Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4ba03064-0288-4ec4-b73f-d6ba1d639961/5b2f3d47-01c0-385d-80b6-55e854983c66.roa
File:                     5b2f3d47-01c0-385d-80b6-55e854983c66.roa (raw, json)
Hash identifier:          /OvekOWFrGWmAlyEyGcLaX4NvFjJzV5pSZJNlN3hSSw=
Subject key identifier:   DD:D2:0C:04:08:1B:25:44:B0:39:10:BC:2B:47:EC:F2:56:6E:34:75
Certificate issuer:       /CN=4ba03064-0288-4ec4-b73f-d6ba1d639961
Certificate serial:       010D0C9F4328584CF9B7892C44C874269738A880
Authority key identifier: D5:B0:A1:F6:E8:C8:0C:9B:0D:B8:6F:3D:78:20:2F:7B:79:D4:AD:D5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4ba03064-0288-4ec4-b73f-d6ba1d639961.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4ba03064-0288-4ec4-b73f-d6ba1d639961/5b2f3d47-01c0-385d-80b6-55e854983c66.roa
Signing time:             Wed 25 Feb 2026 02:00:32 +0000
ROA not before:           Wed 25 Feb 2026 02:00:32 +0000
ROA not after:            Tue 26 May 2026 01:00:32 +0000
asID:                     174
IP address blocks:        2602:fa3d:a93::/48 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4ba03064-0288-4ec4-b73f-d6ba1d639961/4ba03064-0288-4ec4-b73f-d6ba1d639961.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4ba03064-0288-4ec4-b73f-d6ba1d639961/4ba03064-0288-4ec4-b73f-d6ba1d639961.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4ba03064-0288-4ec4-b73f-d6ba1d639961.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:f9:b7:89:2c:44:c8:74:26:97:38:a8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ba03064-0288-4ec4-b73f-d6ba1d639961
        Validity
            Not Before: Feb 25 02:00:32 2026 GMT
            Not After : May 26 01:00:32 2026 GMT
        Subject: CN=7b1b7ee8-265e-491b-8fcc-d8c4037e2e75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:14:6e:44:00:ad:b0:79:59:68:c5:fc:36:21:
                    3e:0f:78:33:12:a6:24:2b:5e:05:d7:6d:64:9e:9e:
                    6a:5d:98:ac:e2:76:da:54:ce:d7:70:fd:0e:16:85:
                    47:07:c1:53:c7:70:98:2e:d7:1c:8b:24:37:98:46:
                    83:73:15:e9:88:e0:06:17:1a:5d:3e:6c:ae:e3:77:
                    23:49:40:4c:5e:cd:c4:e8:dd:d7:81:32:79:53:31:
                    45:db:0b:2a:e1:6b:a7:d8:2f:7e:34:87:df:3b:5a:
                    8d:10:28:b5:de:2c:0a:f7:43:bc:3c:48:bd:0a:e0:
                    ef:92:f7:1c:4f:7d:3a:b7:ad:af:6a:27:48:b3:b1:
                    9c:da:9c:2a:46:7e:a1:a9:bc:cc:65:41:33:88:0c:
                    13:83:44:6a:ee:e2:de:45:07:41:fa:6c:bb:a0:0e:
                    f4:c3:53:d5:e1:2e:c9:db:5e:d2:75:ed:08:e9:0e:
                    c7:03:fa:59:9f:88:d0:4f:5b:fa:9d:12:f4:79:5a:
                    cd:83:95:64:9f:10:07:f9:9d:74:57:00:97:b6:5e:
                    35:f3:94:a7:27:b0:12:81:cc:1e:e4:08:47:3c:65:
                    fa:72:8f:aa:d1:77:e3:04:40:28:f2:ca:51:78:28:
                    f3:e2:3a:4e:bf:7a:a6:c0:47:0a:11:fb:c2:3c:4e:
                    ce:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:D2:0C:04:08:1B:25:44:B0:39:10:BC:2B:47:EC:F2:56:6E:34:75
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4ba03064-0288-4ec4-b73f-d6ba1d639961/5b2f3d47-01c0-385d-80b6-55e854983c66.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4ba03064-0288-4ec4-b73f-d6ba1d639961/4ba03064-0288-4ec4-b73f-d6ba1d639961.crl

            X509v3 Authority Key Identifier:
                keyid:D5:B0:A1:F6:E8:C8:0C:9B:0D:B8:6F:3D:78:20:2F:7B:79:D4:AD:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4ba03064-0288-4ec4-b73f-d6ba1d639961.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa3d:a93::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:df:3d:8e:af:3e:17:b0:21:e1:d5:ad:0c:1d:f5:b8:5b:28:
         d9:6d:60:67:9c:ae:e7:b7:e8:6b:70:b1:55:01:58:47:71:6c:
         92:50:05:61:8d:6f:29:f5:01:ad:13:f6:58:75:04:f5:69:b0:
         63:48:f3:0d:4f:fd:52:1a:c9:fb:e5:46:c9:12:21:71:75:bd:
         f7:4a:48:07:eb:eb:c1:87:f0:dc:90:ea:1d:f8:1b:65:36:32:
         0e:72:06:20:96:99:fc:fb:de:8b:74:7d:c0:d2:cf:2a:6d:c4:
         47:f3:03:d7:07:e8:8e:96:73:17:b0:68:93:91:a6:17:76:25:
         1f:3c:32:c9:cb:de:27:26:83:54:13:44:70:56:84:fd:bf:5d:
         c6:a4:2f:89:42:b0:63:e8:22:8d:da:4f:8c:a3:a4:42:d3:bb:
         92:3d:4e:99:82:b6:01:36:07:d4:c2:3b:b4:0e:53:c4:10:fc:
         76:33:f9:05:98:01:b8:b2:9b:0b:99:32:bc:46:43:64:3f:b7:
         5b:83:f1:54:a9:37:ee:c3:1f:49:1d:90:5a:e8:3e:ce:b1:63:
         34:2b:2e:e7:31:d7:59:bb:65:3e:6d:57:c7:43:2b:4d:de:ea:
         ad:c4:c5:09:d5:a6:26:84:3e:81:37:36:4c:55:dd:cb:69:6b:
         7d:9f:bd:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:22:59 2026 by rpki-client