Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/676eb13d-9a49-36c3-a75c-5e0045fee327.roa
File:                     676eb13d-9a49-36c3-a75c-5e0045fee327.roa (raw, json)
Hash identifier:          QtE7XteGD+jNY0MHcR2xldB8tksSzYeoXnZUoKJ1aTw=
Subject key identifier:   8E:A4:A2:58:AE:58:59:F1:FA:75:34:C2:D7:FB:00:E7:D0:89:C6:27
Certificate issuer:       /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial:       010D0C9F4328584CD4077F9EB10B083C15590720
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/676eb13d-9a49-36c3-a75c-5e0045fee327.roa
Signing time:             Wed 11 Feb 2026 14:00:41 +0000
ROA not before:           Wed 11 Feb 2026 14:00:41 +0000
ROA not after:            Tue 12 May 2026 13:00:41 +0000
asID:                     54113
IP address blocks:        2620:11a:c01a::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:d4:07:7f:9e:b1:0b:08:3c:15:59:07:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
        Validity
            Not Before: Feb 11 14:00:41 2026 GMT
            Not After : May 12 13:00:41 2026 GMT
        Subject: CN=1598903c-d66d-4a03-a8d3-67b5fa1fcee9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:f5:0f:8d:c9:d4:6f:32:58:79:63:5b:34:d2:
                    ab:eb:a4:7b:df:f2:98:5e:99:14:39:88:20:8d:89:
                    ca:c2:dc:d3:a6:1c:96:66:f0:26:dc:36:c7:fc:86:
                    db:e5:65:4a:be:00:fd:eb:50:29:f5:22:10:f6:2d:
                    be:49:e7:40:19:a8:61:04:e9:ae:ae:4b:ee:6f:41:
                    24:09:95:92:f6:ba:ab:ff:91:f8:88:9b:93:9a:8e:
                    11:30:c7:a3:64:77:9e:19:66:75:55:22:fb:99:46:
                    d8:14:05:08:7c:5d:92:f4:fa:fc:44:af:b8:57:ba:
                    aa:a0:83:0c:6e:53:6a:56:e6:7d:ed:70:d9:19:bd:
                    e9:6b:a7:e8:24:63:c7:ae:dd:d9:28:e3:1e:83:3b:
                    24:95:96:f6:9d:42:11:23:cd:6b:6c:38:00:79:a0:
                    df:79:6c:c6:0e:89:e9:2a:ab:a7:fb:7d:14:b9:4c:
                    de:f1:db:52:09:cc:10:e1:76:44:89:d2:a0:69:1d:
                    b5:d5:ec:3d:38:7c:fc:82:2c:ed:b9:1a:ff:7c:ac:
                    95:4b:20:c7:49:4d:a9:42:1c:e9:94:c8:1f:c7:f7:
                    73:d5:4a:2a:12:ff:e7:f8:cd:c5:8a:f4:54:04:12:
                    0f:c2:fd:e4:0f:4e:a3:99:dc:e3:04:42:0f:16:e4:
                    2c:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:A4:A2:58:AE:58:59:F1:FA:75:34:C2:D7:FB:00:E7:D0:89:C6:27
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/676eb13d-9a49-36c3-a75c-5e0045fee327.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl

            X509v3 Authority Key Identifier:
                keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:11a:c01a::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         be:ad:3e:ac:d6:55:3b:60:0b:c1:ee:b9:55:ec:e5:ad:b2:84:
         c3:83:c5:d2:9c:75:fa:bc:a3:c5:12:7c:2e:2d:e8:4e:a0:bd:
         4e:c7:c8:e5:87:e5:9d:66:9d:ca:de:53:65:b3:61:32:bc:60:
         ec:a0:f2:bb:9f:2c:15:19:b0:f4:38:8b:00:1b:a5:e9:2e:ac:
         9d:b0:a3:94:cf:a4:c7:66:49:44:0e:c5:6e:6f:e7:13:76:b9:
         09:75:99:05:65:59:90:6d:67:a2:6a:0a:2b:3a:08:d7:3d:8f:
         22:13:80:e3:42:c4:a3:c8:ee:8f:65:5f:6a:7d:90:8f:1b:00:
         a0:28:fd:73:ff:43:86:f3:d9:12:2a:09:bf:58:3e:24:fe:e4:
         f0:b9:38:c2:25:db:2a:45:26:98:25:bc:73:a2:f5:8e:4b:b9:
         ad:3e:2c:76:6a:4a:4d:d2:38:5f:38:22:7d:84:67:c1:f7:b0:
         2b:33:6f:2c:1c:ba:c9:3b:c2:ac:ef:e7:86:c9:2b:5a:60:3e:
         9f:53:59:14:bb:e4:df:45:08:eb:05:11:4c:db:f0:d4:d9:97:
         8f:bd:b2:20:72:4e:28:7a:d4:e4:70:c3:b9:d7:4d:00:5c:62:
         51:e8:94:06:f9:7e:12:9a:6a:60:1d:48:12:49:59:de:c1:0a:
         22:c6:e8:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:30:44 2026 by rpki-client