Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9e1491d6-2ab7-4c14-bee6-122ee4531127/341debe4-149d-318d-932a-74d9e8faae16.roa
File:                     341debe4-149d-318d-932a-74d9e8faae16.roa (raw, json)
Hash identifier:          2fuQxUDC8lvHSFOK8FfZ987Ebv7rZVAvxWqXBlwUMrQ=
Subject key identifier:   B6:79:28:FD:0B:B7:32:9D:E3:95:AF:6A:1A:31:67:03:EB:6D:3B:02
Certificate issuer:       /CN=9e1491d6-2ab7-4c14-bee6-122ee4531127
Certificate serial:       010D0C9F4328584CAE573D69CFA4A7E52E86E680
Authority key identifier: C2:B5:FB:E5:85:57:E2:F0:2A:41:C4:C8:DA:D4:D7:06:C3:0E:9B:68
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9e1491d6-2ab7-4c14-bee6-122ee4531127.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9e1491d6-2ab7-4c14-bee6-122ee4531127/341debe4-149d-318d-932a-74d9e8faae16.roa
Signing time:             Thu 29 Jan 2026 02:00:32 +0000
ROA not before:           Thu 29 Jan 2026 02:00:32 +0000
ROA not after:            Wed 29 Apr 2026 01:00:32 +0000
asID:                     14340
IP address blocks:        2600:e807:1111::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9e1491d6-2ab7-4c14-bee6-122ee4531127/9e1491d6-2ab7-4c14-bee6-122ee4531127.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9e1491d6-2ab7-4c14-bee6-122ee4531127/9e1491d6-2ab7-4c14-bee6-122ee4531127.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9e1491d6-2ab7-4c14-bee6-122ee4531127.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ae:57:3d:69:cf:a4:a7:e5:2e:86:e6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e1491d6-2ab7-4c14-bee6-122ee4531127
        Validity
            Not Before: Jan 29 02:00:32 2026 GMT
            Not After : Apr 29 01:00:32 2026 GMT
        Subject: CN=ae4081c9-7f8a-47a2-a84c-ed471ea0175e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:55:3d:48:17:7b:fc:37:a1:e4:8c:c7:62:5d:
                    84:cc:6b:12:25:b7:b6:85:9e:1c:67:c2:e0:a2:6b:
                    84:54:fd:ff:25:8c:aa:20:3f:5f:85:9f:7c:ce:6b:
                    fb:8e:cb:5b:1f:dc:fe:74:96:8a:e7:ca:4e:7e:b6:
                    a8:66:d2:6a:e7:e0:d4:13:a2:41:25:99:b4:d0:d6:
                    9b:6b:4f:bb:c4:7b:53:76:01:09:3d:97:50:2e:82:
                    70:33:bb:29:56:4a:ee:63:a7:78:76:6b:ee:0f:1a:
                    b5:44:5c:4a:ba:da:a6:74:c3:da:2f:36:e4:aa:9d:
                    88:51:de:ba:ea:b5:bf:05:fe:3b:e9:82:8d:6a:44:
                    93:5d:89:e5:4e:4e:b2:02:4c:52:2a:c8:34:c1:57:
                    49:97:33:75:9d:98:b3:0a:96:04:dd:c0:8e:83:93:
                    3e:3b:b8:ce:b5:41:5e:74:2a:16:aa:1b:c3:95:03:
                    80:13:b9:c7:eb:71:09:77:59:27:33:7d:b7:58:58:
                    9c:d5:e7:a6:a9:7e:69:38:d5:1b:9c:c2:57:81:fc:
                    18:0e:21:50:e8:ee:2e:c4:9c:c9:ae:88:eb:ad:14:
                    c4:5a:03:a0:fe:bf:c2:bc:36:30:e0:ef:f4:d9:c4:
                    f8:b4:52:ad:06:48:63:bf:d0:2b:ef:3d:24:7a:ff:
                    2c:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:79:28:FD:0B:B7:32:9D:E3:95:AF:6A:1A:31:67:03:EB:6D:3B:02
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9e1491d6-2ab7-4c14-bee6-122ee4531127/341debe4-149d-318d-932a-74d9e8faae16.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9e1491d6-2ab7-4c14-bee6-122ee4531127/9e1491d6-2ab7-4c14-bee6-122ee4531127.crl

            X509v3 Authority Key Identifier:
                keyid:C2:B5:FB:E5:85:57:E2:F0:2A:41:C4:C8:DA:D4:D7:06:C3:0E:9B:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9e1491d6-2ab7-4c14-bee6-122ee4531127.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:e807:1111::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a6:c8:75:6f:ed:36:0f:64:43:09:4c:a6:74:fa:9b:95:28:f5:
         85:55:43:ff:87:19:19:23:b2:69:03:6f:dd:e8:c0:dc:8f:14:
         85:c5:33:64:9b:b8:cb:ae:3f:90:91:1e:ad:0b:61:c2:26:d4:
         bb:96:c9:b7:b3:f4:a3:9e:1c:3c:e5:ea:09:57:ce:32:40:2a:
         3a:07:25:08:43:00:65:de:a1:e4:33:7e:2b:49:a2:e6:c4:ab:
         e0:7b:cd:47:79:59:fc:41:3c:32:25:bb:ac:da:b8:69:fa:4f:
         ca:98:d1:06:6f:e5:48:e3:a2:04:80:98:c3:25:75:38:bf:13:
         5c:c9:87:b8:88:81:21:a5:0a:1a:d8:45:4a:ff:67:99:4a:f1:
         5a:92:a1:62:7a:a9:1d:71:3b:5b:2d:33:65:c7:72:ce:e3:53:
         d0:86:d0:c7:db:69:c0:21:14:b4:55:81:4b:2c:20:41:84:f6:
         ab:5e:19:44:8b:0f:b3:3e:0b:36:ea:03:e9:c2:a8:63:45:b8:
         dd:ec:51:5d:3f:2c:0b:10:5a:04:37:a8:1c:f7:45:e1:2b:83:
         f5:f5:d0:52:92:13:70:79:8c:fd:5b:6e:34:d8:ef:14:25:60:
         a5:01:93:7d:72:4b:8c:d3:96:39:13:04:89:00:b0:c0:8b:4e:
         aa:ee:9c:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:24:45 2026 by rpki-client