Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078/5cb86780-eead-3402-9ecf-8879529d2c03.roa
File:                     5cb86780-eead-3402-9ecf-8879529d2c03.roa (raw, json)
Hash identifier:          f0AJf74T6E6OuTE3fwaUNRQQvTb+zwWuD5iB7URECVY=
Subject key identifier:   BD:E1:2B:ED:08:BE:3D:9B:F3:1F:5B:2E:D6:06:C5:FF:B9:68:30:01
Certificate issuer:       /CN=e15d3fdb-7c2d-4390-a72f-fa46f02f4078
Certificate serial:       010D0C9F4328584CF42226A04D455E3F1DFCB600
Authority key identifier: 10:CA:AB:0D:A6:15:C3:67:12:DD:35:EC:D2:73:23:F7:9C:C3:AB:B0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078/5cb86780-eead-3402-9ecf-8879529d2c03.roa
Signing time:             Mon 23 Feb 2026 02:00:31 +0000
ROA not before:           Mon 23 Feb 2026 02:00:31 +0000
ROA not after:            Sun 24 May 2026 01:00:31 +0000
asID:                     2152
IP address blocks:        2607:cc80:1000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078/e15d3fdb-7c2d-4390-a72f-fa46f02f4078.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078/e15d3fdb-7c2d-4390-a72f-fa46f02f4078.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:f4:22:26:a0:4d:45:5e:3f:1d:fc:b6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e15d3fdb-7c2d-4390-a72f-fa46f02f4078
        Validity
            Not Before: Feb 23 02:00:31 2026 GMT
            Not After : May 24 01:00:31 2026 GMT
        Subject: CN=a59eb9c1-e51a-44a7-ad53-559a6e81bb93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:30:84:cb:ab:79:2e:d7:28:e8:bc:d4:56:cd:
                    be:da:1d:40:79:1c:1a:86:1b:08:2b:1b:cf:bb:14:
                    8a:ba:ed:49:02:dc:1e:01:04:4a:40:fe:06:10:1b:
                    2e:e3:6f:be:06:f3:64:db:55:7a:f1:36:76:ca:09:
                    33:e1:f4:98:e1:ac:dd:0c:07:41:8c:c6:36:92:ea:
                    0d:a7:7f:a6:8a:20:64:84:ff:b3:89:f6:d8:ed:30:
                    f9:e3:92:bb:a7:ad:1d:89:d4:c2:81:08:dd:b8:08:
                    73:80:ca:92:96:33:cc:91:88:f7:26:a4:41:21:04:
                    2f:e1:d6:e8:76:9d:d3:ee:db:17:8b:e5:bc:80:7b:
                    87:ea:b4:aa:87:f9:3e:76:a0:0a:18:97:9e:30:bd:
                    dd:84:8d:6a:36:57:7d:5d:75:ef:47:60:e7:f4:fb:
                    e6:b8:60:e6:ff:9f:6a:6c:5b:fe:29:5a:53:7a:b5:
                    1d:a2:dd:a7:4a:61:f8:51:b5:5f:27:56:f1:a9:84:
                    2d:2a:f0:b5:a6:a0:0b:fa:00:ec:2c:30:8f:99:22:
                    3c:3b:ad:53:05:08:8e:b8:31:94:ed:24:2a:11:bd:
                    36:80:b7:23:54:8b:ee:12:f3:14:0a:32:08:ec:11:
                    f6:e6:78:07:42:4a:e2:dd:24:ce:68:22:e2:d9:b9:
                    a8:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:E1:2B:ED:08:BE:3D:9B:F3:1F:5B:2E:D6:06:C5:FF:B9:68:30:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078/5cb86780-eead-3402-9ecf-8879529d2c03.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078/e15d3fdb-7c2d-4390-a72f-fa46f02f4078.crl

            X509v3 Authority Key Identifier:
                keyid:10:CA:AB:0D:A6:15:C3:67:12:DD:35:EC:D2:73:23:F7:9C:C3:AB:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:cc80:1000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:a2:8f:de:47:bf:69:4f:9b:1a:81:fe:38:93:19:2c:86:8c:
         5c:0c:33:dc:1b:62:cd:de:cc:45:48:88:6a:f8:ea:8c:bc:f2:
         f8:e0:60:f1:ef:ea:33:13:84:51:8a:ae:ce:cd:3d:ab:10:82:
         c8:3a:ea:ed:7b:50:28:f3:a4:db:4d:97:a6:0f:d8:80:36:fd:
         23:08:52:b7:b7:f7:5a:2a:d8:87:32:2e:89:9e:d6:f5:a6:c1:
         48:e2:4f:cf:98:a3:6d:a9:97:a1:1c:f9:17:f4:aa:21:79:77:
         2a:be:c3:ea:88:9b:97:2f:74:43:18:f6:06:68:a6:7b:a8:3f:
         10:4a:d9:6d:4d:38:ae:50:27:32:e2:7e:86:40:6f:2d:b9:57:
         2a:da:ad:0c:94:2f:6e:fc:78:a1:01:91:af:11:51:a6:06:da:
         02:f8:c1:67:25:66:b8:12:aa:0f:12:90:24:a1:ba:7b:b5:65:
         54:6d:25:c8:fc:65:79:93:e8:5c:cc:25:5c:45:9b:75:d5:71:
         ea:72:a6:30:55:01:a7:52:57:8e:d0:7c:0b:69:14:c4:9f:07:
         40:2c:2a:35:80:54:82:f5:a7:2c:eb:32:81:49:c8:9e:20:2a:
         81:6d:21:85:d8:41:e1:f5:eb:25:d4:b6:1f:05:fe:df:58:cc:
         20:1d:50:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:35:00 2026 by rpki-client