Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/238027b7-f885-48c0-bd75-bd1fe124e1e0/0e7b6b94-9855-32f8-8b01-5e42800b5852.roa
File:                     0e7b6b94-9855-32f8-8b01-5e42800b5852.roa (raw, json)
Hash identifier:          BhjEpcv2zimny2gK2+l8Y+Prvh5c73zMSSgICPUBuJI=
Subject key identifier:   74:C8:F6:4E:D1:74:66:DE:AA:2B:70:4D:FA:85:F6:43:7E:39:89:FC
Certificate issuer:       /CN=238027b7-f885-48c0-bd75-bd1fe124e1e0
Certificate serial:       010D0C9F4328584CDF324A80BD4D9B094CB6CD40
Authority key identifier: A1:A4:ED:D3:2D:32:25:51:ED:8A:2F:75:66:9A:34:E6:D0:D2:71:AA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/238027b7-f885-48c0-bd75-bd1fe124e1e0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/238027b7-f885-48c0-bd75-bd1fe124e1e0/0e7b6b94-9855-32f8-8b01-5e42800b5852.roa
Signing time:             Sun 15 Feb 2026 14:00:41 +0000
ROA not before:           Sun 15 Feb 2026 14:00:41 +0000
ROA not after:            Sat 16 May 2026 13:00:41 +0000
asID:                     398485
IP address blocks:        2602:fb2b::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/238027b7-f885-48c0-bd75-bd1fe124e1e0/238027b7-f885-48c0-bd75-bd1fe124e1e0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/238027b7-f885-48c0-bd75-bd1fe124e1e0/238027b7-f885-48c0-bd75-bd1fe124e1e0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/238027b7-f885-48c0-bd75-bd1fe124e1e0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:df:32:4a:80:bd:4d:9b:09:4c:b6:cd:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=238027b7-f885-48c0-bd75-bd1fe124e1e0
        Validity
            Not Before: Feb 15 14:00:41 2026 GMT
            Not After : May 16 13:00:41 2026 GMT
        Subject: CN=d493f068-fdda-47a6-af55-d6a27a2f9c7d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:a7:2d:74:84:1b:d2:2f:78:5d:d1:23:3e:b4:
                    54:e0:a8:12:c9:df:37:f1:af:1a:56:31:8e:37:90:
                    c2:63:06:4f:c2:3f:31:af:53:2b:09:08:e1:39:2c:
                    00:24:2c:ed:a2:51:25:9c:cd:42:53:6e:db:71:5a:
                    e8:47:ae:7c:2b:e6:35:9f:7f:fb:29:13:a3:bc:ca:
                    38:6a:ed:df:a9:8a:28:c8:51:7e:40:e0:4e:97:9a:
                    58:40:12:d0:d5:0f:4a:85:10:62:24:a9:ff:85:7d:
                    0a:cc:cf:ec:53:07:42:59:f6:6c:2d:ee:ed:8f:a4:
                    97:a7:c6:72:f8:cd:ca:81:02:a1:fa:dd:37:f3:14:
                    29:06:14:5f:f4:e2:87:f9:29:64:6c:8f:42:77:48:
                    3d:5f:1d:91:b2:de:91:75:35:1f:e9:af:bb:0c:00:
                    ab:f2:64:fa:24:99:4d:e9:c7:f4:5d:92:14:26:42:
                    4b:9e:8f:92:75:9c:22:d1:bf:46:e7:73:4f:ee:24:
                    da:89:79:e8:2a:23:19:f1:a0:b1:a2:61:09:da:40:
                    d0:96:86:24:71:11:b2:e2:66:e4:be:9c:3d:94:14:
                    a8:8c:ae:8c:29:8e:a6:60:98:a2:d7:88:23:35:c7:
                    be:33:7e:7d:35:5b:ec:3f:cf:b0:98:8a:87:b4:9a:
                    e4:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:C8:F6:4E:D1:74:66:DE:AA:2B:70:4D:FA:85:F6:43:7E:39:89:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/238027b7-f885-48c0-bd75-bd1fe124e1e0/0e7b6b94-9855-32f8-8b01-5e42800b5852.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/238027b7-f885-48c0-bd75-bd1fe124e1e0/238027b7-f885-48c0-bd75-bd1fe124e1e0.crl

            X509v3 Authority Key Identifier:
                keyid:A1:A4:ED:D3:2D:32:25:51:ED:8A:2F:75:66:9A:34:E6:D0:D2:71:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/238027b7-f885-48c0-bd75-bd1fe124e1e0.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fb2b::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:ec:26:65:63:64:88:f7:b8:ec:7c:cc:21:c8:ad:03:1d:05:
         1b:91:b0:c8:d5:c5:74:e4:dd:a5:3f:de:2c:d8:ce:80:96:e6:
         db:9c:dd:d3:57:e9:da:56:ed:0b:79:14:ef:82:2c:35:cf:07:
         83:aa:0c:9d:f8:22:e7:6a:b0:55:fe:bf:b1:d3:eb:5f:cf:34:
         e0:53:17:34:ff:30:49:df:bc:61:11:09:28:ea:6c:51:86:32:
         89:4a:8e:ca:e9:78:03:04:79:ee:b9:14:34:07:9f:af:1a:96:
         3f:be:dd:34:e8:6e:68:86:82:fa:c5:70:1f:d4:f7:26:7c:09:
         7a:68:66:ae:27:e8:24:aa:da:64:03:6b:31:d2:ae:c1:83:b2:
         09:05:40:1b:66:8c:8d:ee:b6:8f:e6:5a:fc:b6:07:5b:be:ea:
         f0:42:b4:f1:7a:8c:36:ec:e3:b7:f5:de:0f:6a:ba:69:b0:04:
         fe:09:34:3f:ba:ac:62:99:a9:aa:b5:93:0b:52:b5:b0:9d:d5:
         ea:df:62:96:db:a9:0c:c7:0f:72:c8:c1:38:49:e2:c5:51:92:
         fe:83:75:25:18:9e:77:8c:36:2d:f4:d4:4a:ab:8d:ef:38:79:
         f6:8e:26:41:a5:b6:93:cf:35:fd:af:1d:c7:cd:ab:7e:68:5f:
         b2:ad:93:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:13:37 2026 by rpki-client