Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/1ed7089c-e365-3674-9455-efb27e243354.roa
File:                     1ed7089c-e365-3674-9455-efb27e243354.roa (raw, json)
Hash identifier:          4KvIMhZiCbt4SlcsbvG4TokVRkeHxknOOE3cWvwDvDE=
Subject key identifier:   DD:DB:53:F5:51:BC:B5:34:E3:E1:00:9C:8E:38:7B:F6:E3:2F:07:EE
Certificate issuer:       /CN=601de417-7cdc-45d3-8d80-7279489a39e0
Certificate serial:       010D0C9F4328584CD4166F465A27F45A20BFCF50
Authority key identifier: BD:6E:8D:C2:3E:B9:DA:1D:07:C2:5B:76:67:C5:CC:10:35:41:EE:89
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/1ed7089c-e365-3674-9455-efb27e243354.roa
Signing time:             Wed 11 Feb 2026 14:31:13 +0000
ROA not before:           Wed 11 Feb 2026 14:31:13 +0000
ROA not after:            Tue 12 May 2026 13:31:13 +0000
asID:                     63023
IP address blocks:        2604:86c0:8000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:d4:16:6f:46:5a:27:f4:5a:20:bf:cf:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=601de417-7cdc-45d3-8d80-7279489a39e0
        Validity
            Not Before: Feb 11 14:31:13 2026 GMT
            Not After : May 12 13:31:13 2026 GMT
        Subject: CN=524c6893-fe7f-4a49-a19a-957cbcb41d8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:02:c2:be:86:7f:82:08:9d:33:52:2f:38:84:
                    03:7e:fb:e1:d1:e7:d5:c7:96:c6:ed:63:9a:ba:fc:
                    5b:86:16:c8:6d:b9:22:ec:1a:74:bb:b4:f0:dd:4f:
                    e4:c1:a2:3b:16:fd:87:1b:8f:5f:69:8e:b9:de:d1:
                    7a:e4:1b:ae:87:08:3e:bf:7a:cb:72:eb:5f:57:1b:
                    62:02:ed:d1:2c:df:fa:55:09:4b:5f:c0:8c:18:4f:
                    eb:9b:e8:30:d2:1c:2c:b2:99:18:c0:0b:47:33:b4:
                    90:4f:4e:5d:34:38:87:94:00:17:6b:64:80:17:9e:
                    b6:4c:1b:63:cd:a7:5d:c6:f5:30:8a:89:bd:e9:fd:
                    7b:7d:5c:71:c8:ee:b5:be:fd:72:b5:80:ab:48:12:
                    bd:fa:13:4c:f4:40:83:d5:ff:da:96:41:b5:48:26:
                    57:db:4d:bc:43:4c:f1:2c:46:f6:b6:78:43:16:08:
                    ce:02:40:bc:5b:2a:0f:a3:4b:08:62:00:af:cf:27:
                    94:6d:a9:c0:75:e9:85:18:bf:d3:76:20:c0:78:9e:
                    64:59:3f:01:62:e8:79:d8:ae:15:82:83:e8:67:d1:
                    61:f6:53:07:c6:b9:ac:95:9d:36:0d:57:0c:5a:b8:
                    7c:31:dd:38:ba:32:25:a9:93:d0:51:4c:22:f5:43:
                    93:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:DB:53:F5:51:BC:B5:34:E3:E1:00:9C:8E:38:7B:F6:E3:2F:07:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/1ed7089c-e365-3674-9455-efb27e243354.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.crl

            X509v3 Authority Key Identifier:
                keyid:BD:6E:8D:C2:3E:B9:DA:1D:07:C2:5B:76:67:C5:CC:10:35:41:EE:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:86c0:8000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:a7:e4:f1:5f:aa:68:ea:dc:d1:2b:0c:52:61:4e:4e:63:91:
         8a:77:fb:94:7d:8e:3c:1a:a2:00:e7:bb:23:6f:a6:93:d4:63:
         1d:81:44:8e:c8:80:71:af:2f:af:02:32:27:72:3a:02:5a:ec:
         00:70:1c:1f:2d:ac:3a:e1:28:1b:b9:cd:9d:49:e1:fa:f9:dc:
         fc:fa:e8:cb:0e:58:26:00:ed:bd:15:4a:25:68:c5:99:07:fc:
         5d:c2:7f:ce:a7:8a:f0:54:07:1f:89:03:a9:03:32:b2:63:a0:
         1c:30:7c:ba:ee:11:15:f2:e7:7c:3d:86:f7:0b:ac:74:8b:2f:
         a4:b5:f9:ae:27:91:8a:1c:14:e8:dd:1a:c2:c6:2e:4f:8a:35:
         6c:5a:a2:07:1c:ba:e6:36:5a:f4:78:c0:04:36:f4:30:26:cb:
         59:27:0a:df:b5:22:14:b8:28:05:60:5e:a1:ba:0b:2c:e9:83:
         dd:d3:51:4a:39:34:d9:26:06:d8:0b:04:f3:0b:3d:09:be:f7:
         bb:46:47:48:08:2c:7c:49:4f:d0:e0:4e:81:67:99:fa:6d:9c:
         73:eb:15:21:a1:25:54:9d:8e:f5:6b:27:52:59:c2:43:94:0e:
         86:02:e9:7b:8e:51:b1:6c:2a:4e:0e:41:29:a3:8a:a2:88:31:
         33:ec:f2:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:05:47 2026 by rpki-client