Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/bc625f3a-cc44-3788-8476-8cd61831751c.roa
File:                     bc625f3a-cc44-3788-8476-8cd61831751c.roa (raw, json)
Hash identifier:          v4nZfTOEQvC2dKKzRjAiFztZwJUIQvKWNrohr4Auor4=
Subject key identifier:   48:36:B3:D0:D5:DA:34:B1:E4:3F:0D:11:F5:BE:C7:38:28:4A:B1:F1
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584D00DB2A613016BDEB2DC8F200
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/bc625f3a-cc44-3788-8476-8cd61831751c.roa
Signing time:             Fri 27 Feb 2026 15:23:10 +0000
ROA not before:           Fri 27 Feb 2026 15:23:10 +0000
ROA not after:            Thu 28 May 2026 14:23:10 +0000
asID:                     19750
IP address blocks:        2001:550:1209::/48 maxlen: 48
                          2001:550:120a::/48 maxlen: 48
                          2001:550:2705::/48 maxlen: 48
                          2001:550:2706::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:00:db:2a:61:30:16:bd:eb:2d:c8:f2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Feb 27 15:23:10 2026 GMT
            Not After : May 28 14:23:10 2026 GMT
        Subject: CN=e52493db-32c1-4f93-8967-6e6131e9332f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:b2:fb:95:ae:4c:55:ac:8e:b1:e5:7c:a9:4d:
                    ff:41:2f:6d:9f:d2:27:17:db:15:82:7f:7c:93:dc:
                    9a:10:67:a4:4b:59:2d:ec:e4:48:e5:07:34:03:aa:
                    70:53:72:32:44:26:e9:32:f2:88:cc:1d:52:0e:d3:
                    0e:e8:15:e4:1f:9c:17:7e:1e:c9:5d:79:77:af:e4:
                    7a:31:2d:b8:65:88:8e:85:31:9f:cb:41:7c:af:29:
                    06:04:dd:d1:03:65:da:f4:41:c8:c9:60:9e:96:6c:
                    9b:5a:3d:0a:a4:3b:8d:2f:ca:76:89:d7:42:01:f6:
                    ef:04:52:15:f7:b5:51:dc:bf:f5:3c:c7:c0:54:52:
                    79:9f:e9:4a:a5:24:7c:94:a2:fc:8d:e7:97:0c:cd:
                    4b:9f:b2:ae:97:a1:bc:12:84:b0:82:58:3c:f5:7e:
                    a0:14:06:42:99:eb:7b:1f:21:59:65:c8:2f:d0:c4:
                    6b:39:ab:a7:06:8a:22:aa:85:63:bf:61:47:ee:99:
                    63:ff:d3:08:32:79:c5:22:1b:6b:68:4c:24:62:74:
                    d1:cf:1a:bf:89:28:4d:17:3f:35:86:b8:ff:c9:29:
                    fd:66:94:c2:0d:27:b5:91:0d:0d:69:68:6b:61:dc:
                    4a:4b:47:c1:00:56:85:4e:6f:d0:48:5c:39:98:5f:
                    ff:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:36:B3:D0:D5:DA:34:B1:E4:3F:0D:11:F5:BE:C7:38:28:4A:B1:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/bc625f3a-cc44-3788-8476-8cd61831751c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:550:1209::-2001:550:120a:ffff:ffff:ffff:ffff:ffff
                  2001:550:2705::-2001:550:2706:ffff:ffff:ffff:ffff:ffff

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c5:8b:e9:4a:0c:fa:63:ca:c1:64:ae:55:d7:ef:79:ea:23:c4:
         f2:1b:09:24:10:f8:78:46:4e:7f:14:81:fe:e1:cb:e4:67:fd:
         fa:67:7d:e8:3d:04:74:19:35:2a:a9:72:a7:96:ec:8d:d5:b0:
         de:99:00:26:7f:42:33:34:a9:88:d3:39:1d:8b:a1:7f:a3:74:
         a4:60:ee:d0:98:6d:4f:c1:21:34:39:5d:76:99:4c:2e:91:70:
         18:ee:3a:93:3c:c9:0d:84:4d:01:34:55:05:1d:a2:a7:21:ca:
         92:6b:e4:25:ac:48:fb:ca:d1:10:ee:ca:b6:37:79:5f:17:62:
         16:f9:de:e0:24:86:d3:9d:18:7a:52:9e:91:d3:30:39:0c:bc:
         da:49:75:b6:c5:3f:af:b8:d1:89:e6:ca:fe:0d:5c:d3:36:ed:
         54:51:b2:15:fd:78:01:2d:e8:99:22:c5:38:b1:ba:92:e7:c3:
         db:bb:5c:56:46:fc:b0:8e:c2:ca:59:6f:26:09:ac:bd:92:7b:
         2a:81:f5:e7:30:c8:bd:a3:cd:52:01:e7:57:47:b0:48:5c:e4:
         ff:2f:b5:de:01:32:e2:40:bf:6a:94:ab:f9:55:3b:e0:62:74:
         0c:87:e0:bf:59:d0:fa:8e:41:76:1a:e5:21:82:7c:ee:92:61:
         c2:0e:a0:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:36:00 2026 by rpki-client