Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aab17bea-e665-4ed1-abe3-d2a9ac34e0ea/381fe162-8140-3694-81fa-38c3b160b29d.roa
File:                     381fe162-8140-3694-81fa-38c3b160b29d.roa (raw, json)
Hash identifier:          udHZy/Fl/XJGcrdP8oDGKlsCOAxW5jezDNkAlaPIyVo=
Subject key identifier:   2C:AE:40:44:6D:96:F3:1F:7A:75:7B:10:75:16:F6:F9:0A:6E:02:ED
Certificate issuer:       /CN=aab17bea-e665-4ed1-abe3-d2a9ac34e0ea
Certificate serial:       010D0C9F4328584CF5878E09EB270A50220581C0
Authority key identifier: 2D:A8:80:D4:EF:B5:CF:45:3C:4F:94:85:37:75:C6:0D:C1:14:15:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aab17bea-e665-4ed1-abe3-d2a9ac34e0ea.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aab17bea-e665-4ed1-abe3-d2a9ac34e0ea/381fe162-8140-3694-81fa-38c3b160b29d.roa
Signing time:             Mon 23 Feb 2026 14:00:41 +0000
ROA not before:           Mon 23 Feb 2026 14:00:41 +0000
ROA not after:            Sun 24 May 2026 13:00:41 +0000
asID:                     400861
IP address blocks:        2602:2da:3::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aab17bea-e665-4ed1-abe3-d2a9ac34e0ea/aab17bea-e665-4ed1-abe3-d2a9ac34e0ea.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aab17bea-e665-4ed1-abe3-d2a9ac34e0ea/aab17bea-e665-4ed1-abe3-d2a9ac34e0ea.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aab17bea-e665-4ed1-abe3-d2a9ac34e0ea.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:f5:87:8e:09:eb:27:0a:50:22:05:81:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aab17bea-e665-4ed1-abe3-d2a9ac34e0ea
        Validity
            Not Before: Feb 23 14:00:41 2026 GMT
            Not After : May 24 13:00:41 2026 GMT
        Subject: CN=5ad6cd15-548b-4a12-b65c-e277dfc626a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:ef:38:59:51:71:97:9c:42:a0:25:8d:ad:86:
                    2c:1b:72:b0:70:0d:19:1e:95:2d:73:8c:4f:19:d3:
                    91:f6:d7:b8:1b:78:3d:4e:de:7a:a1:8f:0c:80:75:
                    8d:e3:8e:47:9f:a7:50:89:44:cb:40:94:84:8e:f9:
                    8b:5c:e3:6f:7c:cc:cd:dc:73:aa:3b:79:f0:7a:55:
                    da:6d:15:46:6f:d1:1b:e0:bd:33:2b:06:56:90:c2:
                    f5:ea:18:8b:51:a5:b0:f4:98:50:ba:b7:ed:2e:ed:
                    b6:f8:d2:64:37:20:91:dc:56:25:8c:e7:57:f3:f0:
                    db:56:9c:8c:d5:54:69:2a:93:4c:6b:97:e7:9c:e0:
                    b4:39:11:32:df:c6:8e:c2:f0:e3:f1:a8:3c:7b:b6:
                    e3:17:87:d4:24:04:0a:01:06:99:1b:17:cd:3c:28:
                    cc:47:22:9a:f6:f1:a6:06:97:40:84:bd:3f:c9:95:
                    5f:6a:b4:a8:6b:23:76:8c:d1:bc:93:c9:59:bb:89:
                    d9:f5:5b:65:ca:c9:9c:02:f6:ee:92:d0:96:b6:93:
                    d3:3a:5b:04:6a:10:cd:37:c6:cb:3f:76:49:2b:ed:
                    a8:4b:42:73:a6:15:a7:6c:5a:fd:52:2a:d2:71:25:
                    b4:70:35:ee:50:bf:c0:24:52:46:f7:4a:f0:75:07:
                    1f:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:AE:40:44:6D:96:F3:1F:7A:75:7B:10:75:16:F6:F9:0A:6E:02:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aab17bea-e665-4ed1-abe3-d2a9ac34e0ea/381fe162-8140-3694-81fa-38c3b160b29d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aab17bea-e665-4ed1-abe3-d2a9ac34e0ea/aab17bea-e665-4ed1-abe3-d2a9ac34e0ea.crl

            X509v3 Authority Key Identifier:
                keyid:2D:A8:80:D4:EF:B5:CF:45:3C:4F:94:85:37:75:C6:0D:C1:14:15:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aab17bea-e665-4ed1-abe3-d2a9ac34e0ea.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:2da:3::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:76:45:cb:15:ca:32:ff:fc:25:7b:cc:a7:c4:d5:d3:2a:45:
         80:99:3c:61:44:19:71:c0:9b:23:42:13:d2:35:57:8b:7d:f7:
         0a:20:41:93:48:ad:82:e3:fa:e5:22:96:1a:ae:10:32:5a:e5:
         3b:fb:7b:50:0c:7c:70:04:d2:60:c9:2e:22:01:42:cb:9b:84:
         8d:c3:a7:8e:a0:f8:92:58:b7:5a:74:b4:78:4f:27:13:6e:27:
         00:25:44:0b:fd:2b:c1:d8:94:0a:43:7b:3f:2c:b1:f6:37:ed:
         98:23:45:c9:3e:48:f0:ba:b7:6a:80:43:cd:4d:19:15:d0:85:
         1c:df:b3:1f:c0:d0:f6:99:e0:86:d4:17:77:83:a8:6e:a1:2c:
         86:c5:d2:5c:ee:36:1c:3b:60:47:87:02:db:d7:3c:ea:48:b8:
         50:a6:19:d4:cb:2e:67:11:ce:67:5c:eb:b2:92:71:e8:7c:b8:
         77:90:f5:61:e8:e2:cd:04:48:f0:e9:5d:ec:1f:9b:31:5e:36:
         ce:cb:38:97:de:6a:17:e6:19:8b:bb:ee:ba:91:c0:e6:75:1a:
         f4:d9:75:53:59:f1:bf:01:1b:c5:f1:a4:c6:54:99:57:09:0e:
         57:70:c1:98:94:ed:36:3c:1a:a2:7e:18:19:85:8f:2f:f1:16:
         d0:7a:02:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:02:24 2026 by rpki-client