eb:74:
         bc:34:f5:0b:f7:53:3a:63:f5:41:ac:6a:8d:fc:57:0f:7f:57:
         c1:0a:8f:76:47:c2:32:70:30:5c:b9:92:3b:e6:9e:11:78:c6:
         be:ad:58:6f:57:97:71:20:26:e5:64:4d:e6:fe:9a:40:10:22:
         b7:54:41:08:f4:c4:8b:19:aa:26:8c:58:35:97:ef:3d:e0:a1:
         c9:1c:00:b4:17:d1:6a:6b:73:11:6c:26:92:9b:d6:ef:41:77:
         72:78:af:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:01:49 2026 by rpki-client