Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1a319486-03d5-4fb1-997e-228350330847/dbf19602-5228-31b4-b609-be9efc6ef44a.roa
File:                     dbf19602-5228-31b4-b609-be9efc6ef44a.roa (raw, json)
Hash identifier:          DcL3zvJ7fCY+KYAS1b4R+6pxPx0UhELGLbCx3//9veI=
Subject key identifier:   FB:D7:F6:F4:08:C8:B6:32:C8:99:0C:7A:18:04:4D:7B:A0:1E:99:EB
Certificate issuer:       /CN=1a319486-03d5-4fb1-997e-228350330847
Certificate serial:       010D0C9F4328584CE1FCD30DD28799A79B365940
Authority key identifier: A2:3A:14:63:64:B3:CB:CF:FC:80:6A:4F:EB:85:F1:97:70:1D:C6:9D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1a319486-03d5-4fb1-997e-228350330847.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1a319486-03d5-4fb1-997e-228350330847/dbf19602-5228-31b4-b609-be9efc6ef44a.roa
Signing time:             Mon 16 Feb 2026 14:00:40 +0000
ROA not before:           Mon 16 Feb 2026 14:00:40 +0000
ROA not after:            Sun 17 May 2026 13:00:40 +0000
asID:                     46983
IP address blocks:        2602:815:3000::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1a319486-03d5-4fb1-997e-228350330847/1a319486-03d5-4fb1-997e-228350330847.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1a319486-03d5-4fb1-997e-228350330847/1a319486-03d5-4fb1-997e-228350330847.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1a319486-03d5-4fb1-997e-228350330847.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:e1:fc:d3:0d:d2:87:99:a7:9b:36:59:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a319486-03d5-4fb1-997e-228350330847
        Validity
            Not Before: Feb 16 14:00:40 2026 GMT
            Not After : May 17 13:00:40 2026 GMT
        Subject: CN=f3c426e6-6d1b-44d9-a908-8362a0eea15c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:59:87:aa:c0:4b:39:29:3c:b9:f1:b7:e2:68:
                    7f:82:f0:d5:6d:e2:8c:4b:37:f9:7f:73:0a:0c:91:
                    3e:78:7b:91:85:27:69:57:a9:2a:5f:39:70:a8:68:
                    a7:c1:70:c8:3b:c4:3d:71:64:7f:6a:44:f4:94:24:
                    58:6d:01:34:62:d1:a6:2d:31:29:78:fc:fd:3c:e4:
                    0b:88:b1:4d:05:0f:98:6c:c6:c7:45:1f:b5:a6:f2:
                    23:5b:f5:34:8b:b1:b6:5e:fb:78:69:0d:00:14:b7:
                    f3:15:e9:3f:39:26:6d:8f:a8:75:a9:1f:f9:ae:82:
                    17:f4:f6:9a:73:8e:d7:92:14:d3:1d:d5:55:de:06:
                    c8:56:8a:ea:04:2b:74:34:e4:e8:c9:62:48:6c:7a:
                    cf:b1:6d:84:16:42:66:7e:22:62:ec:d9:38:bd:98:
                    28:9b:d1:5c:2b:78:17:54:7b:35:17:f3:e4:f4:93:
                    c7:6a:e4:50:68:76:4d:c5:ba:6c:44:bc:6b:22:30:
                    e6:3c:88:6f:d9:26:35:32:fe:a8:bc:a6:55:6c:f7:
                    e6:49:45:f2:a8:32:a8:bd:31:b8:5d:98:0a:05:ed:
                    36:e0:9e:72:b6:83:c1:15:1b:e8:6a:5a:6a:85:4a:
                    26:71:f1:9b:43:d3:8f:26:2e:36:93:ea:57:02:a5:
                    54:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:D7:F6:F4:08:C8:B6:32:C8:99:0C:7A:18:04:4D:7B:A0:1E:99:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1a319486-03d5-4fb1-997e-228350330847/dbf19602-5228-31b4-b609-be9efc6ef44a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1a319486-03d5-4fb1-997e-228350330847/1a319486-03d5-4fb1-997e-228350330847.crl

            X509v3 Authority Key Identifier:
                keyid:A2:3A:14:63:64:B3:CB:CF:FC:80:6A:4F:EB:85:F1:97:70:1D:C6:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1a319486-03d5-4fb1-997e-228350330847.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:815:3000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:ff:05:b9:16:23:35:1e:e5:5b:2b:a2:d4:af:1a:11:35:de:
         d7:d3:92:b1:6b:3e:b5:30:5a:33:c8:6e:ff:e8:ff:fd:7a:66:
         a9:fd:ca:d4:46:4e:48:2b:ae:ec:a4:36:84:f2:13:c0:b6:a1:
         9b:63:91:11:a4:f6:9d:fb:e6:c4:42:5f:c6:76:01:1f:dc:57:
         cf:b2:52:0e:4d:be:b3:93:87:10:c7:7f:3e:b3:1d:aa:3a:5e:
         6b:8a:0f:f2:d9:cb:37:5a:bc:72:06:b5:47:58:da:17:0d:7a:
         27:1f:85:89:89:3e:0e:13:5f:a4:3a:2b:df:66:77:09:14:4b:
         c9:3a:4b:46:1e:eb:65:11:5c:6e:57:ed:00:f4:fc:94:1b:81:
         79:1e:3a:e1:77:e4:65:a1:92:b0:6c:0d:f3:9b:63:f7:b8:c6:
         79:bb:2f:95:4c:7e:3c:d0:d1:3c:71:16:3b:2c:da:16:5b:bb:
         ad:b1:68:68:5a:4d:f4:da:5e:e0:31:aa:25:8f:f0:dd:e6:8a:
         cc:d3:2a:9c:9d:51:a2:4f:3d:0f:bc:0d:1a:83:65:13:3f:04:
         c9:c4:1a:5b:c6:1e:49:1d:ef:d5:c6:93:12:a4:d2:cb:6c:7e:
         f4:2a:be:25:26:3a:f2:10:24:5c:07:c1:4e:8a:a2:0e:0e:e6:
         95:28:d3:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:08:49 2026 by rpki-client