Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e60884f4-fa14-4a13-ac3b-efb7c9412082/1f4ffb6d-05f7-37cb-8a92-da2ddf262ab5.roa
File:                     1f4ffb6d-05f7-37cb-8a92-da2ddf262ab5.roa (raw, json)
Hash identifier:          UUCwLxUghakjxNxYQGh4EcJon+VaaHLFwbo3uqU2Wsg=
Subject key identifier:   2D:F6:24:45:30:A3:84:79:AF:9F:3E:8E:FE:9D:43:F1:FB:BB:0F:4A
Certificate issuer:       /CN=e60884f4-fa14-4a13-ac3b-efb7c9412082
Certificate serial:       010D0C9F4328584CF42232E7684DC7D15239FA00
Authority key identifier: 0C:9A:7C:E9:6D:8C:38:48:9A:F3:3B:CA:41:66:F3:89:47:7D:49:07
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e60884f4-fa14-4a13-ac3b-efb7c9412082.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e60884f4-fa14-4a13-ac3b-efb7c9412082/1f4ffb6d-05f7-37cb-8a92-da2ddf262ab5.roa
Signing time:             Mon 23 Feb 2026 02:00:31 +0000
ROA not before:           Mon 23 Feb 2026 02:00:31 +0000
ROA not after:            Sun 24 May 2026 01:00:31 +0000
asID:                     36184
IP address blocks:        2620:103:6000::/44 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e60884f4-fa14-4a13-ac3b-efb7c9412082/e60884f4-fa14-4a13-ac3b-efb7c9412082.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e60884f4-fa14-4a13-ac3b-efb7c9412082/e60884f4-fa14-4a13-ac3b-efb7c9412082.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e60884f4-fa14-4a13-ac3b-efb7c9412082.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:f4:22:32:e7:68:4d:c7:d1:52:39:fa:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e60884f4-fa14-4a13-ac3b-efb7c9412082
        Validity
            Not Before: Feb 23 02:00:31 2026 GMT
            Not After : May 24 01:00:31 2026 GMT
        Subject: CN=6c78d92e-2634-43db-80a5-6bb1abc107b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:19:bf:53:79:89:69:40:54:8b:12:d1:04:3e:
                    6c:11:d1:48:61:4d:1c:f0:0a:36:cc:fe:01:e6:75:
                    be:fb:10:b2:83:68:e4:c3:e9:b6:5f:43:9c:ad:5d:
                    3e:d4:77:24:60:7c:37:33:33:45:7f:90:c5:6c:0a:
                    09:dc:05:90:6c:ce:5e:a1:5f:22:fd:54:2d:7e:af:
                    b7:dc:e2:d4:5e:46:08:cc:9e:24:b6:e1:01:15:ea:
                    44:c7:ea:9c:ad:38:4c:0e:81:ee:a0:e4:fd:3f:eb:
                    a8:fe:3e:3a:8d:c4:fa:79:7d:97:36:34:23:68:de:
                    18:11:16:32:95:1c:75:51:24:c5:2f:d3:90:34:cc:
                    ca:b4:9f:23:48:5c:ac:35:4b:16:0a:a0:48:0d:39:
                    4f:10:d0:0f:fb:3b:b5:66:ad:a9:cf:c1:8c:49:7a:
                    d9:78:77:47:3d:00:ac:db:bc:2e:e9:a9:01:38:80:
                    2c:40:fc:8b:5e:28:f7:1e:b3:88:e3:88:a7:8a:30:
                    34:e8:ee:0b:82:db:4d:ab:d5:07:98:70:dd:a2:c9:
                    80:a2:6d:3d:14:88:f9:ce:4d:b1:8a:62:24:9e:24:
                    46:2f:77:83:3e:6e:4e:20:cd:ab:35:7c:ee:fa:5d:
                    b8:04:b4:9c:08:d2:61:98:36:7a:49:8c:2b:5c:3e:
                    e9:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:F6:24:45:30:A3:84:79:AF:9F:3E:8E:FE:9D:43:F1:FB:BB:0F:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e60884f4-fa14-4a13-ac3b-efb7c9412082/1f4ffb6d-05f7-37cb-8a92-da2ddf262ab5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e60884f4-fa14-4a13-ac3b-efb7c9412082/e60884f4-fa14-4a13-ac3b-efb7c9412082.crl

            X509v3 Authority Key Identifier:
                keyid:0C:9A:7C:E9:6D:8C:38:48:9A:F3:3B:CA:41:66:F3:89:47:7D:49:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e60884f4-fa14-4a13-ac3b-efb7c9412082.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:103:6000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:9f:e6:1a:a1:9c:6e:74:01:9d:0b:7e:6b:f2:76:8e:6e:bf:
         64:16:1f:a2:c1:e7:d3:52:da:0f:c7:ea:62:81:65:dc:3a:b9:
         cd:18:1e:07:a0:b8:24:24:ee:ef:bb:d8:ae:a7:57:2c:61:30:
         db:50:d2:0e:6d:b9:d5:a8:ba:0b:6a:7a:d3:34:13:6e:b5:5f:
         4b:cb:44:b6:f1:cd:e4:09:86:00:cc:fb:42:d3:c4:a1:c9:9d:
         f6:a9:42:41:7c:63:44:41:0a:75:a0:44:67:c8:fa:d5:54:59:
         6a:e9:3d:fe:4c:29:36:71:20:68:68:7b:ba:c1:1c:4a:1f:ca:
         b7:f7:50:81:df:d7:82:c4:e3:9f:d8:ba:e3:35:86:17:b4:b6:
         e3:09:5b:20:0f:cd:1f:06:6a:0b:d1:af:ba:a8:e9:8e:6e:1b:
         a9:53:08:59:f8:58:60:3f:f9:a6:59:e0:b8:55:fb:44:75:53:
         c9:cd:b0:41:be:f3:75:34:09:96:b2:19:e3:e1:fd:88:75:ee:
         c7:d5:a9:24:74:1a:3e:de:ba:90:39:98:c9:80:a4:12:6e:d2:
         7e:f5:56:ee:82:e1:bb:7e:d7:94:ab:e6:88:e6:41:12:b1:d4:
         fa:18:70:0d:6d:2b:f8:7d:59:ad:2a:58:66:02:0c:31:e9:ed:
         f9:bd:7c:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:06:38 2026 by rpki-client