Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e6b5198b-8456-38f9-87a5-44f2d7a06b48.roa
File:                     e6b5198b-8456-38f9-87a5-44f2d7a06b48.roa (raw, json)
Hash identifier:          EamCiY9wh+Czc7XJIF9y2wuWcilGAcYTfm5MF5RZh8A=
Subject key identifier:   0A:EE:7B:93:CD:DF:5D:C9:4B:74:1A:E4:71:06:CD:CB:B6:1A:53:9D
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584CE1FCDDD15B760BFA4B4B8500
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e6b5198b-8456-38f9-87a5-44f2d7a06b48.roa
Signing time:             Mon 16 Feb 2026 14:00:40 +0000
ROA not before:           Mon 16 Feb 2026 14:00:40 +0000
ROA not after:            Sun 17 May 2026 13:00:40 +0000
asID:                     396616
IP address blocks:        2620:74:2c::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:e1:fc:dd:d1:5b:76:0b:fa:4b:4b:85:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Feb 16 14:00:40 2026 GMT
            Not After : May 17 13:00:40 2026 GMT
        Subject: CN=1d0668c9-ecea-4043-a107-85bf52a42501
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:f0:e6:da:7f:de:65:7d:47:fd:a1:31:87:44:
                    6b:22:9c:43:fe:4f:db:10:13:df:36:14:79:e6:18:
                    c9:f7:07:4a:8e:10:25:01:fe:f2:97:6a:e3:09:fa:
                    ef:1f:70:a0:29:6e:4f:a8:93:5d:62:63:54:26:af:
                    5a:02:8c:78:52:a0:24:94:f2:f1:c5:a1:a8:f2:8f:
                    cd:e1:45:4e:cb:76:2d:28:64:58:cb:36:9c:fc:42:
                    4f:bc:dc:19:d9:d7:56:b9:39:63:96:07:a9:e2:1e:
                    3f:2a:3c:46:3b:12:88:74:6d:f2:1b:3d:27:93:65:
                    e1:c6:65:c9:d4:1a:54:4d:82:20:1b:db:92:ae:fc:
                    d5:1d:9a:29:74:dc:b4:b4:19:c8:80:9f:19:1b:87:
                    a4:e8:a2:cb:e0:e6:59:db:69:1b:00:21:63:8a:3e:
                    28:27:ab:17:a7:57:20:e2:5a:ca:73:73:61:b3:10:
                    43:26:32:8f:6b:a5:bb:68:37:cd:a5:3a:4e:47:b8:
                    0d:75:a3:b6:3d:23:1a:0f:59:c3:26:57:f8:86:33:
                    5c:59:bd:35:cd:17:57:7d:b5:70:69:05:01:6f:53:
                    92:bc:7a:ad:e2:f9:ff:7b:bc:2e:bf:8c:58:f6:35:
                    37:6f:2c:d4:81:8a:a8:23:4f:91:5d:7b:a6:f4:d7:
                    03:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:EE:7B:93:CD:DF:5D:C9:4B:74:1A:E4:71:06:CD:CB:B6:1A:53:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e6b5198b-8456-38f9-87a5-44f2d7a06b48.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:2c:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:d5:e1:2d:18:54:b2:84:56:25:f2:80:61:d6:4d:81:5a:16:
         5b:89:da:ad:37:b5:6c:68:92:ea:3b:95:b5:23:27:4f:08:95:
         a3:15:06:81:75:be:5d:ae:11:41:93:5f:41:13:d9:15:d7:aa:
         d2:bc:ec:39:15:32:8b:a0:ad:3f:04:fa:0e:02:26:a6:d7:dd:
         9b:b6:b2:49:05:40:c1:ea:0a:a7:a7:af:11:6f:c7:a5:91:b5:
         cf:7e:7d:7c:91:a9:f3:43:fe:70:89:61:d2:f7:0d:de:32:9e:
         43:ed:56:57:99:f9:26:cd:d0:17:8a:10:62:35:62:0c:6f:38:
         e8:3c:ed:ae:f2:31:fe:66:ea:35:0a:97:f3:22:b2:36:ff:ea:
         f3:4e:80:2a:dc:a2:6e:d5:09:85:fe:70:20:71:40:ee:4a:bc:
         b4:99:33:39:3b:10:30:d2:5b:e5:bc:c4:11:34:d9:d0:bc:4a:
         e6:fc:2b:bf:4f:21:bd:41:ee:f6:89:df:8c:51:3a:4f:aa:da:
         2a:ca:15:2a:f6:82:94:61:cb:5a:e7:0e:88:f9:44:e8:ea:c6:
         04:c5:1c:46:c9:53:34:a8:68:38:12:65:b7:6a:9d:a2:23:2b:
         39:9f:df:1c:ce:92:37:bb:43:a1:31:2b:4e:47:7f:80:cf:13:
         29:e5:37:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:43:28 2026 by rpki-client