Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d/e0276a2e-9530-3b7e-afb5-6f2b55d27b71.roa
File:                     e0276a2e-9530-3b7e-afb5-6f2b55d27b71.roa (raw, json)
Hash identifier:          8hA7GwGqH+A6Ds/rl9KwNagM/WFheCNsM4+n48mKoq8=
Subject key identifier:   9C:C5:A9:57:EE:0E:39:9B:83:0A:5E:B5:6F:72:25:3E:1D:D5:55:7A
Certificate issuer:       /CN=3c1b9e2d-457a-403f-9256-27f272ed993d
Certificate serial:       010D0C9F4328584CB287302C1465CB13F526DD68
Authority key identifier: EE:DF:25:D2:42:4C:99:1F:D5:04:B3:D0:D3:64:9E:B5:B5:6A:72:C3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d/e0276a2e-9530-3b7e-afb5-6f2b55d27b71.roa
Signing time:             Fri 30 Jan 2026 14:00:40 +0000
ROA not before:           Fri 30 Jan 2026 14:00:40 +0000
ROA not after:            Thu 30 Apr 2026 13:00:40 +0000
asID:                     16509
IP address blocks:        2620:1f7:c020::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d/3c1b9e2d-457a-403f-9256-27f272ed993d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d/3c1b9e2d-457a-403f-9256-27f272ed993d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:b2:87:30:2c:14:65:cb:13:f5:26:dd:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c1b9e2d-457a-403f-9256-27f272ed993d
        Validity
            Not Before: Jan 30 14:00:40 2026 GMT
            Not After : Apr 30 13:00:40 2026 GMT
        Subject: CN=f6827710-2682-4fbe-a48b-db5b7a9d067e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:03:b6:23:f4:12:6a:d0:87:6f:62:d4:01:be:
                    b0:6c:48:be:0c:a9:cb:59:56:a3:4b:d1:2a:5e:54:
                    9b:50:f8:50:b5:9c:a4:18:0a:fa:fa:08:b9:f9:27:
                    99:25:34:ed:72:30:35:48:5a:a2:a5:50:9a:ec:9d:
                    3d:fb:1f:cc:6c:e8:10:b6:fe:7e:1a:c3:72:f3:4c:
                    cc:db:c5:e0:16:03:ad:1c:3b:7b:7a:f6:2f:d2:70:
                    6a:05:cc:7b:28:de:8d:de:0b:8a:ef:2a:1d:17:06:
                    18:4b:9b:b8:85:18:b6:04:a1:de:be:20:14:06:3d:
                    b7:6b:dc:50:29:46:49:b1:42:a1:33:84:a4:b3:2a:
                    d5:0d:f4:98:9a:b9:b9:2c:59:62:79:cb:ab:cd:88:
                    0d:63:04:70:aa:7c:4e:b3:33:dd:47:2c:ac:01:5c:
                    7c:dd:44:ca:94:5e:b7:5c:60:a3:93:26:35:23:77:
                    b6:24:97:20:a6:a5:ce:2d:42:d7:45:e3:24:e9:a0:
                    bb:b7:ad:df:75:f4:cd:9d:d7:bd:a0:51:6f:93:73:
                    c1:d5:43:a9:a9:1b:f5:4d:fe:3b:27:61:bf:5e:1a:
                    f4:90:a8:85:3a:01:12:10:ee:2d:23:ec:82:47:c4:
                    c8:f1:f3:eb:a6:74:3d:67:f1:e8:bf:c9:59:89:8f:
                    56:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:C5:A9:57:EE:0E:39:9B:83:0A:5E:B5:6F:72:25:3E:1D:D5:55:7A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d/e0276a2e-9530-3b7e-afb5-6f2b55d27b71.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d/3c1b9e2d-457a-403f-9256-27f272ed993d.crl

            X509v3 Authority Key Identifier:
                keyid:EE:DF:25:D2:42:4C:99:1F:D5:04:B3:D0:D3:64:9E:B5:B5:6A:72:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:1f7:c020::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:e2:5c:62:a1:50:9b:fb:fb:88:d1:94:6e:e9:3c:50:ac:63:
         4c:ff:ab:b4:b4:da:87:12:26:f2:12:65:5e:9b:17:75:37:a1:
         27:6b:f4:5b:fb:d1:ac:17:d7:aa:1e:c9:cc:0e:82:f1:ef:30:
         f0:9d:46:1b:47:d4:ac:e9:bc:30:b4:8c:9d:b2:de:4e:ae:e2:
         9f:01:9c:2b:ab:da:08:a3:3f:88:00:a5:b8:c7:1e:9b:6b:02:
         66:e5:ce:18:58:71:bd:e0:fb:34:cd:31:f6:17:1c:10:70:ba:
         dc:23:0f:06:b8:35:59:a4:4e:42:28:25:11:a6:f1:6c:a5:a6:
         27:9c:d0:c5:c1:1b:92:fc:6b:31:de:33:55:08:23:ed:a0:5a:
         16:29:a6:68:32:71:0d:05:f7:6d:17:bd:fc:ca:bd:2d:d7:e1:
         b9:e5:92:a3:d6:7e:34:03:16:fc:4d:e6:c9:82:e9:c5:9d:18:
         1e:7e:c1:69:46:e8:0b:71:48:35:5d:16:dd:ba:2e:98:1c:dd:
         33:e4:98:39:7e:45:50:99:d4:d7:76:d6:03:04:de:bc:19:6e:
         54:0c:2e:42:12:ef:d4:d5:60:80:e1:6f:96:08:ea:a7:65:1f:
         73:4e:a0:4f:60:75:a4:8d:4b:e7:7b:6a:53:d1:a8:27:cd:8c:
         00:5f:14:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:14:20 2026 by rpki-client