Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d3d4409e-5c25-468b-a1e6-6ca0f2a8ca8b/dfef8664-2552-32ef-ab49-09e987678f7f.roa
File:                     dfef8664-2552-32ef-ab49-09e987678f7f.roa (raw, json)
Hash identifier:          6HvIfEcnEIzZ8RY3B2zl/s2ytENhqDn9lNj7YvfHxJU=
Subject key identifier:   F1:58:A1:9D:7B:08:02:01:9A:7F:64:19:DF:F0:88:17:72:A4:AA:17
Certificate issuer:       /CN=d3d4409e-5c25-468b-a1e6-6ca0f2a8ca8b
Certificate serial:       010D0C9F4328584CEBC2324EEA88615D0BF98640
Authority key identifier: D6:50:41:77:70:B6:91:D2:6F:48:C0:44:1E:81:9A:0C:B4:79:69:29
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d3d4409e-5c25-468b-a1e6-6ca0f2a8ca8b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d3d4409e-5c25-468b-a1e6-6ca0f2a8ca8b/dfef8664-2552-32ef-ab49-09e987678f7f.roa
Signing time:             Fri 20 Feb 2026 02:00:32 +0000
ROA not before:           Fri 20 Feb 2026 02:00:32 +0000
ROA not after:            Thu 21 May 2026 01:00:32 +0000
asID:                     14618
IP address blocks:        2602:f99c:200::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d3d4409e-5c25-468b-a1e6-6ca0f2a8ca8b/d3d4409e-5c25-468b-a1e6-6ca0f2a8ca8b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d3d4409e-5c25-468b-a1e6-6ca0f2a8ca8b/d3d4409e-5c25-468b-a1e6-6ca0f2a8ca8b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d3d4409e-5c25-468b-a1e6-6ca0f2a8ca8b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:eb:c2:32:4e:ea:88:61:5d:0b:f9:86:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3d4409e-5c25-468b-a1e6-6ca0f2a8ca8b
        Validity
            Not Before: Feb 20 02:00:32 2026 GMT
            Not After : May 21 01:00:32 2026 GMT
        Subject: CN=64182fb2-9c32-4499-b7c7-9afe0a9bc586
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:a4:cf:42:b7:6d:7b:fb:81:40:55:b3:d0:fb:
                    2e:0d:37:ef:fc:15:6f:b3:7d:68:22:05:7f:64:d2:
                    55:b6:a8:8a:c6:74:7a:02:69:86:85:25:34:87:b5:
                    55:1f:0b:b6:73:e5:8b:a7:26:d5:62:5a:99:d8:3b:
                    33:f3:e4:ce:9f:22:95:0c:49:69:c7:bf:77:52:d1:
                    b5:97:bc:7f:ed:dc:f6:5d:e5:50:f4:ce:94:5e:56:
                    e4:03:45:71:f8:6d:a9:02:d1:0f:f8:92:f8:82:da:
                    e8:10:a7:d2:af:53:b9:dd:74:5a:a0:d5:7d:1a:5a:
                    e0:6a:3c:79:01:95:27:bb:ef:5e:4f:63:7a:9c:9d:
                    3e:e0:07:7d:43:5c:c6:8e:dc:bc:46:3b:52:89:ee:
                    8c:1a:55:64:54:58:d4:6f:fb:bc:eb:a6:89:2d:4d:
                    17:83:78:80:5d:b1:10:f9:a6:50:da:e6:27:05:85:
                    94:29:63:ee:c0:99:b2:64:ae:38:2d:24:80:0b:8c:
                    c7:63:ef:fb:e9:a9:15:68:1a:1e:64:c2:bc:fe:b1:
                    8f:8e:63:fe:c7:6a:69:6c:b8:47:0c:74:96:81:64:
                    75:ec:ae:53:a2:95:81:12:16:5c:9d:05:33:0f:27:
                    ee:bb:b3:a8:02:f3:c3:4f:10:17:d3:e5:ba:e9:d1:
                    c5:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:58:A1:9D:7B:08:02:01:9A:7F:64:19:DF:F0:88:17:72:A4:AA:17
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d3d4409e-5c25-468b-a1e6-6ca0f2a8ca8b/dfef8664-2552-32ef-ab49-09e987678f7f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d3d4409e-5c25-468b-a1e6-6ca0f2a8ca8b/d3d4409e-5c25-468b-a1e6-6ca0f2a8ca8b.crl

            X509v3 Authority Key Identifier:
                keyid:D6:50:41:77:70:B6:91:D2:6F:48:C0:44:1E:81:9A:0C:B4:79:69:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d3d4409e-5c25-468b-a1e6-6ca0f2a8ca8b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f99c:200::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:15:c5:30:c1:fe:60:c3:83:67:bc:30:80:72:c9:8a:5c:3c:
         47:2f:da:6a:da:4a:5f:19:a7:39:82:f9:82:28:9d:4a:7c:2a:
         76:1b:c1:cb:60:8b:db:cf:52:8e:50:91:09:b6:49:e6:ba:6f:
         98:b5:dd:13:d4:9b:53:ea:0a:94:d4:16:64:96:25:59:25:95:
         24:e7:2e:d3:c0:98:48:59:10:0b:7c:68:9e:7f:85:60:bc:27:
         6f:d9:a5:1c:05:8f:a0:56:06:4b:58:f0:f6:ea:a7:aa:d2:37:
         70:bc:60:28:a5:af:6e:24:53:da:12:b5:b9:7d:be:4d:b2:ae:
         bc:0f:ab:81:b3:98:3a:e8:02:8a:08:48:34:27:aa:3a:67:3b:
         da:09:1a:b3:e4:d5:91:c3:96:ee:df:af:75:34:17:b2:e9:24:
         56:52:87:15:b9:6f:14:56:b2:05:97:8b:e0:c0:18:f0:23:ef:
         6f:29:e7:d6:8f:7f:6c:80:7b:35:1d:dc:3b:27:60:5f:37:cf:
         6e:6f:d2:56:59:20:1a:51:48:fe:d7:9d:e2:f9:80:e3:c3:2c:
         ca:94:b9:87:2f:a9:6e:35:17:1f:e3:52:c8:6a:d1:bb:47:17:
         67:c4:8f:b4:c6:d8:17:7c:0d:8b:12:a7:87:4d:6e:81:7b:e6:
         b0:ab:44:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:24:49 2026 by rpki-client