Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3e5a4c55-417a-4d58-b604-09c3cc10a5ef/00284572-ea59-33f8-9f35-4491476aec57.roa
File:                     00284572-ea59-33f8-9f35-4491476aec57.roa (raw, json)
Hash identifier:          IstNVZo8OQNiAev/wFjGLdvL365XZkrQUANFt8ciqF0=
Subject key identifier:   FF:3B:C7:61:80:D4:4B:BD:B1:8E:54:62:D5:D9:4C:A9:CA:A9:61:0B
Certificate issuer:       /CN=3e5a4c55-417a-4d58-b604-09c3cc10a5ef
Certificate serial:       010D0C9F4328584CE8F76E474992BE6425E0E600
Authority key identifier: A3:E5:0B:36:A4:C1:EA:2D:86:7F:C4:88:88:08:44:45:FC:2C:32:2A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3e5a4c55-417a-4d58-b604-09c3cc10a5ef.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3e5a4c55-417a-4d58-b604-09c3cc10a5ef/00284572-ea59-33f8-9f35-4491476aec57.roa
Signing time:             Thu 19 Feb 2026 02:00:32 +0000
ROA not before:           Thu 19 Feb 2026 02:00:32 +0000
ROA not after:            Wed 20 May 2026 01:00:32 +0000
asID:                     1751
IP address blocks:        2607:6a40::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3e5a4c55-417a-4d58-b604-09c3cc10a5ef/3e5a4c55-417a-4d58-b604-09c3cc10a5ef.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3e5a4c55-417a-4d58-b604-09c3cc10a5ef/3e5a4c55-417a-4d58-b604-09c3cc10a5ef.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3e5a4c55-417a-4d58-b604-09c3cc10a5ef.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:e8:f7:6e:47:49:92:be:64:25:e0:e6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3e5a4c55-417a-4d58-b604-09c3cc10a5ef
        Validity
            Not Before: Feb 19 02:00:32 2026 GMT
            Not After : May 20 01:00:32 2026 GMT
        Subject: CN=7e29acdd-f9de-4ba8-bf73-488c8f1c930d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:18:4d:9f:cd:b3:35:57:f7:75:49:e2:7d:8d:
                    c8:66:77:85:56:93:3e:eb:23:5d:06:5d:9e:97:5d:
                    1b:a3:64:d6:88:c2:35:c9:d9:ee:76:6e:b2:90:1d:
                    7d:24:dc:b0:d0:a0:76:c5:e0:7e:c9:9c:bd:da:ff:
                    17:70:2e:63:87:b0:9a:ac:2d:67:4c:0a:5a:e9:7f:
                    01:cb:aa:86:d0:f0:c8:41:e1:ad:99:f8:a5:5e:fe:
                    f3:15:26:93:99:9d:9e:12:42:50:cf:01:02:8c:65:
                    26:58:c0:69:62:ec:3a:5f:6a:47:8b:b5:23:be:7e:
                    04:1c:5c:df:79:5e:0b:3c:d4:45:86:82:0b:be:0c:
                    51:59:27:91:94:a8:b5:a3:f5:db:cc:c4:7e:7d:bc:
                    50:7e:fd:a7:30:f3:f6:25:db:22:51:90:2f:a1:30:
                    63:b8:56:a8:ea:94:c7:dd:26:0b:b3:70:01:2e:4c:
                    0a:2a:66:8b:41:25:80:8a:69:19:86:fa:b1:34:14:
                    42:34:4d:29:22:23:d3:66:9f:4e:4f:78:90:ee:87:
                    bf:b9:f6:44:8d:df:a0:f3:eb:66:f7:41:fc:be:7c:
                    17:71:5d:1f:71:fd:ce:a6:ac:8f:36:6d:af:33:9f:
                    88:ac:1b:2c:0b:ae:c0:ff:08:8c:d6:10:3d:ab:51:
                    b5:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:3B:C7:61:80:D4:4B:BD:B1:8E:54:62:D5:D9:4C:A9:CA:A9:61:0B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3e5a4c55-417a-4d58-b604-09c3cc10a5ef/00284572-ea59-33f8-9f35-4491476aec57.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3e5a4c55-417a-4d58-b604-09c3cc10a5ef/3e5a4c55-417a-4d58-b604-09c3cc10a5ef.crl

            X509v3 Authority Key Identifier:
                keyid:A3:E5:0B:36:A4:C1:EA:2D:86:7F:C4:88:88:08:44:45:FC:2C:32:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3e5a4c55-417a-4d58-b604-09c3cc10a5ef.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:6a40::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:d6:99:f0:e1:10:4b:fa:c5:13:f0:a5:96:ce:09:7d:08:0d:
         1e:e5:d0:b9:cf:de:fe:07:51:8b:42:78:1f:68:f3:fa:ce:b9:
         15:36:62:5a:29:da:45:9f:90:64:df:60:86:0a:c0:7c:5b:79:
         e5:5e:d7:90:c8:90:dd:7c:f9:17:98:43:39:d9:69:ee:8f:d9:
         e6:30:bf:23:04:f5:a2:40:40:de:fa:00:ab:8c:1d:c7:a7:11:
         e6:78:ea:86:ee:4a:b1:1e:41:ec:7b:58:12:27:c7:6d:d6:4b:
         41:58:c7:f6:1b:62:2b:45:08:9c:69:4a:ac:9d:12:b7:bc:e4:
         c2:4f:70:ec:7c:49:ea:2e:b1:13:19:b9:d2:63:a2:16:61:4c:
         5b:20:0e:b4:ef:d4:7d:e1:f6:33:8a:8f:34:67:46:d5:fa:62:
         90:bb:d3:6e:6d:d6:af:b2:59:90:ca:a7:28:a2:2b:31:a4:55:
         33:d6:c6:8e:97:5a:40:d4:df:79:d0:12:fe:44:4d:30:e4:79:
         27:53:8d:30:cf:be:66:77:a4:8f:e8:0f:9c:76:0f:6b:5e:31:
         26:39:7a:b6:1f:f4:c8:62:2f:26:5b:c9:22:f4:ba:a0:78:e3:
         f1:98:d0:92:9f:85:e1:a4:d6:d0:ca:39:17:99:6f:91:9b:23:
         b7:31:d7:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:17:26 2026 by rpki-client