Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/773b73e0-0815-435e-b24e-89c8b9dd55c5/538e11e1-6173-378c-9eeb-58bf0703d57e.roa
File:                     538e11e1-6173-378c-9eeb-58bf0703d57e.roa (raw, json)
Hash identifier:          MUeckXzvOrv3DdLCqc6BAty0dy49HJRaAJ6Y8bN92LA=
Subject key identifier:   1F:D5:25:FB:C6:EF:0F:32:86:FC:D4:09:73:77:F5:66:2E:43:C5:38
Certificate issuer:       /CN=773b73e0-0815-435e-b24e-89c8b9dd55c5
Certificate serial:       010D0C9F4328584CBAE7368F3BAD2E0D0DA90200
Authority key identifier: BE:75:BB:89:62:18:B1:4B:79:B4:96:D0:88:D8:E6:F6:B3:98:3B:86
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/773b73e0-0815-435e-b24e-89c8b9dd55c5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/773b73e0-0815-435e-b24e-89c8b9dd55c5/538e11e1-6173-378c-9eeb-58bf0703d57e.roa
Signing time:             Mon 02 Feb 2026 14:00:40 +0000
ROA not before:           Mon 02 Feb 2026 14:00:40 +0000
ROA not after:            Sun 03 May 2026 13:00:40 +0000
asID:                     216132
IP address blocks:        2602:f86f::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/773b73e0-0815-435e-b24e-89c8b9dd55c5/773b73e0-0815-435e-b24e-89c8b9dd55c5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/773b73e0-0815-435e-b24e-89c8b9dd55c5/773b73e0-0815-435e-b24e-89c8b9dd55c5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/773b73e0-0815-435e-b24e-89c8b9dd55c5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ba:e7:36:8f:3b:ad:2e:0d:0d:a9:02:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=773b73e0-0815-435e-b24e-89c8b9dd55c5
        Validity
            Not Before: Feb  2 14:00:40 2026 GMT
            Not After : May  3 13:00:40 2026 GMT
        Subject: CN=cd03028f-5a78-497a-baa3-4e01e0470bc7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:19:30:28:f8:b6:3e:db:d8:58:9e:eb:87:c9:
                    fd:08:ee:8b:cb:a3:37:ca:63:48:fe:65:69:ce:06:
                    7e:49:bc:94:1f:2e:d7:00:10:cf:a1:b9:9c:97:ac:
                    a4:7c:07:67:a6:fc:f1:a0:43:9e:f9:9f:c4:b8:f7:
                    0d:a4:5e:a6:67:0a:3a:cf:36:a6:7e:14:d2:92:7a:
                    64:08:cb:ce:80:14:62:2d:c3:68:c5:c8:23:e5:1f:
                    37:98:bb:67:be:37:e9:91:6c:42:25:73:29:1e:1d:
                    b0:2c:9f:e1:20:71:3e:10:07:14:da:f6:41:b2:59:
                    92:98:c3:25:a9:08:20:b1:07:4a:c7:64:66:16:d3:
                    bb:78:a9:a4:74:ce:3f:f6:5c:17:82:fd:df:19:67:
                    39:af:4f:84:75:87:3a:ba:6a:b0:a4:95:f0:2d:c5:
                    b1:bc:ca:79:0a:8a:49:5d:62:40:be:f3:22:e4:c9:
                    72:38:4b:06:11:69:90:73:92:78:9b:1d:04:62:27:
                    9c:d2:93:f1:c6:0e:7a:76:43:01:e4:16:37:90:20:
                    e7:ae:9e:c2:d5:6e:4f:e3:36:e3:a9:c4:70:33:ed:
                    7c:d3:e6:4f:e1:c7:80:e8:8e:2e:01:09:da:39:98:
                    60:ad:be:a6:88:91:d5:d5:76:e6:49:5f:64:b4:71:
                    ab:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:D5:25:FB:C6:EF:0F:32:86:FC:D4:09:73:77:F5:66:2E:43:C5:38
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/773b73e0-0815-435e-b24e-89c8b9dd55c5/538e11e1-6173-378c-9eeb-58bf0703d57e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/773b73e0-0815-435e-b24e-89c8b9dd55c5/773b73e0-0815-435e-b24e-89c8b9dd55c5.crl

            X509v3 Authority Key Identifier:
                keyid:BE:75:BB:89:62:18:B1:4B:79:B4:96:D0:88:D8:E6:F6:B3:98:3B:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/773b73e0-0815-435e-b24e-89c8b9dd55c5.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f86f::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:6a:4f:e3:68:f6:66:ef:a2:f0:78:13:3e:32:5c:e9:60:46:
         3f:2b:84:90:a2:63:0b:f0:ae:f9:b0:a2:ef:e8:e6:8d:5a:70:
         e8:c8:af:56:e1:ef:b4:34:69:fa:89:a3:3d:c0:ac:8b:7b:96:
         61:dc:35:14:88:ca:68:6c:7b:94:62:3a:03:aa:b8:b6:42:23:
         a0:13:db:a0:18:1a:5a:0d:43:82:5b:a6:b2:98:6d:ac:4a:aa:
         7c:c0:fc:a1:c3:8b:81:ac:ff:de:a6:5e:a1:3b:d2:b8:ad:14:
         3f:00:79:e7:14:4a:2a:28:f6:6f:57:b7:4f:cf:bc:ae:a0:82:
         da:62:76:33:64:a0:1a:dc:41:7f:37:c7:84:57:99:d9:62:e2:
         0d:f3:80:57:3b:40:e8:ab:f6:a1:e8:c4:20:8f:b5:57:d4:4b:
         e9:71:49:fc:12:dc:f3:c6:b5:61:58:6b:5a:70:3d:7b:dc:b8:
         01:16:d1:9d:74:51:77:e8:27:39:46:11:33:cf:62:51:4f:2c:
         f9:e4:49:d6:24:f4:5b:55:0f:b7:0c:39:6f:04:c3:9b:22:f7:
         c4:39:3d:fc:76:b2:c1:7b:fa:00:c9:2b:d6:5b:d4:2b:da:5f:
         dc:d9:5b:5b:5d:e2:98:8f:5d:53:da:13:08:4f:c4:c1:a2:b9:
         f6:fa:fe:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:57:46 2026 by rpki-client