Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/d6b423ec-0de3-3b79-bdf1-b0729c73c995.roa
File:                     d6b423ec-0de3-3b79-bdf1-b0729c73c995.roa (raw, json)
Hash identifier:          aWZVelLP9QkkCfChtILl2+JYztYCu7RLedGvGLCOFLw=
Subject key identifier:   D4:8D:B9:9F:1B:F3:7D:86:FE:75:AB:51:2C:25:7A:17:9D:1F:5F:59
Certificate issuer:       /CN=89ef6f69-8726-4512-ad7b-1cba783df29a
Certificate serial:       010D0C9F4328584CEE8CE0443928726C21C81540
Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/d6b423ec-0de3-3b79-bdf1-b0729c73c995.roa
Signing time:             Sat 21 Feb 2026 02:00:32 +0000
ROA not before:           Sat 21 Feb 2026 02:00:32 +0000
ROA not after:            Fri 22 May 2026 01:00:32 +0000
asID:                     16839
IP address blocks:        2606:3600:155::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ee:8c:e0:44:39:28:72:6c:21:c8:15:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a
        Validity
            Not Before: Feb 21 02:00:32 2026 GMT
            Not After : May 22 01:00:32 2026 GMT
        Subject: CN=11bf9c1e-a2bd-4325-ad3c-4991eeda828f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:0a:37:d8:9e:9c:e4:1e:16:5a:8f:c2:8a:bb:
                    81:ad:79:3e:8c:85:45:c3:fe:07:a2:0f:64:20:c1:
                    8e:c5:7e:f5:e8:35:7b:e7:b2:d0:a9:27:d4:b5:18:
                    6e:c4:88:28:1e:ac:5d:b4:c8:f0:dc:92:a7:1d:a2:
                    9b:97:e1:52:22:5f:3a:9b:35:6c:a0:de:b0:8a:16:
                    03:59:e8:0d:e1:56:05:dd:39:22:e8:ab:0c:9a:a6:
                    08:e5:cd:43:60:e5:e8:c0:bc:81:fd:5b:ea:5e:a6:
                    77:37:c0:08:b8:9d:b7:04:71:40:97:2b:09:29:9e:
                    fd:4f:c4:0c:11:2e:b3:6e:4e:cb:80:b5:a9:87:77:
                    6e:2e:68:6b:b7:5f:24:de:5d:24:11:e8:08:70:c0:
                    7c:92:cf:17:fa:e1:e8:b3:f6:94:0d:a6:d0:1a:f7:
                    ab:71:15:cc:81:cb:21:32:66:30:3e:32:b0:5b:a3:
                    46:bc:94:67:4e:d2:bf:4b:4f:26:67:6e:f4:ea:20:
                    75:ad:25:fd:38:34:7a:54:7a:ab:0c:1b:08:c6:6a:
                    28:2b:9d:fa:f3:c8:26:63:ba:d7:f7:eb:9f:62:80:
                    68:16:d1:16:08:60:17:49:75:cf:e9:53:b5:dd:a5:
                    8c:fc:f9:2a:b9:c7:49:70:97:dc:13:87:5a:04:2c:
                    98:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:8D:B9:9F:1B:F3:7D:86:FE:75:AB:51:2C:25:7A:17:9D:1F:5F:59
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/d6b423ec-0de3-3b79-bdf1-b0729c73c995.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl

            X509v3 Authority Key Identifier:
                keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3600:155::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:0a:c9:33:75:a8:75:7d:9b:45:8d:57:c9:39:d3:71:c3:7d:
         24:44:1e:bd:cc:7f:84:c4:61:7d:34:4c:1a:94:9a:48:e0:10:
         ef:e8:37:f7:2b:99:b3:af:f2:3e:d5:b2:5f:8b:f1:19:96:f7:
         73:6b:5c:7c:03:9f:97:5b:29:dd:72:48:32:35:24:23:3a:72:
         85:4d:99:f1:a9:cf:5e:ac:fe:e5:66:78:ac:25:21:e5:6c:99:
         7d:f4:3a:06:59:68:6c:d3:dc:24:db:97:46:27:f4:0c:4c:f0:
         a7:8b:84:32:2b:02:e3:e7:49:47:04:d5:ae:28:7e:72:a6:62:
         b5:fa:0d:ce:7c:9f:96:75:98:ce:a0:8f:41:a6:fa:96:0d:e9:
         fa:6d:3a:1c:33:4f:34:32:4f:bc:5f:99:e5:d1:16:aa:50:1f:
         8d:5a:e7:a3:55:5e:8a:6c:65:58:dd:b8:68:17:d8:1d:6b:04:
         fc:70:b1:cc:e9:04:e8:77:47:cc:38:87:a5:27:29:1e:04:c6:
         fb:85:6d:1e:d1:38:a7:4b:c9:d8:e2:35:19:fb:10:f2:37:29:
         5d:9a:2a:87:9e:f0:cb:a8:4b:57:26:6e:c2:60:52:a8:1c:7f:
         ed:19:b9:11:69:7f:61:c6:42:e7:af:6a:82:a4:37:27:20:ee:
         98:e1:b2:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:09:37 2026 by rpki-client