Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/fae5b52e-87de-31d2-8a7d-f09cf9b48cf2.roa
File:                     fae5b52e-87de-31d2-8a7d-f09cf9b48cf2.roa (raw, json)
Hash identifier:          PmGEVtXChe6pO8oiykQlMp3+b0L/XNKbRpuZdUD3huI=
Subject key identifier:   6D:36:9A:C9:CE:ED:57:A7:16:BF:42:4D:00:D3:DA:5B:7E:10:EA:58
Certificate issuer:       /CN=7e463b2c-538a-4f93-bfa3-fe1643a77085
Certificate serial:       010D0C9F4328584CF5879A813FD65C3AF1907548
Authority key identifier: 29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/fae5b52e-87de-31d2-8a7d-f09cf9b48cf2.roa
Signing time:             Mon 23 Feb 2026 14:00:41 +0000
ROA not before:           Mon 23 Feb 2026 14:00:41 +0000
ROA not after:            Sun 24 May 2026 13:00:41 +0000
asID:                     11055
IP address blocks:        2604:7a00:ff85::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 02 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:f5:87:9a:81:3f:d6:5c:3a:f1:90:75:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e463b2c-538a-4f93-bfa3-fe1643a77085
        Validity
            Not Before: Feb 23 14:00:41 2026 GMT
            Not After : May 24 13:00:41 2026 GMT
        Subject: CN=3b511e1a-0f9c-45df-b6ee-92f45956c08a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:c0:e0:9f:27:6b:69:9d:e3:41:e2:8b:26:3c:
                    ca:6b:65:fe:69:09:9a:44:80:4d:9d:92:67:f6:5f:
                    42:eb:01:b7:e4:35:32:f0:7e:2a:a0:4c:e6:98:d7:
                    20:f6:e8:f0:23:fe:bf:39:19:40:b9:7a:a4:89:06:
                    a5:3c:d2:56:ca:74:80:d8:91:fd:fa:d3:c5:5d:96:
                    2f:9b:28:95:d3:2e:de:69:a5:82:d6:9f:22:93:90:
                    a7:4e:d8:3c:14:ea:cf:03:3f:99:6c:05:12:9a:ce:
                    9f:5b:02:e2:0f:33:fb:54:75:50:8f:c4:96:e2:90:
                    b6:0c:f4:bd:92:f5:85:e4:e8:3d:93:2e:b2:9a:8e:
                    42:9d:ca:bf:07:00:73:26:19:9b:a2:2c:35:46:3a:
                    55:87:7f:0a:9f:01:1a:6c:fe:cd:60:80:d0:be:87:
                    9f:7d:7b:52:a0:37:01:f2:1f:7a:56:83:94:ed:b6:
                    7a:2b:4e:5d:c9:8c:3a:da:3e:2a:4a:99:19:a4:1a:
                    4b:75:df:e8:e1:d5:a0:22:52:fc:4f:bf:b5:79:ad:
                    e2:c3:78:08:5e:26:7d:3d:a3:58:73:64:c6:b6:0c:
                    af:c3:41:af:28:b9:15:98:92:fa:91:c2:6f:c4:50:
                    bd:00:74:1c:2e:9b:5f:c1:10:66:b8:d2:ea:26:d0:
                    2e:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:36:9A:C9:CE:ED:57:A7:16:BF:42:4D:00:D3:DA:5B:7E:10:EA:58
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/fae5b52e-87de-31d2-8a7d-f09cf9b48cf2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl

            X509v3 Authority Key Identifier:
                keyid:29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:7a00:ff85::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:e5:cd:cb:22:d1:d0:ed:10:41:82:e7:11:88:fb:4b:72:2f:
         14:5b:94:7a:cb:9e:66:39:d8:ec:1b:89:80:61:16:6a:37:df:
         a8:d5:16:81:6f:5e:1c:ba:43:66:7f:85:64:18:9d:ab:8a:08:
         33:43:b6:5f:ec:49:06:05:88:48:42:c9:18:f4:25:11:bb:47:
         26:69:ba:08:92:f5:a1:30:fa:50:76:5b:82:3e:52:75:e2:1c:
         0d:d9:cc:f7:8f:e0:e1:6e:98:ad:2d:61:8d:c5:d0:9c:14:68:
         6d:df:60:50:d2:14:d2:a1:11:37:24:f9:30:46:3e:72:08:62:
         6e:9c:26:b3:88:f6:d7:24:2c:f6:f3:b9:61:cc:9e:39:29:ac:
         14:4b:5f:5e:c3:f8:d8:1a:5d:38:3d:da:cb:b5:95:e2:1f:e6:
         21:00:43:9a:8e:aa:78:6f:c3:a0:ef:bb:41:6c:9d:1d:0a:6a:
         c2:f9:59:73:87:88:71:38:28:08:67:4b:4a:cd:2f:bf:85:78:
         72:40:7f:c7:50:d5:b4:1f:34:de:4d:c9:8e:5c:4f:f7:29:77:
         5e:d3:1b:6d:1c:c2:21:5d:69:e6:55:12:60:49:ad:38:5f:93:
         0d:0a:c6:ac:dd:a4:40:7c:8f:af:cf:c1:7a:69:cd:8b:01:ba:
         11:df:1a:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 14:56:46 2026 by rpki-client