Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4848cc9b-e46f-485e-b3f2-4f393b5d92d6/3917548b-5868-3c3b-9b63-1aa1cdf79bef.roa
File:                     3917548b-5868-3c3b-9b63-1aa1cdf79bef.roa (raw, json)
Hash identifier:          S1Xe3t+qTJIR41fJsXZgpkwMcObqbI1KTyzOpZA/o4E=
Subject key identifier:   67:92:D1:72:B8:C9:BA:92:5B:6B:07:08:CD:7B:EB:D6:0B:71:8F:FD
Certificate issuer:       /CN=4848cc9b-e46f-485e-b3f2-4f393b5d92d6
Certificate serial:       010D0C9F4328584CCA41F5BE3646DCE09A3E49C0
Authority key identifier: B6:2A:40:95:87:55:AF:8F:01:A4:40:13:3D:22:F2:15:2B:B6:8D:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4848cc9b-e46f-485e-b3f2-4f393b5d92d6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4848cc9b-e46f-485e-b3f2-4f393b5d92d6/3917548b-5868-3c3b-9b63-1aa1cdf79bef.roa
Signing time:             Sun 08 Feb 2026 02:00:32 +0000
ROA not before:           Sun 08 Feb 2026 02:00:32 +0000
ROA not after:            Sat 09 May 2026 01:00:32 +0000
asID:                     23470
IP address blocks:        2602:f919:100::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4848cc9b-e46f-485e-b3f2-4f393b5d92d6/4848cc9b-e46f-485e-b3f2-4f393b5d92d6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4848cc9b-e46f-485e-b3f2-4f393b5d92d6/4848cc9b-e46f-485e-b3f2-4f393b5d92d6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4848cc9b-e46f-485e-b3f2-4f393b5d92d6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ca:41:f5:be:36:46:dc:e0:9a:3e:49:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4848cc9b-e46f-485e-b3f2-4f393b5d92d6
        Validity
            Not Before: Feb  8 02:00:32 2026 GMT
            Not After : May  9 01:00:32 2026 GMT
        Subject: CN=4c7d263d-ff26-457d-9a52-db5cf6eb0d32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:95:d4:93:d6:53:27:1d:51:d1:d4:ae:17:be:
                    65:9f:15:75:78:7d:c9:93:0d:01:9e:58:77:ef:50:
                    94:64:96:6c:07:6e:2b:94:26:f4:17:c9:7f:54:95:
                    e6:a4:ec:69:d8:e6:8c:db:74:81:94:51:66:36:a2:
                    fe:f1:f4:e7:37:a0:f4:f5:ff:0f:7f:4a:9b:eb:f6:
                    1d:1a:ea:1f:4c:88:bc:53:a8:87:09:22:5b:77:e9:
                    94:54:fd:33:3f:e4:fd:9d:42:bf:2a:96:f9:1e:14:
                    c9:4d:71:cd:7f:50:57:ae:58:f5:31:9b:e7:e5:f5:
                    95:1f:9e:5e:37:cc:e0:29:50:da:a4:8f:0a:88:86:
                    d4:cd:3a:66:9f:43:65:62:bf:25:9b:fc:f7:51:31:
                    10:49:25:26:2e:5f:86:d5:6a:dc:f1:14:4f:ae:bd:
                    ae:94:31:68:dd:37:f9:db:74:f9:ec:6c:4e:b5:2d:
                    8e:94:eb:02:7f:b4:a9:fa:cb:fe:83:36:4a:2d:b8:
                    2e:1f:b6:c5:16:7d:6a:98:3e:7d:19:fe:0f:59:13:
                    03:85:1b:f6:d4:cc:6e:1b:3a:f0:a9:73:7b:f5:4c:
                    1a:ec:e3:b6:3b:54:81:2c:1d:b9:d1:bf:26:7d:fe:
                    52:c7:b7:be:6e:f7:83:52:d5:2d:ec:61:4f:03:63:
                    d4:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:92:D1:72:B8:C9:BA:92:5B:6B:07:08:CD:7B:EB:D6:0B:71:8F:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4848cc9b-e46f-485e-b3f2-4f393b5d92d6/3917548b-5868-3c3b-9b63-1aa1cdf79bef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4848cc9b-e46f-485e-b3f2-4f393b5d92d6/4848cc9b-e46f-485e-b3f2-4f393b5d92d6.crl

            X509v3 Authority Key Identifier:
                keyid:B6:2A:40:95:87:55:AF:8F:01:A4:40:13:3D:22:F2:15:2B:B6:8D:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4848cc9b-e46f-485e-b3f2-4f393b5d92d6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f919:100::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:93:a4:e7:d0:74:95:81:2b:e6:02:83:cd:80:8c:25:3c:34:
         28:66:e8:34:37:01:aa:08:e8:8a:ea:38:c1:ee:1d:eb:76:35:
         e2:b6:d3:98:91:f3:8c:1d:cc:c9:0b:17:e2:0e:1c:9b:f8:41:
         58:2d:34:3c:48:3c:d0:76:1a:75:a0:2e:ae:00:9a:53:f6:ee:
         4f:ed:81:c9:32:ae:15:4f:b6:bc:bd:c4:fc:66:4d:80:35:a4:
         86:a2:c9:34:c3:51:2c:6d:64:b7:43:bf:ad:a2:fa:44:c9:b5:
         b6:b7:cc:d2:55:73:6b:a0:b0:bf:0b:31:54:e6:23:db:a7:d2:
         0c:df:61:22:f0:49:7d:c7:f7:0e:78:9a:e4:69:31:02:14:33:
         f9:1e:40:b9:9e:ee:5c:3f:33:a9:69:44:a4:11:23:ec:10:99:
         1c:46:01:bb:65:bf:1f:21:1e:fc:50:02:c5:b4:66:35:e8:f0:
         2d:e4:a3:d5:a2:ef:cb:46:36:4c:5f:8f:cd:69:15:ce:d2:b5:
         64:90:a8:b0:59:f1:f3:55:c7:99:f5:2e:4f:82:aa:9d:da:df:
         7e:23:62:a5:1b:eb:4a:ba:11:da:ea:fc:ad:07:83:72:d5:43:
         69:20:2b:63:17:88:6c:95:45:4f:ac:34:6b:85:7f:9c:38:37:
         cb:a0:a3:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:21:34 2026 by rpki-client