Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9ff43aab-c8c2-4f23-91e5-373be2462e9f/4be56354-f558-3bd5-98d1-2a45b275dad7.roa
File:                     4be56354-f558-3bd5-98d1-2a45b275dad7.roa (raw, json)
Hash identifier:          V6dUY+92EhncRoeWYRrD4Xq0q0pBsBNjk6kBMAdBBJA=
Subject key identifier:   97:E8:62:1B:1C:D2:DA:74:15:AA:4C:8A:FC:98:53:D6:6C:DF:1C:85
Certificate issuer:       /CN=9ff43aab-c8c2-4f23-91e5-373be2462e9f
Certificate serial:       010D0C9F4328584D00B26E2EAC2C47BA55B76380
Authority key identifier: 56:45:75:A6:DC:99:39:16:88:BC:D3:FE:86:9A:FD:9C:E9:FD:74:1B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9ff43aab-c8c2-4f23-91e5-373be2462e9f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9ff43aab-c8c2-4f23-91e5-373be2462e9f/4be56354-f558-3bd5-98d1-2a45b275dad7.roa
Signing time:             Fri 27 Feb 2026 14:00:40 +0000
ROA not before:           Fri 27 Feb 2026 14:00:40 +0000
ROA not after:            Thu 28 May 2026 13:00:40 +0000
asID:                     18140
IP address blocks:        2620:e6:c000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9ff43aab-c8c2-4f23-91e5-373be2462e9f/9ff43aab-c8c2-4f23-91e5-373be2462e9f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9ff43aab-c8c2-4f23-91e5-373be2462e9f/9ff43aab-c8c2-4f23-91e5-373be2462e9f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9ff43aab-c8c2-4f23-91e5-373be2462e9f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:00:b2:6e:2e:ac:2c:47:ba:55:b7:63:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ff43aab-c8c2-4f23-91e5-373be2462e9f
        Validity
            Not Before: Feb 27 14:00:40 2026 GMT
            Not After : May 28 13:00:40 2026 GMT
        Subject: CN=e488aa79-85e3-4476-924f-f890303becf6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:b2:2e:17:8b:ab:08:9a:e4:2c:42:e9:95:11:
                    7f:32:4b:38:95:fe:6b:30:29:b0:90:f6:6b:b0:e9:
                    50:c5:b1:8f:b2:4a:74:86:13:c2:fb:5c:d7:d0:f6:
                    c7:48:e9:3f:57:7c:4e:33:31:52:77:30:23:34:c6:
                    59:7b:37:bb:5f:d6:46:84:20:e3:c2:99:2a:cd:d6:
                    7a:89:9d:ef:f6:96:da:0c:e7:1c:9c:62:09:ac:b5:
                    f6:94:f1:43:d6:30:db:39:1c:03:8c:e6:5c:e8:2f:
                    70:5c:c8:32:ad:2e:27:10:a1:4b:fe:ed:9f:9c:f5:
                    03:29:03:44:85:db:93:49:7b:93:2e:26:17:cd:e0:
                    46:80:88:3d:64:20:eb:72:e9:c1:67:8c:45:71:bb:
                    16:09:70:4b:1a:28:24:8d:7e:1b:ad:45:52:3a:fe:
                    4e:7c:e8:3a:c3:d3:1a:9f:a2:da:eb:0d:e5:eb:59:
                    c7:e5:b3:4b:17:2c:a3:b3:17:65:df:24:91:f5:e6:
                    cc:6b:b8:87:d9:45:74:71:26:95:34:4f:96:90:14:
                    37:3d:16:4d:d3:4c:39:7f:33:70:61:de:28:c8:50:
                    78:a5:4b:a1:06:2a:32:b1:58:6c:e0:8d:73:60:bc:
                    b3:e2:dd:47:cd:f8:16:c3:8f:3e:39:7b:eb:c9:00:
                    ee:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:E8:62:1B:1C:D2:DA:74:15:AA:4C:8A:FC:98:53:D6:6C:DF:1C:85
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9ff43aab-c8c2-4f23-91e5-373be2462e9f/4be56354-f558-3bd5-98d1-2a45b275dad7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9ff43aab-c8c2-4f23-91e5-373be2462e9f/9ff43aab-c8c2-4f23-91e5-373be2462e9f.crl

            X509v3 Authority Key Identifier:
                keyid:56:45:75:A6:DC:99:39:16:88:BC:D3:FE:86:9A:FD:9C:E9:FD:74:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9ff43aab-c8c2-4f23-91e5-373be2462e9f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:e6:c000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:5c:ca:25:3c:3c:5c:bf:6e:19:30:ed:3f:1f:18:99:e8:3c:
         23:62:03:1e:6b:68:4e:f2:f7:d2:b7:29:03:50:31:9b:04:a4:
         fd:4a:c1:5b:e2:1e:f9:7e:76:b4:25:23:3d:e8:fe:77:ee:dc:
         4b:ee:b9:5e:82:b7:e0:17:69:80:33:3b:9f:aa:e8:5c:f0:ca:
         fd:37:c5:7d:23:94:9a:b3:5b:44:35:93:c8:06:14:ae:42:83:
         7a:10:81:82:ea:d9:32:51:46:31:7f:7f:07:18:53:b2:55:46:
         d7:d7:7e:31:07:c3:fd:d1:e1:10:b0:cd:c1:d1:d0:9a:85:47:
         22:1e:d7:74:3d:f3:14:ff:9d:6d:d0:20:12:fe:a9:45:6d:70:
         9b:a8:5c:2e:cc:d3:22:73:d2:0a:06:b3:3f:b2:4a:55:93:01:
         70:74:a9:0d:07:46:73:67:f8:aa:0f:73:13:1b:37:b9:93:d2:
         4e:53:8b:d1:16:6b:3f:3b:82:a6:b1:d0:92:5b:86:5d:8b:b8:
         c5:f1:ad:02:d0:eb:c9:66:b3:10:1c:5e:76:f4:55:35:3d:52:
         d6:0e:bd:25:29:3e:c0:38:1a:a0:cc:94:c0:11:68:32:ec:4e:
         2a:52:b9:92:c5:5b:d0:dc:2c:63:5a:9e:ea:92:a9:df:a0:58:
         7b:dc:d9:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:11:16 2026 by rpki-client