Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/a42cd5dc-c9fb-3065-bfd3-17ce64eb897d.roa
File:                     a42cd5dc-c9fb-3065-bfd3-17ce64eb897d.roa (raw, json)
Hash identifier:          bBSInIxLIAbVolho2s/h/TF5vzMi7xUIooKot8z5FbQ=
Subject key identifier:   53:35:EE:03:EA:87:E6:4E:9D:F0:01:CE:CD:8B:C8:A8:79:48:57:A7
Certificate issuer:       /CN=1dd8be8a-bead-4d5b-a818-4d1482f479ff
Certificate serial:       010D0C9F4328584D00B27CCE6A26FD1763A18980
Authority key identifier: E3:28:40:84:94:46:48:1D:6F:B2:BD:50:2C:4E:64:AF:32:56:B3:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/a42cd5dc-c9fb-3065-bfd3-17ce64eb897d.roa
Signing time:             Fri 27 Feb 2026 14:00:40 +0000
ROA not before:           Fri 27 Feb 2026 14:00:40 +0000
ROA not after:            Thu 28 May 2026 13:00:40 +0000
asID:                     17378
IP address blocks:        2001:19b8::/32 maxlen: 48
                          2001:4970::/32 maxlen: 48
                          2600:2c00::/30 maxlen: 48
                          2604:7e00::/32 maxlen: 48
                          2604:7f80::/32 maxlen: 48
                          2606:a700::/32 maxlen: 48
                          2607:f1d0::/32 maxlen: 48
                          2607:f3f8::/32 maxlen: 48
                          2607:fc38::/32 maxlen: 48
                          2607:fdb8::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:00:b2:7c:ce:6a:26:fd:17:63:a1:89:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1dd8be8a-bead-4d5b-a818-4d1482f479ff
        Validity
            Not Before: Feb 27 14:00:40 2026 GMT
            Not After : May 28 13:00:40 2026 GMT
        Subject: CN=26452396-049d-4af2-a7c8-7171c4c16bbe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:2c:6b:6a:bf:d9:7e:d1:c2:5b:1e:2a:d4:54:
                    51:fc:8d:0a:08:7d:ea:a5:c6:4c:95:51:a3:fb:4a:
                    21:34:f1:c6:d7:9a:49:6d:2e:07:17:18:fe:dc:46:
                    3e:6b:06:80:40:fe:cb:c6:43:0c:cd:f9:82:ec:74:
                    fa:eb:fd:0d:68:84:d2:df:15:9c:82:d4:40:fb:d9:
                    12:ef:76:ba:da:bc:e6:96:8d:69:38:7b:cf:b8:3a:
                    98:3a:8f:b2:a2:e6:38:fc:24:bf:2b:cc:d0:8c:fa:
                    1e:22:d3:a9:ac:45:aa:df:55:aa:68:60:d0:6d:d9:
                    5d:90:2a:06:77:1e:67:1c:46:0b:cd:ac:b1:9f:52:
                    46:c2:9c:03:f1:f8:cd:c5:f2:43:38:90:2a:4c:28:
                    0f:f8:96:05:90:ad:82:49:34:e4:94:c3:a9:aa:4b:
                    64:6f:c2:48:d2:4d:5f:75:d5:f3:47:ca:e0:4a:bc:
                    ff:9c:a9:ba:ac:dc:7b:0d:34:c7:47:c8:c0:09:f3:
                    b1:c2:7b:d6:3e:5f:c6:b0:6d:a2:71:62:d6:1c:18:
                    64:09:2e:7b:c3:4d:7a:b6:f3:64:97:c5:38:8b:6a:
                    fc:1b:ac:8f:20:7f:88:68:4a:d5:78:1c:1e:55:b8:
                    8f:aa:5d:fe:4c:42:5a:5b:71:23:13:6c:16:4f:cb:
                    a4:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:35:EE:03:EA:87:E6:4E:9D:F0:01:CE:CD:8B:C8:A8:79:48:57:A7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/a42cd5dc-c9fb-3065-bfd3-17ce64eb897d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.crl

            X509v3 Authority Key Identifier:
                keyid:E3:28:40:84:94:46:48:1D:6F:B2:BD:50:2C:4E:64:AF:32:56:B3:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:19b8::/32
                  2001:4970::/32
                  2600:2c00::/30
                  2604:7e00::/32
                  2604:7f80::/32
                  2606:a700::/32
                  2607:f1d0::/32
                  2607:f3f8::/32
                  2607:fc38::/32
                  2607:fdb8::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:03:80:a4:7c:72:30:63:44:5c:3e:29:f8:47:44:24:46:e6:
         6e:35:07:93:00:09:19:6c:1f:28:d6:75:ed:cb:a1:b2:a4:04:
         ed:ae:ab:13:73:3a:4b:8b:f9:fc:77:44:67:42:d2:9f:87:07:
         ae:c9:db:43:51:7e:4e:5a:f8:dc:65:c8:bb:4a:2b:70:77:70:
         65:1e:aa:76:13:c0:6b:e1:25:f3:01:29:dc:6d:c1:8b:a7:44:
         4d:65:50:57:6e:20:aa:79:ba:61:c7:88:54:d6:6f:78:a5:27:
         09:f3:0b:08:94:2f:1a:fe:13:9f:28:6a:54:54:3a:65:65:07:
         20:bc:43:82:26:92:09:3e:5d:99:dd:25:c8:3a:0d:1b:c2:18:
         ac:68:03:84:52:a4:79:4c:04:7c:3f:0c:db:5b:57:4a:fd:df:
         e9:aa:a4:79:8e:84:ba:6c:ec:65:85:63:82:f5:8a:b7:0d:c6:
         f9:3a:2e:4f:72:c6:f4:d2:5b:3f:a5:dc:2f:43:72:12:8d:89:
         37:9f:7c:ce:ca:24:a4:da:d0:ca:14:30:47:1d:99:73:af:59:
         a8:76:f8:17:e1:4e:4b:6b:37:79:ca:f5:d6:ff:eb:fb:d6:f4:
         e5:b0:fc:b9:73:eb:8f:b0:e4:da:b1:18:c3:95:05:6e:9a:3e:
         2d:0b:f6:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:14:08 2026 by rpki-client