Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/37e69330-3024-406b-b60a-0d95e25f2334/159ce2e2-439c-3ae6-bef5-1d2f7b464941.roa
File:                     159ce2e2-439c-3ae6-bef5-1d2f7b464941.roa (raw, json)
Hash identifier:          Fim5eXgg58AM4l815PPTUn7U+ayvbpGnbyDk6N1HOsA=
Subject key identifier:   27:2B:E8:9C:22:1B:7F:1E:87:78:4B:3B:CB:40:5A:36:61:57:C3:BF
Certificate issuer:       /CN=37e69330-3024-406b-b60a-0d95e25f2334
Certificate serial:       010D0C9F4328584CF6ECDD3B06DAA3F995803000
Authority key identifier: 97:16:A9:AB:66:95:3F:3F:2C:40:FC:1D:33:63:85:A7:45:D4:65:39
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/37e69330-3024-406b-b60a-0d95e25f2334.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/37e69330-3024-406b-b60a-0d95e25f2334/159ce2e2-439c-3ae6-bef5-1d2f7b464941.roa
Signing time:             Tue 24 Feb 2026 02:00:31 +0000
ROA not before:           Tue 24 Feb 2026 02:00:31 +0000
ROA not after:            Mon 25 May 2026 01:00:31 +0000
asID:                     401390
IP address blocks:        2602:f7da:32::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/37e69330-3024-406b-b60a-0d95e25f2334/37e69330-3024-406b-b60a-0d95e25f2334.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/37e69330-3024-406b-b60a-0d95e25f2334/37e69330-3024-406b-b60a-0d95e25f2334.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/37e69330-3024-406b-b60a-0d95e25f2334.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:f6:ec:dd:3b:06:da:a3:f9:95:80:30:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37e69330-3024-406b-b60a-0d95e25f2334
        Validity
            Not Before: Feb 24 02:00:31 2026 GMT
            Not After : May 25 01:00:31 2026 GMT
        Subject: CN=47cad4a9-9790-46e7-820b-495a93b1e78c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:14:40:f6:7d:07:64:9b:dc:94:24:6d:ee:bb:
                    3c:0d:15:8a:cf:27:c5:b6:33:bb:33:65:00:9d:8a:
                    dd:4b:87:75:c1:f8:31:60:79:b7:c2:d6:01:1a:d3:
                    a8:25:e8:b9:81:34:02:f0:5f:70:2a:2f:f3:e1:e9:
                    43:61:87:56:16:c6:a8:13:24:24:e2:1c:4c:b3:6f:
                    0a:45:bf:88:d3:dc:7d:9a:09:9a:21:46:25:50:de:
                    05:84:37:7e:b2:95:7c:75:8a:7c:04:a5:3e:6f:9a:
                    d4:c4:82:76:d6:30:c7:36:eb:c8:85:06:bd:4d:c3:
                    32:5c:9e:37:d4:83:15:3a:e2:29:d5:3c:04:7d:7e:
                    9d:df:d0:bc:6a:93:9c:1a:d5:dc:12:79:49:31:ea:
                    18:e8:da:a7:ca:7c:a9:36:b3:e9:7a:c6:14:8a:fc:
                    d6:b0:78:9c:c4:10:d9:e3:8b:91:cc:d3:41:cc:0f:
                    46:53:71:1a:b3:55:91:a8:3b:25:9f:b5:17:ac:93:
                    ce:9a:f4:09:ad:d4:9d:a8:37:b1:44:75:33:ee:d4:
                    7f:9e:5d:38:0d:e8:94:f4:08:fc:79:a9:33:5f:70:
                    c9:66:7b:d3:13:7e:05:5d:95:59:33:20:d6:89:f6:
                    8d:06:04:1d:19:4e:41:56:4b:94:a0:46:28:8c:eb:
                    f2:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:2B:E8:9C:22:1B:7F:1E:87:78:4B:3B:CB:40:5A:36:61:57:C3:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/37e69330-3024-406b-b60a-0d95e25f2334/159ce2e2-439c-3ae6-bef5-1d2f7b464941.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/37e69330-3024-406b-b60a-0d95e25f2334/37e69330-3024-406b-b60a-0d95e25f2334.crl

            X509v3 Authority Key Identifier:
                keyid:97:16:A9:AB:66:95:3F:3F:2C:40:FC:1D:33:63:85:A7:45:D4:65:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/37e69330-3024-406b-b60a-0d95e25f2334.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f7da:32::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:0c:76:b6:72:3b:f7:38:93:3d:6f:1d:98:ea:9e:8d:f5:82:
         49:2f:eb:cf:61:3b:fe:1b:c2:e2:5c:bc:67:a6:a3:e7:39:94:
         58:dd:e8:47:91:82:a1:17:17:a9:b5:52:b3:60:d2:56:dc:3b:
         b7:38:2f:34:20:36:17:c7:56:b0:97:54:6d:22:a7:dd:13:43:
         b0:e1:c4:b4:fc:33:1e:0a:37:5a:65:43:97:fd:91:31:d3:c0:
         d9:c9:2b:ac:79:64:fc:8f:33:8d:ab:59:e6:26:2f:81:f5:88:
         a9:c2:96:4b:2e:a6:7e:41:a6:36:4b:e9:3e:5b:a2:b6:b8:1c:
         34:6b:fc:d1:93:75:d2:64:ce:f2:5e:89:30:06:e8:fe:6d:45:
         b4:dc:a7:fd:88:cd:63:77:64:d2:9b:e9:1c:59:10:3a:70:15:
         8a:a4:62:f0:91:bb:f1:13:3b:e3:55:53:26:dc:ca:4d:e4:a1:
         7c:ae:33:91:4b:cb:f3:de:60:f0:52:8b:7c:fd:89:a2:e3:57:
         62:d2:71:a0:6c:95:69:f0:8e:1c:28:54:04:bd:77:f0:9f:c3:
         62:45:5e:3f:19:f0:0f:6e:a4:cb:68:ec:0e:48:1c:9e:d6:68:
         0a:4d:6c:7c:56:81:26:8d:d0:e6:22:a1:77:2f:55:36:41:97:
         53:7a:3f:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:07:40 2026 by rpki-client