Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/81124fe6-8868-3b33-81c8-e7094bbfe628.roa
File:                     81124fe6-8868-3b33-81c8-e7094bbfe628.roa (raw, json)
Hash identifier:          PSQACrYGlVLxHwAHCJbblBMR5Zbc+/5VJdD16jGktcg=
Subject key identifier:   8C:9A:1E:F9:66:36:C7:78:46:34:1E:85:7F:AC:93:1F:49:D5:AE:5C
Certificate issuer:       /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d
Certificate serial:       010D0C9F4328584CDF326E7FEDFE432673E25700
Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/81124fe6-8868-3b33-81c8-e7094bbfe628.roa
Signing time:             Sun 15 Feb 2026 14:00:41 +0000
ROA not before:           Sun 15 Feb 2026 14:00:41 +0000
ROA not after:            Sat 16 May 2026 13:00:41 +0000
asID:                     212238
IP address blocks:        2607:740:17f::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:df:32:6e:7f:ed:fe:43:26:73:e2:57:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d
        Validity
            Not Before: Feb 15 14:00:41 2026 GMT
            Not After : May 16 13:00:41 2026 GMT
        Subject: CN=2fca1447-9a99-46f9-b00b-b42c1fabc692
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:2a:76:08:db:f6:5c:94:80:bd:a7:96:6b:27:
                    ed:9f:b5:01:23:84:cc:11:3b:e0:d1:18:b5:7a:86:
                    e6:a1:22:06:c8:44:f3:8f:18:01:11:2a:52:88:d2:
                    0e:d9:25:dc:db:86:08:0b:94:84:05:04:a7:0a:d3:
                    87:69:9a:eb:cf:60:83:d0:8f:1c:b1:20:27:b7:db:
                    17:b5:8e:95:6f:34:f3:34:a4:cb:fb:f9:ae:f7:08:
                    06:5d:b5:73:82:fc:0c:b1:d0:9e:30:73:9a:40:ff:
                    85:88:11:f9:ba:c2:90:60:d4:54:4b:27:4a:94:9c:
                    b4:7e:1c:f7:7b:1f:65:ed:5a:66:ba:33:73:f1:94:
                    0b:08:cd:35:13:bd:f4:61:82:4b:92:89:4b:32:84:
                    5c:9f:6a:91:5d:a2:cb:8c:67:aa:4a:20:6a:bc:60:
                    3c:de:35:22:a9:8b:48:1d:46:ad:15:be:89:81:69:
                    f3:31:71:91:96:62:d6:a0:30:d4:85:a0:7f:0f:5c:
                    93:4b:6a:49:02:16:78:96:d0:0b:94:d9:25:1d:f6:
                    2e:7c:a6:dc:1d:fd:aa:d9:6d:ad:5a:42:e5:1f:14:
                    e7:84:7c:db:9c:e0:f3:d5:df:bb:0c:cc:b2:86:f0:
                    cc:9b:59:2e:47:5f:b5:59:18:2e:27:64:f5:5c:ee:
                    ec:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:9A:1E:F9:66:36:C7:78:46:34:1E:85:7F:AC:93:1F:49:D5:AE:5C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/81124fe6-8868-3b33-81c8-e7094bbfe628.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl

            X509v3 Authority Key Identifier:
                keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:740:17f::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:0d:b6:47:af:c2:86:19:de:ee:59:ca:f6:6a:d1:0d:43:1f:
         ed:ad:82:75:ab:fa:a7:3d:35:e8:db:ea:13:ce:66:39:13:57:
         e4:0a:c2:48:93:45:a4:42:e1:5e:01:54:88:48:f8:d6:b4:e6:
         0d:2c:8b:4e:f6:4c:b5:96:52:f1:45:6e:c4:b2:8c:9e:8f:9e:
         f0:db:49:b6:d1:0c:33:34:3e:fd:5d:9b:a2:08:ed:24:c2:1b:
         5e:d3:92:40:44:3d:48:d0:8b:13:32:42:bb:ff:17:44:d3:eb:
         9b:3a:65:3d:2f:ee:b5:83:f7:93:76:44:ea:d9:de:71:eb:77:
         87:79:c2:d4:c5:81:9f:cc:bd:02:36:b3:da:68:24:b0:d9:79:
         8f:6b:77:6b:c3:72:51:2f:89:fc:26:86:b1:0b:16:49:0b:d9:
         2b:6c:48:db:2f:8b:c2:75:4a:20:d9:34:d8:a3:76:32:7a:d1:
         9b:d4:ee:02:17:e7:58:51:8e:48:3e:c9:2d:e6:bb:ba:cb:5f:
         3b:48:34:a6:49:f2:8b:40:f2:b3:40:2e:f7:ad:0c:da:25:81:
         27:8a:02:03:20:9e:19:52:55:1b:2b:49:fb:8a:f6:eb:e5:7f:
         50:95:59:4d:9a:cc:1c:97:c2:0f:85:6e:f1:de:02:77:4b:ad:
         63:2f:ae:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:37:09 2026 by rpki-client