Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c500ad14-2d08-4542-9008-f15b1b862fc7/4cd7cde1-4ea2-33e8-b3de-54f58d60fb9f.roa
File:                     4cd7cde1-4ea2-33e8-b3de-54f58d60fb9f.roa (raw, json)
Hash identifier:          XiIQc7B0RTJATmUa4VYmY6xlwowjqQfbz12IIinm01s=
Subject key identifier:   9D:51:68:EC:89:4C:DB:02:B8:D2:3E:21:67:70:37:48:A9:81:AB:29
Certificate issuer:       /CN=c500ad14-2d08-4542-9008-f15b1b862fc7
Certificate serial:       010D0C9F4328584CE1FCD41CE262AB4B638A5C40
Authority key identifier: 5D:A9:0A:32:F7:BE:90:78:5E:23:16:99:3F:6C:BF:46:3A:E4:9E:9A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c500ad14-2d08-4542-9008-f15b1b862fc7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c500ad14-2d08-4542-9008-f15b1b862fc7/4cd7cde1-4ea2-33e8-b3de-54f58d60fb9f.roa
Signing time:             Mon 16 Feb 2026 14:00:40 +0000
ROA not before:           Mon 16 Feb 2026 14:00:40 +0000
ROA not after:            Sun 17 May 2026 13:00:40 +0000
asID:                     6596
IP address blocks:        2001:48d8::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c500ad14-2d08-4542-9008-f15b1b862fc7/c500ad14-2d08-4542-9008-f15b1b862fc7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c500ad14-2d08-4542-9008-f15b1b862fc7/c500ad14-2d08-4542-9008-f15b1b862fc7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c500ad14-2d08-4542-9008-f15b1b862fc7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:e1:fc:d4:1c:e2:62:ab:4b:63:8a:5c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c500ad14-2d08-4542-9008-f15b1b862fc7
        Validity
            Not Before: Feb 16 14:00:40 2026 GMT
            Not After : May 17 13:00:40 2026 GMT
        Subject: CN=e92b0fd4-6ba2-49b2-be51-ea0ebb16b426
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:7f:57:92:ec:3c:03:48:5c:41:66:7e:d1:b5:
                    dc:4f:ba:d1:d2:4a:0d:f4:18:3b:da:5a:9e:cb:57:
                    68:13:47:38:5b:9f:24:93:66:3d:44:2d:de:39:b1:
                    b4:ce:37:17:f7:72:02:83:c9:30:1d:70:20:e7:06:
                    b7:ed:05:a9:d2:ff:13:72:19:92:78:7a:bc:a4:d3:
                    b5:33:f7:e5:29:25:c6:96:b7:98:08:6e:5e:ee:39:
                    43:f4:94:31:46:4d:d9:9c:02:98:7c:ff:62:38:4a:
                    c1:6b:48:ca:c0:7c:60:c2:8b:77:c5:3d:eb:35:b0:
                    2d:e3:24:13:af:28:da:c3:0e:88:a2:07:fe:d2:26:
                    44:25:d7:cb:06:8a:cd:62:bd:cb:2d:63:bf:53:43:
                    89:69:64:24:f6:0b:14:ec:d8:10:92:b2:a1:06:c6:
                    ef:c5:b6:fa:90:dc:00:5c:70:49:31:70:26:87:29:
                    b7:27:36:1e:39:b4:6c:b2:f6:fc:87:e1:d3:9b:0b:
                    16:33:c3:a5:32:14:4a:2c:4a:b5:52:ba:a3:1f:21:
                    72:da:95:e7:9e:71:03:a8:94:19:75:8f:0b:c8:df:
                    e2:62:d2:63:9b:3b:29:75:97:09:b3:50:18:98:61:
                    05:c7:20:14:7e:a0:27:dc:18:5f:d0:42:d3:44:4f:
                    d6:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:51:68:EC:89:4C:DB:02:B8:D2:3E:21:67:70:37:48:A9:81:AB:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c500ad14-2d08-4542-9008-f15b1b862fc7/4cd7cde1-4ea2-33e8-b3de-54f58d60fb9f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c500ad14-2d08-4542-9008-f15b1b862fc7/c500ad14-2d08-4542-9008-f15b1b862fc7.crl

            X509v3 Authority Key Identifier:
                keyid:5D:A9:0A:32:F7:BE:90:78:5E:23:16:99:3F:6C:BF:46:3A:E4:9E:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c500ad14-2d08-4542-9008-f15b1b862fc7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:48d8::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:f0:76:fa:4c:b6:4b:9c:be:19:ba:50:f6:65:40:c7:d9:d6:
         8a:7f:bd:ed:2b:f4:44:b2:f6:d1:53:9c:30:40:4e:0b:09:6e:
         6b:68:be:e0:9e:e3:6b:20:00:76:85:c9:be:22:b9:f6:72:1f:
         ae:47:62:be:57:95:81:b7:7c:58:f1:e9:f1:ae:f2:4c:49:8a:
         7f:d5:f4:2a:93:6e:08:ca:0c:6b:d7:02:29:2a:1d:12:38:b9:
         26:ed:65:32:65:38:42:bb:6e:1d:93:1d:6d:2c:f2:36:f8:05:
         74:38:a8:6a:e5:2a:65:87:84:fe:b2:10:6b:1a:76:b7:5c:c5:
         5f:e8:4e:e4:dd:1e:06:8f:e5:51:0d:e0:08:48:7a:45:83:3b:
         23:e4:d2:b8:3f:b9:56:f0:5c:09:d9:6f:67:03:1c:9f:1f:fa:
         af:0f:10:ac:92:1f:1d:fd:62:27:49:99:f0:c8:93:69:fa:b6:
         21:89:65:35:02:dd:1b:ce:dc:39:0d:2a:b6:50:22:13:ad:87:
         bd:e0:6a:29:36:3a:37:88:b5:31:81:30:21:bb:5e:d0:21:41:
         5e:79:3e:68:7c:32:3e:8b:cd:d7:31:98:15:5b:1a:e9:ef:8e:
         4e:32:fb:4c:22:07:71:1e:58:44:f8:17:05:56:bd:fb:3d:3f:
         b0:ea:e3:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:00:48 2026 by rpki-client