Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b04c27dd-ce06-4d0a-ae84-1d675e85ce59/ee5e6bc7-e933-3011-ab89-2c7e76441156.roa
File:                     ee5e6bc7-e933-3011-ab89-2c7e76441156.roa (raw, json)
Hash identifier:          xxmbE39kv4bjpwyV5+LrBzuKnXZLujHzCoUESOrLA3w=
Subject key identifier:   32:58:3B:3B:C6:FE:F5:21:01:2D:63:42:4F:C7:19:8C:30:4B:4B:32
Certificate issuer:       /CN=b04c27dd-ce06-4d0a-ae84-1d675e85ce59
Certificate serial:       010D0C9F4328584CE7922978A0D9FE390A48E8F0
Authority key identifier: 0D:51:66:96:3A:07:C0:C9:56:4D:30:56:AC:3A:FF:0C:9C:F4:19:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b04c27dd-ce06-4d0a-ae84-1d675e85ce59.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b04c27dd-ce06-4d0a-ae84-1d675e85ce59/ee5e6bc7-e933-3011-ab89-2c7e76441156.roa
Signing time:             Wed 18 Feb 2026 14:00:41 +0000
ROA not before:           Wed 18 Feb 2026 14:00:41 +0000
ROA not after:            Tue 19 May 2026 13:00:41 +0000
asID:                     32024
IP address blocks:        2607:69c0:4000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b04c27dd-ce06-4d0a-ae84-1d675e85ce59/b04c27dd-ce06-4d0a-ae84-1d675e85ce59.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b04c27dd-ce06-4d0a-ae84-1d675e85ce59/b04c27dd-ce06-4d0a-ae84-1d675e85ce59.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b04c27dd-ce06-4d0a-ae84-1d675e85ce59.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:e7:92:29:78:a0:d9:fe:39:0a:48:e8:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b04c27dd-ce06-4d0a-ae84-1d675e85ce59
        Validity
            Not Before: Feb 18 14:00:41 2026 GMT
            Not After : May 19 13:00:41 2026 GMT
        Subject: CN=034fe788-9b7c-41d2-91fd-168e1df98efd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:a5:9c:b1:91:3e:4e:16:b4:39:d8:ff:d8:2b:
                    9a:11:c3:53:8c:e9:2d:30:db:da:6c:c4:36:27:30:
                    99:d2:ab:45:3c:15:5d:50:4f:2e:06:03:ef:01:28:
                    8e:d3:bd:b7:6f:4e:39:a4:41:49:89:72:1d:03:9a:
                    5f:74:47:fe:13:90:52:49:68:f7:90:d8:f6:94:ed:
                    16:45:a4:33:a4:38:10:ba:d6:91:3f:0d:87:88:87:
                    77:e7:c2:f2:3b:93:48:88:e0:f2:21:a0:ae:3d:33:
                    2d:1a:7c:3a:a9:52:54:bc:03:9e:3f:81:ec:75:09:
                    b3:ac:ee:a2:10:7b:48:35:a7:e2:ab:76:05:2f:57:
                    52:e5:55:44:18:71:06:07:08:fd:87:38:62:1f:ce:
                    96:41:15:f3:98:3f:e3:56:9f:c3:8c:2a:03:7f:0d:
                    1b:41:13:d9:a8:24:e8:cf:7d:dc:4a:f9:b5:1e:b3:
                    b8:ad:1d:81:a1:34:5f:e9:0c:f0:ea:1e:0b:d2:cd:
                    12:f0:d9:48:ea:73:6e:89:b6:68:bb:42:7b:64:22:
                    aa:7d:b9:d2:83:65:08:ad:42:94:32:00:e2:5c:9e:
                    43:4f:ed:ba:12:28:93:8c:8d:5b:4b:85:d4:8f:01:
                    d3:42:a4:4b:ff:1f:4c:c9:02:f5:8b:fe:f3:4d:c3:
                    57:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:58:3B:3B:C6:FE:F5:21:01:2D:63:42:4F:C7:19:8C:30:4B:4B:32
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b04c27dd-ce06-4d0a-ae84-1d675e85ce59/ee5e6bc7-e933-3011-ab89-2c7e76441156.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b04c27dd-ce06-4d0a-ae84-1d675e85ce59/b04c27dd-ce06-4d0a-ae84-1d675e85ce59.crl

            X509v3 Authority Key Identifier:
                keyid:0D:51:66:96:3A:07:C0:C9:56:4D:30:56:AC:3A:FF:0C:9C:F4:19:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b04c27dd-ce06-4d0a-ae84-1d675e85ce59.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:69c0:4000::/34

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:43:b7:5c:70:d2:66:bb:4d:e6:17:31:5f:7e:5f:4d:7e:ef:
         15:48:f3:42:8a:da:7a:16:b5:4f:7b:df:f9:48:cd:79:54:59:
         5a:e7:7c:77:de:00:76:42:c2:97:b1:50:2a:85:a8:4d:9d:40:
         c3:f3:7a:5b:34:ff:54:e7:69:4e:64:0e:13:30:97:bf:3a:f4:
         3d:79:3e:a3:4f:b5:83:6b:72:0d:6a:22:c6:00:84:81:5f:46:
         d3:e9:7f:52:9d:bb:01:3f:c4:5c:67:69:64:42:1f:4c:a9:f2:
         eb:b5:76:33:28:7a:fa:3b:a5:76:1b:a6:a9:c9:1c:df:89:b1:
         39:5a:da:56:18:d7:3c:d4:a2:30:a6:10:e1:66:ae:3b:37:d2:
         c9:d0:ae:9a:6d:22:43:37:c4:83:9b:81:09:e5:94:2f:8c:74:
         d4:30:d5:a0:96:79:bb:f1:92:1f:34:76:ad:1e:5a:46:3e:bb:
         40:70:4b:dc:ef:a4:1d:33:71:db:b0:ab:4c:2c:0f:30:28:9d:
         54:b8:b8:d0:72:4b:7c:f6:c5:51:5e:c6:63:60:93:af:52:28:
         01:46:6e:8f:be:88:bd:3a:c4:84:76:1b:ab:a1:71:c6:61:79:
         1c:04:46:64:6e:c4:25:20:e0:84:f1:ba:3e:fc:d1:8c:9f:fc:
         50:79:e0:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:54:32 2026 by rpki-client