Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0cf53e58-6557-450f-832c-9baa5c99cca4/9e2cd53b-b97c-377a-b414-b8b607fc4fad.roa
File:                     9e2cd53b-b97c-377a-b414-b8b607fc4fad.roa (raw, json)
Hash identifier:          29ZTmABRvXaQoCR0yggonKbO45ya9CZjTTfPMqgTcd8=
Subject key identifier:   82:EB:1A:E3:7F:2D:FE:13:FD:1B:50:C6:2F:43:C9:1B:4E:13:09:53
Certificate issuer:       /CN=0cf53e58-6557-450f-832c-9baa5c99cca4
Certificate serial:       010D0C9F4328584C93D1A2ABB8C692F58B418700
Authority key identifier: 9D:12:7B:B3:E3:C3:F4:64:BC:E1:32:60:ED:35:87:5D:E7:FA:47:59
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0cf53e58-6557-450f-832c-9baa5c99cca4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0cf53e58-6557-450f-832c-9baa5c99cca4/9e2cd53b-b97c-377a-b414-b8b607fc4fad.roa
Signing time:             Mon 19 Jan 2026 14:00:38 +0000
ROA not before:           Mon 19 Jan 2026 14:00:38 +0000
ROA not after:            Sun 19 Apr 2026 13:00:38 +0000
asID:                     14618
IP address blocks:        2607:f250:e000::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0cf53e58-6557-450f-832c-9baa5c99cca4/0cf53e58-6557-450f-832c-9baa5c99cca4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0cf53e58-6557-450f-832c-9baa5c99cca4/0cf53e58-6557-450f-832c-9baa5c99cca4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0cf53e58-6557-450f-832c-9baa5c99cca4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:93:d1:a2:ab:b8:c6:92:f5:8b:41:87:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0cf53e58-6557-450f-832c-9baa5c99cca4
        Validity
            Not Before: Jan 19 14:00:38 2026 GMT
            Not After : Apr 19 13:00:38 2026 GMT
        Subject: CN=11cd69fb-3a88-456d-8a2d-e934d19dc952
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:9b:4e:88:d4:e0:3a:31:46:e0:52:a6:fd:f8:
                    ba:bb:d8:65:75:7e:74:2c:41:8c:dd:24:11:fa:fa:
                    56:1e:0e:a1:7e:56:32:62:8b:6d:c9:23:ce:c9:c8:
                    92:1e:e1:d6:4f:51:77:0a:25:e0:c8:90:33:e5:63:
                    74:49:eb:db:61:6f:d6:fa:65:2e:36:86:40:10:0d:
                    cb:49:3e:52:cb:44:d6:66:45:b2:b7:f7:80:62:03:
                    c9:f7:a2:00:77:f7:87:aa:14:1b:0d:7a:61:87:50:
                    68:08:ec:50:54:ea:13:d9:5a:56:e3:88:f8:2a:7a:
                    72:23:a6:9a:63:6d:5b:a1:05:9f:65:97:ba:07:df:
                    52:ef:aa:57:9b:5d:1e:1b:09:89:ff:69:88:87:0e:
                    23:c3:64:95:67:28:72:0a:db:c2:e9:0c:51:67:56:
                    26:e9:96:39:e5:4e:43:fe:79:47:3c:14:f0:3c:19:
                    8b:64:30:43:c2:00:2e:2d:6b:d4:67:a1:92:27:8c:
                    08:ab:d5:ac:8c:18:a7:a0:fc:3b:f2:b4:f9:ef:4c:
                    47:ab:13:6d:f8:2d:79:79:1c:2c:ab:b1:0b:9f:9d:
                    9b:a5:c5:c1:e0:93:2c:58:a6:86:bf:94:19:fd:28:
                    fc:70:7e:62:e9:16:f8:a4:33:f6:ba:03:d1:f9:d8:
                    27:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:EB:1A:E3:7F:2D:FE:13:FD:1B:50:C6:2F:43:C9:1B:4E:13:09:53
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0cf53e58-6557-450f-832c-9baa5c99cca4/9e2cd53b-b97c-377a-b414-b8b607fc4fad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0cf53e58-6557-450f-832c-9baa5c99cca4/0cf53e58-6557-450f-832c-9baa5c99cca4.crl

            X509v3 Authority Key Identifier:
                keyid:9D:12:7B:B3:E3:C3:F4:64:BC:E1:32:60:ED:35:87:5D:E7:FA:47:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0cf53e58-6557-450f-832c-9baa5c99cca4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f250:e000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:b2:30:1b:71:82:eb:b0:42:bc:01:14:b4:69:3a:50:f1:82:
         bd:bd:f8:81:18:a7:de:ff:0c:21:2a:ad:b2:e1:f8:3a:68:fb:
         51:63:b9:45:95:d7:04:72:b2:99:fd:11:4b:1a:11:b5:af:dc:
         07:c6:ca:22:a7:ab:53:d7:47:a1:68:e6:ee:d5:a6:3f:67:cc:
         87:2c:ff:08:0f:c0:64:ad:00:33:df:ff:3d:15:e5:8b:b6:1c:
         de:67:f1:92:28:e2:b5:cd:6d:76:5f:38:48:db:56:dc:ea:ad:
         d3:b6:33:d7:01:fb:80:a3:b8:6d:e9:6f:96:5d:b6:1a:a7:58:
         ef:89:90:5a:1d:d0:5b:5b:ab:4f:5e:3a:26:86:ed:6c:43:a0:
         03:cf:6a:95:f9:36:6c:a1:a4:74:51:f1:0f:58:00:fd:89:5e:
         6c:06:95:78:c5:b9:d9:62:e0:d8:a4:33:ba:77:ce:85:28:7f:
         c1:66:4c:5c:54:78:91:fa:c2:ae:83:a2:ee:a2:e7:ee:11:24:
         6b:81:43:0b:7e:33:07:79:b6:b2:79:b8:26:cf:89:4f:39:e3:
         e0:dd:c0:05:49:52:80:81:8d:27:85:5c:44:c6:36:45:50:35:
         7f:80:85:97:11:f9:73:ef:79:69:49:bd:1a:a0:eb:6b:0c:e4:
         f1:0b:f1:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:47:10 2026 by rpki-client