Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7/f46575a1-bb08-3d4e-b614-33b43d1dcc0f.roa
File:                     f46575a1-bb08-3d4e-b614-33b43d1dcc0f.roa (raw, json)
Hash identifier:          7aufzGMedNWwd5TEm9HM2z3SoQeg5E5zzL7gJhC7N9I=
Subject key identifier:   DD:4E:C4:19:10:93:B4:B7:4D:52:B7:D4:86:BC:2D:47:7A:71:AF:81
Certificate issuer:       /CN=2d448124-6e45-40ca-b551-28ef364c99c7
Certificate serial:       010D0C9F4328584CAE57358BE2E58594F0825140
Authority key identifier: 25:7D:1B:53:85:94:FC:AD:91:3E:C3:91:34:7B:77:79:5E:58:F5:A6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7/f46575a1-bb08-3d4e-b614-33b43d1dcc0f.roa
Signing time:             Thu 29 Jan 2026 02:00:32 +0000
ROA not before:           Thu 29 Jan 2026 02:00:32 +0000
ROA not after:            Wed 29 Apr 2026 01:00:32 +0000
asID:                     16509
IP address blocks:        2620:a0:200f::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7/2d448124-6e45-40ca-b551-28ef364c99c7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7/2d448124-6e45-40ca-b551-28ef364c99c7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ae:57:35:8b:e2:e5:85:94:f0:82:51:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2d448124-6e45-40ca-b551-28ef364c99c7
        Validity
            Not Before: Jan 29 02:00:32 2026 GMT
            Not After : Apr 29 01:00:32 2026 GMT
        Subject: CN=d1420173-e426-430f-b4fc-1f040795d056
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:41:8e:81:1e:a3:2c:ec:cf:fb:fd:eb:3a:28:
                    a7:14:72:b4:7a:7d:10:41:5d:1d:d3:2e:a8:9c:26:
                    75:4e:c8:64:57:ba:5a:e5:23:93:60:51:5e:fc:c4:
                    5e:a5:12:f9:40:37:5b:fd:6e:4c:e9:27:a9:99:58:
                    64:03:d4:9d:48:35:8a:8f:1f:60:a0:45:84:93:45:
                    e5:c4:00:81:76:1c:53:88:b8:67:3b:23:17:61:58:
                    cf:ec:00:97:3f:1c:13:a9:6d:2e:25:65:92:1e:fd:
                    c3:d2:59:2f:e0:79:dd:ec:16:6b:62:4d:32:a8:0c:
                    d0:c8:03:d7:a3:47:63:d1:ca:7c:94:ed:1d:b7:8d:
                    33:c9:1b:f4:26:7e:da:42:47:28:2b:4f:48:07:42:
                    72:bb:e7:df:63:c1:71:9c:bf:09:b8:42:6e:81:2c:
                    c5:10:a4:92:80:86:71:66:5a:ba:57:43:00:a7:85:
                    83:12:58:c6:77:18:00:9e:28:db:40:6e:dd:35:3d:
                    2f:4a:fb:e8:06:11:0f:48:cf:fa:2f:5a:85:84:1a:
                    5b:34:4f:30:c1:21:fa:58:79:b6:f5:a7:90:0f:58:
                    50:92:5d:20:78:3c:50:4d:02:8a:0f:e2:4b:28:73:
                    0d:e3:4c:20:a2:4d:07:29:e8:48:22:d3:96:c2:7b:
                    c2:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:4E:C4:19:10:93:B4:B7:4D:52:B7:D4:86:BC:2D:47:7A:71:AF:81
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7/f46575a1-bb08-3d4e-b614-33b43d1dcc0f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7/2d448124-6e45-40ca-b551-28ef364c99c7.crl

            X509v3 Authority Key Identifier:
                keyid:25:7D:1B:53:85:94:FC:AD:91:3E:C3:91:34:7B:77:79:5E:58:F5:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:a0:200f::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:34:5a:5c:b1:0a:13:d7:94:b4:3c:ce:a0:e4:e8:5d:3d:3f:
         2b:68:4f:c4:56:3d:a9:98:d9:d4:ef:ff:f1:cc:c0:95:c3:ea:
         5e:7a:98:0f:4c:28:bf:83:0e:60:34:3f:b0:5f:91:a7:02:97:
         65:c8:86:c9:50:2b:95:da:70:52:7b:44:fa:27:03:ed:60:f0:
         4c:d0:fa:70:a8:23:b9:e0:b4:5a:f8:53:2f:92:40:0e:34:95:
         60:3e:55:83:f5:ad:be:8b:fc:5b:b3:17:9a:78:cc:52:9a:95:
         12:b0:c9:7d:52:8a:cb:b2:85:80:fe:f8:12:8f:13:b2:7f:97:
         29:cf:14:24:47:9a:66:bb:f0:84:5b:e6:7e:5a:2c:c6:21:ce:
         d6:5e:12:1d:e9:24:e3:24:de:b2:17:62:91:d7:40:94:8e:81:
         c7:b3:7c:85:eb:74:bc:1b:f8:f7:26:6c:91:f1:1c:f9:d6:12:
         94:9d:44:86:da:76:f8:1c:a6:dc:d5:39:53:ed:fb:2d:93:0f:
         7b:f6:6d:c4:b0:a5:38:c9:ff:bd:b1:c6:97:8a:db:a0:e4:c1:
         ba:61:0c:e5:90:91:63:2c:95:1d:ce:bc:cb:43:4d:68:85:eb:
         b2:09:1b:45:77:3a:f8:03:7e:b7:dd:3e:98:a3:1d:df:8b:56:
         7b:2b:84:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:12:40 2026 by rpki-client