Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5f886d4a-74e0-4cee-83ea-7f75a6c71c53/133eba74-e3e9-3b71-9c06-ec65304fddfa.roa
File:                     133eba74-e3e9-3b71-9c06-ec65304fddfa.roa (raw, json)
Hash identifier:          UmuuMDHNPmPSx3sTFWM74iJPPjF1NR1Fjpu5JnI57jU=
Subject key identifier:   36:23:F1:FD:21:2D:EF:81:57:5B:91:10:C0:7F:6A:88:50:CF:26:71
Certificate issuer:       /CN=5f886d4a-74e0-4cee-83ea-7f75a6c71c53
Certificate serial:       010D0C9F4328584D0217AF86648913AACB685580
Authority key identifier: 6A:A5:CC:B3:80:BC:8D:39:D5:C9:30:F4:6C:E8:7B:DB:26:1C:AE:46
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5f886d4a-74e0-4cee-83ea-7f75a6c71c53.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5f886d4a-74e0-4cee-83ea-7f75a6c71c53/133eba74-e3e9-3b71-9c06-ec65304fddfa.roa
Signing time:             Sat 28 Feb 2026 02:00:32 +0000
ROA not before:           Sat 28 Feb 2026 02:00:32 +0000
ROA not after:            Fri 29 May 2026 01:00:32 +0000
asID:                     152697
IP address blocks:        2602:2e0:ff::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5f886d4a-74e0-4cee-83ea-7f75a6c71c53/5f886d4a-74e0-4cee-83ea-7f75a6c71c53.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5f886d4a-74e0-4cee-83ea-7f75a6c71c53/5f886d4a-74e0-4cee-83ea-7f75a6c71c53.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5f886d4a-74e0-4cee-83ea-7f75a6c71c53.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:02:17:af:86:64:89:13:aa:cb:68:55:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5f886d4a-74e0-4cee-83ea-7f75a6c71c53
        Validity
            Not Before: Feb 28 02:00:32 2026 GMT
            Not After : May 29 01:00:32 2026 GMT
        Subject: CN=1cd92d84-a389-4f6f-83e5-b670747dd221
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:eb:07:98:80:5b:1b:33:b9:1d:bc:7f:30:f0:
                    3d:fc:a5:13:8a:d5:d4:0d:34:ac:85:19:a1:f9:7f:
                    e9:ca:ef:41:39:06:ac:8b:a6:a0:04:90:9d:e1:60:
                    87:e3:c5:77:f4:56:ee:a4:d9:55:5b:44:f7:ea:1e:
                    34:48:16:81:11:36:a7:09:b3:46:85:b6:d8:2e:b1:
                    78:2c:04:2d:90:4f:1f:ce:c1:91:8d:83:b4:5f:fd:
                    49:2a:c7:54:76:df:6b:3a:20:25:be:82:78:5b:b1:
                    69:f0:fe:66:b6:db:86:bd:d4:59:ee:1b:ce:7a:d4:
                    f6:19:e0:c3:6a:db:a5:92:d3:bf:41:ae:1f:a4:f2:
                    db:e3:99:fa:f8:9f:b9:fd:f1:ba:8c:ad:b8:7e:fb:
                    78:c2:b6:04:ff:0c:48:bb:33:f1:33:4d:cb:99:de:
                    fe:ef:fb:2b:40:9c:19:e2:81:78:cd:1b:4e:9b:45:
                    54:71:45:d2:1a:78:45:ec:d0:07:46:31:2f:9e:10:
                    6f:b3:5c:e8:73:c7:a5:8f:b7:d0:8b:da:ab:44:d4:
                    e7:b7:66:2f:90:94:8a:82:b2:44:51:08:3f:bb:97:
                    d2:1e:d5:16:1e:7e:cf:39:11:40:8f:e2:2b:a2:92:
                    6b:d9:97:8d:2e:2c:69:e1:46:fe:fb:66:11:c6:cf:
                    ea:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:23:F1:FD:21:2D:EF:81:57:5B:91:10:C0:7F:6A:88:50:CF:26:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5f886d4a-74e0-4cee-83ea-7f75a6c71c53/133eba74-e3e9-3b71-9c06-ec65304fddfa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5f886d4a-74e0-4cee-83ea-7f75a6c71c53/5f886d4a-74e0-4cee-83ea-7f75a6c71c53.crl

            X509v3 Authority Key Identifier:
                keyid:6A:A5:CC:B3:80:BC:8D:39:D5:C9:30:F4:6C:E8:7B:DB:26:1C:AE:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5f886d4a-74e0-4cee-83ea-7f75a6c71c53.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:2e0:ff::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bb:34:62:15:91:74:e9:81:d1:fa:21:b4:d9:b8:8f:40:59:b1:
         4e:42:f4:00:04:6c:f8:12:a5:d3:6e:1d:f5:83:83:2f:14:03:
         ef:0f:ba:c7:76:63:01:25:a2:c3:40:02:ab:72:8d:4e:38:06:
         cf:9e:3d:14:ca:b2:be:c2:bc:57:36:93:bd:69:0e:5e:88:d3:
         38:7a:3b:bd:e4:14:12:94:64:b5:03:b2:8e:1e:03:95:ac:79:
         58:3b:d7:d9:28:bd:ae:4d:35:f6:ef:49:cb:b5:72:51:c0:12:
         5d:07:06:7b:e5:60:5c:81:9d:61:c2:71:1b:e2:a0:ca:48:7e:
         b0:bc:f6:54:89:97:21:4a:54:3d:37:07:04:95:b7:91:be:d9:
         42:ee:d5:13:65:49:38:31:25:01:b8:a3:dd:fc:79:d7:a7:80:
         ea:e8:8e:97:89:e6:57:e9:94:d5:c8:4f:42:6a:21:85:7f:6c:
         4a:4a:88:88:03:db:a5:14:fa:53:20:06:16:84:52:c4:6d:ce:
         bc:d6:c5:95:ee:7f:24:34:16:20:34:1f:6c:df:cc:01:06:5f:
         5b:db:ce:7c:a1:e6:e9:e0:a4:c0:1a:9a:91:d0:a1:7d:56:50:
         05:18:7c:90:d1:53:32:b7:bb:c6:fe:d0:02:32:ca:4b:2b:14:
         8e:0e:66:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:50:46 2026 by rpki-client