Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/8c736370-3653-3f0e-b1db-5dae81d69d87.roa
File:                     8c736370-3653-3f0e-b1db-5dae81d69d87.roa (raw, json)
Hash identifier:          2gDU1LTht9enVLww28hmXpfGx8xBYfXyIyGU8GXUtJk=
Subject key identifier:   FA:78:B1:6B:B7:9A:45:17:40:0B:3E:05:30:99:16:C2:CC:DE:73:2B
Certificate issuer:       /CN=f375140c-52cc-401f-b3a0-476ffa367076
Certificate serial:       010D0C9F4328584CB551F58C89381AEBA2553D00
Authority key identifier: 44:EA:00:A7:AC:0D:83:8E:EC:A5:10:EE:B1:42:FF:0B:98:5E:06:F3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/8c736370-3653-3f0e-b1db-5dae81d69d87.roa
Signing time:             Sat 31 Jan 2026 14:00:39 +0000
ROA not before:           Sat 31 Jan 2026 14:00:39 +0000
ROA not after:            Fri 01 May 2026 13:00:39 +0000
asID:                     399976
IP address blocks:        2602:80c:20bf::/48 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:b5:51:f5:8c:89:38:1a:eb:a2:55:3d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f375140c-52cc-401f-b3a0-476ffa367076
        Validity
            Not Before: Jan 31 14:00:39 2026 GMT
            Not After : May  1 13:00:39 2026 GMT
        Subject: CN=4a7fbd5a-198d-42cd-8cec-17a8c562718c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:ef:a0:f3:14:a0:bd:c1:81:0b:2b:dc:34:97:
                    f3:f9:fb:97:16:22:a7:52:73:37:3a:78:13:ab:ed:
                    ff:a2:ae:9b:40:da:56:9f:eb:d3:22:95:ac:34:f8:
                    fa:e9:20:e9:36:1b:4a:b9:6a:8f:bd:a8:6d:38:03:
                    36:a5:33:77:d4:ec:56:f1:0e:07:67:78:3f:cd:92:
                    19:69:be:8e:c6:df:ca:9f:58:fc:d8:97:d1:90:cc:
                    3b:fa:bd:26:20:96:61:bc:c4:7e:82:d8:6a:59:e0:
                    c7:a5:d5:55:fe:18:d5:2d:e1:aa:65:38:ed:b7:c9:
                    ec:a4:88:85:8d:03:52:f6:96:c0:c6:af:fc:29:f3:
                    c7:b4:1a:8a:b0:00:4d:c5:52:4f:47:81:d7:bc:94:
                    f8:1a:94:cd:59:e6:e2:2f:f9:18:3b:9f:ee:d9:9f:
                    63:ad:e5:b8:21:76:fc:73:2f:4a:6d:91:63:ea:d9:
                    ed:fc:e0:0c:48:d7:6b:18:9c:be:ed:89:02:2c:d3:
                    d3:b5:7b:1e:f9:e9:46:fd:4d:02:ce:f5:a6:d0:f5:
                    88:bd:f6:16:8f:25:8b:fb:86:76:63:10:55:db:a3:
                    14:fc:7c:b7:ac:55:b7:79:54:21:ec:8d:7c:7b:f1:
                    81:57:f9:69:91:e0:39:73:40:5e:06:85:1f:92:32:
                    03:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:78:B1:6B:B7:9A:45:17:40:0B:3E:05:30:99:16:C2:CC:DE:73:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/8c736370-3653-3f0e-b1db-5dae81d69d87.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.crl

            X509v3 Authority Key Identifier:
                keyid:44:EA:00:A7:AC:0D:83:8E:EC:A5:10:EE:B1:42:FF:0B:98:5E:06:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:80c:20bf::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:44:bf:a2:6a:4c:1b:39:eb:fd:69:af:b0:4a:d3:7f:ac:77:
         62:e4:5a:9d:20:9c:af:a9:01:06:ac:e9:d7:9d:45:bc:0d:1b:
         e6:34:57:03:94:2e:98:00:1b:22:39:86:70:95:78:d0:99:c6:
         ac:37:2f:54:36:7b:a9:85:ff:b0:fc:0f:f6:93:51:f4:b6:86:
         da:69:e0:d4:6f:06:a9:0b:6f:c7:12:33:79:3d:e1:2d:0b:ef:
         aa:9e:76:7b:fc:3e:34:b5:53:a5:c6:0c:f8:09:6b:a1:ae:5b:
         c0:87:52:49:32:25:67:26:ce:44:79:51:c1:1d:63:13:74:4f:
         dc:9e:97:09:20:f4:58:e0:02:cd:d1:ed:9f:31:d9:51:c2:b1:
         fa:4c:ab:25:51:6b:fa:f1:b0:43:e7:26:98:8d:56:f3:af:5b:
         21:ef:4f:82:aa:ea:9f:21:97:b3:1e:a8:bb:c6:3a:36:71:bf:
         2d:34:69:a8:f9:ee:03:2b:16:60:9b:49:67:41:64:40:a2:ef:
         6c:24:b5:90:c7:2c:a2:e2:3e:5a:8c:e4:22:37:01:9d:10:a5:
         05:04:0f:f0:65:57:31:c9:cf:94:72:e1:e4:37:d1:bf:a8:c3:
         96:59:02:9b:2b:46:03:24:e7:ed:c0:57:24:21:14:0c:b0:b0:
         04:69:66:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:03:14 2026 by rpki-client