Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a74bb2f1-5966-4c4a-a5e4-ace59e1fa27e/69fbfc3a-5c04-3eca-896d-b72904e55459.roa
File:                     69fbfc3a-5c04-3eca-896d-b72904e55459.roa (raw, json)
Hash identifier:          s2SIloffoUVRYN3P1KGhfX7fC36UqLJgxbOCgM3XmRQ=
Subject key identifier:   A1:C9:29:B3:40:CC:2B:2A:61:C4:AC:2F:2E:73:A1:5A:29:21:F8:99
Certificate issuer:       /CN=a74bb2f1-5966-4c4a-a5e4-ace59e1fa27e
Certificate serial:       010D0C9F4328584CFF4CD8F16911061FE1EB5B00
Authority key identifier: 8F:2C:1A:5D:87:37:7C:47:21:1E:17:7A:7A:C5:62:C1:07:5E:DE:58
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a74bb2f1-5966-4c4a-a5e4-ace59e1fa27e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a74bb2f1-5966-4c4a-a5e4-ace59e1fa27e/69fbfc3a-5c04-3eca-896d-b72904e55459.roa
Signing time:             Fri 27 Feb 2026 02:00:31 +0000
ROA not before:           Fri 27 Feb 2026 02:00:31 +0000
ROA not after:            Thu 28 May 2026 01:00:31 +0000
asID:                     210025
IP address blocks:        2602:fab0:50::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a74bb2f1-5966-4c4a-a5e4-ace59e1fa27e/a74bb2f1-5966-4c4a-a5e4-ace59e1fa27e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a74bb2f1-5966-4c4a-a5e4-ace59e1fa27e/a74bb2f1-5966-4c4a-a5e4-ace59e1fa27e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a74bb2f1-5966-4c4a-a5e4-ace59e1fa27e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ff:4c:d8:f1:69:11:06:1f:e1:eb:5b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a74bb2f1-5966-4c4a-a5e4-ace59e1fa27e
        Validity
            Not Before: Feb 27 02:00:31 2026 GMT
            Not After : May 28 01:00:31 2026 GMT
        Subject: CN=c03c3412-113c-40b1-ac4f-315559d49b9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:9b:7d:6b:b4:2f:61:e8:62:4a:41:1f:a3:67:
                    0a:a1:da:b7:d5:07:8a:be:df:02:02:c8:c4:5a:8b:
                    5d:9d:f7:ae:08:05:8d:04:de:d4:f9:cf:28:c6:8a:
                    8a:15:20:4c:5f:5b:a2:9f:b3:ce:d6:9b:94:52:cb:
                    9e:4a:5f:97:32:45:72:3b:9e:b1:03:f9:2b:0c:d5:
                    ab:15:88:15:27:2d:36:6e:8c:70:09:cc:f2:21:b8:
                    3a:2b:8c:0f:c6:cd:a5:3b:42:5d:fa:bb:08:9d:d4:
                    5e:40:8d:7c:51:8c:75:a2:8f:ff:93:f8:c8:8c:61:
                    59:24:db:2a:0d:16:32:09:3e:e6:92:fe:79:97:d0:
                    7a:84:f7:04:cd:c8:fc:7f:2a:f6:02:72:7f:ea:f2:
                    02:e4:32:f1:55:ef:f8:de:86:50:1f:26:15:bb:97:
                    82:d9:82:bb:19:5d:61:9b:df:42:45:99:d3:c4:6d:
                    89:a2:bb:07:d5:c7:30:5a:8d:08:94:b8:1e:aa:08:
                    f3:4d:9c:f5:48:3e:a4:16:0b:4a:41:98:e0:3b:63:
                    fb:2a:ce:1a:c6:65:4d:97:29:9a:07:04:87:c6:db:
                    e3:42:07:ce:97:08:1c:94:c6:18:71:5b:6f:48:38:
                    96:0f:39:4b:94:85:f5:85:67:64:5d:e5:93:47:c8:
                    00:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:C9:29:B3:40:CC:2B:2A:61:C4:AC:2F:2E:73:A1:5A:29:21:F8:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a74bb2f1-5966-4c4a-a5e4-ace59e1fa27e/69fbfc3a-5c04-3eca-896d-b72904e55459.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a74bb2f1-5966-4c4a-a5e4-ace59e1fa27e/a74bb2f1-5966-4c4a-a5e4-ace59e1fa27e.crl

            X509v3 Authority Key Identifier:
                keyid:8F:2C:1A:5D:87:37:7C:47:21:1E:17:7A:7A:C5:62:C1:07:5E:DE:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a74bb2f1-5966-4c4a-a5e4-ace59e1fa27e.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fab0:50::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:0f:62:f9:25:65:50:63:a7:af:e0:d6:56:b8:c4:22:a5:34:
         e3:da:1e:5f:21:3f:7f:ca:6f:95:2b:26:21:ac:f7:99:b4:ce:
         72:d7:c3:b3:dd:e2:cb:a7:b7:2d:2f:31:92:6e:a6:1c:4b:56:
         a1:2f:e5:d7:18:79:3c:5b:de:56:e2:be:c4:73:ff:65:21:9f:
         bd:0b:07:96:e7:7b:26:22:b2:e6:62:71:56:c8:88:25:9a:0b:
         64:c6:18:d1:5b:d9:4c:3c:73:3d:8b:0d:3e:c7:b1:db:8b:72:
         a2:24:a1:2e:8a:86:19:54:6b:4a:83:54:86:68:5a:35:83:72:
         73:93:27:3f:bd:e0:b5:e5:cb:88:c2:a8:1c:d4:2b:ca:b3:0f:
         08:28:c9:38:5b:80:fa:7b:63:ad:21:c9:5d:53:b6:50:43:f9:
         0f:db:e9:fd:bf:28:b7:a1:fe:38:4e:8d:b0:be:b4:16:69:b8:
         5b:83:97:2e:a9:2b:bc:ac:3e:4f:99:17:9a:ac:05:da:dd:ca:
         e3:38:59:37:32:fa:80:2a:57:ed:09:1a:b8:e2:31:c5:ec:14:
         c0:35:c7:24:f8:69:0c:61:dc:b3:41:b9:1d:95:a4:c0:59:db:
         65:76:cb:8e:24:1b:51:24:71:51:22:5d:c3:82:f4:2e:86:8f:
         07:0f:1a:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:32:17 2026 by rpki-client