Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/895b91dd-3a1f-46e8-88e9-1a06a1c88756/631036c5-3cea-3dae-9c08-96cf6e790c65.roa
File:                     631036c5-3cea-3dae-9c08-96cf6e790c65.roa (raw, json)
Hash identifier:          4OjmYQ5w9T+/AeVfpf2ZjXdXQG9mPLtZ45wyEfbcX00=
Subject key identifier:   4E:94:A0:4A:07:95:28:C8:E9:DB:48:31:6A:C8:F2:4F:2E:AC:FC:93
Certificate issuer:       /CN=895b91dd-3a1f-46e8-88e9-1a06a1c88756
Certificate serial:       010D0C9F4328584CE3620CAD19569A86C0800B80
Authority key identifier: 8B:A3:70:CC:C8:96:6C:14:AB:9C:B7:BF:2E:DB:F1:66:BF:63:A8:C5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/895b91dd-3a1f-46e8-88e9-1a06a1c88756.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/895b91dd-3a1f-46e8-88e9-1a06a1c88756/631036c5-3cea-3dae-9c08-96cf6e790c65.roa
Signing time:             Tue 17 Feb 2026 02:00:31 +0000
ROA not before:           Tue 17 Feb 2026 02:00:31 +0000
ROA not after:            Mon 18 May 2026 01:00:31 +0000
asID:                     53486
IP address blocks:        2607:eb00::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/895b91dd-3a1f-46e8-88e9-1a06a1c88756/895b91dd-3a1f-46e8-88e9-1a06a1c88756.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/895b91dd-3a1f-46e8-88e9-1a06a1c88756/895b91dd-3a1f-46e8-88e9-1a06a1c88756.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/895b91dd-3a1f-46e8-88e9-1a06a1c88756.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:e3:62:0c:ad:19:56:9a:86:c0:80:0b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=895b91dd-3a1f-46e8-88e9-1a06a1c88756
        Validity
            Not Before: Feb 17 02:00:31 2026 GMT
            Not After : May 18 01:00:31 2026 GMT
        Subject: CN=2cfb3183-368e-4279-80f6-80fa68a3349d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:cf:5d:fa:00:3d:99:c2:7e:b9:c5:07:5f:40:
                    c7:a0:d2:5c:16:1b:2f:98:a5:98:03:e9:59:41:8b:
                    71:76:ae:f4:fa:02:2e:23:dc:01:b0:b0:14:f1:25:
                    a1:27:16:fe:b1:1b:b6:de:a4:21:4c:47:b4:d4:c0:
                    27:7e:ce:b2:4f:12:fb:26:ba:bf:6f:fe:de:c7:45:
                    f0:61:6e:0f:99:72:8e:74:a6:9b:e1:d4:5b:e9:f5:
                    c0:5f:db:22:4e:88:f9:1d:7b:f3:ab:3d:e1:9a:4b:
                    b5:3a:fa:cf:ad:86:73:80:b0:cc:26:aa:ac:42:44:
                    e8:e3:8c:a9:6d:47:46:db:87:ca:95:4b:d4:54:10:
                    89:84:b7:f8:b6:bb:6d:47:1a:c1:83:74:59:05:64:
                    e3:09:dc:44:12:75:2f:ee:9e:e5:08:5c:61:4a:6f:
                    ac:58:ac:8d:9c:97:12:42:03:85:bb:06:b1:7e:e1:
                    31:5b:ce:b5:ba:ad:3c:ba:0f:c5:2b:b1:46:36:88:
                    01:ee:a9:58:8e:51:94:c4:ef:56:6d:bd:96:5b:21:
                    f4:fc:f6:c1:8f:41:84:87:38:99:c4:e0:c0:7e:fe:
                    a0:c2:1e:db:06:c8:e9:a6:bc:4e:25:4c:17:5c:a0:
                    0a:0f:30:72:9d:cf:83:c4:6b:c9:a2:79:c8:a0:ac:
                    28:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:94:A0:4A:07:95:28:C8:E9:DB:48:31:6A:C8:F2:4F:2E:AC:FC:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/895b91dd-3a1f-46e8-88e9-1a06a1c88756/631036c5-3cea-3dae-9c08-96cf6e790c65.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/895b91dd-3a1f-46e8-88e9-1a06a1c88756/895b91dd-3a1f-46e8-88e9-1a06a1c88756.crl

            X509v3 Authority Key Identifier:
                keyid:8B:A3:70:CC:C8:96:6C:14:AB:9C:B7:BF:2E:DB:F1:66:BF:63:A8:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/895b91dd-3a1f-46e8-88e9-1a06a1c88756.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:eb00::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:fd:0a:a7:62:de:9b:f0:2a:26:e3:4b:59:ba:45:8d:a4:c6:
         c2:ee:de:d8:0a:cf:3d:0f:65:1d:06:d0:40:4d:bd:3d:8a:f2:
         fa:f0:d3:3c:0b:a8:82:52:66:29:3b:41:05:a5:1f:62:61:0a:
         c2:f0:38:d7:f1:fc:3c:2c:f3:a9:5c:b3:2a:9c:44:bb:49:3d:
         f9:7b:3a:17:e0:a1:0e:27:37:57:e5:4d:70:a0:f9:4e:5e:6f:
         cf:bc:f2:90:b0:3b:ac:bd:da:78:71:89:25:6f:7a:b2:77:fd:
         a7:d7:d4:43:cd:94:1e:7d:1b:13:56:6e:a7:78:00:ae:b9:84:
         57:39:86:d3:9d:9e:52:61:a7:61:18:7d:f3:a0:04:e0:9a:a9:
         cb:97:00:39:0d:10:3a:dd:b2:9f:35:a1:40:10:62:f4:09:cb:
         a5:84:1a:58:f4:ca:33:34:13:a9:93:81:c7:76:d5:2a:bc:78:
         30:84:7f:ac:1b:9e:49:24:18:97:47:63:e4:b7:d7:09:95:60:
         ba:b3:cb:42:19:e0:09:b6:14:b2:13:31:9f:4e:c0:34:50:50:
         3f:42:f8:00:51:b3:4a:f3:21:38:4d:5a:44:d6:d3:c5:07:53:
         03:13:f9:fe:4c:71:7a:14:8f:8a:17:d6:96:0f:b7:1c:7a:3c:
         ee:34:84:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:14:39 2026 by rpki-client