Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ec367bb0-a6e0-4769-9e93-e8e9b6a1acb9/1d26456f-490f-38ce-b6a3-88edfc7f5bad.roa
File:                     1d26456f-490f-38ce-b6a3-88edfc7f5bad.roa (raw, json)
Hash identifier:          NCpRsP75KkBqKuMS7lgKDLPpTh0FTijlTck1Ooteolo=
Subject key identifier:   3F:0A:C8:E8:C4:D8:6D:91:37:15:A2:63:45:0B:A1:F6:DB:41:87:1C
Certificate issuer:       /CN=ec367bb0-a6e0-4769-9e93-e8e9b6a1acb9
Certificate serial:       010D0C9F4328584CC3472EC022F4F2F800082A80
Authority key identifier: 89:FB:57:4B:38:7C:D1:A6:73:70:36:7D:2D:E7:E5:A5:2B:B5:69:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ec367bb0-a6e0-4769-9e93-e8e9b6a1acb9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ec367bb0-a6e0-4769-9e93-e8e9b6a1acb9/1d26456f-490f-38ce-b6a3-88edfc7f5bad.roa
Signing time:             Thu 05 Feb 2026 14:00:40 +0000
ROA not before:           Thu 05 Feb 2026 14:00:40 +0000
ROA not after:            Wed 06 May 2026 13:00:40 +0000
asID:                     18636
IP address blocks:        2602:f4f2:f2::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ec367bb0-a6e0-4769-9e93-e8e9b6a1acb9/ec367bb0-a6e0-4769-9e93-e8e9b6a1acb9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ec367bb0-a6e0-4769-9e93-e8e9b6a1acb9/ec367bb0-a6e0-4769-9e93-e8e9b6a1acb9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ec367bb0-a6e0-4769-9e93-e8e9b6a1acb9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:c3:47:2e:c0:22:f4:f2:f8:00:08:2a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec367bb0-a6e0-4769-9e93-e8e9b6a1acb9
        Validity
            Not Before: Feb  5 14:00:40 2026 GMT
            Not After : May  6 13:00:40 2026 GMT
        Subject: CN=30e8ad0d-d281-4ebd-b970-8ef857e99c69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:b9:32:d8:9a:91:82:ff:48:42:4e:b3:f2:a8:
                    89:f5:24:56:30:d6:74:88:c5:62:4e:7d:26:65:f0:
                    75:11:fe:14:ce:ba:b9:b6:f3:9c:bb:0d:86:e3:dc:
                    d8:b9:b6:77:89:45:d8:c0:b0:b4:3c:82:35:44:4d:
                    a5:e9:5c:39:c5:60:d4:ac:d4:7a:6f:79:0d:1c:c9:
                    99:a9:71:ec:cd:79:63:f3:e4:5e:67:8b:c6:e5:86:
                    7c:ca:f5:cd:5d:c5:ff:76:d0:7b:5a:9d:27:70:91:
                    5c:87:24:fa:61:6a:6c:83:05:8e:14:3e:da:7f:ba:
                    9c:01:3b:65:cf:49:c4:49:1a:e0:ff:1d:0e:fb:61:
                    0a:c2:1b:cd:4c:37:4e:b9:2a:0c:73:33:27:eb:6a:
                    06:3a:e0:39:3a:e1:21:c8:6d:95:fd:12:d9:f8:e4:
                    b6:8b:10:67:00:c9:c7:75:62:7b:a9:86:98:2b:65:
                    52:7f:ba:20:07:62:b3:aa:05:61:f9:61:86:1a:d8:
                    55:0a:46:06:f4:8d:46:c2:3d:ce:39:92:f3:1c:29:
                    ce:1e:7d:05:cd:92:13:87:c7:17:05:0f:1a:59:c9:
                    4c:96:2f:f9:33:2a:53:cf:38:4e:d9:ad:2a:25:67:
                    ce:b2:12:87:76:4d:8c:f4:1e:c9:4b:7c:ef:ab:db:
                    da:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:0A:C8:E8:C4:D8:6D:91:37:15:A2:63:45:0B:A1:F6:DB:41:87:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ec367bb0-a6e0-4769-9e93-e8e9b6a1acb9/1d26456f-490f-38ce-b6a3-88edfc7f5bad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ec367bb0-a6e0-4769-9e93-e8e9b6a1acb9/ec367bb0-a6e0-4769-9e93-e8e9b6a1acb9.crl

            X509v3 Authority Key Identifier:
                keyid:89:FB:57:4B:38:7C:D1:A6:73:70:36:7D:2D:E7:E5:A5:2B:B5:69:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ec367bb0-a6e0-4769-9e93-e8e9b6a1acb9.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f4f2:f2::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:4f:b1:01:a1:cc:5e:40:53:29:25:23:f7:e4:76:9d:84:f4:
         06:88:c0:76:6d:c8:b8:df:d4:81:2c:74:ee:18:15:bf:b1:28:
         48:4b:14:8a:0b:b3:57:b5:ed:0b:e1:cf:59:ad:7f:f2:16:69:
         00:76:23:56:8b:d2:3c:3e:9f:07:43:39:06:7c:7c:0c:83:99:
         20:2f:e7:03:aa:d7:8a:e5:b5:cc:be:11:6e:a9:2a:80:36:14:
         c9:be:d3:d8:7f:ee:23:b4:76:b2:f9:d0:71:f6:c4:33:74:fc:
         e0:eb:2a:a9:f0:f3:6f:f5:73:f2:5a:53:84:53:f7:86:0c:4d:
         b4:80:01:b8:73:8a:c3:b9:ea:38:1e:52:07:b9:ea:c5:11:1f:
         a9:b8:d3:a7:8d:a8:6a:cb:ad:ce:25:5d:f7:0c:07:16:04:60:
         e0:83:94:24:06:82:38:6e:5f:41:3f:bb:3c:38:da:e4:6d:71:
         64:c5:e4:13:d0:c9:fd:20:c5:42:73:1a:51:fb:49:48:f6:18:
         9a:9b:8d:48:93:f2:d6:49:db:8e:6a:ff:f5:a6:f0:26:50:77:
         d1:50:f8:26:e3:b5:ca:6e:15:12:6a:f9:5a:44:19:5e:98:16:
         b9:76:b2:27:10:16:88:0e:39:8a:42:48:c5:47:a6:ed:81:53:
         0f:13:71:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:26:37 2026 by rpki-client