Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1a319486-03d5-4fb1-997e-228350330847/d389e7f4-ba05-3d2e-923a-b2a6687d3ddf.roa
File:                     d389e7f4-ba05-3d2e-923a-b2a6687d3ddf.roa (raw, json)
Hash identifier:          PZSOVKBXDGWtWEjzKo98VOWO3fhGNu2GtWbFvJU8hos=
Subject key identifier:   AB:75:D1:05:26:3C:F7:00:83:2C:59:C7:F8:8B:AE:14:F1:55:48:75
Certificate issuer:       /CN=1a319486-03d5-4fb1-997e-228350330847
Certificate serial:       010D0C9F4328584CF5879EBA38DD20C90E1BF380
Authority key identifier: A2:3A:14:63:64:B3:CB:CF:FC:80:6A:4F:EB:85:F1:97:70:1D:C6:9D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1a319486-03d5-4fb1-997e-228350330847.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1a319486-03d5-4fb1-997e-228350330847/d389e7f4-ba05-3d2e-923a-b2a6687d3ddf.roa
Signing time:             Mon 23 Feb 2026 14:00:41 +0000
ROA not before:           Mon 23 Feb 2026 14:00:41 +0000
ROA not after:            Sun 24 May 2026 13:00:41 +0000
asID:                     16509
IP address blocks:        2602:815:3003::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1a319486-03d5-4fb1-997e-228350330847/1a319486-03d5-4fb1-997e-228350330847.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1a319486-03d5-4fb1-997e-228350330847/1a319486-03d5-4fb1-997e-228350330847.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1a319486-03d5-4fb1-997e-228350330847.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:f5:87:9e:ba:38:dd:20:c9:0e:1b:f3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a319486-03d5-4fb1-997e-228350330847
        Validity
            Not Before: Feb 23 14:00:41 2026 GMT
            Not After : May 24 13:00:41 2026 GMT
        Subject: CN=504712cf-44ff-4051-a6ef-06c128678e94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:a2:21:23:76:10:4b:7b:2f:4f:68:fd:2a:3b:
                    e2:c2:12:81:7c:48:dc:7f:82:69:ab:91:9e:c5:54:
                    f2:14:de:a7:56:ca:05:b4:a3:b0:cd:d3:32:19:df:
                    42:62:ad:f8:bb:c1:6f:9a:47:15:5a:1e:9a:b9:90:
                    ab:9c:d6:0c:ad:81:73:39:b1:eb:06:fc:dc:f8:54:
                    22:2d:be:bb:ac:a8:83:b6:64:fa:24:34:95:d7:5e:
                    c2:80:ba:3e:f1:80:ca:46:0c:34:d5:27:16:1f:65:
                    9d:a5:dc:f9:39:b7:6d:83:9c:45:ba:76:92:7a:29:
                    67:04:4a:79:17:89:1f:4b:e5:e7:a9:f4:cd:35:73:
                    eb:47:a4:e0:6b:52:4a:ce:74:35:73:28:ba:b2:a9:
                    62:e5:bb:1e:49:e4:a7:7d:de:41:eb:77:6d:e5:66:
                    85:92:cc:f5:52:70:f9:7c:51:69:34:99:23:3b:9d:
                    e5:ab:c6:c3:30:16:f6:4c:0e:de:17:6b:99:48:e5:
                    03:4b:f5:32:c2:d2:be:7b:a7:f8:6b:70:a1:27:43:
                    7e:9e:40:b3:74:f1:95:2e:b1:76:f7:32:aa:31:48:
                    a3:77:69:d2:92:c9:c9:80:62:7b:d9:7c:f9:a7:1e:
                    49:a9:08:53:da:60:74:59:2d:b1:de:24:4f:a0:1e:
                    5e:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:75:D1:05:26:3C:F7:00:83:2C:59:C7:F8:8B:AE:14:F1:55:48:75
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1a319486-03d5-4fb1-997e-228350330847/d389e7f4-ba05-3d2e-923a-b2a6687d3ddf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1a319486-03d5-4fb1-997e-228350330847/1a319486-03d5-4fb1-997e-228350330847.crl

            X509v3 Authority Key Identifier:
                keyid:A2:3A:14:63:64:B3:CB:CF:FC:80:6A:4F:EB:85:F1:97:70:1D:C6:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1a319486-03d5-4fb1-997e-228350330847.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:815:3003::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:55:4b:d0:4b:42:32:8c:5a:1e:e6:20:06:5e:d6:12:03:fc:
         17:51:97:b5:c6:32:d2:de:28:92:36:8e:3e:cb:3a:46:25:6a:
         bc:26:49:7e:63:a8:8b:3f:84:f2:fd:8f:fb:20:9a:9d:05:e3:
         6f:2d:55:4e:fb:5a:a7:70:f0:54:63:0b:80:3d:a5:34:0d:65:
         c6:30:b6:f5:e6:c6:28:c3:23:4e:ee:ea:fc:c4:19:b2:ad:69:
         a7:ff:9f:b4:7b:d7:70:dc:6c:68:6a:42:7f:e8:33:b3:94:42:
         1c:88:75:25:c1:ec:24:c5:9a:32:63:1c:a2:0d:bf:8a:02:42:
         e9:e8:0c:95:c3:7c:28:e2:ff:80:df:88:cf:99:82:b2:86:bf:
         54:1e:cc:77:91:09:ad:bb:35:34:e7:83:81:f0:71:e9:3d:38:
         ff:4c:0e:c6:a8:8a:f6:c8:14:27:20:b7:e4:b2:f7:fc:cb:d3:
         04:5b:59:86:4e:29:c3:ee:f4:d7:4a:59:36:47:23:e2:4e:83:
         d4:1a:a3:90:ee:79:e1:7d:02:ea:40:01:66:ae:17:62:8c:a7:
         ff:06:4e:82:b1:cc:e2:a3:ad:1d:db:fe:b2:94:54:d6:db:b0:
         51:75:6d:69:75:37:fd:67:d7:04:e8:9d:73:5a:9a:d9:65:e8:
         5b:3c:7d:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:43:25 2026 by rpki-client