Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e39425c5-52e8-4eac-9e1d-b07079c84d7b/d04dd6f5-30fb-3bd8-9178-2ef70d0acf25.roa
File:                     d04dd6f5-30fb-3bd8-9178-2ef70d0acf25.roa (raw, json)
Hash identifier:          pOarQEKbcT6ud4WdWGO3jWtilVFLl6x7Us8fLx1tK70=
Subject key identifier:   CA:BE:03:EF:B1:26:D5:DE:BB:04:49:53:5A:2D:83:12:9E:94:7B:B9
Certificate issuer:       /CN=e39425c5-52e8-4eac-9e1d-b07079c84d7b
Certificate serial:       010D0C9F4328584CF85247DB8DDF96FCF775E900
Authority key identifier: 06:21:87:7B:4F:EF:91:DA:86:4D:F7:17:D1:1F:D1:18:D2:B2:53:AB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e39425c5-52e8-4eac-9e1d-b07079c84d7b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e39425c5-52e8-4eac-9e1d-b07079c84d7b/d04dd6f5-30fb-3bd8-9178-2ef70d0acf25.roa
Signing time:             Tue 24 Feb 2026 14:00:41 +0000
ROA not before:           Tue 24 Feb 2026 14:00:41 +0000
ROA not after:            Mon 25 May 2026 13:00:41 +0000
asID:                     16509
IP address blocks:        2610:e8:3180::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e39425c5-52e8-4eac-9e1d-b07079c84d7b/e39425c5-52e8-4eac-9e1d-b07079c84d7b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e39425c5-52e8-4eac-9e1d-b07079c84d7b/e39425c5-52e8-4eac-9e1d-b07079c84d7b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e39425c5-52e8-4eac-9e1d-b07079c84d7b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:f8:52:47:db:8d:df:96:fc:f7:75:e9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e39425c5-52e8-4eac-9e1d-b07079c84d7b
        Validity
            Not Before: Feb 24 14:00:41 2026 GMT
            Not After : May 25 13:00:41 2026 GMT
        Subject: CN=2b164f8c-40d4-49ef-9510-da1ea1743a6e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:8f:ef:b4:72:48:5e:f6:10:67:f4:32:7e:20:
                    39:b9:ca:8b:ae:34:62:c2:09:5e:e4:56:ec:9a:01:
                    1a:0b:fd:e5:9a:0a:aa:39:87:d1:1b:54:42:f8:97:
                    86:d9:29:91:c3:13:e2:bf:43:6b:f1:dd:ab:34:59:
                    dd:3b:9f:3a:20:ac:41:6c:ab:ea:f2:11:cc:73:0d:
                    66:b3:f8:99:9c:3f:23:5e:93:25:34:88:6c:f3:ed:
                    54:d6:a3:53:6c:d0:8e:ff:ff:37:e2:e1:57:c9:85:
                    30:75:21:e0:80:b1:72:77:99:3b:e5:76:ac:56:d2:
                    f5:c8:4d:9d:99:9b:96:6a:91:81:2d:7e:be:3c:bd:
                    81:29:cf:fe:82:8c:35:5f:fe:85:e4:db:e6:36:90:
                    d0:d8:9d:5f:d6:64:59:7c:f3:17:60:54:83:50:84:
                    88:19:cb:d1:ac:b3:71:a8:4d:79:c2:bc:d1:cc:74:
                    cc:85:0d:ff:da:82:68:4e:01:af:41:65:3a:85:23:
                    3a:85:e6:55:1d:83:f7:14:de:fd:da:9c:96:3c:69:
                    82:3c:b2:a7:a2:cf:8c:79:b8:ad:f7:23:fc:72:db:
                    b9:83:62:58:e3:a1:4a:e4:74:94:dc:95:80:c7:de:
                    7b:88:b8:e0:a9:c0:f4:d4:7e:2d:16:79:bf:07:b7:
                    63:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:BE:03:EF:B1:26:D5:DE:BB:04:49:53:5A:2D:83:12:9E:94:7B:B9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e39425c5-52e8-4eac-9e1d-b07079c84d7b/d04dd6f5-30fb-3bd8-9178-2ef70d0acf25.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e39425c5-52e8-4eac-9e1d-b07079c84d7b/e39425c5-52e8-4eac-9e1d-b07079c84d7b.crl

            X509v3 Authority Key Identifier:
                keyid:06:21:87:7B:4F:EF:91:DA:86:4D:F7:17:D1:1F:D1:18:D2:B2:53:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e39425c5-52e8-4eac-9e1d-b07079c84d7b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2610:e8:3180::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:5e:a1:6d:bd:ae:5d:45:ed:b1:ca:a4:d0:42:c9:16:70:87:
         c7:7e:63:bc:d9:bf:55:eb:0a:25:14:14:70:64:34:18:27:5f:
         26:ca:38:be:d1:ba:70:f5:9c:be:1f:52:ea:a2:79:71:7b:6d:
         53:6c:ae:6b:69:85:97:f0:4c:14:fe:7c:62:fb:69:40:7e:e3:
         47:c0:ed:9f:67:40:09:f7:b5:71:cf:82:ce:96:d3:c6:9a:f3:
         52:e1:c7:28:04:3b:3b:7f:2c:57:e3:1c:28:64:eb:93:95:71:
         13:c5:31:e6:09:84:17:4a:14:77:f5:44:06:20:74:cf:76:b0:
         88:3a:40:ce:6a:a2:17:a0:3d:80:42:8d:01:b9:42:14:9a:50:
         95:14:d7:58:99:d0:31:4d:21:7c:ad:6d:d5:b4:72:04:f7:cf:
         36:dd:b2:26:6c:54:e1:26:7a:a7:d6:40:6a:44:73:a9:2f:10:
         8d:4c:e4:8f:a9:7e:e1:8f:dd:69:d3:90:14:c6:3f:5e:46:a9:
         20:2f:09:2c:79:cf:53:3a:a3:35:3c:5a:6e:6f:1b:a3:11:06:
         ed:9b:9a:5f:fd:99:81:50:ba:e3:2e:ad:2a:50:b9:7c:81:91:
         0a:31:4e:d9:45:9d:92:e7:dc:4d:02:09:a5:aa:67:ab:61:2d:
         a5:ba:47:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:15:46 2026 by rpki-client