Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2e689c55-8453-486f-8b88-f433fba67f55/49fb0d9a-4a7a-3a97-8872-0aa8f5966daf.roa
File:                     49fb0d9a-4a7a-3a97-8872-0aa8f5966daf.roa (raw, json)
Hash identifier:          g7XC3Rlft3qdOqgDJwWPydJBta0MStrixRwuW/fOGew=
Subject key identifier:   CB:E8:C8:4E:EB:5A:0E:69:06:0C:29:C2:5D:EB:33:94:C3:92:1B:AE
Certificate issuer:       /CN=2e689c55-8453-486f-8b88-f433fba67f55
Certificate serial:       010D0C9F4328584CED27825593E4308E8C25B180
Authority key identifier: CA:2D:8E:C3:CC:29:85:C4:8B:25:AE:E0:EB:D5:2D:89:72:73:32:2D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2e689c55-8453-486f-8b88-f433fba67f55.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2e689c55-8453-486f-8b88-f433fba67f55/49fb0d9a-4a7a-3a97-8872-0aa8f5966daf.roa
Signing time:             Fri 20 Feb 2026 14:00:41 +0000
ROA not before:           Fri 20 Feb 2026 14:00:41 +0000
ROA not after:            Thu 21 May 2026 13:00:41 +0000
asID:                     26216
IP address blocks:        2607:2b40::/32 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2e689c55-8453-486f-8b88-f433fba67f55/2e689c55-8453-486f-8b88-f433fba67f55.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2e689c55-8453-486f-8b88-f433fba67f55/2e689c55-8453-486f-8b88-f433fba67f55.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2e689c55-8453-486f-8b88-f433fba67f55.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ed:27:82:55:93:e4:30:8e:8c:25:b1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2e689c55-8453-486f-8b88-f433fba67f55
        Validity
            Not Before: Feb 20 14:00:41 2026 GMT
            Not After : May 21 13:00:41 2026 GMT
        Subject: CN=684e7efb-c756-434f-b6b6-b4796595354c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:0b:a8:8e:6b:bf:30:ca:df:42:cb:7e:2e:ab:
                    08:13:3a:7e:26:c7:ba:c9:70:81:dc:6a:05:37:b3:
                    01:95:4c:a2:cc:32:cb:12:a0:78:b5:ec:0c:0f:44:
                    76:3a:b2:65:72:fd:c5:42:d4:12:93:39:12:42:70:
                    9f:c1:c4:49:bb:40:39:ed:b3:bd:65:da:49:b4:af:
                    23:f3:38:3a:67:b4:39:20:78:ae:82:fc:d2:ab:0a:
                    cd:26:58:86:e6:c9:ba:89:26:41:61:ec:ad:a3:a6:
                    8a:ae:89:06:8b:29:b4:4b:4b:2d:ae:07:ba:af:7c:
                    97:f1:ef:8f:09:51:d6:18:bc:70:b2:0d:45:7a:e7:
                    41:fd:29:33:b3:1c:56:4e:00:47:96:0f:3e:59:2f:
                    86:54:13:7b:a2:d7:89:28:d4:a6:93:d6:80:9f:a1:
                    33:65:80:16:2e:dc:9e:7a:63:5a:23:80:d1:99:f8:
                    ce:a8:eb:82:5c:22:57:22:56:ed:fc:14:9c:dc:87:
                    f6:eb:36:46:8d:11:a3:69:6a:d4:48:97:c4:22:7a:
                    8d:b5:a1:28:65:7b:0f:0d:3d:e4:f2:77:d6:76:c9:
                    10:e3:7f:fd:45:02:ff:c5:92:a2:b6:8f:db:05:de:
                    43:e9:46:9f:7b:d0:58:b7:d6:15:af:8b:bf:72:bc:
                    f7:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:E8:C8:4E:EB:5A:0E:69:06:0C:29:C2:5D:EB:33:94:C3:92:1B:AE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2e689c55-8453-486f-8b88-f433fba67f55/49fb0d9a-4a7a-3a97-8872-0aa8f5966daf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2e689c55-8453-486f-8b88-f433fba67f55/2e689c55-8453-486f-8b88-f433fba67f55.crl

            X509v3 Authority Key Identifier:
                keyid:CA:2D:8E:C3:CC:29:85:C4:8B:25:AE:E0:EB:D5:2D:89:72:73:32:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2e689c55-8453-486f-8b88-f433fba67f55.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:2b40::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:91:85:e4:28:9e:41:7a:63:10:d2:26:1d:10:c1:c7:a4:3e:
         2d:19:60:32:43:a7:c8:3f:b6:4c:3d:09:dd:23:d2:03:01:e8:
         3f:38:7e:f5:34:27:ff:7f:8c:cb:02:18:b1:61:3b:18:4d:41:
         f6:d2:62:29:aa:83:19:97:67:ae:3c:f4:da:4f:37:66:18:b0:
         25:b1:3f:41:22:0a:bb:f9:63:75:e5:77:fa:0c:83:4b:d1:18:
         7d:86:3c:15:a4:5c:f4:68:81:f4:fa:1b:f0:a7:69:09:01:89:
         8a:99:8f:a8:c0:34:02:3f:0c:96:e5:84:7c:db:56:12:43:28:
         e1:18:1b:8a:3e:34:b1:95:b6:67:4f:b8:87:0f:2e:7a:80:1c:
         4c:dc:e1:58:9a:fe:dc:f1:dd:6a:6f:ce:98:86:9f:91:99:ee:
         79:ee:f6:38:a2:66:fc:2c:7b:35:15:10:eb:82:b0:44:34:74:
         8d:41:01:40:94:67:fd:43:87:4c:37:c3:2a:8b:2c:ed:1b:6c:
         4e:e6:15:d6:4f:82:1e:3c:fe:42:cd:30:71:c2:f7:9f:a9:e8:
         05:81:50:ca:fa:31:fe:6b:9b:29:4e:16:f1:a6:5d:58:77:c6:
         c1:a3:68:7c:9e:55:9d:3d:a3:2e:4c:7c:5d:fd:73:e7:59:3f:
         db:6c:5d:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:42:42 2026 by rpki-client