Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4021c43f-b78a-496f-a8cc-814abc11a7e9/5684ef27-cf35-3a70-a267-ca8e544323ba.roa
File:                     5684ef27-cf35-3a70-a267-ca8e544323ba.roa (raw, json)
Hash identifier:          hDupBEJ/pSuZUfYvAc9gbxNMRuVwT4WI4JpneWVMNhY=
Subject key identifier:   B5:F9:06:C9:5C:83:91:08:13:97:73:2F:51:32:59:19:AC:62:CA:5D
Certificate issuer:       /CN=4021c43f-b78a-496f-a8cc-814abc11a7e9
Certificate serial:       010D0C9F4328584CD8373D1AD7D412EDD4D2C180
Authority key identifier: 19:CD:4C:5B:6C:5B:37:AB:35:E5:06:00:A3:E3:17:AE:2F:83:53:5C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4021c43f-b78a-496f-a8cc-814abc11a7e9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4021c43f-b78a-496f-a8cc-814abc11a7e9/5684ef27-cf35-3a70-a267-ca8e544323ba.roa
Signing time:             Fri 13 Feb 2026 02:00:31 +0000
ROA not before:           Fri 13 Feb 2026 02:00:31 +0000
ROA not after:            Thu 14 May 2026 01:00:31 +0000
asID:                     49
IP address blocks:        2610:20:6fcb::/48 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4021c43f-b78a-496f-a8cc-814abc11a7e9/4021c43f-b78a-496f-a8cc-814abc11a7e9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4021c43f-b78a-496f-a8cc-814abc11a7e9/4021c43f-b78a-496f-a8cc-814abc11a7e9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4021c43f-b78a-496f-a8cc-814abc11a7e9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:d8:37:3d:1a:d7:d4:12:ed:d4:d2:c1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4021c43f-b78a-496f-a8cc-814abc11a7e9
        Validity
            Not Before: Feb 13 02:00:31 2026 GMT
            Not After : May 14 01:00:31 2026 GMT
        Subject: CN=e9be0f2c-2cf5-4c26-996e-2e8a921c31a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:47:0f:d8:83:dd:1a:bc:27:9c:d4:43:b7:0d:
                    7c:2b:95:cd:09:29:9b:16:4d:f6:30:70:09:30:c1:
                    5d:bb:a3:e8:8c:9c:85:cd:75:7a:b9:5d:34:30:54:
                    d7:8a:0c:8a:5f:58:e6:e0:66:b2:7a:47:e1:60:23:
                    f6:f5:a0:03:1c:3d:70:de:f8:0b:96:85:ce:6d:2d:
                    d9:15:92:a6:2b:f3:99:39:bc:cb:7d:9a:a7:fb:35:
                    17:b7:18:3d:c5:40:93:66:70:a9:44:54:d4:18:ec:
                    e9:7d:56:d0:0c:bc:4b:4a:5e:37:d0:7e:48:3c:c6:
                    b5:9b:67:d3:da:15:ea:d6:a2:10:76:29:a6:a4:0a:
                    1f:42:55:da:65:67:52:1e:5d:e7:57:24:f2:bb:d5:
                    66:af:ee:f5:d8:fc:c1:46:9c:16:35:4d:a0:7f:a1:
                    66:73:b5:1f:82:b4:9c:a5:66:eb:3c:c1:67:f5:30:
                    ee:bc:72:5b:8e:4a:95:dc:b2:dc:46:f8:ed:d6:01:
                    9f:c5:a3:87:3b:0a:b1:32:81:94:1a:ac:ca:97:52:
                    2a:71:21:b7:24:ae:56:8e:2b:8e:93:18:5f:96:8f:
                    94:a4:f9:eb:12:bf:01:ff:41:36:e8:11:75:b6:28:
                    b6:07:f1:37:82:01:de:31:c3:fc:cc:fd:14:1d:ed:
                    58:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:F9:06:C9:5C:83:91:08:13:97:73:2F:51:32:59:19:AC:62:CA:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4021c43f-b78a-496f-a8cc-814abc11a7e9/5684ef27-cf35-3a70-a267-ca8e544323ba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4021c43f-b78a-496f-a8cc-814abc11a7e9/4021c43f-b78a-496f-a8cc-814abc11a7e9.crl

            X509v3 Authority Key Identifier:
                keyid:19:CD:4C:5B:6C:5B:37:AB:35:E5:06:00:A3:E3:17:AE:2F:83:53:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4021c43f-b78a-496f-a8cc-814abc11a7e9.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2610:20:6fcb::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:db:eb:24:12:11:b4:0c:ef:1c:1c:95:d7:6a:2a:5f:76:60:
         69:91:89:f0:26:4a:03:d7:b1:8c:8a:cd:40:29:34:5c:12:25:
         ca:ad:11:2f:8d:b1:d5:48:a6:57:7c:6e:37:93:87:b8:ef:88:
         f9:53:38:ce:c1:ab:86:fd:15:e1:36:79:b1:9f:60:b6:6c:bd:
         ae:a0:cf:a9:29:95:4d:e2:ad:58:73:fc:10:99:37:26:18:85:
         1d:3b:bc:df:76:69:ac:20:62:05:15:e7:00:2d:b5:17:bb:2e:
         7d:00:e8:ac:eb:07:66:8c:22:5a:c4:1f:0b:41:7c:86:5a:9f:
         96:db:7a:a8:8b:a8:71:e2:c5:5b:a0:c6:f9:8b:dc:4d:1e:6f:
         d7:19:6d:eb:a7:00:5d:86:1e:d9:4f:6e:5f:99:b7:a7:89:a4:
         3f:76:c5:06:79:4f:42:a1:bc:9a:f9:60:d4:62:1c:44:85:b2:
         f5:16:ef:e7:eb:a2:f0:bd:fa:71:ab:90:22:e2:6b:51:e5:1c:
         aa:45:6b:b2:b4:46:e0:0b:20:69:b0:36:61:82:5e:d1:13:89:
         f6:19:19:b1:41:bd:4d:ee:18:6b:5f:93:ec:7f:2b:82:67:5e:
         ca:7b:42:0a:ff:21:59:dd:bf:d2:b1:17:f2:7e:58:78:ce:c8:
         5d:a5:88:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:41:58 2026 by rpki-client