Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1380a44d-7851-4eb6-8887-413917dcdc12/bd8bec6f-1a70-3378-91b5-cb21c5533d5d.roa
File:                     bd8bec6f-1a70-3378-91b5-cb21c5533d5d.roa (raw, json)
Hash identifier:          Ygev+UDWJ8wk1gO/M1xBU6zpVP7H14ffQe6BqRDY8ec=
Subject key identifier:   67:E8:61:87:6D:D7:05:EA:B5:6E:FC:B8:42:BC:E0:17:DD:A6:A0:14
Certificate issuer:       /CN=1380a44d-7851-4eb6-8887-413917dcdc12
Certificate serial:       010D0C9F4328584CED278F6E7876C5D7A2A54940
Authority key identifier: 6C:37:E1:61:68:B4:CF:88:64:11:CB:68:E9:4A:65:72:4A:96:54:93
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1380a44d-7851-4eb6-8887-413917dcdc12.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1380a44d-7851-4eb6-8887-413917dcdc12/bd8bec6f-1a70-3378-91b5-cb21c5533d5d.roa
Signing time:             Fri 20 Feb 2026 14:00:41 +0000
ROA not before:           Fri 20 Feb 2026 14:00:41 +0000
ROA not after:            Thu 21 May 2026 13:00:41 +0000
asID:                     31972
IP address blocks:        2607:8680::/32 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1380a44d-7851-4eb6-8887-413917dcdc12/1380a44d-7851-4eb6-8887-413917dcdc12.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1380a44d-7851-4eb6-8887-413917dcdc12/1380a44d-7851-4eb6-8887-413917dcdc12.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1380a44d-7851-4eb6-8887-413917dcdc12.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ed:27:8f:6e:78:76:c5:d7:a2:a5:49:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1380a44d-7851-4eb6-8887-413917dcdc12
        Validity
            Not Before: Feb 20 14:00:41 2026 GMT
            Not After : May 21 13:00:41 2026 GMT
        Subject: CN=b5b0b147-ff0c-48b5-8ddf-81ff5de326a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:11:62:41:c5:d8:78:36:70:1e:66:f7:98:4c:
                    94:55:bd:c6:52:1f:38:22:0d:d6:25:64:c8:65:ec:
                    17:c1:9c:fb:7a:4c:6c:51:8d:d0:6a:dc:cb:f1:cc:
                    b8:a4:3c:0b:f2:d5:e5:f0:6d:ba:ec:b4:ea:4b:28:
                    a3:e1:79:b8:20:c0:c8:56:e9:3c:80:61:b3:2f:44:
                    7d:6c:21:e5:99:39:67:80:31:63:b0:9a:1f:ba:fb:
                    d5:b0:98:17:13:f7:38:81:06:3a:87:45:77:1c:7c:
                    1d:9a:ba:98:e3:de:63:ff:fb:19:bd:f2:e3:af:49:
                    eb:7a:e5:25:1c:75:c1:ff:1c:5a:8c:9c:a9:c1:68:
                    44:7f:1d:47:de:9d:ce:08:b4:09:13:cd:d8:9d:97:
                    05:2e:4e:b7:01:1f:5f:16:93:08:5b:4d:8c:e5:8d:
                    32:c2:7e:9d:39:2a:e0:9a:48:3d:60:99:53:20:1b:
                    01:10:d4:e2:14:d8:f4:f8:d5:83:b2:12:0d:d3:74:
                    f0:9c:84:aa:91:80:3d:70:a7:5f:79:e6:c2:55:49:
                    9a:da:2a:de:95:92:ac:d7:6a:c2:aa:42:93:e7:c6:
                    aa:70:76:f6:6f:0d:b7:43:27:f7:fb:8c:da:9b:fd:
                    41:8c:45:a4:97:fd:1e:a3:2b:f5:28:de:41:4b:fd:
                    34:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:E8:61:87:6D:D7:05:EA:B5:6E:FC:B8:42:BC:E0:17:DD:A6:A0:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1380a44d-7851-4eb6-8887-413917dcdc12/bd8bec6f-1a70-3378-91b5-cb21c5533d5d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1380a44d-7851-4eb6-8887-413917dcdc12/1380a44d-7851-4eb6-8887-413917dcdc12.crl

            X509v3 Authority Key Identifier:
                keyid:6C:37:E1:61:68:B4:CF:88:64:11:CB:68:E9:4A:65:72:4A:96:54:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1380a44d-7851-4eb6-8887-413917dcdc12.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8680::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:ce:fe:2b:20:12:10:89:0e:61:b5:e4:4d:e5:8a:ca:ab:27:
         fe:c3:a4:f9:0e:f7:b5:45:4d:1c:e8:6e:1f:78:80:0b:9a:6b:
         63:57:38:85:2a:29:4c:67:49:c2:08:49:43:37:5a:d4:dc:1a:
         d5:6b:19:12:6c:e1:e7:04:7f:05:d5:f6:1a:3c:43:1a:9e:48:
         45:b7:79:26:5d:8d:18:61:f1:46:da:de:1b:f8:92:71:e6:c6:
         02:52:52:ec:39:6e:d4:8e:e2:1c:1e:50:ff:6f:9d:42:3c:9f:
         ac:7a:db:98:d4:01:b3:25:bb:8d:78:57:0b:b7:2e:a7:a4:7c:
         af:2d:64:9e:b6:3b:12:e9:0d:9a:ba:31:0b:db:20:2e:ed:01:
         d6:c9:6b:32:4f:d8:b9:48:7c:f2:6f:fa:ba:b6:39:c0:20:e8:
         9c:e9:53:32:6e:9a:a6:ba:2d:29:73:0a:fe:9d:0e:07:19:29:
         99:f7:e3:53:23:81:7d:b7:e2:0c:0b:7d:6e:46:9f:a7:39:18:
         1a:92:4a:a0:e2:40:11:ff:9b:6b:11:b3:b5:b0:22:c6:b6:a2:
         ae:f4:da:d8:1d:4a:80:74:3e:8e:15:80:04:69:08:94:37:22:
         83:e9:d8:97:55:c6:83:8d:43:3b:b3:b7:f6:a3:fc:51:8a:7e:
         aa:33:f1:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:25:13 2026 by rpki-client