Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/285991ba-0db5-48fe-92ff-d202c357d86d/0ff2f632-9597-3e82-a7a9-c3dd4e5c0a77.roa
File:                     0ff2f632-9597-3e82-a7a9-c3dd4e5c0a77.roa (raw, json)
Hash identifier:          fCK3tO/5JZcpOKwRn37Gks1uOqvTH1E+7h4bm31X2tI=
Subject key identifier:   99:2D:19:34:6E:2D:5F:4A:CB:3C:B0:3D:45:54:47:08:AE:12:FD:CF
Certificate issuer:       /CN=285991ba-0db5-48fe-92ff-d202c357d86d
Certificate serial:       010D0C9F4328584CC77740A9D516969CDE040900
Authority key identifier: 86:69:8E:49:CA:3C:6A:83:04:D5:1A:23:C4:61:62:AF:AC:01:42:AF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/285991ba-0db5-48fe-92ff-d202c357d86d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/285991ba-0db5-48fe-92ff-d202c357d86d/0ff2f632-9597-3e82-a7a9-c3dd4e5c0a77.roa
Signing time:             Sat 07 Feb 2026 02:00:31 +0000
ROA not before:           Sat 07 Feb 2026 02:00:31 +0000
ROA not after:            Fri 08 May 2026 01:00:31 +0000
asID:                     31998
IP address blocks:        2605:ed40::/32 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/285991ba-0db5-48fe-92ff-d202c357d86d/285991ba-0db5-48fe-92ff-d202c357d86d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/285991ba-0db5-48fe-92ff-d202c357d86d/285991ba-0db5-48fe-92ff-d202c357d86d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/285991ba-0db5-48fe-92ff-d202c357d86d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:c7:77:40:a9:d5:16:96:9c:de:04:09:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=285991ba-0db5-48fe-92ff-d202c357d86d
        Validity
            Not Before: Feb  7 02:00:31 2026 GMT
            Not After : May  8 01:00:31 2026 GMT
        Subject: CN=b807d1a2-79df-4945-9cba-7c6b7228ec09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:21:7c:4e:63:d7:e6:84:9a:5c:c4:48:12:53:
                    c7:39:17:de:c8:8f:be:e3:81:2d:83:f5:45:95:1e:
                    d0:61:de:e0:16:2c:22:34:2f:d1:ff:02:60:38:b1:
                    b0:a3:71:b3:be:b9:5c:ff:1d:4e:6f:d3:59:28:5d:
                    99:ec:31:43:5d:e7:30:f8:a6:c0:04:44:bf:c1:23:
                    1c:7d:57:db:03:65:07:ab:ad:a2:1c:56:9f:05:1b:
                    7e:15:76:b1:2d:1f:e1:6e:f5:a8:bb:04:0d:6c:1a:
                    ba:6c:b3:bb:63:e7:02:ee:f9:bf:bd:0d:24:27:05:
                    8b:25:32:e7:71:fd:55:70:53:36:41:28:33:a0:d7:
                    5d:f8:61:2e:cd:e4:da:8a:bc:e8:d2:02:08:77:91:
                    b4:ef:2c:a0:42:84:5b:df:0b:9b:26:9e:e6:ef:e0:
                    2e:3a:d4:1b:81:21:81:61:77:42:26:a1:f7:2d:47:
                    bf:f2:b8:57:0e:33:40:77:d4:ec:ab:1b:e7:bc:33:
                    0d:fe:ae:8b:c0:09:b5:c6:84:ed:ff:6f:f6:f9:50:
                    57:3d:5b:7f:27:22:c4:5e:b6:9a:ee:be:47:87:51:
                    b9:be:4a:aa:c7:55:d2:01:2c:7b:91:8f:a1:d0:15:
                    d4:bf:47:6f:33:83:fe:44:cd:b1:e9:43:47:de:02:
                    e1:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:2D:19:34:6E:2D:5F:4A:CB:3C:B0:3D:45:54:47:08:AE:12:FD:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/285991ba-0db5-48fe-92ff-d202c357d86d/0ff2f632-9597-3e82-a7a9-c3dd4e5c0a77.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/285991ba-0db5-48fe-92ff-d202c357d86d/285991ba-0db5-48fe-92ff-d202c357d86d.crl

            X509v3 Authority Key Identifier:
                keyid:86:69:8E:49:CA:3C:6A:83:04:D5:1A:23:C4:61:62:AF:AC:01:42:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/285991ba-0db5-48fe-92ff-d202c357d86d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:ed40::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:be:36:ef:f8:bf:61:97:5e:59:66:6c:3f:d1:c4:08:f2:b3:
         e1:3d:12:5f:45:f7:37:32:b6:6d:ad:32:ea:2e:b4:51:41:29:
         8a:c4:3f:16:19:02:20:70:f5:de:13:87:0c:31:a7:86:59:38:
         2c:c9:f6:a4:77:a3:16:fe:eb:60:2f:0b:db:48:5d:e5:6b:83:
         41:54:82:98:d4:19:83:8a:96:13:a6:25:5a:54:a5:d4:1e:75:
         11:de:17:37:fb:cb:b1:33:b1:d2:5c:b0:d0:bf:49:da:ab:a5:
         56:a6:16:95:86:46:6e:8d:d0:33:37:a5:c3:44:45:3e:b9:fc:
         0d:cd:20:b2:d2:80:fb:35:40:55:5b:11:fc:27:e4:86:09:f2:
         ad:4b:08:b5:b6:ce:02:f7:95:4d:c7:59:3d:d3:94:cf:2a:f1:
         7d:76:bc:6d:85:cd:8b:94:03:49:b8:1d:3d:4f:59:cd:68:10:
         b0:46:af:21:fb:60:9c:3d:bc:03:23:d3:99:d8:08:46:f6:6c:
         4c:48:d7:60:a8:ee:a9:7c:6d:ae:17:7a:43:ce:ef:52:94:6a:
         02:2b:38:ef:83:46:41:e9:e4:ae:e1:e5:14:05:05:f6:13:6e:
         19:11:ec:b8:61:22:4d:ea:15:9a:18:de:78:8a:99:68:6f:42:
         86:12:45:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:42:31 2026 by rpki-client