Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/26430daf-df3d-3076-a10a-a93f73c5b517.roa
File:                     26430daf-df3d-3076-a10a-a93f73c5b517.roa (raw, json)
Hash identifier:          EEvsfvCG52JVvNCdTAELWXN5rPrtO5RYSRXiczUIoIw=
Subject key identifier:   48:43:FD:A4:CF:F6:B0:B8:A4:7A:FE:49:32:09:9D:6C:38:AE:C7:DA
Certificate issuer:       /CN=7e463b2c-538a-4f93-bfa3-fe1643a77085
Certificate serial:       010D0C9F4328584CF5879A6EDE92865B27A34280
Authority key identifier: 29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/26430daf-df3d-3076-a10a-a93f73c5b517.roa
Signing time:             Mon 23 Feb 2026 14:00:41 +0000
ROA not before:           Mon 23 Feb 2026 14:00:41 +0000
ROA not after:            Sun 24 May 2026 13:00:41 +0000
asID:                     11055
IP address blocks:        2604:7a00:ff84::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 02 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:f5:87:9a:6e:de:92:86:5b:27:a3:42:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e463b2c-538a-4f93-bfa3-fe1643a77085
        Validity
            Not Before: Feb 23 14:00:41 2026 GMT
            Not After : May 24 13:00:41 2026 GMT
        Subject: CN=684e11db-ea33-4d78-be6f-61d2581bc02b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:23:6b:7c:90:7e:3f:67:0c:29:e9:f2:cc:ff:
                    81:a5:2d:95:8e:0a:c6:e3:59:b0:e6:c5:69:7a:68:
                    11:86:11:dc:83:49:84:78:3f:a9:2a:c7:bb:92:f1:
                    e4:5d:04:68:86:0b:5c:3e:50:17:f2:29:da:34:7e:
                    14:15:69:1d:66:d9:c6:b2:c8:97:f7:a3:9a:5a:10:
                    47:f3:13:e5:f0:4c:76:4f:46:f1:49:7a:52:e6:8a:
                    cc:b7:b5:4c:94:75:f0:fa:5a:c0:fd:96:d3:32:c4:
                    18:4a:55:68:83:30:09:17:c7:70:b8:e1:be:71:38:
                    69:b2:64:7f:3b:8f:c3:31:82:32:e1:e5:f1:e5:43:
                    22:d9:1f:4a:bb:34:ff:bc:df:91:a0:4a:95:ff:dd:
                    31:84:32:8c:b4:d8:76:de:6f:ed:ac:1b:0d:7d:29:
                    b1:ad:5b:19:3a:eb:2d:d0:f4:39:1f:00:a7:7b:c5:
                    c0:74:89:7a:8e:b0:9b:65:da:9c:07:65:69:4e:45:
                    bd:24:fc:09:5d:26:4c:ff:75:9f:a4:c0:a9:a4:7d:
                    8f:5f:46:5f:fc:31:29:26:3a:54:05:d6:c0:1c:ea:
                    9b:ae:e9:d1:44:a5:d1:42:f6:4f:b6:38:29:34:2b:
                    a1:90:d2:aa:4d:d6:11:93:05:8f:69:e8:c8:93:67:
                    df:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:43:FD:A4:CF:F6:B0:B8:A4:7A:FE:49:32:09:9D:6C:38:AE:C7:DA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/26430daf-df3d-3076-a10a-a93f73c5b517.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl

            X509v3 Authority Key Identifier:
                keyid:29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:7a00:ff84::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:0c:60:5a:bc:89:0d:74:1d:28:35:6b:e9:27:4d:42:9b:28:
         ba:4a:45:ca:08:eb:94:36:a8:5e:36:95:84:c3:bf:47:ef:1c:
         99:01:96:b3:df:fd:8c:50:77:c2:6d:d8:3a:06:86:9b:f1:5f:
         87:90:3b:1d:d8:1d:c7:12:92:de:5e:95:0f:32:46:c7:20:3b:
         30:28:59:a7:85:0e:e8:a8:35:48:08:26:f7:b4:97:f2:87:d4:
         98:d3:0a:1a:7b:5a:93:5b:13:c8:16:75:ac:40:57:96:8c:94:
         e7:89:8c:1f:55:9e:fa:c3:5e:54:20:24:84:cb:b0:74:04:5f:
         1a:13:a5:76:93:b8:9c:3c:c9:cb:43:1c:fa:65:10:24:77:4e:
         3b:40:7d:6a:92:94:8b:0b:01:f1:6f:2a:db:fc:de:b3:5e:5b:
         ef:fb:53:53:a0:20:9d:94:fb:f6:0c:b4:27:dd:63:04:9e:f1:
         18:fd:59:ee:7e:d6:79:a6:0a:2f:c2:a0:84:d5:12:e4:10:bb:
         bc:84:fe:68:24:6c:f0:30:12:08:a2:30:23:f7:ee:9d:1d:3c:
         73:12:8c:73:a8:15:7c:40:46:58:b7:6b:50:53:ce:f7:30:32:
         85:0d:11:08:db:aa:d3:a1:1c:c6:99:35:22:d8:ff:ca:d4:fc:
         9d:ba:75:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 14:57:38 2026 by rpki-client