Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/f4237655-766e-3986-9c84-864ac33e7eed.roa
File:                     f4237655-766e-3986-9c84-864ac33e7eed.roa (raw, json)
Hash identifier:          ftNGIlE4DS0n22zRRVrDImRe0r1Gfa/I6Vjw5UJ7hpo=
Subject key identifier:   60:03:31:16:3B:2E:DB:CA:87:B5:40:FB:34:D8:C4:4C:A4:8A:25:62
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584CD99CAB2A27EBC20D90544500
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/f4237655-766e-3986-9c84-864ac33e7eed.roa
Signing time:             Fri 13 Feb 2026 14:00:41 +0000
ROA not before:           Fri 13 Feb 2026 14:00:41 +0000
ROA not after:            Thu 14 May 2026 13:00:41 +0000
asID:                     22516
IP address blocks:        2603:9008::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:d9:9c:ab:2a:27:eb:c2:0d:90:54:45:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Feb 13 14:00:41 2026 GMT
            Not After : May 14 13:00:41 2026 GMT
        Subject: CN=0c42cd49-f6c3-4b3b-ac73-98917ac911c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:63:dd:72:96:5e:ec:86:f1:ac:22:79:de:63:
                    90:76:70:e0:35:82:25:67:5e:7b:49:e4:1a:22:06:
                    d4:08:db:20:c5:72:97:7e:77:ee:de:20:b0:44:26:
                    a9:b2:63:02:d9:7b:ae:48:f0:c0:20:17:c6:ce:76:
                    15:e7:88:07:f2:7c:6b:a9:c8:62:92:85:f5:6d:f6:
                    db:9d:0e:4d:ed:b4:7c:78:01:22:9e:52:37:4a:12:
                    e0:6f:87:4d:b2:3b:b4:0a:bc:a6:9c:d4:7a:bd:7d:
                    1b:a1:84:24:0c:2a:06:e3:50:57:b4:c9:64:da:09:
                    83:2b:05:8d:e6:ed:bf:41:a6:94:d0:84:b4:07:ed:
                    17:7f:cb:dd:d0:be:e9:43:a8:ce:9c:74:c0:64:3e:
                    32:52:32:0a:06:f2:96:63:f7:b8:49:b5:9d:d7:f1:
                    43:4f:70:6a:34:cc:84:1b:35:1d:c5:ae:be:d2:72:
                    5e:04:42:a2:f9:4c:97:a8:7d:2f:7b:69:13:ce:c9:
                    ba:77:cb:21:89:86:39:8f:6e:dc:a3:e6:f4:9e:a4:
                    50:6e:ae:26:d0:eb:78:c9:cb:96:93:d5:12:43:cf:
                    6a:3b:e9:1b:55:84:d0:79:cf:76:64:8c:90:40:66:
                    fa:6f:b2:92:80:a9:75:7d:35:d8:2c:93:43:cc:9a:
                    a6:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:03:31:16:3B:2E:DB:CA:87:B5:40:FB:34:D8:C4:4C:A4:8A:25:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/f4237655-766e-3986-9c84-864ac33e7eed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:9008::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:e0:cc:a7:fb:0e:e9:29:30:ed:75:5e:80:8f:b3:60:33:6c:
         00:20:f8:b7:f8:85:e1:1a:5e:89:91:0c:dc:14:66:b4:19:d9:
         92:78:41:54:75:0f:03:fb:50:81:6c:d7:e3:b6:61:0f:a6:73:
         38:bb:df:cb:c3:51:9e:f3:18:c9:98:3a:73:2b:a7:d2:4a:3b:
         8d:e0:a2:98:db:7c:c7:0d:85:a6:41:e2:f6:b8:46:fd:f5:f3:
         c4:9c:ae:88:36:6b:6c:75:7b:e3:39:2b:de:da:fc:54:ca:79:
         1a:6a:c9:c3:aa:64:68:b5:a1:a5:10:19:66:6b:be:7d:62:d7:
         e7:1a:ac:d7:d0:bd:1f:4b:42:5a:c5:5c:2d:b9:bd:bd:96:71:
         9b:35:41:0d:1b:b2:46:30:93:43:5d:68:4c:f6:41:2e:06:9a:
         15:d3:99:90:d9:5d:ac:cc:73:29:57:67:08:2f:cd:b3:6c:3b:
         2e:3b:72:21:11:59:43:d9:25:c6:f8:b2:65:cc:c8:a6:a6:38:
         01:65:48:58:d4:51:d5:47:ba:11:4f:1f:ef:7c:16:a2:c2:cd:
         ca:56:06:13:20:37:14:c8:a0:d1:ae:38:dd:11:08:b3:f2:0a:
         b9:85:8b:73:33:24:2e:07:69:f2:5d:77:50:3e:04:2f:84:a5:
         11:44:71:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:31:15 2026 by rpki-client