Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/fde386a0-a0a3-33f9-ad11-813778cd69cd.roa
File:                     fde386a0-a0a3-33f9-ad11-813778cd69cd.roa (raw, json)
Hash identifier:          bidNC725M4kvUs3joxGQB63MLloT07vE14NaJ96a66U=
Subject key identifier:   AB:CC:AC:37:BD:44:94:08:84:25:C1:9F:4D:FE:03:7F:FE:FF:C4:3C
Certificate issuer:       /CN=50d23085-72e3-499d-9b7f-e552792b3f1b
Certificate serial:       010D0C9F4328584CCD0C8F2E0B583806CCB8BB80
Authority key identifier: 57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/fde386a0-a0a3-33f9-ad11-813778cd69cd.roa
Signing time:             Mon 09 Feb 2026 02:00:31 +0000
ROA not before:           Mon 09 Feb 2026 02:00:31 +0000
ROA not after:            Sun 10 May 2026 01:00:31 +0000
asID:                     29802
IP address blocks:        2604:880::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:cd:0c:8f:2e:0b:58:38:06:cc:b8:bb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50d23085-72e3-499d-9b7f-e552792b3f1b
        Validity
            Not Before: Feb  9 02:00:31 2026 GMT
            Not After : May 10 01:00:31 2026 GMT
        Subject: CN=d6db2996-2b8c-4f42-accd-04054f0a877f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:b9:af:a1:0d:84:f4:d4:24:1b:88:fd:24:19:
                    a5:ce:43:fc:af:af:e7:44:1a:e7:e0:8b:af:a6:f1:
                    d1:62:fa:83:60:e2:42:1a:00:79:40:bc:9b:1a:49:
                    ce:40:23:df:c8:67:40:1a:6b:36:32:7e:2a:a0:d7:
                    cf:d3:59:13:14:53:57:3f:df:ff:c3:97:9a:ce:e6:
                    b2:b2:7d:74:fd:21:b1:cc:20:31:b5:0d:a5:2b:68:
                    78:b0:95:3d:90:a6:4c:1f:70:87:5e:94:85:dc:09:
                    f1:39:06:ee:95:b0:0c:5a:82:bb:07:dc:94:98:2d:
                    7b:a8:f5:53:36:2d:fe:0e:c3:68:b8:64:00:6a:35:
                    1d:62:36:19:47:06:19:f3:ef:6d:b2:e4:0a:4f:0d:
                    31:5b:a0:b1:cd:22:88:ef:aa:e6:12:3b:48:e9:d8:
                    a1:82:8e:60:ea:aa:9a:95:38:8f:57:63:d0:28:5a:
                    f6:2c:50:77:b9:56:52:7a:16:d3:71:b2:8d:4c:9e:
                    75:3d:ae:5e:71:02:cf:d6:ac:b8:ae:57:bd:dc:17:
                    98:f5:4a:1f:03:e8:8c:59:e1:32:da:fb:7a:f6:13:
                    75:2a:e1:1d:2a:4f:39:85:94:03:5f:19:c2:3e:0d:
                    b7:ee:39:90:31:4b:92:3a:4b:f4:00:f6:88:7b:09:
                    ad:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:CC:AC:37:BD:44:94:08:84:25:C1:9F:4D:FE:03:7F:FE:FF:C4:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/fde386a0-a0a3-33f9-ad11-813778cd69cd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl

            X509v3 Authority Key Identifier:
                keyid:57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:880::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:c0:f0:b8:00:bd:f9:71:5a:64:e7:95:6c:35:6c:46:9f:24:
         a2:79:bf:7b:19:cb:94:4b:4c:55:4a:1a:7a:c7:b3:18:b7:4c:
         50:17:53:b8:a2:2b:d1:5b:be:0c:b6:41:ad:5a:35:50:0f:f1:
         dc:0a:fa:55:6e:09:91:a0:3d:a4:b3:5c:f7:ac:e9:0b:3b:17:
         d1:e1:9d:73:bd:17:de:5f:3b:06:c5:90:63:37:58:d6:46:34:
         42:f9:3b:8a:d2:cf:f5:8a:c4:fa:30:87:04:64:96:78:d3:b3:
         0f:a9:8b:b6:0b:0b:96:5b:8a:d0:e4:aa:78:e4:73:3c:7d:97:
         3a:88:ee:14:29:40:6b:0c:d4:d2:70:d1:fb:3f:b8:0d:0e:dc:
         1f:57:be:94:b5:db:2c:8e:b1:1a:3c:7c:3e:45:7b:7a:b7:b6:
         18:ad:e4:db:ba:f2:92:e9:84:99:33:80:6e:5c:d9:bb:68:b7:
         55:ae:dd:ca:cb:0a:c1:9a:59:62:6c:df:64:ec:8c:9b:de:a4:
         92:d2:ea:1f:59:db:ab:77:1a:de:eb:33:19:68:ea:c4:b8:e6:
         96:d0:b7:2d:99:de:45:80:8f:bb:2d:a1:44:9d:c2:4d:7e:16:
         55:80:c1:0a:6c:c8:bb:05:d3:80:40:43:17:e3:3b:ce:0a:e9:
         05:6d:27:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:28:08 2026 by rpki-client