Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1f0496a8-0ca9-45ec-820f-8e88c36e58b0/2bc7ff07-9aaf-3e5e-80aa-2126a0dda467.roa
File:                     2bc7ff07-9aaf-3e5e-80aa-2126a0dda467.roa (raw, json)
Hash identifier:          sVhhDM41ENgV3gf59g6tbN4Vim7Eukm96WBZo0pLNKM=
Subject key identifier:   5F:B6:94:CB:E3:A0:98:10:5B:0A:3F:BD:9E:84:70:FC:87:B5:36:D9
Certificate issuer:       /CN=1f0496a8-0ca9-45ec-820f-8e88c36e58b0
Certificate serial:       010D0C9F4328584CED27826F9D7277E40DFE9980
Authority key identifier: 05:D9:B2:96:82:27:BD:F9:0D:F7:EF:51:3A:A8:D0:AB:C5:A1:D5:8C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1f0496a8-0ca9-45ec-820f-8e88c36e58b0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1f0496a8-0ca9-45ec-820f-8e88c36e58b0/2bc7ff07-9aaf-3e5e-80aa-2126a0dda467.roa
Signing time:             Fri 20 Feb 2026 14:00:41 +0000
ROA not before:           Fri 20 Feb 2026 14:00:41 +0000
ROA not after:            Thu 21 May 2026 13:00:41 +0000
asID:                     394840
IP address blocks:        2607:bd80::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1f0496a8-0ca9-45ec-820f-8e88c36e58b0/1f0496a8-0ca9-45ec-820f-8e88c36e58b0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1f0496a8-0ca9-45ec-820f-8e88c36e58b0/1f0496a8-0ca9-45ec-820f-8e88c36e58b0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1f0496a8-0ca9-45ec-820f-8e88c36e58b0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ed:27:82:6f:9d:72:77:e4:0d:fe:99:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f0496a8-0ca9-45ec-820f-8e88c36e58b0
        Validity
            Not Before: Feb 20 14:00:41 2026 GMT
            Not After : May 21 13:00:41 2026 GMT
        Subject: CN=a5c0a0dc-1f39-41b6-b119-59c8186aafbd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:88:c6:18:07:75:ce:16:59:e2:5c:00:59:c2:
                    c4:33:8c:43:81:46:1e:04:c4:79:2f:99:28:17:99:
                    ac:8f:db:f2:a3:41:cf:31:77:b4:fe:d3:7c:a5:38:
                    ee:96:7c:cc:d9:55:88:a4:27:2b:08:7c:43:8f:25:
                    60:aa:15:5d:2e:99:c3:fb:f9:71:98:19:e1:e5:af:
                    62:d9:e9:ac:1f:bd:01:c8:3c:17:50:3d:c0:ee:97:
                    26:c6:3e:b7:4c:3c:9b:db:b5:18:96:56:b7:3c:b3:
                    38:7e:14:89:fd:96:c0:80:ca:05:09:15:d0:3b:5b:
                    bc:f3:a7:ec:ec:09:e5:4a:83:6b:13:c2:4f:ed:fb:
                    b0:78:0b:eb:c5:6b:71:7a:02:d1:49:8f:f5:3b:c6:
                    a4:17:b1:51:dd:26:39:40:de:4b:be:ac:4f:5d:a8:
                    33:bf:36:ba:fc:ec:97:1a:00:9f:49:63:06:95:6b:
                    cb:af:13:09:9c:61:83:83:80:f9:d4:91:5d:40:dd:
                    62:a7:bc:26:b0:11:ad:67:b7:70:f3:24:c7:50:46:
                    2d:df:cf:24:51:64:6c:29:5c:a8:86:00:e2:50:2f:
                    2c:da:61:01:40:fb:7b:5c:70:b5:d8:04:90:70:de:
                    48:a9:b1:d5:78:9e:70:67:c3:4f:fb:32:8f:08:26:
                    6d:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:B6:94:CB:E3:A0:98:10:5B:0A:3F:BD:9E:84:70:FC:87:B5:36:D9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1f0496a8-0ca9-45ec-820f-8e88c36e58b0/2bc7ff07-9aaf-3e5e-80aa-2126a0dda467.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1f0496a8-0ca9-45ec-820f-8e88c36e58b0/1f0496a8-0ca9-45ec-820f-8e88c36e58b0.crl

            X509v3 Authority Key Identifier:
                keyid:05:D9:B2:96:82:27:BD:F9:0D:F7:EF:51:3A:A8:D0:AB:C5:A1:D5:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1f0496a8-0ca9-45ec-820f-8e88c36e58b0.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:bd80::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:bb:55:e5:3b:c2:07:46:76:c9:d7:f6:44:04:e8:12:69:8d:
         db:44:25:14:0f:a4:7f:cd:aa:a0:92:b4:2a:41:23:2f:80:78:
         f4:b4:e7:00:94:db:66:46:af:b6:fd:2a:4a:6d:09:63:7f:ca:
         e8:4f:ae:e2:61:60:d6:94:cf:ad:09:0a:ae:76:e0:93:21:69:
         02:1e:f1:45:dc:16:96:27:e0:d6:1b:0c:57:60:82:aa:8c:75:
         3a:ee:1b:67:09:b1:f3:a1:8d:20:3d:04:38:25:ef:4f:9f:dc:
         d3:c3:ad:cf:dc:95:ca:d9:58:3f:78:66:e1:96:13:cb:2f:d4:
         66:dd:bc:4c:72:e5:64:5d:1e:f7:6c:a5:6f:01:d2:c4:d3:83:
         9a:7c:b1:8d:f8:56:68:f2:b1:8e:ed:f8:0f:2d:e9:41:3e:9b:
         fa:94:7c:13:3b:70:04:c5:79:a6:22:99:89:c3:dd:94:d1:d3:
         88:2e:73:36:59:08:00:af:cd:44:34:77:43:2a:55:72:ad:ed:
         89:54:34:a7:8c:0c:2f:aa:9b:1b:df:30:d6:c8:34:84:ec:1d:
         5f:b1:c6:fc:a7:75:51:0d:6f:3e:fa:79:5b:f0:ae:4d:61:11:
         0d:f9:30:0b:29:5a:32:8d:a4:31:47:41:58:d6:56:f9:cc:be:
         ef:6a:10:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:16:31 2026 by rpki-client