Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e7cf57c3-0660-4b21-8d7b-ce52b8d34545/c5dff0e5-8c1b-30cb-ac6b-ed95c0ce92da.roa
File:                     c5dff0e5-8c1b-30cb-ac6b-ed95c0ce92da.roa (raw, json)
Hash identifier:          6uh/XS06E3vB14W5JkBSEYsvZN4BOSgTQ1252DTNALM=
Subject key identifier:   D2:77:74:DE:1A:50:E6:FD:06:AE:33:30:94:86:F8:31:5D:9A:4C:47
Certificate issuer:       /CN=e7cf57c3-0660-4b21-8d7b-ce52b8d34545
Certificate serial:       010D0C9F4328584CF664D4FF62E15844732FAC80
Authority key identifier: B1:1D:F6:A5:8B:7B:27:D3:38:49:58:1D:88:87:A1:0B:9F:FD:2A:FA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e7cf57c3-0660-4b21-8d7b-ce52b8d34545.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e7cf57c3-0660-4b21-8d7b-ce52b8d34545/c5dff0e5-8c1b-30cb-ac6b-ed95c0ce92da.roa
Signing time:             Mon 23 Feb 2026 21:26:39 +0000
ROA not before:           Mon 23 Feb 2026 21:26:39 +0000
ROA not after:            Sun 24 May 2026 20:26:39 +0000
asID:                     8987
IP address blocks:        2610:30:e000::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e7cf57c3-0660-4b21-8d7b-ce52b8d34545/e7cf57c3-0660-4b21-8d7b-ce52b8d34545.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e7cf57c3-0660-4b21-8d7b-ce52b8d34545/e7cf57c3-0660-4b21-8d7b-ce52b8d34545.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e7cf57c3-0660-4b21-8d7b-ce52b8d34545.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:f6:64:d4:ff:62:e1:58:44:73:2f:ac:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7cf57c3-0660-4b21-8d7b-ce52b8d34545
        Validity
            Not Before: Feb 23 21:26:39 2026 GMT
            Not After : May 24 20:26:39 2026 GMT
        Subject: CN=00536595-e3ba-4a0f-bf9a-f6136780a224
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:f3:dd:1c:b8:2c:56:73:ee:d5:a0:ee:98:a2:
                    5b:07:a6:86:72:81:81:2b:c2:67:b2:cc:de:de:a6:
                    d9:71:53:06:b0:fe:d1:bc:7e:f7:a6:91:fc:83:11:
                    c1:5a:6c:64:c5:63:33:fd:c7:6f:3c:9e:d4:b1:c6:
                    c1:ce:b9:a8:c0:ac:4c:ee:31:cf:c3:ef:07:38:69:
                    21:0c:2a:f2:ac:60:d3:ae:63:86:46:07:1a:a5:32:
                    87:b0:c4:77:b7:cf:7d:a0:e9:0c:a3:5a:e9:f4:4f:
                    d7:d9:d9:46:71:b7:80:21:e6:f4:65:f1:aa:1d:7d:
                    d2:b4:e0:02:7e:0b:d4:88:bd:be:cc:79:ed:cc:6f:
                    74:59:47:b0:2d:ca:4f:9b:9e:d2:34:b2:3c:da:2a:
                    34:1b:92:0e:ed:04:1f:7b:d3:76:7e:b1:db:30:11:
                    fc:57:70:8b:b3:de:3f:d5:df:58:1a:42:82:7e:63:
                    e6:33:e7:ac:31:70:f9:86:a4:86:d7:b3:26:79:30:
                    8b:e3:d2:02:e5:1f:b1:e1:e6:b2:fa:c8:8b:30:f2:
                    07:a7:02:fe:33:27:03:e3:bc:80:79:68:e4:f9:af:
                    71:8e:a3:45:1f:81:57:2a:76:f1:e5:73:36:de:1e:
                    3a:28:ee:33:ec:8c:43:e1:bb:0b:16:6e:ee:33:11:
                    c5:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:77:74:DE:1A:50:E6:FD:06:AE:33:30:94:86:F8:31:5D:9A:4C:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e7cf57c3-0660-4b21-8d7b-ce52b8d34545/c5dff0e5-8c1b-30cb-ac6b-ed95c0ce92da.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e7cf57c3-0660-4b21-8d7b-ce52b8d34545/e7cf57c3-0660-4b21-8d7b-ce52b8d34545.crl

            X509v3 Authority Key Identifier:
                keyid:B1:1D:F6:A5:8B:7B:27:D3:38:49:58:1D:88:87:A1:0B:9F:FD:2A:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e7cf57c3-0660-4b21-8d7b-ce52b8d34545.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2610:30:e000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:6b:04:c6:56:eb:19:7b:53:20:75:75:71:9c:ae:38:04:14:
         a3:55:4d:b9:4c:a9:a5:2f:f0:f3:3d:b9:47:9a:07:1c:48:63:
         bd:ad:76:be:f9:a7:23:42:d5:16:7a:e1:b6:33:99:98:7c:87:
         6b:65:da:e2:9c:f2:11:b3:0e:48:d8:b5:d3:77:3d:99:30:1d:
         8b:e6:53:50:61:bf:91:4b:78:da:ba:a6:1f:77:4c:a2:68:16:
         41:90:2a:47:58:06:0a:52:ee:4e:09:b3:6a:12:13:a8:61:aa:
         e3:0c:57:d6:ad:19:29:c6:cb:c3:d8:0d:18:28:c6:00:d6:fa:
         7b:51:3f:cb:be:9a:86:24:b9:3c:1c:cb:82:28:64:42:63:9c:
         4e:f9:0b:7f:91:e1:f6:65:65:8b:bb:ec:46:30:72:b8:66:c1:
         34:ef:4e:47:a0:6b:ed:bf:ed:c6:b0:f5:a9:eb:41:db:c0:71:
         c8:50:89:d0:aa:da:40:bf:12:49:e1:61:c9:54:49:3f:7c:14:
         17:91:60:af:d8:ca:64:6b:bb:a5:d6:3e:bf:c1:cc:e4:2c:ff:
         49:07:06:db:fa:d0:55:49:13:45:f0:f3:dd:a1:eb:1c:2b:85:
         98:c1:ac:bc:84:de:9f:81:1b:ce:f5:2c:ff:15:9f:0d:ca:85:
         53:6e:57:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:10:26 2026 by rpki-client