Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b04c27dd-ce06-4d0a-ae84-1d675e85ce59/07d99c68-ec01-3205-a4d6-87cbf2100262.roa
File:                     07d99c68-ec01-3205-a4d6-87cbf2100262.roa (raw, json)
Hash identifier:          kDRve5l79Nt9OWGehw4zbPpdQ9m+VdaNiQmFvWoxNJ0=
Subject key identifier:   19:DE:1B:8C:31:88:80:A5:02:21:6B:E5:0C:B9:26:96:A8:19:6A:46
Certificate issuer:       /CN=b04c27dd-ce06-4d0a-ae84-1d675e85ce59
Certificate serial:       010D0C9F4328584CD4076ADC7C7D89284526B0C0
Authority key identifier: 0D:51:66:96:3A:07:C0:C9:56:4D:30:56:AC:3A:FF:0C:9C:F4:19:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b04c27dd-ce06-4d0a-ae84-1d675e85ce59.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b04c27dd-ce06-4d0a-ae84-1d675e85ce59/07d99c68-ec01-3205-a4d6-87cbf2100262.roa
Signing time:             Wed 11 Feb 2026 14:00:41 +0000
ROA not before:           Wed 11 Feb 2026 14:00:41 +0000
ROA not after:            Tue 12 May 2026 13:00:41 +0000
asID:                     32024
IP address blocks:        2607:69c0::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b04c27dd-ce06-4d0a-ae84-1d675e85ce59/b04c27dd-ce06-4d0a-ae84-1d675e85ce59.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b04c27dd-ce06-4d0a-ae84-1d675e85ce59/b04c27dd-ce06-4d0a-ae84-1d675e85ce59.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b04c27dd-ce06-4d0a-ae84-1d675e85ce59.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:d4:07:6a:dc:7c:7d:89:28:45:26:b0:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b04c27dd-ce06-4d0a-ae84-1d675e85ce59
        Validity
            Not Before: Feb 11 14:00:41 2026 GMT
            Not After : May 12 13:00:41 2026 GMT
        Subject: CN=5329efc8-c739-4d85-8885-215ab4c240fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:43:9f:85:ad:ec:14:a3:1a:3d:86:59:a5:63:
                    3d:fb:39:59:0d:67:ed:ad:64:81:2b:a5:cf:a5:59:
                    43:3e:30:3c:46:de:a2:9c:5b:f1:3d:3c:30:1c:ab:
                    eb:28:bc:21:2f:94:ee:b8:aa:39:ec:c3:7b:a7:1f:
                    e2:c2:b0:21:04:a2:c7:60:8d:0a:22:d3:99:b7:88:
                    29:e7:16:f5:a3:89:cf:2e:6d:cf:80:ee:18:1a:ad:
                    35:02:aa:b9:4b:15:a9:8b:a7:80:58:1d:25:09:df:
                    9a:35:e2:04:fb:f8:d3:fa:d6:59:c2:25:ca:20:01:
                    50:e8:78:31:98:ca:97:28:73:54:19:85:dc:8e:59:
                    96:a5:4c:8a:4e:bd:79:f6:c5:03:7b:83:cb:f5:d6:
                    9e:a5:fe:01:e1:3d:c8:8a:dd:58:4b:85:91:33:80:
                    9b:8a:69:ff:80:55:48:43:c9:9f:e2:a9:0d:d1:df:
                    19:78:78:2a:f9:5b:1a:31:d6:fc:97:1c:9b:bd:42:
                    ae:e3:fc:f5:83:ea:7c:3d:35:3a:6d:86:f0:6c:12:
                    ec:bb:41:47:a0:f9:73:b9:6e:65:c1:fc:f1:56:87:
                    4b:80:d8:9c:b4:38:be:92:ed:2b:82:68:24:28:75:
                    8d:15:00:fb:80:ea:16:f7:e5:cd:7f:4e:0b:35:8e:
                    b3:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:DE:1B:8C:31:88:80:A5:02:21:6B:E5:0C:B9:26:96:A8:19:6A:46
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b04c27dd-ce06-4d0a-ae84-1d675e85ce59/07d99c68-ec01-3205-a4d6-87cbf2100262.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b04c27dd-ce06-4d0a-ae84-1d675e85ce59/b04c27dd-ce06-4d0a-ae84-1d675e85ce59.crl

            X509v3 Authority Key Identifier:
                keyid:0D:51:66:96:3A:07:C0:C9:56:4D:30:56:AC:3A:FF:0C:9C:F4:19:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b04c27dd-ce06-4d0a-ae84-1d675e85ce59.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:69c0::/34

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:00:61:4a:64:00:c0:6e:a2:19:a2:81:ea:24:ab:85:07:75:
         3e:43:7d:3c:a7:8f:16:47:e6:81:78:02:ee:19:bf:82:5c:9f:
         67:0f:e2:2e:b6:01:bb:13:76:ad:df:70:41:4d:65:69:bf:9a:
         bd:91:6d:82:86:6d:7f:a8:09:06:e8:4c:bf:0d:b2:5e:54:07:
         9b:05:05:53:5c:2a:cd:22:a3:ed:46:d8:57:e9:f7:07:3c:4e:
         bb:f7:ec:1b:39:df:a0:8c:b7:b0:f2:97:9f:87:f7:2b:8c:d1:
         63:49:ed:6c:60:e4:23:28:a6:80:58:2e:bd:cd:ca:53:c4:f0:
         e0:2a:fb:47:12:5a:de:5d:a7:c3:76:d1:ef:ba:03:9d:98:15:
         31:b5:d7:f0:34:05:46:6c:33:07:38:17:8f:ad:7b:e4:e2:df:
         85:30:05:e5:84:e2:12:8b:a2:91:fb:ba:cd:87:33:36:b0:55:
         7a:40:84:86:cc:60:6f:f5:8c:18:b9:66:9c:70:48:11:43:6d:
         ed:9e:56:40:a5:17:0e:ec:fb:48:ad:2d:94:6e:94:d7:63:dd:
         d0:f2:97:eb:75:86:ff:63:06:59:6a:c1:a2:ce:3c:85:5e:a3:
         8d:7a:80:a5:6c:05:f4:c9:3b:b6:06:d3:f2:7e:3f:78:dd:59:
         9e:11:c8:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:58:00 2026 by rpki-client