Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078/21ca7c72-d1f5-3559-bbea-9464473a6882.roa
File:                     21ca7c72-d1f5-3559-bbea-9464473a6882.roa (raw, json)
Hash identifier:          EOBZacxjtvkU4D/Ll/tbyY9NB1RouStufOpE48AcDT8=
Subject key identifier:   B3:F9:66:A8:1D:20:0F:2D:78:B5:58:C1:52:1C:29:3D:F7:79:14:14
Certificate issuer:       /CN=e15d3fdb-7c2d-4390-a72f-fa46f02f4078
Certificate serial:       010D0C9F4328584CE62CB531BADC0ADED8871E10
Authority key identifier: 10:CA:AB:0D:A6:15:C3:67:12:DD:35:EC:D2:73:23:F7:9C:C3:AB:B0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078/21ca7c72-d1f5-3559-bbea-9464473a6882.roa
Signing time:             Wed 18 Feb 2026 02:00:31 +0000
ROA not before:           Wed 18 Feb 2026 02:00:31 +0000
ROA not after:            Tue 19 May 2026 01:00:31 +0000
asID:                     198949
IP address blocks:        2607:cc80:2000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078/e15d3fdb-7c2d-4390-a72f-fa46f02f4078.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078/e15d3fdb-7c2d-4390-a72f-fa46f02f4078.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:e6:2c:b5:31:ba:dc:0a:de:d8:87:1e:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e15d3fdb-7c2d-4390-a72f-fa46f02f4078
        Validity
            Not Before: Feb 18 02:00:31 2026 GMT
            Not After : May 19 01:00:31 2026 GMT
        Subject: CN=88e0ebe1-1de9-4cc1-9a7a-57e7afd11ffd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:fc:c4:a7:d4:7a:66:a6:a9:0b:a1:04:55:b8:
                    f8:64:f5:9f:fb:d7:f2:19:c7:00:c1:bc:c6:41:06:
                    5a:06:52:b3:15:80:01:a6:00:d1:15:1b:f2:74:8b:
                    19:7f:bc:e8:fc:1e:99:bf:90:37:08:b3:15:91:de:
                    e8:18:84:ab:48:c0:17:5d:79:34:7e:42:f8:19:b5:
                    c8:e7:50:6c:e7:ee:32:fa:37:eb:7d:3d:65:85:84:
                    4c:e2:ad:e0:82:04:1c:ff:b6:43:d2:f8:29:22:f0:
                    47:ca:fe:33:ca:fc:fe:b6:79:b1:23:b3:95:2a:53:
                    96:7d:44:35:86:6c:6b:c5:41:31:73:5c:f8:49:e1:
                    c7:5d:0d:e0:6d:d3:e2:93:5f:c7:5d:42:d4:7f:10:
                    75:29:09:50:d1:3d:6f:c2:c2:fc:b2:a9:61:71:6c:
                    a8:22:04:47:72:ed:40:df:09:cc:ff:61:d9:c9:11:
                    d2:bb:36:6b:88:e9:cc:ce:db:c8:9e:4f:52:0d:c1:
                    0c:66:f0:ea:d3:58:c2:c7:8a:49:6a:de:9b:84:9c:
                    71:e7:f3:9a:fb:4f:e0:84:1e:7e:80:86:4e:68:97:
                    6e:43:f5:68:67:d6:0e:8f:62:f6:90:94:65:36:fd:
                    3d:fe:11:3d:de:14:54:09:8e:11:72:c5:99:1f:7e:
                    b4:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:F9:66:A8:1D:20:0F:2D:78:B5:58:C1:52:1C:29:3D:F7:79:14:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078/21ca7c72-d1f5-3559-bbea-9464473a6882.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078/e15d3fdb-7c2d-4390-a72f-fa46f02f4078.crl

            X509v3 Authority Key Identifier:
                keyid:10:CA:AB:0D:A6:15:C3:67:12:DD:35:EC:D2:73:23:F7:9C:C3:AB:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:cc80:2000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:cf:d8:cc:cc:f1:eb:2d:ee:88:a5:55:be:c6:44:3b:16:be:
         13:c3:ce:f4:ab:92:57:30:b6:b8:6e:76:94:c3:5b:6e:1a:00:
         a1:2e:26:6c:65:4a:d5:0e:02:be:fc:6b:40:92:88:05:3f:79:
         30:85:66:c0:19:35:bb:db:b7:e6:92:1e:fb:14:ce:99:61:0e:
         1c:9e:f9:84:99:97:23:2a:fe:00:bf:f2:02:c2:03:a6:d3:05:
         01:e4:37:69:c9:97:bd:ab:c0:4d:fe:35:41:1a:49:f0:89:98:
         da:a0:3f:14:a5:b1:52:be:a2:c6:75:04:57:04:f3:ad:7e:93:
         3d:e6:5b:91:e9:5a:b9:05:3f:8b:50:70:d8:cc:8c:a2:93:a7:
         5a:6e:99:d7:b6:1e:23:5e:4d:d7:8a:4f:a9:91:bf:00:aa:e5:
         76:84:c4:66:1f:f0:7e:9f:01:23:70:cd:21:44:44:69:d7:1c:
         ee:45:34:f0:b3:43:79:98:50:6a:6f:54:26:b5:91:31:76:c3:
         b9:eb:0b:a5:28:3e:d0:62:cf:53:ad:62:ef:5e:35:66:61:ae:
         d0:d2:16:b0:0b:e2:9e:72:d8:74:d3:d9:13:ab:30:07:26:3b:
         34:c4:08:ca:bd:71:5d:fd:4f:8d:9e:c7:cc:60:8b:e4:94:a3:
         b3:3f:26:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:54:40 2026 by rpki-client