Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0575435f-d6e9-4d29-9519-fff0e513c74e/cdbf7809-2cad-3a97-b1b0-ceb4ac5a7f5c.roa
File:                     cdbf7809-2cad-3a97-b1b0-ceb4ac5a7f5c.roa (raw, json)
Hash identifier:          RmfzPgvQ6r1p80OJ4TsrswqNKYXN/lt9dZsXi3Ng8CY=
Subject key identifier:   C3:D5:C3:EC:A6:04:7C:DF:65:A2:2D:B1:D4:90:AC:87:2E:F0:BF:47
Certificate issuer:       /CN=0575435f-d6e9-4d29-9519-fff0e513c74e
Certificate serial:       010D0C9F4328584D037D1B1D12E096128FA45C80
Authority key identifier: 41:C9:F1:A1:D4:C8:09:6A:B2:CC:4B:35:7E:06:B0:CE:91:7E:EE:2D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0575435f-d6e9-4d29-9519-fff0e513c74e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0575435f-d6e9-4d29-9519-fff0e513c74e/cdbf7809-2cad-3a97-b1b0-ceb4ac5a7f5c.roa
Signing time:             Sat 28 Feb 2026 14:00:40 +0000
ROA not before:           Sat 28 Feb 2026 14:00:40 +0000
ROA not after:            Fri 29 May 2026 13:00:40 +0000
asID:                     396319
IP address blocks:        2601:1308::/30 maxlen: 30
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0575435f-d6e9-4d29-9519-fff0e513c74e/0575435f-d6e9-4d29-9519-fff0e513c74e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0575435f-d6e9-4d29-9519-fff0e513c74e/0575435f-d6e9-4d29-9519-fff0e513c74e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0575435f-d6e9-4d29-9519-fff0e513c74e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:03:7d:1b:1d:12:e0:96:12:8f:a4:5c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0575435f-d6e9-4d29-9519-fff0e513c74e
        Validity
            Not Before: Feb 28 14:00:40 2026 GMT
            Not After : May 29 13:00:40 2026 GMT
        Subject: CN=3c78938b-e2cc-4370-9897-ed1f30c69bcd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:fb:30:57:75:0f:38:8a:b4:b0:a1:9d:3e:96:
                    79:f8:fb:03:99:a6:e2:bf:dc:13:1b:d7:45:8d:69:
                    d7:34:5f:16:ed:2d:2e:f8:83:d0:9d:29:bb:a0:b3:
                    3b:81:fc:56:68:c8:d4:08:f5:45:ec:e0:e1:1f:c5:
                    9a:c2:ac:e1:a7:82:c1:fd:06:c6:a6:12:4a:e2:1b:
                    1a:31:29:fe:bb:bf:51:43:ea:40:e7:18:67:cb:8d:
                    fc:35:97:fe:62:d3:84:99:67:7f:d3:6a:b1:d0:9e:
                    e5:5a:15:23:5d:14:42:f3:6b:e1:d6:09:cd:81:20:
                    9d:74:b2:43:08:bd:82:17:aa:c6:5e:31:8b:26:23:
                    87:84:b2:4b:59:45:90:93:17:ee:ba:4f:35:7b:20:
                    c8:b7:dc:b8:e7:ec:e2:cc:ea:e2:b7:e7:77:75:22:
                    fc:02:9e:d7:a7:57:17:fa:8d:cd:f8:d9:c9:59:9f:
                    34:f2:a3:dc:df:5f:ed:42:ab:49:de:86:26:88:91:
                    0f:3f:29:ba:bd:2b:c5:ee:89:da:2e:bb:87:e5:88:
                    00:86:24:21:bd:35:45:48:df:6e:88:84:72:60:43:
                    0d:22:f5:01:dd:6c:80:e0:97:1d:fe:e1:4c:eb:23:
                    be:1b:2f:95:59:44:6a:fe:fb:38:c9:ab:98:96:5f:
                    09:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:D5:C3:EC:A6:04:7C:DF:65:A2:2D:B1:D4:90:AC:87:2E:F0:BF:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0575435f-d6e9-4d29-9519-fff0e513c74e/cdbf7809-2cad-3a97-b1b0-ceb4ac5a7f5c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0575435f-d6e9-4d29-9519-fff0e513c74e/0575435f-d6e9-4d29-9519-fff0e513c74e.crl

            X509v3 Authority Key Identifier:
                keyid:41:C9:F1:A1:D4:C8:09:6A:B2:CC:4B:35:7E:06:B0:CE:91:7E:EE:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0575435f-d6e9-4d29-9519-fff0e513c74e.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2601:1308::/30

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:10:0c:7c:90:12:19:d8:21:25:d5:72:ab:f8:bd:3e:60:1b:
         44:e1:07:c5:09:32:36:1e:9f:1d:ba:25:4a:c9:f2:cf:91:5b:
         43:ae:aa:eb:cf:88:48:85:50:65:e2:94:f9:1d:f3:0a:c3:cc:
         3b:57:5e:aa:ed:ff:77:67:2f:bc:3b:ee:66:06:d3:4c:0b:00:
         31:5b:04:a2:fb:b0:3a:b3:fa:65:96:e8:cd:15:3f:de:f6:df:
         0d:60:ef:47:0e:ec:3f:00:ab:50:57:f4:58:66:cb:b9:19:42:
         4f:8f:81:f3:f2:76:63:17:f8:f0:f8:d8:2c:bb:19:5e:b8:6d:
         55:93:77:d8:4a:48:c9:05:f9:af:37:e2:13:e0:42:9e:fd:3d:
         cd:d5:15:18:9b:b5:65:ff:1f:7a:c6:96:8c:ef:35:05:99:a5:
         61:73:8c:da:ff:af:5d:cf:aa:cf:38:12:fc:5b:54:09:db:a9:
         03:96:95:19:69:d0:3d:26:7f:46:a4:10:c5:00:86:ca:bf:e7:
         2f:b7:52:12:41:0b:82:c1:71:bf:58:f1:8c:e0:ae:09:a3:62:
         84:a9:5c:36:56:96:6a:c8:9b:12:a4:b4:0a:ba:a2:6e:6c:75:
         76:90:96:6e:7b:35:94:d1:5c:48:20:60:7c:65:5d:c1:92:42:
         1d:f9:11:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:31:21 2026 by rpki-client