Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/36851ba9-e601-4ee5-b047-fce86c798909/67b7cdf4-c13a-3995-b23d-ac13acc5f1eb.roa
File:                     67b7cdf4-c13a-3995-b23d-ac13acc5f1eb.roa (raw, json)
Hash identifier:          a+4gPwTzxnYWfU8QtaV5ICovXTq8vHpVjvplbRrO0OI=
Subject key identifier:   19:0C:40:89:56:D2:AE:F5:92:84:C7:F9:9A:6F:7F:39:19:05:58:5D
Certificate issuer:       /CN=36851ba9-e601-4ee5-b047-fce86c798909
Certificate serial:       010D0C9F4328584CCFD741AD14F416B9F805E640
Authority key identifier: F0:B5:1B:BE:7A:40:03:77:E8:48:29:F1:C9:FD:00:34:9A:13:A2:F0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/36851ba9-e601-4ee5-b047-fce86c798909.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/36851ba9-e601-4ee5-b047-fce86c798909/67b7cdf4-c13a-3995-b23d-ac13acc5f1eb.roa
Signing time:             Tue 10 Feb 2026 02:00:31 +0000
ROA not before:           Tue 10 Feb 2026 02:00:31 +0000
ROA not after:            Mon 11 May 2026 01:00:31 +0000
asID:                     19446
IP address blocks:        2607:b440::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/36851ba9-e601-4ee5-b047-fce86c798909/36851ba9-e601-4ee5-b047-fce86c798909.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/36851ba9-e601-4ee5-b047-fce86c798909/36851ba9-e601-4ee5-b047-fce86c798909.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/36851ba9-e601-4ee5-b047-fce86c798909.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:cf:d7:41:ad:14:f4:16:b9:f8:05:e6:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36851ba9-e601-4ee5-b047-fce86c798909
        Validity
            Not Before: Feb 10 02:00:31 2026 GMT
            Not After : May 11 01:00:31 2026 GMT
        Subject: CN=1868fd15-8456-4c3e-9c5d-517203ccebff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:24:51:59:08:0d:96:ea:f5:83:9e:ff:6a:d2:
                    70:b9:5a:1d:e5:52:ac:91:5f:ba:b4:3b:a8:b9:33:
                    cb:8f:b1:54:96:c6:a5:7f:7a:24:92:7b:d1:48:a7:
                    57:58:2b:20:03:ec:a5:6b:5d:5a:04:2a:88:fe:6a:
                    ba:0c:b5:73:d8:6f:30:6e:d9:68:df:11:ee:01:3b:
                    dd:b5:24:fa:39:d6:f7:29:89:b8:dd:56:a6:bb:6a:
                    92:ae:e0:bc:ed:32:c3:7a:64:d6:93:bd:d4:a6:1a:
                    d4:26:02:33:a7:d6:e9:ab:67:99:35:2a:9f:de:15:
                    88:b7:be:a6:3a:aa:05:47:87:22:7c:6b:67:5f:7f:
                    31:76:45:b9:c8:1f:cc:b0:d3:33:bc:a1:89:d1:2b:
                    5a:c4:d7:53:75:27:a5:28:9e:ce:5f:4f:c1:be:8a:
                    6a:e6:8e:90:86:97:76:11:b7:0e:3e:f5:24:2b:14:
                    88:0f:da:9a:d9:69:40:49:32:d8:b4:5d:1e:d3:2a:
                    23:ec:7a:76:79:00:ef:03:f1:23:8c:d2:6b:3d:a5:
                    54:8a:b4:3b:f8:09:a7:ef:a6:a0:b2:33:f7:e5:5d:
                    49:60:5b:2f:f9:bd:06:79:be:ad:0a:81:e5:38:f1:
                    67:74:f5:b9:a5:76:0d:fb:57:f9:3f:30:39:f0:bb:
                    29:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:0C:40:89:56:D2:AE:F5:92:84:C7:F9:9A:6F:7F:39:19:05:58:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/36851ba9-e601-4ee5-b047-fce86c798909/67b7cdf4-c13a-3995-b23d-ac13acc5f1eb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/36851ba9-e601-4ee5-b047-fce86c798909/36851ba9-e601-4ee5-b047-fce86c798909.crl

            X509v3 Authority Key Identifier:
                keyid:F0:B5:1B:BE:7A:40:03:77:E8:48:29:F1:C9:FD:00:34:9A:13:A2:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/36851ba9-e601-4ee5-b047-fce86c798909.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:b440::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:63:12:be:48:61:0c:6e:df:5e:a3:f4:45:dd:5d:0e:a9:27:
         97:79:4d:cb:b7:54:00:da:96:cc:18:3f:be:ca:53:a3:b8:51:
         4d:8b:2d:17:42:3e:0c:9d:cf:b2:4b:07:e3:10:88:9b:38:a1:
         69:ba:02:1a:4b:3e:56:89:53:d5:69:09:9c:47:b9:2d:6e:ce:
         1b:74:d3:54:fb:3c:cc:6d:54:39:87:4f:a1:bd:61:1d:e6:e4:
         ef:0e:95:00:88:fa:31:3d:8d:ba:8a:2a:0e:15:95:fc:14:92:
         f0:e2:05:0d:98:3c:60:ad:dd:2f:eb:bd:4e:3d:fb:e0:ea:3a:
         94:21:38:57:e0:0f:fc:67:92:26:51:0a:4a:51:8a:76:1b:1a:
         90:7b:a3:d6:a4:cb:2a:f7:f8:da:4a:56:32:31:d4:55:88:e9:
         6b:e5:79:50:fb:4e:2b:28:6f:81:18:e3:33:d8:fa:9c:c6:93:
         2e:63:ac:bc:27:4b:12:99:c0:43:4e:cf:da:c9:6f:4a:cf:f3:
         11:3b:3f:03:76:ea:d3:d6:ca:cc:d2:e1:73:2d:8a:c8:47:88:
         98:2b:0a:48:bf:cd:d7:24:f0:9f:5b:05:63:28:f0:9f:a7:93:
         76:63:57:d4:1f:94:b6:e7:b2:40:a9:65:09:20:4e:15:59:35:
         32:e5:c5:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:54:32 2026 by rpki-client