Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/068fe099-ec29-42a6-8cc8-92597523d41f/205510ec-fe65-33cc-a2dc-11dde1186393.roa
File:                     205510ec-fe65-33cc-a2dc-11dde1186393.roa (raw, json)
Hash identifier:          U8pa1gjrjgj6akQ0HQTQP58WnSD96RvYRs7FNjGxAFY=
Subject key identifier:   60:06:77:81:DF:95:CE:FF:E8:96:E1:E7:9B:B6:B6:EA:EB:83:F8:A4
Certificate issuer:       /CN=068fe099-ec29-42a6-8cc8-92597523d41f
Certificate serial:       010D0C9F4328584CD13CB6277F270D8002BFFE80
Authority key identifier: 9D:FC:DC:61:99:3A:69:27:BD:44:35:85:72:72:08:04:68:94:A2:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/068fe099-ec29-42a6-8cc8-92597523d41f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/068fe099-ec29-42a6-8cc8-92597523d41f/205510ec-fe65-33cc-a2dc-11dde1186393.roa
Signing time:             Tue 10 Feb 2026 14:00:41 +0000
ROA not before:           Tue 10 Feb 2026 14:00:41 +0000
ROA not after:            Mon 11 May 2026 13:00:41 +0000
asID:                     33263
IP address blocks:        2602:f9d8::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/068fe099-ec29-42a6-8cc8-92597523d41f/068fe099-ec29-42a6-8cc8-92597523d41f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/068fe099-ec29-42a6-8cc8-92597523d41f/068fe099-ec29-42a6-8cc8-92597523d41f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/068fe099-ec29-42a6-8cc8-92597523d41f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:d1:3c:b6:27:7f:27:0d:80:02:bf:fe:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=068fe099-ec29-42a6-8cc8-92597523d41f
        Validity
            Not Before: Feb 10 14:00:41 2026 GMT
            Not After : May 11 13:00:41 2026 GMT
        Subject: CN=5820ee5e-942f-4fc1-91c4-4211044a2664
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:93:0e:df:e1:78:02:84:c6:f5:e8:60:2a:d8:
                    b0:dc:cd:ee:bc:fb:d2:5b:20:15:07:1c:6a:79:d8:
                    1d:08:ca:f5:8a:dc:12:f2:25:8a:aa:20:07:fe:9c:
                    c0:fd:bf:b9:d8:8c:13:63:8c:61:e5:49:6b:31:7b:
                    02:2c:f3:08:f1:7a:08:f3:c3:99:69:e5:26:bf:d3:
                    6b:1d:d3:30:e4:2b:a6:b1:71:2a:f5:d5:09:9e:b9:
                    bb:e6:09:0f:98:72:ef:82:23:3b:bc:e9:c1:fe:bb:
                    0c:5f:f0:ee:4a:bc:29:d1:9f:f3:43:c3:68:2a:2f:
                    2d:ed:2a:6c:7a:d7:96:1a:b4:12:cb:4d:65:6a:c5:
                    c1:a1:95:8f:08:d4:85:32:97:64:26:52:09:07:6f:
                    2b:4c:40:5a:2a:7c:a4:3d:fa:7e:40:22:4a:2c:b6:
                    13:40:5f:c5:bb:29:49:b6:70:6b:7a:2c:39:3a:80:
                    36:6e:55:6b:04:df:e7:92:e5:be:73:af:49:40:71:
                    e5:12:17:b6:77:d0:0f:02:ce:96:9d:d8:10:4b:c8:
                    d7:16:be:d2:dc:32:41:2d:0e:5a:68:0d:0c:4a:dc:
                    6c:f8:14:02:80:91:4e:78:29:af:12:39:7f:8d:33:
                    87:f2:63:9b:5a:6d:78:f6:01:f9:08:06:0b:da:92:
                    43:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:06:77:81:DF:95:CE:FF:E8:96:E1:E7:9B:B6:B6:EA:EB:83:F8:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/068fe099-ec29-42a6-8cc8-92597523d41f/205510ec-fe65-33cc-a2dc-11dde1186393.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/068fe099-ec29-42a6-8cc8-92597523d41f/068fe099-ec29-42a6-8cc8-92597523d41f.crl

            X509v3 Authority Key Identifier:
                keyid:9D:FC:DC:61:99:3A:69:27:BD:44:35:85:72:72:08:04:68:94:A2:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/068fe099-ec29-42a6-8cc8-92597523d41f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f9d8::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:7a:3b:80:d3:85:a2:28:df:4a:ad:c1:c2:e2:9e:80:d8:77:
         8a:c2:c5:0b:42:39:5c:ed:c1:28:a1:2f:16:83:f6:01:b9:9c:
         2c:eb:94:78:f2:c7:7b:6f:cb:c7:0b:44:13:ee:79:ec:f2:51:
         a1:7d:44:98:01:55:fd:98:28:53:1b:27:e3:f0:08:a9:ab:d3:
         64:1a:a1:54:f2:99:99:bf:18:b0:51:43:3c:31:e9:f0:a5:dd:
         ae:88:4b:26:e6:a2:58:4f:27:f9:d2:b7:63:57:29:e3:fe:11:
         4a:56:d5:a7:e9:1e:64:98:ef:bb:d8:a2:c8:4e:81:a9:9a:9c:
         03:e8:b4:80:ff:8e:60:9b:05:11:b1:9c:ec:86:b1:ce:59:86:
         30:ee:9c:c3:99:ee:fe:04:b6:2c:5a:f1:c2:7a:75:b0:02:db:
         e0:a3:70:55:98:2f:3d:1f:c1:fa:14:36:a1:c9:e3:d3:06:a6:
         21:61:16:bb:51:ea:ee:94:59:05:24:3e:27:b8:07:42:05:bf:
         be:3a:13:86:e4:3d:d5:de:ea:92:79:4a:b5:60:29:4b:c2:9d:
         6d:9f:8b:3c:82:53:64:00:25:31:b1:8d:ba:67:91:0b:cd:b7:
         9f:29:29:6e:60:bf:97:9d:e2:56:f5:ec:fd:31:52:61:47:54:
         38:0e:26:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:12:56 2026 by rpki-client