Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9e1491d6-2ab7-4c14-bee6-122ee4531127/6687135c-e3b9-37b1-8160-bc72c0d5954e.roa
File:                     6687135c-e3b9-37b1-8160-bc72c0d5954e.roa (raw, json)
Hash identifier:          lhCz3gEqBUrjF7SwGd8Dd1ZUHbQnVkyvGVMsswYtoHs=
Subject key identifier:   F4:67:7A:08:50:E2:5D:1D:2B:25:4A:25:BF:E3:39:2D:6F:BC:CE:A3
Certificate issuer:       /CN=9e1491d6-2ab7-4c14-bee6-122ee4531127
Certificate serial:       010D0C9F4328584D09125B87FED690CC04ACD700
Authority key identifier: C2:B5:FB:E5:85:57:E2:F0:2A:41:C4:C8:DA:D4:D7:06:C3:0E:9B:68
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9e1491d6-2ab7-4c14-bee6-122ee4531127.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9e1491d6-2ab7-4c14-bee6-122ee4531127/6687135c-e3b9-37b1-8160-bc72c0d5954e.roa
Signing time:             Mon 02 Mar 2026 14:00:41 +0000
ROA not before:           Mon 02 Mar 2026 14:00:41 +0000
ROA not after:            Sun 31 May 2026 13:00:41 +0000
asID:                     396417
IP address blocks:        2600:e800::/28 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9e1491d6-2ab7-4c14-bee6-122ee4531127/9e1491d6-2ab7-4c14-bee6-122ee4531127.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9e1491d6-2ab7-4c14-bee6-122ee4531127/9e1491d6-2ab7-4c14-bee6-122ee4531127.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9e1491d6-2ab7-4c14-bee6-122ee4531127.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:09:12:5b:87:fe:d6:90:cc:04:ac:d7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e1491d6-2ab7-4c14-bee6-122ee4531127
        Validity
            Not Before: Mar  2 14:00:41 2026 GMT
            Not After : May 31 13:00:41 2026 GMT
        Subject: CN=21075c2f-32ce-4410-b2c8-4fcbb19abedb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:8f:38:c8:c2:28:2f:ce:48:c7:82:b5:98:58:
                    eb:a5:4f:dd:11:f7:98:00:67:c4:6a:2b:47:20:80:
                    69:9e:86:10:b3:51:f4:3c:3c:e0:d4:a0:6e:5a:2a:
                    c3:01:8b:8c:ff:aa:eb:38:55:25:d8:2a:8d:54:bc:
                    96:ad:30:5e:a2:64:fa:a0:15:c3:c9:a0:50:32:7d:
                    0c:bb:6e:95:63:a8:76:c7:bf:b9:fd:40:64:b8:33:
                    49:a2:09:ae:6a:f2:74:1a:a6:a4:b5:1b:26:50:94:
                    55:4c:72:ae:07:da:ea:87:d3:d4:32:5e:66:a1:28:
                    8b:d2:ce:3d:e0:96:b2:a2:05:b2:6f:9c:69:7b:ba:
                    c8:24:91:cb:f9:16:26:92:15:d2:0a:a3:4c:0f:00:
                    67:ef:fb:86:cb:d0:a5:0a:cd:80:29:89:16:40:b9:
                    68:44:d5:52:48:e1:d0:60:2b:ea:ea:b1:87:b7:e2:
                    19:27:8d:e6:dc:9f:e5:2a:be:6d:c5:90:1d:0d:39:
                    74:b5:48:de:9e:d1:e5:2c:15:1d:6d:e5:bd:37:f7:
                    a7:c8:3e:b7:6d:dd:1f:f0:63:15:d2:d3:62:e3:04:
                    22:ba:cf:53:c8:30:aa:11:17:69:81:77:16:c8:84:
                    6a:c2:cf:b8:35:f8:5d:46:1a:83:ff:51:40:0a:91:
                    8f:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:67:7A:08:50:E2:5D:1D:2B:25:4A:25:BF:E3:39:2D:6F:BC:CE:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9e1491d6-2ab7-4c14-bee6-122ee4531127/6687135c-e3b9-37b1-8160-bc72c0d5954e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9e1491d6-2ab7-4c14-bee6-122ee4531127/9e1491d6-2ab7-4c14-bee6-122ee4531127.crl

            X509v3 Authority Key Identifier:
                keyid:C2:B5:FB:E5:85:57:E2:F0:2A:41:C4:C8:DA:D4:D7:06:C3:0E:9B:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9e1491d6-2ab7-4c14-bee6-122ee4531127.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:e800::/28

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:de:10:b7:bb:14:a7:12:0f:bc:50:f2:2b:9a:b6:06:06:fb:
         42:8a:b8:54:b0:b9:8e:4d:1d:72:83:d9:19:f2:a4:1c:06:b2:
         d8:83:f5:91:27:19:be:17:d0:1c:b6:6b:2d:c4:dd:93:89:b5:
         f7:a8:58:8b:f4:fd:c7:55:3b:77:98:8f:d9:fb:78:35:c0:dc:
         81:13:9f:b6:1d:82:8e:81:64:e5:e6:16:2e:a0:45:07:b3:c2:
         c4:e6:65:4a:a6:35:ce:97:66:ae:eb:03:dd:38:40:ff:74:5b:
         b1:31:af:ff:60:cf:a9:bb:99:13:ca:0b:5a:02:05:12:7c:d1:
         44:b5:08:82:c6:f4:bf:4d:8e:fb:a5:ff:6e:b3:e8:ec:00:e0:
         76:43:c5:e4:3b:2c:0d:5e:19:87:12:26:e6:6f:76:45:4a:f9:
         f3:33:7c:66:7d:7d:6a:02:82:bc:02:66:6f:cd:f2:5a:d0:35:
         e4:1a:92:a4:ea:b2:65:11:81:4c:2b:6e:a6:77:ba:71:60:e4:
         a3:98:92:2f:c6:1d:db:da:fe:4f:61:29:87:15:80:1b:f4:77:
         63:6a:69:8c:1e:2b:9f:98:36:72:b8:9b:82:c5:0e:10:3f:97:
         96:8b:7e:26:e5:22:be:fa:19:ff:1f:ea:40:89:d7:83:8d:4e:
         79:ce:54:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:44:56 2026 by rpki-client