Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/07148156-bb61-3692-9745-eb1af2cb4215.roa
File:                     07148156-bb61-3692-9745-eb1af2cb4215.roa (raw, json)
Hash identifier:          Roco710m0LydJR7pG8fj0DXchWwXpUVcgrRqi16TI+Q=
Subject key identifier:   B1:C5:95:96:FB:BE:FC:39:B1:74:62:44:80:B7:AA:C1:B9:7B:38:09
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584D00B2798B079A9555BB32D180
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/07148156-bb61-3692-9745-eb1af2cb4215.roa
Signing time:             Fri 27 Feb 2026 14:00:40 +0000
ROA not before:           Fri 27 Feb 2026 14:00:40 +0000
ROA not after:            Thu 28 May 2026 13:00:40 +0000
asID:                     11955
IP address blocks:        2603:9014::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:00:b2:79:8b:07:9a:95:55:bb:32:d1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Feb 27 14:00:40 2026 GMT
            Not After : May 28 13:00:40 2026 GMT
        Subject: CN=d15aa061-74dd-4dae-9b1e-0f5ec04bbbe1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:70:87:2c:66:64:f5:a1:dd:b7:8d:9f:bf:24:
                    a2:64:cf:a1:c2:73:7e:32:c2:62:ee:9c:36:09:96:
                    a2:87:58:00:13:ad:42:1b:bb:10:a8:bf:92:5f:a0:
                    48:72:d7:c0:15:61:65:fb:4e:b7:97:89:52:d9:77:
                    6e:81:2d:81:99:65:bd:26:c8:8f:49:c4:74:26:7a:
                    52:22:fc:72:e8:1d:02:4b:ed:73:0e:33:5e:54:0b:
                    69:b8:d7:0e:b1:ce:20:1c:27:19:60:bf:b6:28:76:
                    fe:32:20:ba:1e:cc:d9:e4:b0:e8:8b:1c:4d:39:33:
                    88:81:fd:11:72:3e:85:67:63:56:0f:fc:9b:6d:74:
                    ea:fb:cb:ec:94:02:c6:71:ae:f9:af:3e:94:ac:31:
                    ee:f6:c2:3f:2b:3b:bd:bd:94:35:c8:1a:d4:02:d0:
                    48:cc:2b:09:f4:7e:2d:55:36:25:a1:f9:0e:ef:f5:
                    b5:9f:f5:27:4a:39:d2:26:21:e9:5a:c5:1a:77:57:
                    11:e9:c5:db:b9:1e:81:99:88:d1:c2:9d:69:b4:ab:
                    38:6d:c3:03:96:f5:c1:2f:99:7e:2c:d4:6a:44:5d:
                    5c:f2:d2:18:23:fe:ac:ee:a2:33:77:f8:7e:8a:3a:
                    38:56:df:be:d0:61:c4:be:dd:ff:43:94:0d:24:11:
                    5d:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:C5:95:96:FB:BE:FC:39:B1:74:62:44:80:B7:AA:C1:B9:7B:38:09
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/07148156-bb61-3692-9745-eb1af2cb4215.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:9014::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:14:30:7e:24:39:88:a0:c1:b5:29:22:92:22:73:4d:70:6e:
         7a:e8:8e:b4:be:9a:c9:a6:1e:1e:fe:e0:34:f8:fa:74:ab:9f:
         9b:9b:d1:e1:18:86:24:da:8e:ee:5a:59:d4:85:48:4a:a0:fe:
         e1:29:7c:6b:26:6e:42:9e:ac:c9:5b:2d:43:a2:6e:e8:f6:fb:
         69:a5:3d:3c:79:8d:24:95:3c:73:b0:58:22:b1:88:a6:b2:45:
         ea:2d:1e:54:d8:2d:22:ec:f2:0e:3f:fa:3b:a7:bd:41:94:16:
         9f:7b:cb:f6:2a:35:fb:cb:87:1d:9b:b5:81:3a:83:7b:f0:3b:
         a7:46:7d:7e:d4:13:7d:1b:3e:29:7a:af:40:a2:10:1c:11:2f:
         76:92:ce:f4:73:99:ba:c5:e1:9a:fb:f5:4b:dc:ac:6a:36:07:
         a0:83:5f:cf:2f:65:76:a5:22:c4:f1:91:6b:12:8a:a5:e2:fe:
         83:b1:f4:56:8a:a5:32:e4:9a:b8:eb:48:a1:98:ed:ce:68:31:
         2b:6b:50:3a:db:26:4e:69:4a:83:96:6b:30:b2:81:7c:d3:c6:
         9c:76:7a:bb:27:32:31:ed:7a:18:25:94:63:bb:20:19:10:cb:
         c4:e0:cd:94:41:38:8e:c0:bd:ea:59:bd:c2:eb:c4:d1:b0:b0:
         34:9a:80:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:25:39 2026 by rpki-client