Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4931e717-c1d1-4dd8-863d-5c06fb76f47b/df5148de-ede2-3842-905b-9207fff8922c.roa
File:                     df5148de-ede2-3842-905b-9207fff8922c.roa (raw, json)
Hash identifier:          81jWmZ430PXJ+FNJlpjrb8ZWUiB8oHBtD4mgNWvawlc=
Subject key identifier:   9D:40:E3:0A:BA:7C:19:0C:4E:E0:BB:07:DF:89:2E:EB:64:E3:B5:0A
Certificate issuer:       /CN=4931e717-c1d1-4dd8-863d-5c06fb76f47b
Certificate serial:       010D0C9F4328584CD99CDD48949A98ACFB17FE00
Authority key identifier: CE:42:FE:71:11:71:C3:49:1B:8D:B6:7B:74:E4:1F:4F:E2:91:DE:8C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4931e717-c1d1-4dd8-863d-5c06fb76f47b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4931e717-c1d1-4dd8-863d-5c06fb76f47b/df5148de-ede2-3842-905b-9207fff8922c.roa
Signing time:             Fri 13 Feb 2026 14:00:41 +0000
ROA not before:           Fri 13 Feb 2026 14:00:41 +0000
ROA not after:            Thu 14 May 2026 13:00:41 +0000
asID:                     21713
IP address blocks:        2605:c380::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4931e717-c1d1-4dd8-863d-5c06fb76f47b/4931e717-c1d1-4dd8-863d-5c06fb76f47b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4931e717-c1d1-4dd8-863d-5c06fb76f47b/4931e717-c1d1-4dd8-863d-5c06fb76f47b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4931e717-c1d1-4dd8-863d-5c06fb76f47b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:d9:9c:dd:48:94:9a:98:ac:fb:17:fe:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4931e717-c1d1-4dd8-863d-5c06fb76f47b
        Validity
            Not Before: Feb 13 14:00:41 2026 GMT
            Not After : May 14 13:00:41 2026 GMT
        Subject: CN=d3d30060-1a4b-42da-b0a9-2896c4da7af4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:b9:d7:4a:42:5d:ef:00:7a:60:91:db:97:5f:
                    10:fd:c2:3e:c2:c8:a3:9b:a0:7a:dc:d6:a0:11:0a:
                    13:86:2e:8b:ec:45:f4:b3:80:50:75:8e:39:c7:31:
                    9f:d3:c3:91:d1:39:1f:65:d7:b8:d0:a5:9e:c2:23:
                    eb:89:48:1e:07:c0:2e:42:c1:67:0d:36:8d:8f:de:
                    c5:8b:76:e3:d4:f3:bd:a5:3f:b4:c3:b9:88:e7:a0:
                    d7:45:2b:53:91:cc:52:a8:ad:80:c3:ab:a0:8f:9d:
                    ab:b3:56:58:d8:dc:83:fa:47:7f:aa:4d:a7:cd:b4:
                    1a:38:b2:69:ff:82:9e:0f:54:09:4b:cb:4b:67:15:
                    7c:46:8b:f9:68:f9:7e:6d:f9:4d:78:4e:85:4f:89:
                    76:44:73:d1:fe:d6:cb:85:1c:46:a0:6d:ec:15:0a:
                    e7:2e:c5:ca:85:85:70:66:d5:52:d6:09:b1:4d:9c:
                    ce:27:b1:ab:71:71:10:9c:9f:4e:23:cd:3f:02:fe:
                    4e:9a:59:0f:b6:63:5a:de:21:f4:75:57:1c:13:5e:
                    fc:a7:99:13:1b:c8:af:2b:58:96:65:b6:9b:af:85:
                    2f:2e:6b:a2:16:e5:79:bf:fe:e5:e9:25:1b:87:0c:
                    9d:eb:98:90:c5:c2:11:52:e4:0b:85:d8:ee:f8:b9:
                    d0:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:40:E3:0A:BA:7C:19:0C:4E:E0:BB:07:DF:89:2E:EB:64:E3:B5:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4931e717-c1d1-4dd8-863d-5c06fb76f47b/df5148de-ede2-3842-905b-9207fff8922c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4931e717-c1d1-4dd8-863d-5c06fb76f47b/4931e717-c1d1-4dd8-863d-5c06fb76f47b.crl

            X509v3 Authority Key Identifier:
                keyid:CE:42:FE:71:11:71:C3:49:1B:8D:B6:7B:74:E4:1F:4F:E2:91:DE:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4931e717-c1d1-4dd8-863d-5c06fb76f47b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:c380::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:51:b8:23:93:1a:c6:d3:f7:78:af:31:59:6e:da:94:cd:19:
         9c:7a:00:6c:c5:ae:77:28:f1:3d:56:f8:bf:03:05:00:d5:cb:
         d7:62:af:3a:68:cc:08:2a:32:bb:2d:5f:b5:fa:00:fd:93:e8:
         2a:8f:37:32:bb:b9:bd:8e:03:22:81:5f:9b:1e:58:97:c7:e1:
         fe:f1:d2:1a:a7:7f:06:52:4c:b8:2d:a4:a9:4f:e4:5b:28:ea:
         72:38:37:f7:0c:31:c9:cc:50:99:b7:dd:76:d5:84:38:56:d0:
         c4:f3:74:8e:66:e4:ab:21:5f:ba:fc:4c:16:3a:22:ef:24:2a:
         9e:62:fb:b3:09:29:a3:e4:f9:46:4f:7f:00:86:09:f4:82:93:
         b3:36:aa:f9:f7:4c:71:c2:47:99:dd:90:1e:c6:a5:c7:8d:6e:
         93:c1:e7:af:ad:cb:a4:6c:d0:52:11:f1:39:99:6a:4b:fd:8f:
         c7:e1:14:d3:a8:55:b8:01:e5:ce:cd:90:09:47:c6:ab:20:b6:
         78:cf:91:10:ca:55:77:11:32:0b:ad:69:fb:71:10:ba:34:e4:
         e8:ba:e1:bb:52:e9:71:a9:e0:dc:33:60:2c:a3:75:dd:0b:75:
         99:a0:06:b9:d5:f9:ac:00:6c:b3:7e:bd:cf:cf:a6:b0:50:a4:
         43:0e:1c:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:41:36 2026 by rpki-client