Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e48dc9aa-413f-45f8-9a4e-20346bdcca64/ab70b155-c31f-3dfa-b48d-947689c8f9df.roa
File:                     ab70b155-c31f-3dfa-b48d-947689c8f9df.roa (raw, json)
Hash identifier:          nr3X8UJ8WfZB/XhWgY3Tg/Dj+l5czEwUeQUNFjemc3M=
Subject key identifier:   71:C7:2C:A4:10:15:9D:B2:38:BC:FC:5A:C3:85:CE:AD:45:38:71:07
Certificate issuer:       /CN=e48dc9aa-413f-45f8-9a4e-20346bdcca64
Certificate serial:       010D0C9F4328584CF2BCF807CA4B0ED064FD3480
Authority key identifier: 73:F2:EF:9F:7B:AB:1D:FA:60:EB:45:BD:F6:94:39:DA:68:7C:31:48
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e48dc9aa-413f-45f8-9a4e-20346bdcca64.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e48dc9aa-413f-45f8-9a4e-20346bdcca64/ab70b155-c31f-3dfa-b48d-947689c8f9df.roa
Signing time:             Sun 22 Feb 2026 14:00:41 +0000
ROA not before:           Sun 22 Feb 2026 14:00:41 +0000
ROA not after:            Sat 23 May 2026 13:00:41 +0000
asID:                     29770
IP address blocks:        2602:faae::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e48dc9aa-413f-45f8-9a4e-20346bdcca64/e48dc9aa-413f-45f8-9a4e-20346bdcca64.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e48dc9aa-413f-45f8-9a4e-20346bdcca64/e48dc9aa-413f-45f8-9a4e-20346bdcca64.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e48dc9aa-413f-45f8-9a4e-20346bdcca64.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 03:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:f2:bc:f8:07:ca:4b:0e:d0:64:fd:34:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e48dc9aa-413f-45f8-9a4e-20346bdcca64
        Validity
            Not Before: Feb 22 14:00:41 2026 GMT
            Not After : May 23 13:00:41 2026 GMT
        Subject: CN=c201b47a-bcb5-440c-83e6-299799ae6cce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:ce:69:0d:1e:b6:50:51:dd:b9:0f:97:93:30:
                    b0:4d:5c:a5:c2:33:04:50:25:df:e5:4a:e6:97:5d:
                    cd:37:5e:1d:c3:b5:c8:04:d1:49:4a:09:ee:3b:c4:
                    08:b4:4d:d5:3a:91:30:09:34:f3:50:b8:7d:04:c2:
                    57:b6:da:96:26:93:af:5d:86:f0:7c:ad:5a:67:23:
                    d8:78:cc:5c:62:12:54:65:78:68:2e:8c:56:be:19:
                    dc:98:66:a7:85:1b:1e:0c:a8:2b:d4:59:e1:72:d7:
                    99:c5:4a:a2:56:f3:8b:41:1c:b5:85:94:94:ef:45:
                    54:3c:10:b3:52:a4:de:07:d4:aa:5d:1e:8e:12:04:
                    e5:fd:a7:70:7b:0c:86:73:c8:0b:33:d3:df:cb:7a:
                    6b:51:6c:e5:16:c3:91:4c:19:68:3f:32:8a:52:4e:
                    ae:c2:37:a3:b8:69:41:df:db:90:33:50:42:33:a1:
                    4f:3a:4c:af:10:71:d9:04:00:5d:c5:e0:ee:9e:6a:
                    29:38:55:52:2a:89:a1:3f:0c:6a:c4:ac:ee:c0:02:
                    64:01:94:b6:de:e7:7e:f5:13:2d:98:20:9a:f2:37:
                    9c:49:64:30:b2:90:d7:c9:bc:6c:e5:d8:db:17:18:
                    c5:f3:a3:6a:3b:94:57:83:9c:e2:49:b8:0c:07:8b:
                    97:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:C7:2C:A4:10:15:9D:B2:38:BC:FC:5A:C3:85:CE:AD:45:38:71:07
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e48dc9aa-413f-45f8-9a4e-20346bdcca64/ab70b155-c31f-3dfa-b48d-947689c8f9df.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e48dc9aa-413f-45f8-9a4e-20346bdcca64/e48dc9aa-413f-45f8-9a4e-20346bdcca64.crl

            X509v3 Authority Key Identifier:
                keyid:73:F2:EF:9F:7B:AB:1D:FA:60:EB:45:BD:F6:94:39:DA:68:7C:31:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e48dc9aa-413f-45f8-9a4e-20346bdcca64.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:faae::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:ff:a9:07:2b:e6:4e:b0:c7:0f:5d:6a:72:6b:da:8a:51:9b:
         9f:cf:9f:46:11:52:cf:e9:21:97:45:24:a2:51:7a:f8:f4:56:
         a3:26:69:27:2e:14:82:ed:be:b7:63:0d:12:33:6d:dc:34:59:
         85:8d:ad:4f:18:1b:07:22:7d:61:67:b4:8e:9e:bf:02:72:ff:
         b8:d5:f9:20:cc:c3:d1:d8:3c:02:b8:c1:ee:32:79:a6:00:d0:
         7d:04:47:6a:bb:85:ba:d2:1b:92:90:7c:45:6e:39:45:66:71:
         14:9c:ba:c6:2e:7c:30:66:01:75:d6:5d:e8:ca:d9:bc:39:52:
         4a:53:61:59:9d:58:ef:00:fc:3d:9c:05:47:c9:10:43:0f:a9:
         0d:07:4e:83:77:5f:b1:0b:58:59:6e:3c:43:e0:65:31:00:e3:
         94:86:43:f6:a8:f9:ef:43:7d:da:c4:99:03:7e:78:85:ff:fe:
         53:1b:c6:df:e5:76:b3:97:fe:bc:3e:9f:52:99:fa:05:41:9d:
         92:42:fd:f6:ea:12:b0:39:33:70:b1:97:94:69:72:2c:9c:25:
         68:09:c5:9b:94:cf:32:ff:02:a6:79:e7:e8:49:36:95:9d:3d:
         e8:31:a6:5d:77:73:77:05:3a:df:22:30:d5:23:35:7b:71:f1:
         bd:e6:da:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:08:23 2026 by rpki-client