Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/96eac335-ee45-3251-88b5-94262c7b18c9.roa
File:                     96eac335-ee45-3251-88b5-94262c7b18c9.roa (raw, json)
Hash identifier:          LtKHUnSKsS8EmlYUWT4F7aEfZ8FQryyeeoXyMMYpzVc=
Subject key identifier:   0D:6D:D5:3B:2F:C5:05:3F:39:FD:42:2B:44:67:8E:27:F3:EC:32:CB
Certificate issuer:       /CN=f375140c-52cc-401f-b3a0-476ffa367076
Certificate serial:       010D0C9F4328584CB551E42EBB3D2C0EC92E06D0
Authority key identifier: 44:EA:00:A7:AC:0D:83:8E:EC:A5:10:EE:B1:42:FF:0B:98:5E:06:F3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/96eac335-ee45-3251-88b5-94262c7b18c9.roa
Signing time:             Sat 31 Jan 2026 14:00:39 +0000
ROA not before:           Sat 31 Jan 2026 14:00:39 +0000
ROA not after:            Fri 01 May 2026 13:00:39 +0000
asID:                     399976
IP address blocks:        2602:80c:20ab::/48 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:b5:51:e4:2e:bb:3d:2c:0e:c9:2e:06:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f375140c-52cc-401f-b3a0-476ffa367076
        Validity
            Not Before: Jan 31 14:00:39 2026 GMT
            Not After : May  1 13:00:39 2026 GMT
        Subject: CN=9da7b98f-f4c8-4b83-825b-0cdcce8af03d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:6e:0a:b7:d0:16:0f:42:77:e6:91:30:a2:54:
                    3e:20:f3:36:23:2d:e4:31:0a:ff:0b:65:ed:cc:26:
                    f9:f0:9f:9a:39:29:9b:4f:04:9c:c3:50:27:b2:43:
                    94:53:af:da:2d:6e:ca:e7:f6:99:8c:8d:94:f7:c5:
                    b0:c7:e7:72:30:c8:3e:ed:df:b0:dc:b4:7d:60:5b:
                    53:65:42:e8:ce:7e:7d:d1:ca:92:57:6d:a9:9f:bd:
                    d2:bb:99:8e:28:cb:83:ce:f9:9b:d6:99:fd:dc:90:
                    bb:42:b0:82:6b:0e:bf:26:45:eb:ac:12:0d:12:a3:
                    83:80:1b:26:19:70:a4:c5:bb:be:2a:3a:ba:1a:5f:
                    99:91:71:1f:1c:b9:ae:76:26:71:d0:bb:ba:14:85:
                    c2:cd:65:3e:30:89:20:16:53:90:4d:db:34:c3:a1:
                    8b:2b:9e:85:2e:c8:18:8d:0a:e8:bf:27:ed:87:f2:
                    ef:e2:a5:85:31:94:f3:26:b0:36:5d:68:0c:2d:bc:
                    27:be:b2:69:46:04:90:df:b1:59:ca:cb:89:2f:a1:
                    87:02:a9:50:77:6b:bc:a5:c0:b0:af:f8:cb:ca:e6:
                    46:30:09:50:73:19:4a:c3:e2:20:76:d6:ad:de:0d:
                    7d:58:1c:3a:9a:fc:2b:dd:90:30:37:28:93:0a:f7:
                    d8:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:6D:D5:3B:2F:C5:05:3F:39:FD:42:2B:44:67:8E:27:F3:EC:32:CB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/96eac335-ee45-3251-88b5-94262c7b18c9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.crl

            X509v3 Authority Key Identifier:
                keyid:44:EA:00:A7:AC:0D:83:8E:EC:A5:10:EE:B1:42:FF:0B:98:5E:06:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:80c:20ab::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:e5:29:ae:bf:f0:4f:15:af:35:7d:38:69:33:9d:56:6b:43:
         1c:c6:9b:7d:cd:bb:3c:8a:c4:12:9e:4f:05:39:91:18:ff:ef:
         80:05:d6:42:36:54:5e:28:7e:13:24:ba:a1:cf:74:7c:93:36:
         6d:ca:67:a9:22:5a:7d:f3:b6:7e:7e:54:5d:91:ff:2f:e9:ab:
         fd:8a:0b:8f:ef:97:61:c3:c0:6c:85:0c:48:18:7f:e6:0a:80:
         a4:0d:8a:dc:e5:34:97:42:d4:e4:6b:29:cc:19:dd:06:eb:00:
         97:ab:95:2e:cc:b0:24:a0:30:ba:01:06:d6:62:c1:ab:2d:5f:
         f8:86:7d:a6:91:43:65:a0:df:c1:b1:14:ba:26:67:b5:ba:3a:
         f7:da:14:5e:20:84:a4:04:09:d8:4e:8f:21:ff:49:fb:31:a1:
         f1:84:71:c2:38:1d:62:5e:4b:d8:07:49:4d:d0:28:f8:75:0b:
         23:ff:06:a0:cd:f7:39:61:17:54:66:11:ff:62:17:c8:2e:f8:
         16:42:64:db:69:89:62:7c:44:db:7f:b7:5d:f1:0f:de:d3:61:
         75:bb:17:22:37:fc:83:a1:5c:cc:31:a3:e1:86:a3:97:23:8c:
         f9:c0:b6:98:3d:75:10:3a:34:e4:b5:f4:7d:0a:f0:e9:fc:57:
         25:8d:44:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:31:00 2026 by rpki-client