Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d2a01f1-a616-44d9-84b3-ada8470eabb9/e5bbcf1b-bb80-3cf4-af0b-3a40c90b1c3b.roa
File:                     e5bbcf1b-bb80-3cf4-af0b-3a40c90b1c3b.roa (raw, json)
Hash identifier:          z0xT4r03n01EvznZ2Sbh0ihxuAk0eGxB6I02w21PRoI=
Subject key identifier:   07:C6:A5:F5:A0:71:4C:49:AA:A9:9E:47:9D:03:45:50:EC:8D:FA:64
Certificate issuer:       /CN=1d2a01f1-a616-44d9-84b3-ada8470eabb9
Certificate serial:       010D0C9F4328584CD99CDE66C9D67F303D60F500
Authority key identifier: 68:00:42:A6:53:C6:93:B8:A9:50:83:FB:A5:D4:6E:B9:33:FA:B7:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d2a01f1-a616-44d9-84b3-ada8470eabb9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d2a01f1-a616-44d9-84b3-ada8470eabb9/e5bbcf1b-bb80-3cf4-af0b-3a40c90b1c3b.roa
Signing time:             Fri 13 Feb 2026 14:00:41 +0000
ROA not before:           Fri 13 Feb 2026 14:00:41 +0000
ROA not after:            Thu 14 May 2026 13:00:41 +0000
asID:                     398461
IP address blocks:        69.64.113.0/24 maxlen: 24
                          2602:fd47::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d2a01f1-a616-44d9-84b3-ada8470eabb9/1d2a01f1-a616-44d9-84b3-ada8470eabb9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d2a01f1-a616-44d9-84b3-ada8470eabb9/1d2a01f1-a616-44d9-84b3-ada8470eabb9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d2a01f1-a616-44d9-84b3-ada8470eabb9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:d9:9c:de:66:c9:d6:7f:30:3d:60:f5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d2a01f1-a616-44d9-84b3-ada8470eabb9
        Validity
            Not Before: Feb 13 14:00:41 2026 GMT
            Not After : May 14 13:00:41 2026 GMT
        Subject: CN=50fbbd38-60ed-43d8-a77e-7ab6833bad7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:14:a8:5d:27:da:88:fc:06:ff:7a:b9:f0:68:
                    5f:a7:aa:98:53:92:22:4b:5e:80:0a:47:6d:fc:90:
                    82:6b:86:85:ad:ac:15:08:14:2f:03:81:7c:d4:4a:
                    49:c1:be:55:3f:73:e2:5a:5c:80:19:6e:c2:d4:11:
                    c0:95:7e:f6:0f:dd:a3:1d:e5:29:dd:df:51:7c:1c:
                    77:c8:65:81:48:e7:3e:63:e7:5f:0d:87:ea:ec:d6:
                    9a:1d:d9:9d:75:6c:24:1d:da:a0:2c:73:fa:70:51:
                    71:a0:7e:9b:e6:0c:1c:7d:6f:fc:23:80:03:d5:70:
                    cd:55:14:c8:e8:7c:8a:ff:8f:93:a0:1e:fd:dd:78:
                    14:1c:23:87:f3:5c:0d:e3:44:1b:a6:f1:f9:a8:3a:
                    11:f7:3f:7e:1d:33:60:f5:c4:69:25:90:c1:31:4e:
                    ae:c8:fe:7b:76:4b:1d:1a:7c:ed:e9:d3:81:4d:e7:
                    56:c9:26:78:c8:67:e0:11:bf:f8:c8:73:17:3f:96:
                    14:c1:fc:4b:f8:cd:c7:87:81:36:ad:0d:4c:87:a6:
                    3a:bb:93:65:35:a8:2b:51:98:72:da:fe:fc:ad:48:
                    8c:7c:43:53:ad:dd:75:1c:f8:88:8f:2e:6c:ce:b7:
                    f6:ca:c0:ad:28:7d:a1:4a:84:2a:03:25:be:62:8b:
                    7a:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:C6:A5:F5:A0:71:4C:49:AA:A9:9E:47:9D:03:45:50:EC:8D:FA:64
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d2a01f1-a616-44d9-84b3-ada8470eabb9/e5bbcf1b-bb80-3cf4-af0b-3a40c90b1c3b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d2a01f1-a616-44d9-84b3-ada8470eabb9/1d2a01f1-a616-44d9-84b3-ada8470eabb9.crl

            X509v3 Authority Key Identifier:
                keyid:68:00:42:A6:53:C6:93:B8:A9:50:83:FB:A5:D4:6E:B9:33:FA:B7:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d2a01f1-a616-44d9-84b3-ada8470eabb9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.64.113.0/24
                IPv6:
                  2602:fd47::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:49:53:83:28:4b:6e:58:dc:88:04:84:6f:4c:bd:e4:35:27:
         01:4e:4f:4c:fd:df:ad:02:b9:29:38:db:bc:81:39:a1:eb:ab:
         09:95:59:b8:48:85:1d:91:30:95:1a:43:8a:29:6a:ea:45:ac:
         44:3f:70:1f:c9:00:90:d9:82:e7:e9:5f:06:02:99:a3:7a:f2:
         75:07:3d:b3:2a:57:49:14:e1:16:e1:5b:b2:87:f2:fc:57:fc:
         1f:e8:34:a5:e0:e8:b2:f8:e6:6d:4b:2b:07:72:7e:83:10:19:
         69:05:20:49:05:27:77:26:db:1e:1d:df:e3:80:af:03:3b:41:
         42:7c:61:d3:06:70:d3:27:b9:4f:a0:2a:c8:e5:80:41:c6:5a:
         f8:af:44:e4:52:b1:d6:95:5f:8e:b9:d0:9e:d3:96:7c:c4:8f:
         0e:b5:1c:58:72:7f:94:e6:c5:0e:05:b1:66:f6:db:23:ec:86:
         e0:78:c9:5c:af:db:b7:48:7f:14:d1:fc:7f:c3:48:08:cd:3b:
         8a:9c:d5:25:82:d9:b9:f5:69:c6:59:c2:ec:c3:90:18:70:59:
         cb:e5:00:d9:3c:13:30:fd:55:a4:95:0f:c5:af:bb:86:73:14:
         01:d7:c0:37:1a:44:6c:e4:ee:e3:06:80:50:eb:0a:43:82:f7:
         56:d9:03:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:12:46 2026 by rpki-client