Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/53672676-56d0-4921-8e86-0b820202ef6c/87ae2c43-9ef4-3257-96bd-9a9a8908ec4a.roa
File:                     87ae2c43-9ef4-3257-96bd-9a9a8908ec4a.roa (raw, json)
Hash identifier:          dKZ0Ht5MRmt7kqj1NY09+//YNkppPxHiRmyfuZ7DSPU=
Subject key identifier:   F2:EA:DD:03:D5:AB:E4:6E:32:92:4B:11:E8:68:D5:CC:EC:7C:19:4B
Certificate issuer:       /CN=53672676-56d0-4921-8e86-0b820202ef6c
Certificate serial:       010D0C9F4328584CB551F62C76BDEEB5F21A2000
Authority key identifier: 7E:1A:39:BE:17:56:D6:2C:72:4D:1E:4C:41:C3:9C:00:0C:0F:4A:C4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/53672676-56d0-4921-8e86-0b820202ef6c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/53672676-56d0-4921-8e86-0b820202ef6c/87ae2c43-9ef4-3257-96bd-9a9a8908ec4a.roa
Signing time:             Sat 31 Jan 2026 14:00:39 +0000
ROA not before:           Sat 31 Jan 2026 14:00:39 +0000
ROA not after:            Fri 01 May 2026 13:00:39 +0000
asID:                     399082
IP address blocks:        2602:f944::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/53672676-56d0-4921-8e86-0b820202ef6c/53672676-56d0-4921-8e86-0b820202ef6c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/53672676-56d0-4921-8e86-0b820202ef6c/53672676-56d0-4921-8e86-0b820202ef6c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/53672676-56d0-4921-8e86-0b820202ef6c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:b5:51:f6:2c:76:bd:ee:b5:f2:1a:20:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53672676-56d0-4921-8e86-0b820202ef6c
        Validity
            Not Before: Jan 31 14:00:39 2026 GMT
            Not After : May  1 13:00:39 2026 GMT
        Subject: CN=b4b8ffc1-556b-4d59-80d9-0fcbbcf72a33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:7c:e8:21:be:44:3d:bb:b9:a1:fe:38:8b:df:
                    b0:a9:80:e4:c8:9f:c3:10:56:60:51:59:7c:c0:96:
                    4f:2c:67:ff:49:46:f8:02:81:b8:44:14:8a:43:c1:
                    6a:9c:16:6f:05:b3:66:6b:cc:f8:b5:dc:5d:fe:00:
                    03:22:de:5c:c5:42:41:5e:53:44:a5:f1:15:62:9e:
                    71:58:0d:af:04:2a:c4:79:b4:13:79:f3:92:8f:1c:
                    9a:0f:04:94:8c:65:49:38:0e:de:0e:e0:19:07:6a:
                    e8:c3:74:4f:a0:ea:74:4f:25:0f:f9:92:fb:6f:0c:
                    da:ad:fa:fd:fc:bb:4c:91:0d:6e:f1:f4:8f:57:08:
                    ee:da:e6:56:35:eb:02:90:00:76:01:6a:4c:dc:88:
                    47:f7:4c:c6:8d:4d:e8:41:72:cf:3e:6e:55:d1:53:
                    4b:76:ec:7b:0e:b2:38:2a:9b:df:9f:5d:c1:31:1a:
                    62:ca:4b:96:b5:18:e1:e2:57:b7:6d:32:c5:d7:10:
                    5b:8c:a6:77:ba:e2:d2:c1:70:f4:22:0c:14:a9:87:
                    32:41:24:58:7e:69:17:cd:34:66:6d:56:af:23:ae:
                    b9:13:90:db:8f:cd:fb:86:bd:79:e9:53:bb:25:71:
                    8f:e6:4c:7a:06:83:f6:14:d4:cc:4c:6d:bd:7d:ec:
                    f6:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:EA:DD:03:D5:AB:E4:6E:32:92:4B:11:E8:68:D5:CC:EC:7C:19:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/53672676-56d0-4921-8e86-0b820202ef6c/87ae2c43-9ef4-3257-96bd-9a9a8908ec4a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/53672676-56d0-4921-8e86-0b820202ef6c/53672676-56d0-4921-8e86-0b820202ef6c.crl

            X509v3 Authority Key Identifier:
                keyid:7E:1A:39:BE:17:56:D6:2C:72:4D:1E:4C:41:C3:9C:00:0C:0F:4A:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/53672676-56d0-4921-8e86-0b820202ef6c.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f944::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:f9:03:a4:a3:32:85:b6:4c:94:37:29:95:95:88:26:67:fd:
         4d:73:0f:b3:3d:c2:2c:09:84:57:5a:1e:2d:b0:f2:15:52:c0:
         0a:f6:d7:71:3b:33:90:97:d4:5a:eb:1b:3d:f7:9e:4d:80:52:
         4c:fe:c8:57:00:86:99:71:61:a9:51:e1:41:33:b3:f4:6a:b6:
         09:08:f4:01:89:64:65:1d:b4:3a:d3:43:16:64:9a:b8:7a:4f:
         00:03:fc:56:30:1f:14:a2:21:aa:4b:67:18:b6:27:82:d1:89:
         9d:04:bd:22:a0:a2:fc:a1:57:9e:05:1a:9b:87:7e:89:0c:e0:
         c7:cd:3e:d7:f5:36:47:2b:ed:f2:c2:e7:09:bf:42:99:a4:96:
         66:de:d2:04:a2:be:cd:4f:92:e9:a1:86:d9:8a:0c:b6:3b:49:
         4c:3b:b7:59:7a:5a:c5:82:7b:13:2b:bd:ae:12:1c:bf:a6:48:
         4e:a9:19:34:b1:74:cc:9e:c6:eb:5d:27:a4:8e:5e:5f:c8:ba:
         d9:d2:f9:c9:12:41:2d:ac:2a:a0:f5:2a:13:14:c8:31:2d:be:
         7a:54:b7:bd:ee:63:7a:bf:aa:1d:6a:64:31:53:d6:6c:4a:1c:
         2f:33:d5:38:48:e6:b4:32:a6:76:f8:86:91:ba:04:48:80:cf:
         2a:bf:19:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:25:13 2026 by rpki-client