Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1918ee56-343c-40dc-b01d-fb5efd51e26a/a7e2d24b-d9df-36b8-8c10-fed8f75fe5d1.roa
File:                     a7e2d24b-d9df-36b8-8c10-fed8f75fe5d1.roa (raw, json)
Hash identifier:          Mc6glF0nvsKLh2mHprspPbYWiQ7mptgFtXJHrs3tJfY=
Subject key identifier:   8E:FA:D9:AE:4F:E2:7C:98:CA:C8:91:E5:F7:94:7D:45:CC:CE:10:7B
Certificate issuer:       /CN=1918ee56-343c-40dc-b01d-fb5efd51e26a
Certificate serial:       010D0C9F4328584CAE570BE4379C579335B30700
Authority key identifier: 17:39:49:C6:83:A6:F2:A3:39:16:0F:35:00:CD:81:81:75:6B:7F:E3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1918ee56-343c-40dc-b01d-fb5efd51e26a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1918ee56-343c-40dc-b01d-fb5efd51e26a/a7e2d24b-d9df-36b8-8c10-fed8f75fe5d1.roa
Signing time:             Thu 29 Jan 2026 02:00:32 +0000
ROA not before:           Thu 29 Jan 2026 02:00:32 +0000
ROA not after:            Wed 29 Apr 2026 01:00:32 +0000
asID:                     16509
IP address blocks:        2602:80a:200b::/48 maxlen: 48
                          2602:80a:200c::/48 maxlen: 48
                          2602:80a:200d::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1918ee56-343c-40dc-b01d-fb5efd51e26a/1918ee56-343c-40dc-b01d-fb5efd51e26a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1918ee56-343c-40dc-b01d-fb5efd51e26a/1918ee56-343c-40dc-b01d-fb5efd51e26a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1918ee56-343c-40dc-b01d-fb5efd51e26a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ae:57:0b:e4:37:9c:57:93:35:b3:07:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1918ee56-343c-40dc-b01d-fb5efd51e26a
        Validity
            Not Before: Jan 29 02:00:32 2026 GMT
            Not After : Apr 29 01:00:32 2026 GMT
        Subject: CN=09649020-74f3-4d0e-a24f-b75fb95aadb8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:89:34:80:bf:99:1d:06:f8:19:64:a0:34:50:
                    d7:af:7f:d3:f3:c9:d4:2c:1d:2f:e8:73:a7:e9:e3:
                    d9:59:40:d2:52:14:2c:12:e0:23:b5:c2:b6:fa:4f:
                    03:6d:6d:74:64:eb:f5:b6:c0:a3:f3:f3:ee:16:ac:
                    e8:cb:51:1c:e9:ff:59:92:d5:76:1e:1e:ce:68:75:
                    f3:f6:89:b9:e7:92:22:92:06:04:7c:e5:b8:83:74:
                    4c:fe:96:7e:97:4d:88:ad:da:af:be:8e:7d:cc:b2:
                    d1:64:c8:0c:ce:04:7c:fe:33:c9:9c:0d:39:96:b6:
                    83:e1:d6:3a:0b:27:b2:e0:f6:f5:8f:87:90:aa:a5:
                    73:a5:56:3c:da:c4:ae:b5:bb:b9:20:3f:34:4d:75:
                    93:59:a2:7a:c5:83:22:e0:c5:c1:dd:af:60:68:11:
                    46:58:7e:fa:6c:e7:27:08:0f:99:3c:2b:44:d8:b2:
                    97:95:4e:31:f5:79:b3:77:6b:ba:0f:b1:cf:f2:47:
                    32:8e:3d:72:28:02:c2:44:2a:dd:49:02:16:f7:e6:
                    8d:95:05:c8:82:7e:b1:92:bf:d2:f2:18:3b:44:13:
                    26:63:47:91:89:28:5e:d9:29:8e:33:22:b5:b7:53:
                    40:06:13:5c:3e:d2:ac:40:f4:b2:35:14:af:7a:11:
                    f0:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:FA:D9:AE:4F:E2:7C:98:CA:C8:91:E5:F7:94:7D:45:CC:CE:10:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1918ee56-343c-40dc-b01d-fb5efd51e26a/a7e2d24b-d9df-36b8-8c10-fed8f75fe5d1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1918ee56-343c-40dc-b01d-fb5efd51e26a/1918ee56-343c-40dc-b01d-fb5efd51e26a.crl

            X509v3 Authority Key Identifier:
                keyid:17:39:49:C6:83:A6:F2:A3:39:16:0F:35:00:CD:81:81:75:6B:7F:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1918ee56-343c-40dc-b01d-fb5efd51e26a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:80a:200b::-2602:80a:200d:ffff:ffff:ffff:ffff:ffff

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:63:28:00:96:bf:5b:a2:72:97:f8:d8:a4:68:ad:2e:e2:cb:
         dd:a7:12:e2:5f:0c:53:d0:3f:91:0d:03:37:a8:a3:cc:df:ed:
         46:13:24:be:da:83:b1:49:58:b8:17:d9:48:3d:78:c6:66:70:
         7d:8f:0d:bb:5b:de:8a:33:eb:7a:18:6d:16:90:12:d6:65:0f:
         f3:af:8a:ca:61:68:0e:8f:ae:34:5c:3d:57:0a:01:0e:f1:54:
         ec:ff:40:b2:14:cf:02:3d:0f:e1:02:f6:4f:97:38:20:10:27:
         b2:e4:ed:65:c4:9e:d6:72:9e:31:34:ca:a8:a3:4f:5d:94:ee:
         c5:c0:36:ca:95:cf:cf:d8:a5:db:b4:e4:41:19:cc:32:64:8d:
         47:5c:70:70:f1:29:da:3b:41:11:59:f4:58:4f:49:e6:a6:0b:
         8c:57:fc:a9:d3:85:2e:a1:57:3c:e8:d0:2d:7c:84:a7:c6:5d:
         6f:b2:19:e2:22:8d:17:a3:49:c0:61:0e:cf:2d:f9:4d:53:d9:
         d6:05:8a:40:27:f5:f3:a0:4e:db:79:07:3d:35:a4:02:ee:be:
         52:2b:ad:6b:e4:b9:70:ea:a6:7b:93:8f:16:86:9e:07:24:26:
         1e:6b:36:3c:d4:63:e8:d4:53:27:a5:75:92:b4:be:e0:4c:38:
         a8:11:0b:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:08:30 2026 by rpki-client