Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9/d3fdf038-8080-3b68-81db-64b2a8da1cbb.roa
File:                     d3fdf038-8080-3b68-81db-64b2a8da1cbb.roa (raw, json)
Hash identifier:          nrvGmtfEDV8OMjPA1rFLCAdi6VGROxN8pNbH6sqGAa0=
Subject key identifier:   C9:15:78:42:27:55:08:EA:DB:F8:05:B5:49:07:55:64:02:0B:49:1E
Certificate issuer:       /CN=73c8aa7b-fac7-4435-95df-f01200da47d9
Certificate serial:       010D0C9F4328584CC611F7D4A5B36EF127371160
Authority key identifier: E3:BF:70:21:DC:44:59:AF:5C:63:F9:78:44:66:37:C6:0A:5D:B3:1C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9/d3fdf038-8080-3b68-81db-64b2a8da1cbb.roa
Signing time:             Fri 06 Feb 2026 14:00:40 +0000
ROA not before:           Fri 06 Feb 2026 14:00:40 +0000
ROA not after:            Thu 07 May 2026 13:00:40 +0000
asID:                     16509
IP address blocks:        2602:f98b:10::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9/73c8aa7b-fac7-4435-95df-f01200da47d9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9/73c8aa7b-fac7-4435-95df-f01200da47d9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:c6:11:f7:d4:a5:b3:6e:f1:27:37:11:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73c8aa7b-fac7-4435-95df-f01200da47d9
        Validity
            Not Before: Feb  6 14:00:40 2026 GMT
            Not After : May  7 13:00:40 2026 GMT
        Subject: CN=c0f7b21e-e57e-401e-8f46-eef53a976d1f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:96:44:c8:4d:1c:53:bc:7d:0b:f1:22:50:77:
                    f3:b6:a2:b4:27:01:40:6b:94:67:9e:8a:58:06:ac:
                    69:77:44:61:e1:65:6b:ba:ef:16:94:0c:38:06:03:
                    77:a5:05:be:de:e4:b4:f8:21:80:d4:87:5e:ad:56:
                    4c:d6:b6:cc:a4:57:7b:12:2f:6c:17:29:28:3b:62:
                    7d:5e:be:9d:5e:d3:d3:39:d8:a7:23:bd:b0:15:58:
                    63:e1:5c:f7:f7:57:90:a8:43:51:87:9e:a8:78:3c:
                    1f:cb:b9:f3:cc:2e:82:13:80:34:76:25:4b:50:da:
                    5b:28:63:77:57:d7:77:a5:01:59:e3:42:25:5a:f0:
                    b9:f9:d9:62:e8:df:e8:2b:b8:3a:96:a4:b2:45:70:
                    37:81:b5:d8:a1:1e:51:42:7e:7e:4b:43:4a:1a:15:
                    03:58:2c:50:3d:af:89:7e:c6:ad:f7:ab:f6:80:77:
                    1f:93:60:ad:1f:d3:e7:39:6d:07:b5:e7:8b:6c:59:
                    40:d1:89:77:db:63:10:d9:78:3a:7d:92:2b:9e:ac:
                    d2:e5:ba:fb:12:0d:12:b6:16:42:e7:7b:a4:11:fe:
                    81:ef:98:92:9f:d7:2f:4f:ca:f7:fc:b5:72:4a:03:
                    34:06:e9:4f:c7:7b:d4:18:ca:22:45:eb:95:7d:25:
                    86:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:15:78:42:27:55:08:EA:DB:F8:05:B5:49:07:55:64:02:0B:49:1E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9/d3fdf038-8080-3b68-81db-64b2a8da1cbb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9/73c8aa7b-fac7-4435-95df-f01200da47d9.crl

            X509v3 Authority Key Identifier:
                keyid:E3:BF:70:21:DC:44:59:AF:5C:63:F9:78:44:66:37:C6:0A:5D:B3:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f98b:10::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9a:39:54:26:e5:af:c2:7e:c6:67:9d:37:12:d1:d3:7c:9f:b1:
         33:78:0c:71:80:ec:91:fe:de:05:bf:2d:95:c4:92:d1:6f:f6:
         79:16:81:98:a3:d2:9a:d8:33:3b:d9:e9:27:44:70:96:06:0e:
         f4:ae:f8:ab:3a:20:4c:e4:58:79:2c:b2:5b:58:24:90:f1:4b:
         a1:58:94:83:96:42:b9:d7:51:55:12:86:24:e7:66:af:9c:d3:
         f0:18:3f:1b:c8:cb:19:7b:31:7a:db:66:82:fc:c7:fe:e9:aa:
         73:ca:6e:eb:3f:92:23:9b:d0:01:24:80:ac:53:1a:1a:99:41:
         ce:b3:b6:51:88:9f:f0:fb:89:27:3a:0b:6b:fd:09:bd:6d:5e:
         ba:bf:fc:90:a3:8d:68:41:65:fb:1d:4a:55:9c:5e:d0:49:0d:
         ab:53:9d:1f:e3:fa:bf:24:1a:34:21:8a:c4:b2:d0:8d:48:74:
         0a:c6:b9:56:47:eb:41:30:8d:4d:d7:09:61:a5:01:1a:fb:51:
         fc:94:fb:85:7b:20:e5:39:5e:1e:d9:92:2b:10:75:71:85:4f:
         42:3b:22:30:fc:75:c3:e3:5e:02:aa:4d:4e:62:25:03:d9:a8:
         f2:70:01:35:37:df:b5:41:28:ef:9a:57:d0:07:14:d4:14:5c:
         66:9a:ee:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:39:23 2026 by rpki-client