Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d9d41cd5-6bda-4d2b-aff4-b89893aa1531/354f8722-5971-39a2-98d9-1365e96b2ead.roa
File:                     354f8722-5971-39a2-98d9-1365e96b2ead.roa (raw, json)
Hash identifier:          XymcdYTsSW4PB4gvjG4SKD+ZLCGNpvPD96lVPBuxurI=
Subject key identifier:   D9:C6:84:2E:4A:D4:28:DD:12:CC:7D:BA:D3:9B:A5:40:14:60:F4:A2
Certificate issuer:       /CN=d9d41cd5-6bda-4d2b-aff4-b89893aa1531
Certificate serial:       010D0C9F4328584CE1FCC12E84E2B64FC2E05E80
Authority key identifier: 84:75:FD:0B:B1:EC:65:B3:FC:1D:85:04:A8:6C:38:DC:C4:CD:AD:45
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d9d41cd5-6bda-4d2b-aff4-b89893aa1531.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d9d41cd5-6bda-4d2b-aff4-b89893aa1531/354f8722-5971-39a2-98d9-1365e96b2ead.roa
Signing time:             Mon 16 Feb 2026 14:00:40 +0000
ROA not before:           Mon 16 Feb 2026 14:00:40 +0000
ROA not after:            Sun 17 May 2026 13:00:40 +0000
asID:                     14618
IP address blocks:        2602:fd12::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d9d41cd5-6bda-4d2b-aff4-b89893aa1531/d9d41cd5-6bda-4d2b-aff4-b89893aa1531.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d9d41cd5-6bda-4d2b-aff4-b89893aa1531/d9d41cd5-6bda-4d2b-aff4-b89893aa1531.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d9d41cd5-6bda-4d2b-aff4-b89893aa1531.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:e1:fc:c1:2e:84:e2:b6:4f:c2:e0:5e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9d41cd5-6bda-4d2b-aff4-b89893aa1531
        Validity
            Not Before: Feb 16 14:00:40 2026 GMT
            Not After : May 17 13:00:40 2026 GMT
        Subject: CN=5fbd5a8e-c075-46a1-ac19-9ef511977112
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:c7:b0:75:bf:9a:72:a9:e7:af:b4:4d:40:11:
                    29:ca:0d:e7:de:74:1e:7e:73:ce:65:c7:48:36:66:
                    7a:0b:95:2f:09:6f:b5:e3:f9:55:00:52:51:a1:6b:
                    54:95:84:7b:e4:c0:b9:52:49:43:57:63:48:4e:4a:
                    f4:90:99:82:e7:5c:f9:70:a3:88:de:44:ea:bb:fd:
                    14:b6:0c:b2:b5:cb:83:82:c2:b9:ad:2a:6b:d3:9d:
                    2c:67:d3:57:f4:b0:eb:e0:03:f8:17:9d:cd:12:13:
                    d6:78:8e:83:00:0e:0a:72:aa:9c:4b:c2:2d:1a:89:
                    cb:58:b9:cc:03:31:ca:b3:bd:bb:f7:97:96:bc:02:
                    a5:e7:42:18:88:55:7c:48:f3:64:7d:76:6d:7f:32:
                    26:60:de:e3:2a:14:f0:7b:7a:7e:5d:38:02:28:2f:
                    71:da:a9:50:0e:92:05:d4:01:7a:bc:ac:53:4b:d2:
                    cb:88:87:8c:bc:18:df:37:81:2c:c1:7f:3e:fc:18:
                    96:35:ae:d2:2b:e2:86:1b:8b:67:f4:cc:ae:8d:68:
                    37:44:3c:4d:bb:63:2e:8d:7a:34:83:4f:17:7a:bd:
                    dc:51:aa:10:1e:f8:cf:07:34:f5:3d:7a:e3:f2:66:
                    a1:df:70:76:09:3b:5f:23:a9:99:12:0c:0d:c9:4b:
                    23:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:C6:84:2E:4A:D4:28:DD:12:CC:7D:BA:D3:9B:A5:40:14:60:F4:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d9d41cd5-6bda-4d2b-aff4-b89893aa1531/354f8722-5971-39a2-98d9-1365e96b2ead.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d9d41cd5-6bda-4d2b-aff4-b89893aa1531/d9d41cd5-6bda-4d2b-aff4-b89893aa1531.crl

            X509v3 Authority Key Identifier:
                keyid:84:75:FD:0B:B1:EC:65:B3:FC:1D:85:04:A8:6C:38:DC:C4:CD:AD:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d9d41cd5-6bda-4d2b-aff4-b89893aa1531.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fd12::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:b7:32:e3:4b:c2:51:70:7f:3c:2b:18:cd:d5:32:fa:cb:31:
         99:5b:3e:6d:fb:37:23:d8:be:26:df:53:ae:9a:6d:a7:4f:f1:
         2c:61:a6:5f:f0:81:62:4e:23:05:0d:50:b5:70:b4:82:04:b4:
         07:59:2a:79:26:bd:2e:e8:b0:5d:0d:72:49:1d:db:ba:74:6b:
         96:5c:7e:0d:2e:eb:6e:1b:2f:a4:b7:7a:31:a1:12:f5:d0:93:
         04:4d:eb:62:b1:a0:71:dc:c5:25:a2:e0:2b:b8:9b:25:4d:fb:
         2c:a4:ce:4e:25:58:09:fa:30:f9:8f:8e:f5:a7:52:01:02:55:
         df:a2:d6:60:b0:7e:f1:c4:df:d2:2f:4b:db:0d:a9:0e:b6:af:
         90:db:0c:ad:56:f4:0f:81:ad:41:1a:3a:55:a5:89:77:4c:6e:
         8b:ea:b4:26:f1:f4:8f:ea:cd:61:b3:c1:1a:8e:c6:36:65:2e:
         2f:11:0e:fa:47:74:81:88:ed:5a:b4:7d:b6:4e:d8:3a:35:cf:
         12:f9:ec:bc:92:71:65:19:e7:a2:44:af:38:0b:09:c1:42:4a:
         19:3a:fe:04:7e:f1:fa:90:e7:44:25:ac:6e:ab:c7:13:53:66:
         e7:14:46:f5:fe:e6:93:3b:c6:30:40:e3:4e:29:2c:e9:f4:98:
         8e:b1:de:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:17:16 2026 by rpki-client