Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/10f2956f-ded7-4edb-b293-ea6f94fbf58b/6246498c-93f9-3ea9-a731-d9d089253344.roa
File:                     6246498c-93f9-3ea9-a731-d9d089253344.roa (raw, json)
Hash identifier:          UfvKpdYYw1TR0ilqSkuV1IM1OrVt93tSo7EAhCp5UrM=
Subject key identifier:   47:EE:48:67:47:C3:33:1F:A2:8D:7D:79:75:3C:6F:D9:AB:01:68:88
Certificate issuer:       /CN=10f2956f-ded7-4edb-b293-ea6f94fbf58b
Certificate serial:       010D0C9F4328584CF6ECDCC18F1BE00AEE759F30
Authority key identifier: F9:14:EF:F9:4B:E3:88:06:AB:0A:CD:4E:05:E4:3B:9D:C1:DD:46:2A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/10f2956f-ded7-4edb-b293-ea6f94fbf58b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/10f2956f-ded7-4edb-b293-ea6f94fbf58b/6246498c-93f9-3ea9-a731-d9d089253344.roa
Signing time:             Tue 24 Feb 2026 02:00:31 +0000
ROA not before:           Tue 24 Feb 2026 02:00:31 +0000
ROA not after:            Mon 25 May 2026 01:00:31 +0000
asID:                     0
IP address blocks:        2607:1780:8000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/10f2956f-ded7-4edb-b293-ea6f94fbf58b/10f2956f-ded7-4edb-b293-ea6f94fbf58b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/10f2956f-ded7-4edb-b293-ea6f94fbf58b/10f2956f-ded7-4edb-b293-ea6f94fbf58b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/10f2956f-ded7-4edb-b293-ea6f94fbf58b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:f6:ec:dc:c1:8f:1b:e0:0a:ee:75:9f:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10f2956f-ded7-4edb-b293-ea6f94fbf58b
        Validity
            Not Before: Feb 24 02:00:31 2026 GMT
            Not After : May 25 01:00:31 2026 GMT
        Subject: CN=fbaa87b0-9f83-492b-b98b-48ed341faaa2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:bf:95:ae:1e:b8:eb:27:9a:9f:91:44:dc:f3:
                    03:0f:9a:58:97:88:2e:70:68:b5:48:26:07:36:93:
                    49:40:b4:d3:b7:f9:c9:32:9d:f9:0f:5e:44:d9:7d:
                    40:8e:b4:df:e7:af:30:f0:10:d7:cf:eb:43:b7:b2:
                    92:52:06:46:d2:b8:d1:fe:63:9a:96:e4:6d:72:44:
                    41:73:80:c8:a9:ca:70:4b:0d:d8:36:24:c5:e1:33:
                    13:af:7f:54:0e:0a:33:80:f2:78:db:12:f7:ed:63:
                    29:ba:9d:2f:f5:6e:4c:b2:81:6f:4b:37:51:4b:ec:
                    2c:0a:d2:ca:05:7a:97:41:66:06:b7:8f:b8:ae:8d:
                    84:6c:a7:f0:f3:e5:32:b5:cd:2f:1d:f2:2b:93:85:
                    90:05:08:0b:9b:8e:57:d2:0e:68:5e:0e:e2:48:d9:
                    72:37:d1:93:b3:30:9b:6a:ef:07:1b:1b:c2:e8:89:
                    33:78:25:fa:4f:15:61:e2:2f:e4:d9:c2:5c:07:0b:
                    ad:35:dc:44:e1:c4:ff:04:78:46:44:3e:46:d9:10:
                    3c:2e:96:b2:8e:aa:3b:b9:d2:7d:0f:f6:e6:64:18:
                    0d:32:b7:85:7a:19:36:da:4c:70:a3:cd:c5:cf:d2:
                    30:4f:a9:5d:cf:12:7e:e6:5b:5e:b3:5e:57:b5:da:
                    57:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:EE:48:67:47:C3:33:1F:A2:8D:7D:79:75:3C:6F:D9:AB:01:68:88
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/10f2956f-ded7-4edb-b293-ea6f94fbf58b/6246498c-93f9-3ea9-a731-d9d089253344.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/10f2956f-ded7-4edb-b293-ea6f94fbf58b/10f2956f-ded7-4edb-b293-ea6f94fbf58b.crl

            X509v3 Authority Key Identifier:
                keyid:F9:14:EF:F9:4B:E3:88:06:AB:0A:CD:4E:05:E4:3B:9D:C1:DD:46:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/10f2956f-ded7-4edb-b293-ea6f94fbf58b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:1780:8000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:d6:dd:4b:57:07:dd:43:9a:0a:82:7d:ae:e5:90:d2:cc:ff:
         44:c5:f5:08:41:a9:f3:c9:06:c6:52:71:e4:14:c2:87:48:21:
         87:52:e6:42:ac:8c:20:91:14:8a:29:f9:db:de:6d:50:94:2b:
         14:da:5e:1e:34:9e:b9:a4:60:c6:74:09:a3:cd:c8:50:96:ac:
         1b:16:48:ed:b2:24:d4:95:35:21:50:f5:f7:04:dc:a2:5d:d0:
         9d:d9:56:f3:71:68:19:d9:e1:fd:49:00:7d:9f:56:87:91:6f:
         a3:4b:1d:11:65:7a:40:68:a3:ee:ed:9f:7f:58:e4:fe:48:a1:
         96:b3:12:4d:4f:e6:d9:86:fa:70:fa:72:25:d5:d4:41:53:63:
         2b:10:0d:c5:8e:02:03:58:de:1f:39:cb:40:0d:51:56:bb:c5:
         48:66:05:27:f0:29:6f:7b:b7:a6:c5:dd:52:00:80:53:76:62:
         6e:ad:74:f6:94:1e:7a:4d:8f:95:52:c6:cd:e3:e8:2b:96:19:
         9b:70:82:38:7c:ce:8b:5f:38:17:2f:ed:e9:e7:2d:51:83:8c:
         5d:e0:99:0e:c4:eb:c7:49:a3:c8:06:59:69:03:73:3b:56:70:
         32:c9:6a:0c:63:40:04:61:04:e7:db:a7:29:01:a7:b4:7b:88:
         a8:05:05:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:30:01 2026 by rpki-client