Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/e90b9eb1-f57d-3856-a9d3-fe485da65673.roa
File:                     e90b9eb1-f57d-3856-a9d3-fe485da65673.roa (raw, json)
Hash identifier:          xAOdvLEFpN3dhca9KLIFnCwNeeJbmrEpFUsGO6g8utQ=
Subject key identifier:   7B:93:B7:03:12:D8:8A:AE:3C:EC:A8:30:E2:26:3F:97:7F:94:D5:79
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584CD99CF0A4740F76621EEF0040
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/e90b9eb1-f57d-3856-a9d3-fe485da65673.roa
Signing time:             Fri 13 Feb 2026 14:00:41 +0000
ROA not before:           Fri 13 Feb 2026 14:00:41 +0000
ROA not after:            Thu 14 May 2026 13:00:41 +0000
asID:                     22516
IP address blocks:        2605:a408:a2::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:d9:9c:f0:a4:74:0f:76:62:1e:ef:00:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Feb 13 14:00:41 2026 GMT
            Not After : May 14 13:00:41 2026 GMT
        Subject: CN=b8213ea4-7868-43ba-9372-e35247e36421
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:11:4f:32:8d:77:f5:f4:4f:27:59:90:9f:20:
                    41:8b:eb:ae:dd:f1:74:0f:35:4f:97:9a:5a:a1:d4:
                    7e:f1:60:a2:5b:84:c4:65:f9:59:50:5b:18:76:cd:
                    73:10:12:86:67:a2:54:3b:93:83:7e:5a:38:d7:4d:
                    40:e2:e7:ef:d4:a4:90:c8:de:20:76:f1:58:04:7e:
                    7f:31:1d:e8:91:54:d0:e4:1c:70:52:fe:22:ec:c5:
                    b5:3b:0e:4c:53:85:4f:af:fd:85:22:e7:51:28:77:
                    65:f6:01:b2:2f:ab:02:d9:c3:49:15:a3:e8:19:46:
                    e9:75:f0:19:9e:37:c9:54:fc:d2:89:65:fa:75:a3:
                    07:77:d0:13:a5:7c:05:a0:bf:39:31:87:39:cf:e9:
                    29:18:d8:4f:54:a2:45:43:31:a8:bb:55:7c:22:d9:
                    5a:24:ae:41:86:ab:47:6e:0c:4e:1f:fc:42:05:f3:
                    57:4d:ac:4f:b0:f1:05:f8:b2:d0:af:b8:89:f9:91:
                    02:40:54:9b:46:0c:2c:63:53:a1:85:f4:8b:67:d9:
                    52:5d:d6:57:b7:82:3b:04:49:58:b2:a4:c7:c9:82:
                    e8:c1:74:70:c6:ea:fa:07:65:4e:24:7e:99:ab:5a:
                    a8:90:24:a9:b3:74:7d:97:a3:bd:85:17:46:24:7e:
                    d7:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:93:B7:03:12:D8:8A:AE:3C:EC:A8:30:E2:26:3F:97:7F:94:D5:79
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/e90b9eb1-f57d-3856-a9d3-fe485da65673.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a408:a2::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:6a:65:20:30:23:d0:b6:2b:00:78:1b:45:c5:12:df:03:96:
         33:cb:69:ab:40:9f:1e:b2:33:7d:34:b0:08:93:c0:da:61:55:
         65:58:45:a1:68:41:f3:ab:d5:90:ca:bd:48:5b:c3:4e:ce:e1:
         de:ca:6f:54:03:ba:32:36:2a:2d:7c:67:3c:62:a3:84:07:19:
         8e:46:c6:19:2c:bd:1e:04:9e:7b:0d:f3:e0:d3:5c:e7:f4:3b:
         eb:a7:cd:07:43:be:c4:df:ed:c3:79:44:e0:44:97:92:7e:74:
         04:ff:74:7e:13:c2:bb:5b:a1:2c:4f:59:df:75:2e:fd:d0:45:
         e6:ff:e8:60:02:09:03:dd:47:05:5c:af:4a:73:31:16:2d:3e:
         27:a7:03:28:9e:97:1c:1a:a2:dd:c6:8a:6d:f6:6f:75:bf:6e:
         8f:15:e2:38:f7:d8:69:31:b8:a8:0f:0a:f3:ef:11:56:3b:61:
         5a:19:37:d6:9c:07:f0:7a:fd:3d:99:06:ad:1e:a7:8a:1e:e2:
         89:5f:47:80:88:aa:84:fb:68:87:f1:df:71:74:b1:b6:fb:c9:
         cf:da:73:31:75:2f:a7:e2:7b:fc:3f:2d:44:2f:09:97:ba:92:
         b7:f9:92:f6:58:29:a3:c8:8a:8b:58:a6:75:ef:79:d8:47:61:
         52:5b:3a:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:12:08 2026 by rpki-client