Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9c54416-94b3-40be-9615-08b5725cec76/a27f0d80-f4cd-3a3b-8d51-06188ea995d9.roa
File:                     a27f0d80-f4cd-3a3b-8d51-06188ea995d9.roa (raw, json)
Hash identifier:          cWmlra/adQpq6yVRqE3GOZTR8P0HcVMIcK3p9gN1g+s=
Subject key identifier:   9F:70:04:82:55:6D:65:EE:1B:D4:A3:74:4C:D8:94:00:C8:F9:6B:03
Certificate issuer:       /CN=a9c54416-94b3-40be-9615-08b5725cec76
Certificate serial:       010D0C9F4328584CAE572C4EB145757865174200
Authority key identifier: 6A:97:B7:3F:11:6D:FC:7F:0F:7A:9A:A8:2E:89:A9:8E:B1:7C:03:2A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9c54416-94b3-40be-9615-08b5725cec76.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9c54416-94b3-40be-9615-08b5725cec76/a27f0d80-f4cd-3a3b-8d51-06188ea995d9.roa
Signing time:             Thu 29 Jan 2026 02:00:32 +0000
ROA not before:           Thu 29 Jan 2026 02:00:32 +0000
ROA not after:            Wed 29 Apr 2026 01:00:32 +0000
asID:                     212935
IP address blocks:        2602:f90a::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9c54416-94b3-40be-9615-08b5725cec76/a9c54416-94b3-40be-9615-08b5725cec76.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9c54416-94b3-40be-9615-08b5725cec76/a9c54416-94b3-40be-9615-08b5725cec76.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9c54416-94b3-40be-9615-08b5725cec76.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ae:57:2c:4e:b1:45:75:78:65:17:42:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a9c54416-94b3-40be-9615-08b5725cec76
        Validity
            Not Before: Jan 29 02:00:32 2026 GMT
            Not After : Apr 29 01:00:32 2026 GMT
        Subject: CN=9f71eb58-cfea-46e6-92cf-359e7a29bc32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:91:67:3b:55:27:ee:40:d0:b3:63:e8:b2:3b:
                    cf:35:8f:d3:59:1b:57:70:6d:3c:68:8c:8d:e2:da:
                    8f:fd:fd:84:0e:3d:2c:b7:c0:ae:eb:e3:fb:18:f5:
                    2e:9d:a5:9b:ea:41:0d:bd:a6:3f:1a:7f:53:08:7c:
                    09:f0:76:94:d1:7c:98:2f:9c:d5:35:7f:f8:51:e9:
                    fe:ca:ad:4c:97:b2:00:05:9a:a9:cd:6f:9b:37:6b:
                    d5:4b:1b:14:c3:86:a6:77:3e:e0:26:06:1d:1b:4b:
                    80:00:ec:b0:8f:40:f2:ca:6c:e7:59:d6:5e:8d:15:
                    4c:88:47:25:a3:25:27:75:e6:dc:52:69:2d:93:f2:
                    4f:08:81:f5:53:f4:bc:e9:69:50:12:7c:36:bc:d1:
                    0f:31:38:c5:35:d4:c4:4c:ec:81:7a:9f:db:b9:5f:
                    2b:ff:05:27:59:fc:25:24:85:9f:62:f0:a7:0f:8b:
                    e1:a9:6b:80:ad:c4:6e:71:c8:cb:c7:22:e3:3d:5c:
                    e4:42:40:9e:07:38:84:cb:cd:0c:48:a2:31:3b:40:
                    57:d5:6a:34:7d:97:48:01:99:18:34:7d:3e:1e:1d:
                    bf:d8:ea:24:bf:e6:47:b6:2e:1c:ef:96:bc:d5:22:
                    29:c0:ad:86:49:a3:1b:bc:a3:cc:01:d3:b4:23:be:
                    c1:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:70:04:82:55:6D:65:EE:1B:D4:A3:74:4C:D8:94:00:C8:F9:6B:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9c54416-94b3-40be-9615-08b5725cec76/a27f0d80-f4cd-3a3b-8d51-06188ea995d9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9c54416-94b3-40be-9615-08b5725cec76/a9c54416-94b3-40be-9615-08b5725cec76.crl

            X509v3 Authority Key Identifier:
                keyid:6A:97:B7:3F:11:6D:FC:7F:0F:7A:9A:A8:2E:89:A9:8E:B1:7C:03:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9c54416-94b3-40be-9615-08b5725cec76.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f90a::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:11:38:b7:02:d8:cc:8e:46:a6:d2:db:9c:a5:87:15:c4:95:
         a1:2b:55:4e:6a:68:e8:c4:ba:a4:c3:d8:35:d8:4e:70:9c:31:
         c3:90:2d:9c:b1:bc:7f:2e:01:99:c3:74:a4:43:28:78:33:12:
         50:95:60:50:c4:69:64:31:4b:17:04:1b:63:fc:01:12:aa:66:
         d1:3f:5c:8d:51:13:5b:46:62:e3:5f:e2:56:f9:34:71:10:10:
         76:b6:1e:63:6d:cb:bf:36:77:1f:0d:00:04:76:99:2d:85:52:
         c7:1a:7a:da:5c:f4:80:4a:c8:f9:a4:59:31:03:bb:85:b4:35:
         cd:41:45:be:5f:26:47:40:09:d0:e3:87:51:df:bd:b1:7f:67:
         9c:9d:7a:a1:79:35:7a:cb:0e:dd:24:f5:9f:fe:92:6e:8d:9c:
         54:d1:d4:78:59:88:d7:db:a5:b5:53:8e:01:cb:21:9f:dc:43:
         bb:1e:22:d0:67:a7:9b:96:41:8d:b4:de:74:63:86:42:13:c0:
         9f:ff:f8:57:23:c7:53:02:3d:e3:bf:3c:c7:c9:af:4f:d8:98:
         95:11:a4:a1:5c:59:1f:a7:43:e8:f4:b9:29:7e:e4:2f:13:4f:
         46:d3:6e:e7:d3:da:db:d8:06:38:16:a4:8b:e4:28:87:cb:cf:
         b5:e3:fb:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:11:34 2026 by rpki-client