Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d3d4409e-5c25-468b-a1e6-6ca0f2a8ca8b/5387381b-ecda-3c66-b507-6cc44cac79fa.roa
File:                     5387381b-ecda-3c66-b507-6cc44cac79fa.roa (raw, json)
Hash identifier:          qEla0GCLH7vOHKPlBTqFUeVUBdw2iCTixzsn/11pEw4=
Subject key identifier:   6A:97:31:AF:72:80:12:4A:F1:B9:EF:D1:49:22:72:7B:E6:5B:39:5F
Certificate issuer:       /CN=d3d4409e-5c25-468b-a1e6-6ca0f2a8ca8b
Certificate serial:       010D0C9F4328584CEBC2323C79E6556D757A3700
Authority key identifier: D6:50:41:77:70:B6:91:D2:6F:48:C0:44:1E:81:9A:0C:B4:79:69:29
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d3d4409e-5c25-468b-a1e6-6ca0f2a8ca8b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d3d4409e-5c25-468b-a1e6-6ca0f2a8ca8b/5387381b-ecda-3c66-b507-6cc44cac79fa.roa
Signing time:             Fri 20 Feb 2026 02:00:32 +0000
ROA not before:           Fri 20 Feb 2026 02:00:32 +0000
ROA not after:            Thu 21 May 2026 01:00:32 +0000
asID:                     16509
IP address blocks:        2602:f99c:200::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d3d4409e-5c25-468b-a1e6-6ca0f2a8ca8b/d3d4409e-5c25-468b-a1e6-6ca0f2a8ca8b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d3d4409e-5c25-468b-a1e6-6ca0f2a8ca8b/d3d4409e-5c25-468b-a1e6-6ca0f2a8ca8b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d3d4409e-5c25-468b-a1e6-6ca0f2a8ca8b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:eb:c2:32:3c:79:e6:55:6d:75:7a:37:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3d4409e-5c25-468b-a1e6-6ca0f2a8ca8b
        Validity
            Not Before: Feb 20 02:00:32 2026 GMT
            Not After : May 21 01:00:32 2026 GMT
        Subject: CN=4fff5f3a-891d-44b8-a666-1666580d42dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:b7:6f:b2:9e:8f:25:59:d5:71:63:36:fa:d7:
                    d5:ac:7c:55:3e:44:0d:28:03:c3:1e:33:74:e7:b8:
                    0a:fe:6f:c2:4e:1f:d5:68:c2:a5:53:d5:2e:3c:a9:
                    b3:f5:10:5a:82:89:9b:e3:0e:74:68:cf:e4:63:01:
                    ac:f7:f7:41:3a:7a:2c:c4:77:d0:a7:dc:bd:45:14:
                    bf:a6:19:26:8c:db:ae:75:b8:44:9b:76:95:12:f6:
                    88:8f:4b:2f:a1:56:9e:3b:69:dd:bc:90:b9:e4:a1:
                    18:c1:03:01:a0:7a:8e:1d:ba:2b:5c:70:bc:04:f4:
                    ff:ed:6e:b6:a1:ae:a3:51:40:07:87:4f:56:93:2d:
                    e2:92:5d:c2:71:c5:74:b2:68:26:2e:98:37:09:6c:
                    cb:a2:3c:5b:cb:06:20:77:bb:8a:3a:36:ef:a2:af:
                    cb:b2:ab:4c:a5:5b:0b:fe:bd:91:88:47:3f:aa:7e:
                    c6:72:88:33:15:e4:de:e7:1d:20:7e:d5:66:43:3f:
                    a7:94:30:17:21:14:a1:f0:8b:17:ba:4d:56:03:e3:
                    c6:70:ac:76:a0:9a:ae:15:be:79:09:34:52:a5:76:
                    af:ff:f2:d3:4f:cb:9c:38:58:d4:39:10:f2:b9:7e:
                    d6:86:38:7a:f8:af:f5:60:a3:65:d1:3a:64:72:47:
                    70:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:97:31:AF:72:80:12:4A:F1:B9:EF:D1:49:22:72:7B:E6:5B:39:5F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d3d4409e-5c25-468b-a1e6-6ca0f2a8ca8b/5387381b-ecda-3c66-b507-6cc44cac79fa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d3d4409e-5c25-468b-a1e6-6ca0f2a8ca8b/d3d4409e-5c25-468b-a1e6-6ca0f2a8ca8b.crl

            X509v3 Authority Key Identifier:
                keyid:D6:50:41:77:70:B6:91:D2:6F:48:C0:44:1E:81:9A:0C:B4:79:69:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d3d4409e-5c25-468b-a1e6-6ca0f2a8ca8b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f99c:200::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:bf:11:ca:5d:e7:5a:51:39:cb:4c:3f:8e:40:2e:04:86:79:
         ff:04:44:df:f0:d0:d9:63:59:f6:df:98:87:9d:45:36:24:af:
         0a:1d:87:e2:6c:2c:2d:89:dc:ec:86:ba:4a:d8:80:b7:fa:e9:
         7d:f5:41:dc:80:d0:2d:c8:e2:29:65:a9:2d:d9:b6:16:fb:74:
         40:dd:93:84:7d:35:af:f9:4e:d8:21:ab:7e:7d:d2:6a:20:27:
         b7:28:33:4e:e7:37:af:2b:8a:d9:5d:46:4a:b0:42:1c:e1:ab:
         c5:6f:1c:9c:d3:80:e2:27:af:11:87:fd:d9:34:cb:98:60:f0:
         3a:af:41:14:ab:c1:01:87:87:68:8e:91:2b:06:dd:9c:5e:04:
         66:71:bf:6c:5c:91:16:00:59:c7:0d:41:00:68:ca:34:ae:ac:
         94:87:4f:4d:08:ac:97:b8:9e:96:7b:0d:02:a3:96:0f:97:8e:
         09:d0:9f:3b:51:62:6f:f0:84:4d:29:e4:ab:6f:73:68:f4:14:
         28:a5:59:72:6a:f5:49:2f:90:41:5e:53:3d:84:c7:bc:51:94:
         26:a0:28:4b:0a:2f:7c:ae:e7:72:2e:87:67:08:9e:e3:1a:82:
         d2:45:af:07:f8:b6:27:a6:43:4b:40:52:19:8a:ce:39:2b:9b:
         4a:d3:dd:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:09:00 2026 by rpki-client