Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1fb5932e-f862-443b-a719-26a612c2f112/0197a9e6-d271-3b8a-99d2-ee2c9bed2b5a.roa
File:                     0197a9e6-d271-3b8a-99d2-ee2c9bed2b5a.roa (raw, json)
Hash identifier:          bvVEmVK/CjiOwVWoODknp/4KTrlOjuSz336ueDhemRU=
Subject key identifier:   14:27:05:5C:0A:1A:26:B0:02:36:C8:4F:C6:55:13:81:3E:AF:0C:65
Certificate issuer:       /CN=1fb5932e-f862-443b-a719-26a612c2f112
Certificate serial:       010D0C9F4328584D037D07BE7A0EB230AB9D9980
Authority key identifier: F5:AB:0F:90:6F:99:E6:9A:92:D2:B6:31:82:2C:59:81:14:79:AC:D6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1fb5932e-f862-443b-a719-26a612c2f112.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1fb5932e-f862-443b-a719-26a612c2f112/0197a9e6-d271-3b8a-99d2-ee2c9bed2b5a.roa
Signing time:             Sat 28 Feb 2026 14:00:40 +0000
ROA not before:           Sat 28 Feb 2026 14:00:40 +0000
ROA not after:            Fri 29 May 2026 13:00:40 +0000
asID:                     17326
IP address blocks:        2602:fd2a::/36 maxlen: 52
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1fb5932e-f862-443b-a719-26a612c2f112/1fb5932e-f862-443b-a719-26a612c2f112.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1fb5932e-f862-443b-a719-26a612c2f112/1fb5932e-f862-443b-a719-26a612c2f112.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1fb5932e-f862-443b-a719-26a612c2f112.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:03:7d:07:be:7a:0e:b2:30:ab:9d:99:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1fb5932e-f862-443b-a719-26a612c2f112
        Validity
            Not Before: Feb 28 14:00:40 2026 GMT
            Not After : May 29 13:00:40 2026 GMT
        Subject: CN=9eff85b1-d915-49e3-ab0c-24f44b7c8812
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:99:e8:f5:46:6a:88:d2:c7:bc:d4:c9:43:5a:
                    5e:99:be:aa:b4:a7:b7:43:76:f4:56:f0:c6:59:1e:
                    3d:f0:5c:6e:87:d5:06:6a:09:26:7c:a5:4e:fe:0b:
                    07:df:48:55:36:91:13:9d:46:e3:36:5a:1b:37:0d:
                    5b:d6:91:3f:5d:87:1d:ee:24:f4:e0:c6:f9:94:01:
                    64:c6:25:0b:08:dd:eb:80:15:89:d6:0d:48:e7:92:
                    b4:30:5b:a9:15:bf:04:0c:20:33:76:9e:15:2e:cd:
                    a6:15:a3:d0:4b:c5:e5:db:50:af:9c:93:e5:09:06:
                    46:a1:3a:03:6a:6d:6f:a9:9d:20:49:6a:f7:d8:96:
                    ec:00:93:02:16:d1:3f:10:0c:de:ee:9a:66:40:3b:
                    ff:c1:39:00:4e:01:7e:54:27:7c:da:7e:22:89:a8:
                    62:7d:89:fd:ee:99:18:48:98:9b:52:a4:29:40:00:
                    88:9e:18:81:ca:89:be:3c:69:0a:6e:58:55:0e:b7:
                    7d:47:34:6a:1c:b8:cd:93:bd:b2:ea:30:99:6e:23:
                    04:4d:f8:90:37:2e:ca:58:06:fb:75:52:50:6a:67:
                    32:5c:08:cd:00:3d:4d:cc:45:8e:53:f6:d4:eb:ba:
                    a8:9d:2a:b0:89:f6:34:4b:52:39:7c:44:8a:9c:2b:
                    94:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:27:05:5C:0A:1A:26:B0:02:36:C8:4F:C6:55:13:81:3E:AF:0C:65
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1fb5932e-f862-443b-a719-26a612c2f112/0197a9e6-d271-3b8a-99d2-ee2c9bed2b5a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1fb5932e-f862-443b-a719-26a612c2f112/1fb5932e-f862-443b-a719-26a612c2f112.crl

            X509v3 Authority Key Identifier:
                keyid:F5:AB:0F:90:6F:99:E6:9A:92:D2:B6:31:82:2C:59:81:14:79:AC:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1fb5932e-f862-443b-a719-26a612c2f112.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fd2a::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:d1:dc:d1:99:5f:c0:56:20:53:1c:3a:11:b7:5b:24:59:5c:
         22:48:c0:67:71:71:bd:9d:d4:ec:6e:c8:15:49:1f:50:22:90:
         39:c1:4b:d4:40:fb:d7:5a:68:a0:12:e6:27:0e:9d:ca:7d:52:
         d4:e1:51:5a:c5:76:b2:4a:7a:3b:3a:1b:15:5f:c9:b4:e9:7c:
         23:4f:d4:60:8b:2c:e2:d2:f0:3f:68:11:b5:a2:fb:bb:52:37:
         82:0e:48:f3:9e:d4:85:d2:a2:9f:a7:c9:f8:f4:ea:06:92:e2:
         5a:e2:51:67:d3:ec:63:bc:78:a4:37:57:06:cd:56:2d:a2:bc:
         4c:c2:6d:64:6b:be:81:f0:9c:79:2a:e5:cc:ec:b9:94:0c:bf:
         5c:82:78:92:da:9d:09:0b:39:de:29:d7:65:bb:12:f5:73:8f:
         72:44:74:56:d9:22:bd:3c:50:58:b1:92:38:64:86:b9:81:61:
         fc:2e:46:7c:14:88:8f:a4:79:19:52:9d:f3:c2:f0:fc:99:c4:
         cc:e2:04:29:af:1d:e6:f3:0d:7d:47:34:0d:12:d7:ec:fd:ae:
         ff:30:04:c6:69:17:fb:c0:74:2a:a6:f7:fa:20:18:cc:02:12:
         fc:b4:52:45:38:31:5f:be:9a:50:da:14:8f:65:b7:e1:b0:6e:
         8f:7d:00:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 21:14:01 2026 by rpki-client