Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d/2523a460-454b-387d-8a94-5c40f8f7d030.roa
File:                     2523a460-454b-387d-8a94-5c40f8f7d030.roa (raw, json)
Hash identifier:          RPCc+X7mBLAylLZQKyQIQv7HBHKYd8NtoNFO5hj/gYQ=
Subject key identifier:   61:82:43:68:3C:EB:4A:F8:2A:1F:BB:71:97:EE:55:29:14:62:9A:2A
Certificate issuer:       /CN=3c1b9e2d-457a-403f-9256-27f272ed993d
Certificate serial:       010D0C9F4328584CC34745ECDC6D2B83D6E6C900
Authority key identifier: EE:DF:25:D2:42:4C:99:1F:D5:04:B3:D0:D3:64:9E:B5:B5:6A:72:C3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d/2523a460-454b-387d-8a94-5c40f8f7d030.roa
Signing time:             Thu 05 Feb 2026 14:00:40 +0000
ROA not before:           Thu 05 Feb 2026 14:00:40 +0000
ROA not after:            Wed 06 May 2026 13:00:40 +0000
asID:                     29834
IP address blocks:        2620:1f7:c000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d/3c1b9e2d-457a-403f-9256-27f272ed993d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d/3c1b9e2d-457a-403f-9256-27f272ed993d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:c3:47:45:ec:dc:6d:2b:83:d6:e6:c9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c1b9e2d-457a-403f-9256-27f272ed993d
        Validity
            Not Before: Feb  5 14:00:40 2026 GMT
            Not After : May  6 13:00:40 2026 GMT
        Subject: CN=9df9447e-bacb-441f-87ad-48a433956cab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:b8:75:1a:56:d2:b3:4d:77:69:4e:1a:34:c8:
                    f3:70:b3:8a:14:3f:7c:50:8e:d4:75:16:56:3f:d0:
                    6e:6a:8a:42:3c:ac:50:f9:aa:77:83:d8:56:fb:e2:
                    e3:a4:ac:0e:22:8e:87:58:56:3a:93:06:02:db:cb:
                    48:0d:af:92:07:4a:aa:1e:33:8e:48:ae:c7:af:2b:
                    b7:e2:17:d2:d1:91:67:a0:c4:ae:2e:a0:00:64:aa:
                    f6:b1:eb:f7:ee:e4:b7:cb:5c:cb:b6:be:16:be:55:
                    ab:2a:b0:7c:38:34:f0:86:0e:ab:0e:00:92:fc:5b:
                    f0:63:82:85:b9:83:89:2a:7d:3a:91:85:13:78:83:
                    ad:2f:f0:b3:62:3c:f7:d2:46:0f:f3:63:e0:51:64:
                    27:24:e2:44:42:75:46:d0:be:62:3a:7e:14:9c:02:
                    7a:fb:2c:a8:2b:d9:76:42:71:0c:f1:67:39:ec:ea:
                    9f:f1:a1:dc:a8:8f:ef:e2:6a:19:17:a3:91:21:b6:
                    fe:07:72:11:f8:78:00:cd:7d:68:ea:57:31:12:2d:
                    3a:56:3d:5e:7d:73:dd:99:5b:4a:80:b3:7f:60:bf:
                    c3:21:97:d1:53:de:1c:ba:ae:b2:b6:07:e9:d1:92:
                    36:e0:8a:71:b3:1f:19:12:93:44:ac:5f:c9:45:0c:
                    6b:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:82:43:68:3C:EB:4A:F8:2A:1F:BB:71:97:EE:55:29:14:62:9A:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d/2523a460-454b-387d-8a94-5c40f8f7d030.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d/3c1b9e2d-457a-403f-9256-27f272ed993d.crl

            X509v3 Authority Key Identifier:
                keyid:EE:DF:25:D2:42:4C:99:1F:D5:04:B3:D0:D3:64:9E:B5:B5:6A:72:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:1f7:c000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:63:27:96:85:20:42:ef:f0:de:de:1a:f6:a2:7a:28:03:4a:
         66:f6:ce:83:a3:bc:db:5f:43:27:74:c4:25:3c:ad:c0:a6:01:
         3e:c3:36:dd:54:5f:ed:e4:72:52:9a:5a:3f:8e:2c:c3:4c:b8:
         b4:18:3d:c7:80:b5:7c:e6:7f:33:40:0f:fc:c6:01:5c:f3:4d:
         29:d0:35:f7:93:b8:c1:00:1a:20:6c:9a:60:b0:15:76:67:ae:
         71:0d:f2:b6:19:97:ac:39:75:1f:3c:64:65:50:9d:e1:d2:44:
         cf:ac:8d:1d:90:bd:21:18:04:98:73:ab:21:de:79:36:87:c3:
         67:5f:47:09:d3:29:30:64:04:2c:23:56:39:61:de:04:e5:cf:
         99:5a:8c:0e:b8:e1:02:3b:de:4f:1f:44:c8:10:b9:2b:ae:81:
         a1:25:7e:da:e8:1b:6e:95:ff:fb:80:ac:3e:f9:1d:32:72:c6:
         0c:0a:be:bd:eb:dc:db:75:11:4d:54:65:7a:c4:ce:dc:9e:0f:
         44:bc:c8:ff:1b:4f:d0:5c:1d:b0:a5:b5:b7:59:6c:94:e1:2c:
         3e:de:17:fb:db:ed:dd:9e:d9:b3:e9:09:9c:0c:a7:ab:c7:c2:
         8e:9e:0b:48:3b:c8:6e:db:9d:0a:80:a7:7f:48:cf:8f:be:4d:
         83:3d:e0:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:30:10 2026 by rpki-client