Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8a2695b7-e823-4f74-93b8-98dbbf775bcf/5e9ca8eb-7d6e-3139-a953-42189e507e24.roa
File:                     5e9ca8eb-7d6e-3139-a953-42189e507e24.roa (raw, json)
Hash identifier:          3VsXj143ia+t6pSJwVgGUoFFhaxmNFZhMWQXsH52UmA=
Subject key identifier:   F1:E8:43:E3:CC:E5:5C:2B:23:22:B4:7E:90:6C:39:1B:88:1A:B0:C5
Certificate issuer:       /CN=8a2695b7-e823-4f74-93b8-98dbbf775bcf
Certificate serial:       010D0C9F4328584CD6D21BC351C28A0A0E2BDA40
Authority key identifier: 43:0A:58:EE:F9:9E:78:C5:3B:DC:25:A2:B4:83:93:81:46:69:C4:66
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8a2695b7-e823-4f74-93b8-98dbbf775bcf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8a2695b7-e823-4f74-93b8-98dbbf775bcf/5e9ca8eb-7d6e-3139-a953-42189e507e24.roa
Signing time:             Thu 12 Feb 2026 14:00:40 +0000
ROA not before:           Thu 12 Feb 2026 14:00:40 +0000
ROA not after:            Wed 13 May 2026 13:00:40 +0000
asID:                     397493
IP address blocks:        2604:13a0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8a2695b7-e823-4f74-93b8-98dbbf775bcf/8a2695b7-e823-4f74-93b8-98dbbf775bcf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8a2695b7-e823-4f74-93b8-98dbbf775bcf/8a2695b7-e823-4f74-93b8-98dbbf775bcf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8a2695b7-e823-4f74-93b8-98dbbf775bcf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:d6:d2:1b:c3:51:c2:8a:0a:0e:2b:da:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a2695b7-e823-4f74-93b8-98dbbf775bcf
        Validity
            Not Before: Feb 12 14:00:40 2026 GMT
            Not After : May 13 13:00:40 2026 GMT
        Subject: CN=2cdbf0b1-33f8-41dc-9fdc-ba4188c640f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:fd:71:1d:cd:56:bf:11:1d:3e:2a:43:60:48:
                    87:51:49:89:b6:29:ab:a7:b1:fd:44:38:3b:81:bf:
                    b1:fc:be:4c:3b:34:5d:4a:38:39:9a:a7:4d:b5:63:
                    69:1b:d6:70:0f:45:ee:af:cc:e5:f2:13:a6:f0:f4:
                    75:7b:36:ca:82:a6:17:1e:ea:0b:6f:0a:c9:c5:a2:
                    d9:22:8d:5c:17:d7:42:85:9d:70:ff:4c:66:3c:80:
                    45:46:52:0f:c1:d2:cb:c7:55:b2:12:51:57:94:9b:
                    81:f0:f9:58:3d:56:c5:d4:82:a6:c0:6e:8b:b5:4e:
                    c3:54:7f:6b:5a:cc:72:4f:af:25:41:30:16:5c:b9:
                    bb:bc:e4:ec:9d:58:72:32:34:f3:80:bb:a8:da:09:
                    f7:26:19:1b:24:10:52:7e:fc:98:13:42:78:a6:85:
                    da:46:bf:fa:7a:06:a1:3c:07:b5:b8:ca:36:c5:2c:
                    bc:d0:61:8a:63:1b:7e:fd:63:bf:ae:31:01:63:2c:
                    c3:fa:87:26:d1:52:33:aa:b8:d4:7b:88:5f:91:75:
                    d2:70:8f:33:4a:4b:4b:bf:d9:c9:fb:b4:b3:8f:cb:
                    a3:46:01:bc:6e:6c:36:05:3e:ee:0a:d8:4f:dd:8e:
                    6b:48:df:f0:b0:ea:1e:ff:7d:c4:88:dc:d8:8b:59:
                    34:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:E8:43:E3:CC:E5:5C:2B:23:22:B4:7E:90:6C:39:1B:88:1A:B0:C5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8a2695b7-e823-4f74-93b8-98dbbf775bcf/5e9ca8eb-7d6e-3139-a953-42189e507e24.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8a2695b7-e823-4f74-93b8-98dbbf775bcf/8a2695b7-e823-4f74-93b8-98dbbf775bcf.crl

            X509v3 Authority Key Identifier:
                keyid:43:0A:58:EE:F9:9E:78:C5:3B:DC:25:A2:B4:83:93:81:46:69:C4:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8a2695b7-e823-4f74-93b8-98dbbf775bcf.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:13a0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:5e:6e:15:ca:07:ef:37:65:20:2e:05:ab:de:1c:25:b0:0a:
         48:98:b9:26:95:4e:40:f3:c5:2c:a6:70:3b:43:f3:05:0f:a3:
         76:29:09:d7:01:89:da:d2:ad:e8:d2:4d:9d:f8:a9:91:29:aa:
         37:40:62:a4:f3:6d:cc:98:8d:1b:8b:a0:a8:b1:f4:3e:12:bc:
         93:86:e7:b8:ae:83:bc:f0:bf:1e:da:39:13:5e:dd:75:72:16:
         81:3c:a7:c9:9f:d7:90:40:b1:70:bf:3e:96:34:fb:d9:32:33:
         e7:c4:bf:58:d2:4e:1d:4a:91:8a:44:dd:1e:65:13:17:06:7c:
         21:cc:f5:64:f2:bd:08:67:fe:38:0f:90:72:16:11:c2:c1:cc:
         9a:9b:f6:65:0e:20:05:7d:99:e8:3a:a5:ff:7c:45:3b:f6:73:
         a7:56:08:d1:96:ff:cf:05:bc:cc:32:26:03:4f:ac:2f:37:d4:
         f4:d2:c3:66:77:01:23:66:6b:18:cf:fd:c6:de:0f:0e:93:5a:
         a3:0d:95:57:45:18:60:5f:2e:47:69:cc:79:b7:83:a1:a5:2c:
         c8:da:36:9a:49:0e:57:d3:79:c2:12:41:08:62:cf:26:17:3f:
         01:2c:df:a8:8d:4b:59:38:f4:fc:cd:17:58:ab:96:2c:73:8c:
         ee:60:d9:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:00:56 2026 by rpki-client