Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7/2a91e7d9-f14d-3585-b196-ff2b6ef53ff6.roa
File:                     2a91e7d9-f14d-3585-b196-ff2b6ef53ff6.roa (raw, json)
Hash identifier:          0tbCJbaVFv+FrFCWPYTrZFUs9EJEUOH7cBIBRWWQs2Q=
Subject key identifier:   61:C9:C2:67:15:2B:D4:B8:31:CF:E8:BA:BA:3B:9D:0D:0A:BC:27:FD
Certificate issuer:       /CN=2d448124-6e45-40ca-b551-28ef364c99c7
Certificate serial:       010D0C9F4328584CEBC22BAF33F458236B247180
Authority key identifier: 25:7D:1B:53:85:94:FC:AD:91:3E:C3:91:34:7B:77:79:5E:58:F5:A6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7/2a91e7d9-f14d-3585-b196-ff2b6ef53ff6.roa
Signing time:             Fri 20 Feb 2026 02:00:32 +0000
ROA not before:           Fri 20 Feb 2026 02:00:32 +0000
ROA not after:            Thu 21 May 2026 01:00:32 +0000
asID:                     9498
IP address blocks:        2620:a0:2008::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7/2d448124-6e45-40ca-b551-28ef364c99c7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7/2d448124-6e45-40ca-b551-28ef364c99c7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:eb:c2:2b:af:33:f4:58:23:6b:24:71:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2d448124-6e45-40ca-b551-28ef364c99c7
        Validity
            Not Before: Feb 20 02:00:32 2026 GMT
            Not After : May 21 01:00:32 2026 GMT
        Subject: CN=a303f3a7-f866-4e3f-aca0-9181a369cf14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:3a:36:87:7b:6f:b1:81:03:93:4e:1a:b9:ee:
                    0f:f5:29:cf:ba:e0:06:4b:6b:4a:da:e1:a1:17:bc:
                    f7:0c:31:15:3c:1e:14:bd:a7:c8:ce:f7:4e:e8:24:
                    61:ad:b2:3a:e2:f7:0e:17:cd:9c:88:38:35:05:4b:
                    f7:81:2a:8e:3a:fc:15:ff:76:71:2f:79:b8:e1:f1:
                    6a:83:76:2c:e8:17:bf:c9:89:7e:5b:9d:90:f9:63:
                    c1:86:3f:b0:cd:27:75:a7:b8:81:fe:1d:71:30:9f:
                    29:6a:ab:04:1d:ed:a0:86:d3:cd:7a:fe:3d:06:3e:
                    d8:e7:cc:20:2c:8d:b9:9f:6c:40:4f:b9:5a:92:86:
                    c1:39:01:14:0e:46:22:85:6b:8f:37:d3:bd:0b:a0:
                    16:1e:a2:4b:a5:21:ab:ca:47:55:74:2b:6a:9b:01:
                    a8:9b:9b:3e:1e:f8:5c:82:ce:cd:cc:a3:34:19:55:
                    00:8f:0f:f5:73:98:6f:5a:a8:ac:4a:a1:18:bb:47:
                    3f:17:e6:8f:53:b2:ba:56:a5:a6:b1:fe:6a:5e:de:
                    bd:52:39:1f:5a:aa:47:ec:d7:3a:57:64:33:5d:63:
                    35:08:b6:aa:d8:c6:8d:d4:47:53:92:fe:23:2d:5c:
                    c4:4d:2f:f8:78:8c:ca:ad:70:05:52:1d:43:02:16:
                    88:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:C9:C2:67:15:2B:D4:B8:31:CF:E8:BA:BA:3B:9D:0D:0A:BC:27:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7/2a91e7d9-f14d-3585-b196-ff2b6ef53ff6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7/2d448124-6e45-40ca-b551-28ef364c99c7.crl

            X509v3 Authority Key Identifier:
                keyid:25:7D:1B:53:85:94:FC:AD:91:3E:C3:91:34:7B:77:79:5E:58:F5:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:a0:2008::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:bb:b2:8d:07:c7:f7:b8:0d:db:85:57:16:2c:29:eb:4c:c4:
         da:3f:3a:77:1e:49:4a:a7:76:57:11:23:34:2e:bb:ad:76:81:
         2d:eb:65:55:ed:e4:64:fd:63:91:c1:5a:99:81:91:33:66:79:
         d5:55:4e:7d:39:28:39:c1:af:a2:0e:1e:cc:dd:a2:ac:10:68:
         9b:c9:f8:f0:c5:ce:2f:be:c9:30:18:5a:ab:b4:b9:46:17:5d:
         89:7f:a0:22:02:ad:89:17:1c:37:17:8d:05:a7:8a:ff:e7:f4:
         e1:8b:bc:2e:19:fa:4e:82:1b:91:e4:38:a5:1e:0c:c1:93:bd:
         b9:42:c0:47:07:de:1a:20:61:81:98:4a:7a:ff:71:4c:93:23:
         75:af:73:11:b5:d5:64:b9:0d:53:d3:1d:dd:8a:a6:ad:18:a1:
         e1:59:07:ba:1b:5d:e9:a4:00:91:3f:ff:bb:24:67:62:93:4e:
         2b:fe:05:15:96:ff:46:dd:7d:33:ad:8f:40:fe:84:05:51:1d:
         93:7a:1e:a8:70:c0:71:bb:43:90:07:33:cf:44:82:75:3a:90:
         79:2e:0b:c9:a3:cb:98:38:c7:9d:8d:88:5a:e6:d5:ab:f7:1a:
         bb:a1:a9:48:e9:f7:85:79:ba:52:ba:46:7d:3e:75:fe:b5:31:
         c8:2a:19:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:43:46 2026 by rpki-client