Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/59e8e1bf-8da7-4fbc-9588-5748e5666bf7/727b5527-61f9-3b46-8b0a-7f18d25908d0.roa
File:                     727b5527-61f9-3b46-8b0a-7f18d25908d0.roa (raw, json)
Hash identifier:          A/PVkmiywM6Mg8gpOuSafzD+lBLggsDEkR/7+YquXj8=
Subject key identifier:   42:65:9D:3E:7D:67:08:44:39:05:C1:FC:C8:D8:E0:84:B7:2A:7E:1E
Certificate issuer:       /CN=59e8e1bf-8da7-4fbc-9588-5748e5666bf7
Certificate serial:       010D0C9F4328584D00B2653F824566000B8B9C80
Authority key identifier: B4:D6:43:B1:07:94:9B:8B:9E:DA:C6:50:40:91:1B:1F:85:DC:88:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/59e8e1bf-8da7-4fbc-9588-5748e5666bf7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/59e8e1bf-8da7-4fbc-9588-5748e5666bf7/727b5527-61f9-3b46-8b0a-7f18d25908d0.roa
Signing time:             Fri 27 Feb 2026 14:00:40 +0000
ROA not before:           Fri 27 Feb 2026 14:00:40 +0000
ROA not after:            Thu 28 May 2026 13:00:40 +0000
asID:                     61112
IP address blocks:        2602:fa4f:b00::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/59e8e1bf-8da7-4fbc-9588-5748e5666bf7/59e8e1bf-8da7-4fbc-9588-5748e5666bf7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/59e8e1bf-8da7-4fbc-9588-5748e5666bf7/59e8e1bf-8da7-4fbc-9588-5748e5666bf7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/59e8e1bf-8da7-4fbc-9588-5748e5666bf7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:00:b2:65:3f:82:45:66:00:0b:8b:9c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59e8e1bf-8da7-4fbc-9588-5748e5666bf7
        Validity
            Not Before: Feb 27 14:00:40 2026 GMT
            Not After : May 28 13:00:40 2026 GMT
        Subject: CN=e56638bc-7fd5-4065-876e-d902d6ff43c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:a3:f7:de:90:9c:38:a2:f9:5d:36:1a:2c:fb:
                    35:1a:cf:55:55:c2:9d:6f:73:fb:ca:45:87:60:0c:
                    22:4a:19:c7:bb:cb:5b:a8:fc:25:db:3a:01:30:83:
                    f1:ac:b1:c2:db:c7:e8:13:cc:ca:69:56:7f:cb:55:
                    55:8d:66:c0:de:9e:da:6e:b5:6f:82:db:08:7e:f2:
                    fb:1c:94:9d:17:0a:1a:6f:e6:82:82:ab:60:1b:a3:
                    bc:48:69:59:c8:b4:0d:8e:1a:ff:32:12:83:ac:4b:
                    a6:c2:58:33:f3:c6:20:ba:fb:0c:39:c9:08:81:79:
                    37:19:1c:4d:3d:c2:a1:90:1b:49:3c:eb:bb:df:b5:
                    80:db:b9:dd:f4:ef:ae:5e:9f:53:fb:53:63:86:79:
                    80:fd:90:29:40:a6:fd:2f:59:43:9f:a4:d7:9e:be:
                    c3:25:5f:82:fc:b2:dd:40:f5:27:ea:33:78:a3:ab:
                    13:ba:7b:c6:c3:60:2d:d7:66:b9:e8:19:47:77:6f:
                    5b:93:3b:5c:95:73:d7:8f:bb:ec:9c:fc:6c:1d:2f:
                    d6:15:81:63:2e:92:bd:dc:9f:29:96:92:91:2b:26:
                    a3:56:14:94:2f:e3:40:6f:6b:e6:d7:47:ae:c9:43:
                    bc:7c:86:50:05:61:6c:56:d1:55:c0:c2:f8:11:00:
                    48:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:65:9D:3E:7D:67:08:44:39:05:C1:FC:C8:D8:E0:84:B7:2A:7E:1E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/59e8e1bf-8da7-4fbc-9588-5748e5666bf7/727b5527-61f9-3b46-8b0a-7f18d25908d0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/59e8e1bf-8da7-4fbc-9588-5748e5666bf7/59e8e1bf-8da7-4fbc-9588-5748e5666bf7.crl

            X509v3 Authority Key Identifier:
                keyid:B4:D6:43:B1:07:94:9B:8B:9E:DA:C6:50:40:91:1B:1F:85:DC:88:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/59e8e1bf-8da7-4fbc-9588-5748e5666bf7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa4f:b00::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:64:41:60:1b:e0:4f:66:0a:3d:dc:12:60:da:46:cf:57:0f:
         38:0b:52:07:91:1b:0f:26:d8:49:4e:86:b7:44:98:32:57:56:
         d1:16:06:24:e7:fd:cf:8a:60:f3:36:8a:46:b5:ac:96:3e:d6:
         67:c0:40:f3:47:34:56:38:7e:2d:f7:7a:45:94:77:c6:fa:a7:
         10:f6:08:1e:18:42:e5:87:7a:27:34:aa:59:e0:a3:b4:b1:7f:
         74:95:8c:74:c4:bc:d6:59:37:b5:88:4c:c7:72:92:b6:ef:c4:
         c0:ab:be:b9:94:a3:94:c3:9b:6c:7d:77:a4:b1:53:e8:1d:af:
         11:72:84:31:92:aa:c9:ed:7a:85:7f:8e:25:21:31:f0:b3:4d:
         97:b5:37:cf:0e:de:63:a9:bb:c0:88:c3:c2:76:c6:0d:83:c1:
         ac:26:58:b9:34:e9:0f:61:fa:c3:f3:55:7f:67:fd:77:90:c1:
         12:27:ae:ec:15:83:a3:12:3f:60:fd:ae:2b:7f:a9:61:52:c4:
         77:45:92:67:22:9b:34:5b:7e:a2:61:4f:48:02:4c:2f:c3:4b:
         87:de:73:0b:2b:e2:b1:29:e5:fb:b1:31:08:28:8d:01:22:52:
         0b:54:78:45:2a:44:73:4a:cf:3b:60:90:92:b3:b2:9e:3e:bf:
         3c:88:25:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:14:30 2026 by rpki-client