Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311/6ccdf820-69dc-3ad4-8e96-6aec7ff0c4a7.roa
File:                     6ccdf820-69dc-3ad4-8e96-6aec7ff0c4a7.roa (raw, json)
Hash identifier:          Gtf4NsVuqJnBdkTgrTdmS0g+7U2ns5KO6YKWwNLSsGE=
Subject key identifier:   77:C2:4A:15:BD:99:A3:CC:3B:D1:64:E5:35:7B:07:3E:EB:7D:30:2D
Certificate issuer:       /CN=d5ebadbb-b63c-4e95-8e76-fd22cc861311
Certificate serial:       010D0C9F4328584CED278BAA9B527B180DBABFA0
Authority key identifier: 0A:5D:E7:3A:9A:58:CA:C5:9D:F6:05:BC:E3:F2:1E:CC:23:F8:D7:94
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311/6ccdf820-69dc-3ad4-8e96-6aec7ff0c4a7.roa
Signing time:             Fri 20 Feb 2026 14:00:41 +0000
ROA not before:           Fri 20 Feb 2026 14:00:41 +0000
ROA not after:            Thu 21 May 2026 13:00:41 +0000
asID:                     25697
IP address blocks:        2604:ed40::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311/d5ebadbb-b63c-4e95-8e76-fd22cc861311.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311/d5ebadbb-b63c-4e95-8e76-fd22cc861311.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ed:27:8b:aa:9b:52:7b:18:0d:ba:bf:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5ebadbb-b63c-4e95-8e76-fd22cc861311
        Validity
            Not Before: Feb 20 14:00:41 2026 GMT
            Not After : May 21 13:00:41 2026 GMT
        Subject: CN=297224fc-4c58-43ce-9da1-1c5ef50db60c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:0e:3b:55:1f:7e:46:82:99:f3:5a:cf:45:56:
                    a4:4b:d6:5c:1b:cd:ea:c1:ba:42:33:3c:14:1c:fe:
                    76:93:66:b3:d5:8f:e1:94:58:d6:9c:54:72:26:03:
                    77:9a:bf:f4:e4:60:16:44:56:38:80:a4:6b:e0:f6:
                    e2:76:52:22:3f:a0:69:b9:f5:63:ef:f3:d0:76:54:
                    d9:3b:20:bf:96:b0:dc:82:89:06:2c:63:c3:29:f3:
                    76:ff:61:98:9b:e9:e0:64:14:6b:c6:53:d9:9d:93:
                    56:64:db:01:c5:c6:f0:60:d0:17:9a:e0:7f:a0:a3:
                    f8:1a:33:39:7b:d4:f4:70:c9:f9:bf:61:a4:5c:e9:
                    84:d5:9b:ef:4f:d0:64:c8:e1:a3:9d:77:a3:e8:25:
                    af:ac:b7:bc:d3:75:8d:09:88:eb:91:7b:ef:2c:e9:
                    f2:49:4e:3e:19:82:c5:9e:2b:81:28:48:03:83:ff:
                    d2:fd:e9:4c:0c:9b:68:22:1f:f4:6b:48:04:3f:e9:
                    68:0d:51:9c:82:30:70:5e:4e:99:72:a7:b1:b7:d6:
                    92:bd:2e:3c:de:bd:88:ff:29:d3:bf:73:0d:cc:80:
                    b2:17:6a:df:ad:d6:7d:11:c0:9c:99:c4:33:65:ac:
                    3a:11:80:cf:3b:53:17:a6:24:78:39:1f:3d:51:ac:
                    c6:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:C2:4A:15:BD:99:A3:CC:3B:D1:64:E5:35:7B:07:3E:EB:7D:30:2D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311/6ccdf820-69dc-3ad4-8e96-6aec7ff0c4a7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311/d5ebadbb-b63c-4e95-8e76-fd22cc861311.crl

            X509v3 Authority Key Identifier:
                keyid:0A:5D:E7:3A:9A:58:CA:C5:9D:F6:05:BC:E3:F2:1E:CC:23:F8:D7:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:ed40::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ac:eb:77:0e:57:ba:fd:30:01:d8:a9:cf:20:a5:c7:49:54:8c:
         3c:45:c2:38:0c:8b:53:f3:e3:26:32:7a:71:11:e0:ad:cd:cf:
         e7:32:1b:7e:77:78:b8:6d:41:b9:da:e6:5b:13:0d:63:ef:44:
         06:1a:64:34:74:08:97:d6:58:40:01:33:4e:8d:48:a3:4c:4f:
         e4:8b:93:ed:4b:6d:45:77:7a:41:a0:ff:6b:e4:4d:2c:4b:f4:
         f1:97:1a:ae:01:62:3c:84:0c:5c:2c:6a:e9:73:7f:87:52:9f:
         6d:03:31:d6:bf:67:54:59:17:07:c7:0f:a1:90:79:36:eb:f7:
         e7:e2:5e:c2:65:19:45:b6:50:88:1e:ca:58:9a:34:06:f8:df:
         8c:dc:26:ec:d9:74:2c:62:5c:1f:64:11:52:ab:28:93:17:2d:
         4c:44:f0:10:c2:1b:91:75:cc:11:86:98:9c:7c:84:a0:d5:ef:
         a7:09:45:21:d1:15:59:e9:8d:97:8c:a0:f0:0b:e2:f3:50:82:
         cc:c9:9c:f7:c2:d0:4d:5c:dd:28:09:c5:d8:53:96:6b:c8:b7:
         97:c1:5b:5b:a3:a2:b3:c8:4d:9b:86:c6:5e:a9:6f:1d:49:af:
         09:35:39:9e:94:69:d5:10:be:32:12:4d:9f:2c:0f:a5:06:3b:
         4a:5c:37:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:51:54 2026 by rpki-client