Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4021c43f-b78a-496f-a8cc-814abc11a7e9/7eb573b2-4454-3d00-9ff9-bd0fb865d84f.roa
File:                     7eb573b2-4454-3d00-9ff9-bd0fb865d84f.roa (raw, json)
Hash identifier:          KruTEzOc8Xh9dd6+NqZv6Zvo4qjiI/wznqwXhC0OKl8=
Subject key identifier:   97:C4:81:7B:28:E9:7B:E7:EC:6D:F1:E4:8D:01:F3:6E:5E:E1:98:CC
Certificate issuer:       /CN=4021c43f-b78a-496f-a8cc-814abc11a7e9
Certificate serial:       010D0C9F4328584CFDEAA4F19869346F98C2FB00
Authority key identifier: 19:CD:4C:5B:6C:5B:37:AB:35:E5:06:00:A3:E3:17:AE:2F:83:53:5C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4021c43f-b78a-496f-a8cc-814abc11a7e9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4021c43f-b78a-496f-a8cc-814abc11a7e9/7eb573b2-4454-3d00-9ff9-bd0fb865d84f.roa
Signing time:             Thu 26 Feb 2026 14:00:40 +0000
ROA not before:           Thu 26 Feb 2026 14:00:40 +0000
ROA not after:            Wed 27 May 2026 13:00:40 +0000
asID:                     49
IP address blocks:        2610:20:6fcc::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4021c43f-b78a-496f-a8cc-814abc11a7e9/4021c43f-b78a-496f-a8cc-814abc11a7e9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4021c43f-b78a-496f-a8cc-814abc11a7e9/4021c43f-b78a-496f-a8cc-814abc11a7e9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4021c43f-b78a-496f-a8cc-814abc11a7e9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:fd:ea:a4:f1:98:69:34:6f:98:c2:fb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4021c43f-b78a-496f-a8cc-814abc11a7e9
        Validity
            Not Before: Feb 26 14:00:40 2026 GMT
            Not After : May 27 13:00:40 2026 GMT
        Subject: CN=24910f9f-809d-4e1b-89d8-ea87a1e633e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:7e:b1:f5:a5:e8:51:eb:e5:48:6b:a6:52:5b:
                    bb:21:37:b7:cc:63:e7:38:a0:7e:0e:fc:92:4e:de:
                    f1:ec:74:a0:27:25:84:67:7d:7f:18:e7:9d:4e:27:
                    07:f9:ea:90:1e:db:e0:13:7a:b5:aa:69:14:6d:4a:
                    b3:ea:69:49:98:27:e7:6f:2b:e4:5d:a9:02:b5:25:
                    75:d4:e2:b4:1d:6c:16:50:59:1d:a9:f5:b0:cf:e2:
                    e5:8f:e6:d5:ec:b6:5a:76:79:8e:0a:26:cd:70:dd:
                    00:5b:e8:b1:b1:a9:26:26:e0:ea:5f:a0:b2:02:57:
                    e5:8e:22:c5:88:f4:f2:2d:6a:6c:d1:3e:cc:ba:42:
                    b2:26:22:25:22:b4:a3:5c:76:23:7c:14:f4:b8:a5:
                    97:87:98:5a:c4:c4:3b:95:15:9f:c5:06:10:ce:94:
                    88:47:aa:16:07:d6:7d:1a:90:90:0e:23:c3:94:99:
                    0e:6e:89:3d:75:91:d3:4f:93:ff:c5:02:95:34:b7:
                    a0:0d:f1:8f:5a:31:ce:09:32:1c:e8:79:63:65:73:
                    9f:b9:7d:8c:d3:7a:b1:26:67:fd:c3:5d:06:93:b2:
                    07:f1:76:01:ad:45:ba:6c:91:22:fb:d8:1b:e0:b7:
                    c7:d1:f0:03:b0:e1:68:0e:a9:d4:44:4e:6b:92:0a:
                    9b:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:C4:81:7B:28:E9:7B:E7:EC:6D:F1:E4:8D:01:F3:6E:5E:E1:98:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4021c43f-b78a-496f-a8cc-814abc11a7e9/7eb573b2-4454-3d00-9ff9-bd0fb865d84f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4021c43f-b78a-496f-a8cc-814abc11a7e9/4021c43f-b78a-496f-a8cc-814abc11a7e9.crl

            X509v3 Authority Key Identifier:
                keyid:19:CD:4C:5B:6C:5B:37:AB:35:E5:06:00:A3:E3:17:AE:2F:83:53:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4021c43f-b78a-496f-a8cc-814abc11a7e9.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2610:20:6fcc::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:0a:af:8a:7f:ef:d4:1e:a0:c1:a2:9b:90:ad:04:05:1d:f5:
         f5:1a:10:1c:7e:34:47:44:14:9e:6b:42:78:4a:eb:c6:97:78:
         de:48:12:5f:9d:13:f2:38:2d:d0:d7:e9:3f:dd:5b:28:61:8f:
         a6:7b:6d:05:15:25:95:4c:23:ad:e3:10:68:cb:28:d1:0e:1f:
         40:ba:81:8c:b0:87:80:ff:26:9a:f2:3a:a0:03:dc:3e:07:7b:
         e9:ac:94:2a:eb:ed:b1:e4:c4:76:f1:10:4a:62:b0:f4:d3:62:
         de:b0:da:bf:f6:0f:c1:f3:ca:f1:c4:ee:c3:d6:1e:48:5f:1d:
         f5:6c:af:71:0f:c5:a1:27:14:36:c8:64:c1:96:9e:23:19:5f:
         cd:13:6d:40:9c:3a:64:77:7f:32:dd:4b:c4:93:84:5d:d9:5c:
         d6:02:38:99:ee:82:3b:c9:70:f3:ca:6e:c4:a3:57:36:c0:0e:
         4c:b3:fc:78:62:4d:6b:e3:3e:54:0a:97:b6:86:08:bd:07:b2:
         75:b3:a0:90:56:a0:06:f1:18:93:f7:fa:11:a4:9e:f2:64:20:
         14:82:db:34:7b:d5:10:4a:b7:8d:04:a8:d1:e6:aa:b2:9a:c7:
         c5:53:a0:c4:07:cd:3d:f3:e1:fe:8a:9f:3d:a6:55:a2:16:84:
         4f:da:44:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:09:50 2026 by rpki-client