Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/a9f60b16-156b-3fba-8442-d4946a845a99.roa
File:                     a9f60b16-156b-3fba-8442-d4946a845a99.roa (raw, json)
Hash identifier:          gZgzIabl2cDzBIxxVXfleKooCBUBL3882eJvYQ2Ofh8=
Subject key identifier:   76:FD:0D:76:5B:AD:73:B4:0C:2F:BA:3D:2D:A5:E2:94:2B:13:4C:72
Certificate issuer:       /CN=1773b91b-a601-4f0d-af4c-93b3f65e6404
Certificate serial:       010D0C9F4328584D037CF58C34AB3863C2AB5180
Authority key identifier: E5:D8:55:1F:4E:B2:C7:DD:84:EF:03:02:86:5A:2E:CF:39:22:F1:AF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/a9f60b16-156b-3fba-8442-d4946a845a99.roa
Signing time:             Sat 28 Feb 2026 14:00:40 +0000
ROA not before:           Sat 28 Feb 2026 14:00:40 +0000
ROA not after:            Fri 29 May 2026 13:00:40 +0000
asID:                     19165
IP address blocks:        2604:5500:ec00::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/1773b91b-a601-4f0d-af4c-93b3f65e6404.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/1773b91b-a601-4f0d-af4c-93b3f65e6404.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:03:7c:f5:8c:34:ab:38:63:c2:ab:51:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1773b91b-a601-4f0d-af4c-93b3f65e6404
        Validity
            Not Before: Feb 28 14:00:40 2026 GMT
            Not After : May 29 13:00:40 2026 GMT
        Subject: CN=bf2934b9-fc20-464f-88d5-993826816062
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:ca:98:80:77:31:7b:61:d2:82:9a:1c:8a:ee:
                    db:29:8b:4b:ab:fa:a6:b5:3a:0f:e4:c7:3a:97:46:
                    5e:eb:1d:f0:e0:2e:3a:68:30:02:ae:90:e5:28:49:
                    fa:0c:de:b2:5b:bc:f6:83:07:c5:c9:6b:a9:31:27:
                    2d:9d:35:ed:fe:53:80:ce:43:1d:c4:ad:45:5c:95:
                    cb:54:dc:fb:33:70:8a:8c:ee:d0:d7:19:22:5a:c6:
                    76:3c:b6:e2:1c:b7:78:ab:66:10:84:ee:91:b0:14:
                    4e:2e:e1:10:89:ea:a1:56:01:ee:9e:1f:0a:0b:44:
                    5f:9b:d2:3e:39:09:f4:9c:d4:79:b1:83:62:1b:52:
                    38:9a:e4:33:1b:35:89:75:30:b6:e3:4f:ef:be:f8:
                    53:6b:09:c4:1b:21:80:e4:5f:fa:e8:e8:b2:ba:ea:
                    54:91:b0:a0:a0:34:19:9f:4e:07:37:51:d5:1b:90:
                    f9:30:46:a6:86:55:e3:cb:63:f6:de:3b:f9:08:02:
                    a0:47:3d:bd:51:76:54:06:71:99:79:81:c2:8d:d3:
                    70:c1:c7:79:e6:05:a8:96:a3:c1:f8:12:72:54:24:
                    8f:5e:1d:a1:64:93:f1:78:5b:c2:ff:29:9f:45:d3:
                    07:09:ea:83:65:9d:5d:83:c2:e0:63:5a:82:c1:08:
                    c3:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:FD:0D:76:5B:AD:73:B4:0C:2F:BA:3D:2D:A5:E2:94:2B:13:4C:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/a9f60b16-156b-3fba-8442-d4946a845a99.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/1773b91b-a601-4f0d-af4c-93b3f65e6404.crl

            X509v3 Authority Key Identifier:
                keyid:E5:D8:55:1F:4E:B2:C7:DD:84:EF:03:02:86:5A:2E:CF:39:22:F1:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:5500:ec00::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:5e:ab:ea:93:bc:ce:25:7b:e9:8c:35:76:70:af:19:5c:85:
         1e:cd:be:a8:5d:6f:23:7d:a7:77:73:a8:d5:0c:10:8a:59:99:
         f0:12:78:37:29:72:56:f8:4f:1b:1c:4a:43:81:97:de:f5:85:
         ce:59:3a:e5:53:fd:78:af:aa:ff:36:1d:84:fd:c0:45:a1:94:
         9b:71:d6:19:6d:32:8d:4a:76:48:ec:95:b6:4d:bd:05:1f:5f:
         2e:6f:98:01:43:c0:85:41:f7:c3:b7:02:ee:e8:9b:63:00:ca:
         be:d1:76:31:4a:ff:79:57:6c:31:2d:7f:1c:8d:3a:df:a5:9a:
         16:93:b8:ce:a5:7d:c2:82:9f:56:6d:c7:15:c7:d3:ad:78:55:
         56:37:a3:d9:e2:bb:47:bb:2f:57:e9:10:9e:df:90:0f:d0:b6:
         01:d2:4e:3f:0c:29:72:12:0b:35:ee:66:7d:95:f5:bf:ed:8c:
         dc:fb:59:29:81:39:ea:04:74:c6:65:9c:66:ce:40:1d:50:40:
         12:37:57:e0:9e:bf:81:ec:16:8e:c2:5a:6f:7f:d7:e4:67:ec:
         f4:05:a0:7b:d7:52:3a:6d:4d:85:60:c3:bb:7c:36:cd:32:00:
         ec:48:21:12:c0:7b:ef:d0:f8:ad:fc:7b:2f:62:df:67:a6:88:
         b0:39:23:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:33:33 2026 by rpki-client