Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a4530197-8968-425f-b6ab-d075941dc95c/bfb8d652-2c90-3993-ab4f-c78eed63b4be.roa
File:                     bfb8d652-2c90-3993-ab4f-c78eed63b4be.roa (raw, json)
Hash identifier:          GyCsrDQz8s+XjBlxGgon7/BiHV7B9xtdf5UpvscELZo=
Subject key identifier:   C8:E0:4B:68:22:56:10:3B:F6:86:32:A1:F8:A3:5B:AE:6C:1D:43:6D
Certificate issuer:       /CN=a4530197-8968-425f-b6ab-d075941dc95c
Certificate serial:       010D0C9F4328584CB121C4712685A499E6E5E100
Authority key identifier: AC:75:9D:E1:98:8D:FE:FD:4A:14:1E:D2:AC:30:33:C3:B1:75:E2:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a4530197-8968-425f-b6ab-d075941dc95c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a4530197-8968-425f-b6ab-d075941dc95c/bfb8d652-2c90-3993-ab4f-c78eed63b4be.roa
Signing time:             Fri 30 Jan 2026 02:00:31 +0000
ROA not before:           Fri 30 Jan 2026 02:00:31 +0000
ROA not after:            Thu 30 Apr 2026 01:00:31 +0000
asID:                     401085
IP address blocks:        2602:f802::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a4530197-8968-425f-b6ab-d075941dc95c/a4530197-8968-425f-b6ab-d075941dc95c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a4530197-8968-425f-b6ab-d075941dc95c/a4530197-8968-425f-b6ab-d075941dc95c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a4530197-8968-425f-b6ab-d075941dc95c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:b1:21:c4:71:26:85:a4:99:e6:e5:e1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a4530197-8968-425f-b6ab-d075941dc95c
        Validity
            Not Before: Jan 30 02:00:31 2026 GMT
            Not After : Apr 30 01:00:31 2026 GMT
        Subject: CN=b4112f43-508c-428d-8010-b4f54d717bdd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:92:44:c6:ec:3f:d5:b1:5a:c1:79:43:e5:2d:
                    71:7f:79:51:a5:b6:85:86:ca:b7:36:9d:65:11:b9:
                    b2:ab:da:38:e9:e9:e7:10:c6:83:4c:ab:f4:1b:4c:
                    f7:91:46:09:cf:46:ae:f2:51:31:b2:4b:ea:16:6d:
                    65:20:a6:be:ed:6c:f0:9b:51:95:74:87:25:0b:4a:
                    1f:d4:72:7c:a6:1e:0e:8c:95:ed:53:26:a4:22:62:
                    90:d2:bd:83:fd:cd:a0:61:1d:91:21:48:b9:01:ea:
                    0b:d9:23:d5:54:96:ad:5d:fc:16:62:e2:19:cc:f1:
                    97:96:bd:55:2c:68:d7:34:ae:ec:6d:3a:19:f3:c0:
                    63:a2:b7:bf:a7:e6:5c:ba:7e:aa:bd:4e:2e:e0:9f:
                    6a:a1:9d:77:f5:30:fd:45:8b:c5:8d:72:d3:b7:6d:
                    ce:4f:9b:79:e9:52:a1:34:b1:3a:80:55:7a:b7:62:
                    ab:4a:a9:37:1c:1e:a1:98:c0:19:d9:6b:a0:42:71:
                    88:17:c0:02:d8:05:33:ab:4f:98:79:39:d9:62:ea:
                    b5:32:e8:89:8a:a9:eb:33:6a:55:27:df:c9:38:a9:
                    59:02:4b:69:a7:4f:0c:76:49:18:5a:eb:23:68:93:
                    5d:5b:17:d2:82:a9:ef:3b:48:56:00:b8:bd:ae:7e:
                    62:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:E0:4B:68:22:56:10:3B:F6:86:32:A1:F8:A3:5B:AE:6C:1D:43:6D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a4530197-8968-425f-b6ab-d075941dc95c/bfb8d652-2c90-3993-ab4f-c78eed63b4be.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a4530197-8968-425f-b6ab-d075941dc95c/a4530197-8968-425f-b6ab-d075941dc95c.crl

            X509v3 Authority Key Identifier:
                keyid:AC:75:9D:E1:98:8D:FE:FD:4A:14:1E:D2:AC:30:33:C3:B1:75:E2:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a4530197-8968-425f-b6ab-d075941dc95c.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f802::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:e2:ba:6f:b0:cc:f7:31:13:23:38:41:c9:06:35:6b:76:e4:
         55:fd:25:e8:f3:c5:db:9e:fb:c3:0a:05:cc:7b:82:3c:9c:d5:
         f9:ad:4a:20:35:4f:02:a5:f3:81:48:5b:c9:3f:cf:f1:7b:cb:
         f7:23:fe:2d:98:dc:8f:99:b4:96:c5:04:35:22:f2:5f:c2:36:
         68:5a:e5:41:56:ec:57:4d:08:36:64:0e:7d:cb:36:3d:fb:51:
         0c:08:b0:73:98:e4:85:6b:c9:3b:f7:07:39:14:26:2f:8c:a9:
         ca:91:63:82:17:6d:52:f2:41:12:d9:82:a9:86:3d:df:50:13:
         87:08:f5:b8:a6:a7:74:d3:8c:c5:73:b5:71:46:09:54:33:2a:
         ec:a8:e3:e5:e5:ca:b8:2a:2e:40:4b:9d:4c:d3:bc:af:84:20:
         69:03:04:6e:5e:98:e2:24:4c:43:20:73:54:06:0a:23:bf:b7:
         db:3a:46:d1:f0:2a:38:7c:9d:a1:74:6e:f4:01:6e:64:5e:3e:
         63:08:19:f8:02:c0:26:44:17:ac:9a:4d:e8:d8:37:f7:93:62:
         46:d8:f5:f4:bb:43:a0:01:13:0d:d2:82:0a:ce:5f:23:63:21:
         b8:fc:4e:14:23:04:6f:27:87:1b:9a:c2:21:45:94:8a:5c:b4:
         0f:32:56:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:45:22 2026 by rpki-client