Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dac5cea7-cd25-4a27-9b63-bd82366932b1/7afdaf05-f4fd-338f-9039-bbb80150169e.roa
File:                     7afdaf05-f4fd-338f-9039-bbb80150169e.roa (raw, json)
Hash identifier:          3PJ6pOeF5NwvSUpUnFR2svXW2Wt/AeHtx/dPI69qMIQ=
Subject key identifier:   BD:59:B6:D7:7D:AA:F1:9B:55:30:15:C2:5C:6E:F6:AD:D1:8C:BD:04
Certificate issuer:       /CN=dac5cea7-cd25-4a27-9b63-bd82366932b1
Certificate serial:       010D0C9F4328584CABA9EDBA5A5BC51D3A641F00
Authority key identifier: F8:90:52:1B:08:0F:56:22:0A:C1:68:0A:45:A1:58:77:CB:57:3E:5E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dac5cea7-cd25-4a27-9b63-bd82366932b1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dac5cea7-cd25-4a27-9b63-bd82366932b1/7afdaf05-f4fd-338f-9039-bbb80150169e.roa
Signing time:             Wed 28 Jan 2026 03:00:15 +0000
ROA not before:           Wed 28 Jan 2026 03:00:15 +0000
ROA not after:            Tue 28 Apr 2026 02:00:15 +0000
asID:                     396502
IP address blocks:        2602:fe96::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dac5cea7-cd25-4a27-9b63-bd82366932b1/dac5cea7-cd25-4a27-9b63-bd82366932b1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dac5cea7-cd25-4a27-9b63-bd82366932b1/dac5cea7-cd25-4a27-9b63-bd82366932b1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dac5cea7-cd25-4a27-9b63-bd82366932b1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ab:a9:ed:ba:5a:5b:c5:1d:3a:64:1f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dac5cea7-cd25-4a27-9b63-bd82366932b1
        Validity
            Not Before: Jan 28 03:00:15 2026 GMT
            Not After : Apr 28 02:00:15 2026 GMT
        Subject: CN=0bb83deb-9dd2-47c2-bd02-7e03270fc66f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:5a:f2:ff:ae:66:39:18:82:f9:dc:c8:a5:61:
                    6a:40:1a:a5:5f:aa:e0:eb:82:11:e3:a8:fd:4b:24:
                    fe:2f:52:4d:09:8c:9a:3f:51:3f:2e:28:08:c9:d2:
                    d7:e1:2c:b5:31:5a:8a:06:ff:eb:73:9a:fc:a8:ed:
                    64:ba:c9:1a:ba:58:48:1e:c6:5c:17:13:a1:d1:ac:
                    0f:59:16:4e:bb:58:04:8e:0f:26:18:35:06:1c:a2:
                    43:c4:d2:8b:60:1b:58:b2:0b:51:8a:8b:cf:2e:7c:
                    8d:d8:ac:81:9d:b7:56:93:5b:30:b1:d6:a4:77:81:
                    54:1e:c2:b7:61:99:d8:51:97:5e:06:e8:2f:e2:16:
                    c2:6d:f5:92:c8:ec:88:d8:79:be:15:13:09:48:bf:
                    06:4b:08:c4:b3:2b:df:97:9f:d7:bb:bd:9e:ad:95:
                    f3:01:39:c0:76:5c:46:ec:82:ac:75:94:7e:38:ec:
                    9e:4c:00:64:12:5a:86:03:f2:62:e7:3f:b6:5a:dd:
                    42:c3:66:89:cd:9a:3b:b5:23:36:12:3a:f4:75:72:
                    08:09:70:e2:e8:2f:c4:e7:07:13:16:9b:5e:fa:79:
                    0a:46:81:5f:a0:f5:76:8e:5f:ae:71:46:95:79:ae:
                    8a:f0:e1:bf:69:a6:79:30:32:e3:cf:4d:9b:e3:e4:
                    39:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:59:B6:D7:7D:AA:F1:9B:55:30:15:C2:5C:6E:F6:AD:D1:8C:BD:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dac5cea7-cd25-4a27-9b63-bd82366932b1/7afdaf05-f4fd-338f-9039-bbb80150169e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dac5cea7-cd25-4a27-9b63-bd82366932b1/dac5cea7-cd25-4a27-9b63-bd82366932b1.crl

            X509v3 Authority Key Identifier:
                keyid:F8:90:52:1B:08:0F:56:22:0A:C1:68:0A:45:A1:58:77:CB:57:3E:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dac5cea7-cd25-4a27-9b63-bd82366932b1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fe96::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:ea:4f:b5:9c:3a:5e:e2:68:b1:d4:6d:5e:b4:1f:74:6a:a2:
         29:c3:e6:9b:97:f8:af:90:1d:a7:8f:39:ff:30:23:d4:2b:aa:
         ca:91:98:f2:74:67:c6:a8:29:69:df:18:21:91:86:21:ee:17:
         c2:86:ea:a6:a8:f7:3a:46:63:a8:95:6d:06:ee:28:aa:25:78:
         5b:02:b3:13:9d:d9:be:32:87:b6:f1:87:0b:66:ae:da:c2:53:
         a3:a5:95:f5:12:0a:c3:6c:d3:3e:c1:cb:a8:b7:bd:05:e6:75:
         b2:b4:59:a2:a3:1f:6b:56:6b:60:88:2f:06:75:b8:14:20:4b:
         4c:45:ae:2e:9b:e8:f9:03:86:ac:f3:5a:45:6a:3e:db:51:24:
         19:ff:b9:fa:ab:ec:9d:36:82:0c:8e:16:67:1c:43:f2:11:74:
         d0:2b:10:f1:54:e9:8b:f8:34:42:40:82:16:b8:cf:d8:f2:3c:
         94:6f:fc:a0:f7:7a:aa:9e:cb:09:e6:03:44:65:20:ac:36:ec:
         e5:42:fd:47:1c:51:34:a2:c4:0b:a6:fd:74:24:60:60:73:02:
         9d:00:eb:6a:69:27:16:81:6f:45:df:80:b2:22:c7:d2:de:f3:
         25:dc:fd:b4:cc:61:8e:8a:4d:30:6b:fc:1a:75:34:be:57:ec:
         30:61:a0:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 19:11:04 2026 by rpki-client