Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ec367bb0-a6e0-4769-9e93-e8e9b6a1acb9/c41322cf-4806-3f46-be1c-aac686341802.roa
File:                     c41322cf-4806-3f46-be1c-aac686341802.roa (raw, json)
Hash identifier:          uBlIWVyPkqC9QC0XE7GZlcjAn/AGjAPX0ofPKK5US30=
Subject key identifier:   BE:01:60:A5:47:1F:2E:6C:51:05:CD:A1:9F:0E:C2:E7:1C:53:C9:7F
Certificate issuer:       /CN=ec367bb0-a6e0-4769-9e93-e8e9b6a1acb9
Certificate serial:       010D0C9F4328584CC07C7F0F5655E92A783E48A0
Authority key identifier: 89:FB:57:4B:38:7C:D1:A6:73:70:36:7D:2D:E7:E5:A5:2B:B5:69:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ec367bb0-a6e0-4769-9e93-e8e9b6a1acb9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ec367bb0-a6e0-4769-9e93-e8e9b6a1acb9/c41322cf-4806-3f46-be1c-aac686341802.roa
Signing time:             Wed 04 Feb 2026 14:00:39 +0000
ROA not before:           Wed 04 Feb 2026 14:00:39 +0000
ROA not after:            Tue 05 May 2026 13:00:39 +0000
asID:                     18636
IP address blocks:        2602:f4f2:f1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ec367bb0-a6e0-4769-9e93-e8e9b6a1acb9/ec367bb0-a6e0-4769-9e93-e8e9b6a1acb9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ec367bb0-a6e0-4769-9e93-e8e9b6a1acb9/ec367bb0-a6e0-4769-9e93-e8e9b6a1acb9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ec367bb0-a6e0-4769-9e93-e8e9b6a1acb9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:c0:7c:7f:0f:56:55:e9:2a:78:3e:48:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec367bb0-a6e0-4769-9e93-e8e9b6a1acb9
        Validity
            Not Before: Feb  4 14:00:39 2026 GMT
            Not After : May  5 13:00:39 2026 GMT
        Subject: CN=2ebb2d7c-fce5-4a7d-8558-d895bf849ccb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:66:a7:bd:da:fc:82:9f:13:56:4f:95:df:82:
                    06:99:e6:3c:eb:eb:19:fd:14:b7:a1:d4:77:c2:ff:
                    b6:18:41:7d:dd:d5:5e:19:79:3d:2b:a8:f1:a8:fc:
                    ed:25:2b:5c:08:fa:36:e9:75:be:e3:fb:08:c1:73:
                    3c:28:cf:bf:b0:81:2b:cd:86:21:24:4e:de:83:27:
                    45:4e:4c:21:5c:09:d1:3b:67:86:1a:bf:84:d3:39:
                    d0:c7:9d:9a:44:2e:f1:49:42:c7:9f:b7:a5:00:0f:
                    fe:6c:f4:49:f1:d6:48:bf:c8:7a:1b:fd:2b:f6:99:
                    a1:c3:a7:64:6c:54:e0:69:35:6d:05:dd:c3:23:73:
                    44:89:a3:12:e2:c8:1a:50:e1:8f:4c:f5:0b:60:ce:
                    e2:14:cb:fc:b5:c9:b1:15:fe:9a:71:8a:4a:c9:28:
                    29:78:f2:a0:ed:1c:69:95:0f:71:5e:e9:cf:7d:1b:
                    e1:10:1e:fb:2d:6c:2d:0c:02:8a:76:6e:d6:05:c6:
                    81:64:77:46:5b:fb:f5:aa:ff:39:d9:5c:6d:5f:9a:
                    82:b9:56:4e:fb:09:46:17:6c:2f:d7:71:5c:cc:0d:
                    c5:a1:11:d6:90:86:ee:b7:fb:71:55:c8:87:08:69:
                    59:57:81:d4:b0:be:da:15:9c:0b:3d:2c:c2:97:c7:
                    27:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:01:60:A5:47:1F:2E:6C:51:05:CD:A1:9F:0E:C2:E7:1C:53:C9:7F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ec367bb0-a6e0-4769-9e93-e8e9b6a1acb9/c41322cf-4806-3f46-be1c-aac686341802.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ec367bb0-a6e0-4769-9e93-e8e9b6a1acb9/ec367bb0-a6e0-4769-9e93-e8e9b6a1acb9.crl

            X509v3 Authority Key Identifier:
                keyid:89:FB:57:4B:38:7C:D1:A6:73:70:36:7D:2D:E7:E5:A5:2B:B5:69:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ec367bb0-a6e0-4769-9e93-e8e9b6a1acb9.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f4f2:f1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:47:a0:fc:4b:44:c9:f9:6f:78:b9:fb:db:fb:cf:82:84:f3:
         e5:9e:74:f3:fa:7a:e7:9f:6a:57:ca:d3:aa:d0:bb:a2:b1:3b:
         6e:b2:21:79:35:7b:d6:4f:9b:ff:0f:bf:30:9f:60:30:fe:20:
         f7:6e:2b:3d:d5:00:e4:10:be:c4:ab:eb:4f:08:78:81:e9:b2:
         9d:29:5d:15:a0:a3:38:b8:c9:7d:ef:4f:13:a0:56:ad:95:ba:
         31:8c:4c:52:19:36:b6:d0:d9:2b:e0:b7:06:1c:96:72:2a:3a:
         2f:5a:2d:eb:2d:c6:0e:92:0e:4e:da:49:56:16:91:65:bf:f3:
         d6:7f:88:e3:a1:49:5d:67:9c:05:54:58:11:03:13:17:0f:5c:
         5a:c9:b5:d7:61:cd:28:90:75:e1:34:0e:bd:7c:c8:bd:af:9a:
         d5:6c:2b:dc:e7:93:1e:a1:bb:99:8f:74:0e:27:c7:69:99:a9:
         23:b4:7d:e3:3e:93:3f:a7:1b:9b:be:98:42:52:9c:22:e3:8d:
         85:76:f9:cb:60:1e:54:f8:6c:6e:b9:b8:59:01:a9:19:97:32:
         9f:e1:32:ed:e7:42:5a:77:75:4a:9b:fa:1c:25:14:76:78:1b:
         2b:fe:ea:8a:92:d6:9c:7b:61:4e:33:2c:9c:9f:a4:7b:d1:ef:
         63:0b:71:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:28:59 2026 by rpki-client