Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/7af76982-96b5-37be-836c-3c4e67f26093.roa
File:                     7af76982-96b5-37be-836c-3c4e67f26093.roa (raw, json)
Hash identifier:          KB4F4vP3n6wlSCGdwcrTht2rXCg0+jsXMnk4UvV0PJg=
Subject key identifier:   F8:04:52:86:18:43:CF:F6:EA:95:80:93:21:98:68:EE:C6:88:F0:8E
Certificate issuer:       /CN=0ab2447c-9735-4548-ac30-fc578e8e36ba
Certificate serial:       010D0C9F4328584CE62CC25601EA01A79FD180F0
Authority key identifier: 50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/7af76982-96b5-37be-836c-3c4e67f26093.roa
Signing time:             Wed 18 Feb 2026 02:00:31 +0000
ROA not before:           Wed 18 Feb 2026 02:00:31 +0000
ROA not after:            Tue 19 May 2026 01:00:31 +0000
asID:                     22781
IP address blocks:        2607:fb50:2000::/36 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:e6:2c:c2:56:01:ea:01:a7:9f:d1:80:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ab2447c-9735-4548-ac30-fc578e8e36ba
        Validity
            Not Before: Feb 18 02:00:31 2026 GMT
            Not After : May 19 01:00:31 2026 GMT
        Subject: CN=2b68d1bb-1d03-404f-9244-d088e9433b71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:7d:af:7f:81:4b:9f:1d:75:e3:89:5c:78:eb:
                    ce:6b:fb:82:61:73:e4:21:56:1f:a7:fb:58:d6:a2:
                    76:e1:6d:14:5b:ed:e9:88:8d:68:9b:2b:7a:60:15:
                    19:68:d2:96:fe:5d:f8:62:d6:14:f6:5a:c7:6d:c2:
                    b0:9c:e0:3d:65:09:a6:63:00:f4:54:d3:d3:01:49:
                    2c:6f:81:f1:a8:71:2e:54:3a:d1:6c:66:33:13:d9:
                    72:02:aa:f7:60:17:a9:e5:13:4d:3e:ab:6c:6e:3f:
                    03:e3:57:2c:50:0f:fc:ee:7b:00:32:5c:64:ec:4a:
                    f1:9f:28:76:45:f8:0d:c4:5d:23:c2:b8:5d:e5:e5:
                    78:ce:4c:3d:13:fa:52:34:cd:79:a9:33:ee:7b:5b:
                    ed:a2:0b:a0:e1:bc:8c:c6:46:ec:76:b7:5d:f1:8d:
                    d0:00:a5:62:83:19:fb:fd:7d:2d:e1:ea:a7:de:dd:
                    65:6b:73:27:70:24:83:c0:16:76:cb:7d:32:99:07:
                    66:9a:bd:9e:f5:e7:96:5d:f3:ee:4d:d3:a1:96:5b:
                    42:34:24:00:17:8f:64:39:13:9d:12:b9:b4:dc:7d:
                    af:19:b8:d7:ff:03:43:d0:c8:96:ff:f0:c5:09:4f:
                    f6:0f:3a:6d:d2:27:66:7d:96:14:3a:d6:ae:73:a3:
                    a8:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:04:52:86:18:43:CF:F6:EA:95:80:93:21:98:68:EE:C6:88:F0:8E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/7af76982-96b5-37be-836c-3c4e67f26093.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl

            X509v3 Authority Key Identifier:
                keyid:50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:fb50:2000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:07:d9:52:44:6f:e1:97:44:67:4b:08:ca:d4:97:05:87:85:
         91:56:56:75:2a:fc:b1:46:f6:d8:99:27:a8:f2:0b:ae:06:a1:
         ea:f9:00:4f:50:00:0b:5d:26:5d:46:2b:d5:8a:d1:04:f2:72:
         75:a0:23:ec:12:a9:e6:54:ed:56:5d:5f:4f:ee:ed:f7:1d:74:
         72:50:cc:84:4d:1a:d4:c1:d6:5a:c2:2e:ef:6b:ec:e9:73:d7:
         18:b0:c1:1d:40:72:e2:2e:b5:75:a5:65:b3:22:4c:c1:be:c7:
         a1:f1:03:0b:96:6a:11:46:7c:2a:f4:06:82:ab:15:6f:a8:c2:
         80:36:23:d0:14:e9:4d:87:e2:66:6e:f2:4f:29:c4:3d:ba:86:
         3e:b0:8d:3b:e7:c6:87:ad:97:46:b0:06:15:ef:5c:50:dc:4b:
         36:9c:4e:b3:a8:a9:f7:19:d9:3b:06:54:1f:bb:2f:6b:32:b0:
         ee:79:97:49:8f:22:10:b7:ed:0e:66:ce:12:d7:ec:91:63:30:
         27:42:50:91:49:c7:cc:d0:47:3b:ed:e5:65:64:5f:e1:05:c8:
         fd:04:83:2e:35:9e:17:63:aa:0b:06:ff:ea:68:94:a9:e0:42:
         f4:c3:64:61:8e:7f:9e:94:74:d7:de:05:a9:11:7e:de:e4:70:
         11:14:2d:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:31:41 2026 by rpki-client