Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/122a38f0-6d8c-3454-a578-41aad32b181b.roa
File:                     122a38f0-6d8c-3454-a578-41aad32b181b.roa (raw, json)
Hash identifier:          FN1UUlplKJcunkMqC9FE6scrbsIcD4L82r9fsh/yBgM=
Subject key identifier:   72:63:DD:81:FF:95:6A:2D:BC:4F:4A:97:67:8B:6D:A3:C4:C2:F7:1D
Certificate issuer:       /CN=e6ab501b-6c69-46a4-b924-a09b68ce18cf
Certificate serial:       010D0C9F4328584CCD0C94161135C243EA1F08C2
Authority key identifier: DC:D2:73:A8:27:7E:61:48:65:D1:41:52:8A:91:B6:20:10:A7:00:5E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/122a38f0-6d8c-3454-a578-41aad32b181b.roa
Signing time:             Mon 09 Feb 2026 02:00:31 +0000
ROA not before:           Mon 09 Feb 2026 02:00:31 +0000
ROA not after:            Sun 10 May 2026 01:00:31 +0000
asID:                     271
IP address blocks:        2607:f8f0:16c1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/e6ab501b-6c69-46a4-b924-a09b68ce18cf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/e6ab501b-6c69-46a4-b924-a09b68ce18cf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:cd:0c:94:16:11:35:c2:43:ea:1f:08:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6ab501b-6c69-46a4-b924-a09b68ce18cf
        Validity
            Not Before: Feb  9 02:00:31 2026 GMT
            Not After : May 10 01:00:31 2026 GMT
        Subject: CN=37eccd97-55bb-49cd-aafd-5ce44e339f4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:47:b5:29:f4:2d:64:46:93:20:05:80:62:57:
                    37:69:73:6f:91:cd:8d:2f:45:8a:7d:cd:70:2e:e7:
                    58:09:27:b1:cb:71:dc:c8:f7:25:0c:1f:b1:62:2c:
                    f6:6b:d1:bd:58:80:3e:c4:3f:3e:14:88:5b:03:48:
                    eb:09:97:b3:c7:0e:3f:e5:68:27:4f:04:4b:b6:50:
                    45:f8:ad:51:13:34:f7:ba:b8:5e:ba:be:c6:2c:05:
                    41:d7:7b:e2:6b:32:83:75:14:11:ef:f6:64:53:2e:
                    80:92:5b:0d:35:9a:79:80:f3:0f:b9:85:1a:31:d5:
                    d1:06:d9:16:66:8b:0b:df:9a:e6:ef:10:93:da:cb:
                    16:b0:29:d3:55:9e:1f:64:57:45:38:a4:26:eb:6e:
                    a3:85:f9:32:b9:4e:74:17:a9:08:29:5b:ad:2f:70:
                    d9:43:18:c4:1f:a9:97:db:2b:10:b6:74:1b:aa:ff:
                    ea:0c:05:ff:66:be:af:2b:e6:68:f6:4f:5f:65:ec:
                    b2:6f:c4:fd:58:48:26:8a:b5:e7:7e:45:d7:46:6e:
                    ea:93:67:89:e6:ec:24:d8:62:4e:09:38:5e:05:71:
                    9a:75:d9:90:88:1c:59:64:b1:cb:a0:5e:de:90:cb:
                    44:39:01:3d:d9:96:08:f4:55:c5:bf:b8:68:32:67:
                    9c:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:63:DD:81:FF:95:6A:2D:BC:4F:4A:97:67:8B:6D:A3:C4:C2:F7:1D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/122a38f0-6d8c-3454-a578-41aad32b181b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/e6ab501b-6c69-46a4-b924-a09b68ce18cf.crl

            X509v3 Authority Key Identifier:
                keyid:DC:D2:73:A8:27:7E:61:48:65:D1:41:52:8A:91:B6:20:10:A7:00:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f8f0:16c1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:cd:ca:b3:9e:bd:c2:50:6a:34:c7:3f:99:fc:1e:dc:c8:9e:
         3f:4d:a8:45:9e:33:3c:58:ac:cb:89:7a:af:92:23:22:d3:58:
         3a:70:00:c7:0e:a7:be:8b:b6:40:91:fe:8c:da:46:37:22:d5:
         aa:f8:bc:b4:33:b2:81:d7:25:e6:b1:13:48:cc:87:d6:98:f2:
         ff:80:ea:c0:80:c0:9c:54:2c:c6:5a:97:ac:f9:2a:7e:f2:30:
         9d:1c:23:22:b3:c5:6d:4d:46:18:47:79:45:16:a5:6b:ff:64:
         18:a7:0b:b5:28:35:74:a0:ca:83:59:52:d0:e1:b3:1c:3f:4a:
         9b:c6:8a:c0:b1:e5:58:48:1b:a5:21:52:f7:8d:ea:f5:c9:20:
         fe:c7:a8:35:9a:f5:f9:7a:4d:5d:b2:07:9d:4e:2d:f3:04:f4:
         db:92:49:5d:31:11:a4:a5:33:79:83:de:d4:6b:d5:e1:2f:d9:
         57:5e:2a:63:73:4b:df:fa:17:c9:5e:17:c8:9b:a4:7e:67:9e:
         3d:cc:a8:0b:f5:77:1f:b6:62:a3:0c:3e:a3:95:31:ee:86:e3:
         2b:c2:97:eb:cd:03:a2:95:5b:ad:89:eb:9e:d7:95:4e:d6:a8:
         80:bf:b7:44:c0:fb:52:eb:9e:c6:65:1e:c1:45:12:84:d4:ee:
         51:b7:16:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:34:15 2026 by rpki-client