Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ccdced21-8f04-4273-8f8a-07593c3968fb/cdfabae3-27b2-355b-bcd0-aa4fcc64544b.roa
File:                     cdfabae3-27b2-355b-bcd0-aa4fcc64544b.roa (raw, json)
Hash identifier:          O9Bp4ns+XaqfUkcFjWb66IakQDmEPSm8a5VcZ7hkeXE=
Subject key identifier:   E7:4F:81:17:C9:DB:1B:DF:1E:FE:C9:26:3A:45:C6:A2:BB:01:68:F6
Certificate issuer:       /CN=ccdced21-8f04-4273-8f8a-07593c3968fb
Certificate serial:       010D0C9F4328584D037CFDB3CB0A11338A6706A0
Authority key identifier: B2:D4:9D:85:44:98:EF:59:EA:08:76:0F:CF:BD:75:03:B0:E2:47:C7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ccdced21-8f04-4273-8f8a-07593c3968fb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ccdced21-8f04-4273-8f8a-07593c3968fb/cdfabae3-27b2-355b-bcd0-aa4fcc64544b.roa
Signing time:             Sat 28 Feb 2026 14:00:40 +0000
ROA not before:           Sat 28 Feb 2026 14:00:40 +0000
ROA not after:            Fri 29 May 2026 13:00:40 +0000
asID:                     401243
IP address blocks:        2602:2b5:26::/48 maxlen: 48
                          2602:2b5:27::/48 maxlen: 48
                          2602:2b5:28::/48 maxlen: 48
                          2602:2b5:29::/48 maxlen: 48
                          2602:2b5:2a::/48 maxlen: 48
                          2602:2b5:2b::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ccdced21-8f04-4273-8f8a-07593c3968fb/ccdced21-8f04-4273-8f8a-07593c3968fb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ccdced21-8f04-4273-8f8a-07593c3968fb/ccdced21-8f04-4273-8f8a-07593c3968fb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ccdced21-8f04-4273-8f8a-07593c3968fb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:03:7c:fd:b3:cb:0a:11:33:8a:67:06:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ccdced21-8f04-4273-8f8a-07593c3968fb
        Validity
            Not Before: Feb 28 14:00:40 2026 GMT
            Not After : May 29 13:00:40 2026 GMT
        Subject: CN=ef771215-20a9-425f-9d94-2e7c226af490
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:bc:fc:a2:88:39:7e:fd:b4:f0:09:13:6a:12:
                    9c:ce:0b:e2:84:bd:e6:35:e6:43:06:a1:ff:3e:a0:
                    2c:a5:b0:ae:ac:b1:37:ff:6c:02:d4:c0:14:47:6d:
                    09:99:08:b8:12:8a:53:e0:6e:1f:37:e6:8b:8d:9d:
                    90:83:c8:dc:ba:07:39:c3:d1:8d:43:e2:6b:3b:53:
                    cd:8b:a3:e2:48:04:c6:c7:98:d1:7a:6a:1d:20:33:
                    41:2c:55:0a:7d:4a:b1:d5:cc:25:15:0d:c1:70:35:
                    35:17:a4:4a:b4:0c:b5:4c:ad:0e:53:a0:46:67:8e:
                    e9:24:8a:1a:7b:d1:3f:fb:24:48:22:04:3d:88:d7:
                    5a:99:4f:4b:de:ef:c3:e5:ab:d0:4e:38:a7:e0:d3:
                    d0:06:61:db:b7:d4:fb:0a:e2:de:7c:43:0d:f2:7e:
                    c8:ad:a9:2b:62:32:e0:12:d8:dd:da:e0:25:67:e8:
                    69:54:3f:10:24:43:c2:5c:26:ca:21:9f:25:b0:21:
                    e8:5a:71:10:d8:d1:1b:07:69:10:31:2a:33:02:d7:
                    6d:fe:a8:dd:f5:bb:75:64:9a:04:d8:50:fe:9c:be:
                    ad:21:40:5e:51:6c:21:fb:98:c3:af:02:46:0c:b5:
                    99:35:90:60:fb:cb:ba:e6:c2:3f:34:80:72:b5:36:
                    2c:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:4F:81:17:C9:DB:1B:DF:1E:FE:C9:26:3A:45:C6:A2:BB:01:68:F6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ccdced21-8f04-4273-8f8a-07593c3968fb/cdfabae3-27b2-355b-bcd0-aa4fcc64544b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ccdced21-8f04-4273-8f8a-07593c3968fb/ccdced21-8f04-4273-8f8a-07593c3968fb.crl

            X509v3 Authority Key Identifier:
                keyid:B2:D4:9D:85:44:98:EF:59:EA:08:76:0F:CF:BD:75:03:B0:E2:47:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ccdced21-8f04-4273-8f8a-07593c3968fb.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:2b5:26::-2602:2b5:2b:ffff:ffff:ffff:ffff:ffff

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:cb:0c:74:0b:13:8a:1a:d3:ac:ef:ae:cc:de:b4:03:9a:8b:
         52:5c:98:5c:f4:b9:c3:e3:79:43:5a:be:ca:b2:2d:b9:03:21:
         34:11:4f:50:a4:d7:38:2b:cc:26:13:3c:08:d9:27:d1:c5:e8:
         96:2f:d9:e5:05:25:ac:35:5d:1e:09:01:92:d2:f0:d2:e2:4e:
         11:0f:74:d4:6b:7e:62:fc:25:42:28:ce:cc:6b:bc:15:ae:d6:
         4a:d3:46:31:52:9b:e9:ba:89:70:a4:d1:8f:cb:c1:f3:21:a5:
         2f:50:d9:f9:51:81:7e:ff:d3:73:f6:ae:6b:80:81:3e:b0:88:
         dd:33:c4:16:8c:72:c4:20:92:16:88:08:8e:89:b7:e7:06:ab:
         40:e9:9a:9e:a4:af:35:c1:5c:4c:56:49:03:5d:06:ff:89:98:
         53:b4:1d:b5:a5:87:44:76:4e:73:b7:ec:77:6e:a7:86:20:e5:
         04:02:4d:a4:e7:60:1f:6f:a7:1d:c1:d6:65:90:2f:99:f9:15:
         e7:a3:b2:0e:a0:9e:b7:49:04:e2:1b:22:f3:a7:50:08:a5:ad:
         f8:59:18:d8:5f:ee:01:04:7c:2f:16:5b:3e:a1:58:b7:52:1a:
         03:29:18:8f:49:a9:63:a2:7e:fd:d4:f7:2d:31:33:21:47:69:
         5a:01:90:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:41:50 2026 by rpki-client