Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c/ff13f8f7-3fd1-398b-ad32-69e951ae8a44.roa
File:                     ff13f8f7-3fd1-398b-ad32-69e951ae8a44.roa (raw, json)
Hash identifier:          CrHKg7+QPsUbe8bMtj+n+52h87wRrPBPnHH1lcEEPlo=
Subject key identifier:   98:84:9C:51:EA:74:8E:C2:80:66:71:9D:EA:CD:40:29:0C:7F:49:F4
Certificate issuer:       /CN=e301bd0f-c80a-4158-9ada-f506bae0aa3c
Certificate serial:       010D0C9F4328584CE62CC38CA46C019D085CBD00
Authority key identifier: DB:EB:72:1B:D0:C2:5D:DA:E9:75:37:6A:AD:9F:34:76:FE:2C:95:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c/ff13f8f7-3fd1-398b-ad32-69e951ae8a44.roa
Signing time:             Wed 18 Feb 2026 02:00:31 +0000
ROA not before:           Wed 18 Feb 2026 02:00:31 +0000
ROA not after:            Tue 19 May 2026 01:00:31 +0000
asID:                     6208
IP address blocks:        2604:fcc0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c/e301bd0f-c80a-4158-9ada-f506bae0aa3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c/e301bd0f-c80a-4158-9ada-f506bae0aa3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:e6:2c:c3:8c:a4:6c:01:9d:08:5c:bd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e301bd0f-c80a-4158-9ada-f506bae0aa3c
        Validity
            Not Before: Feb 18 02:00:31 2026 GMT
            Not After : May 19 01:00:31 2026 GMT
        Subject: CN=c199cf1c-fa55-4f33-9b27-d3edbdc3c53c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:f1:25:61:0b:98:86:d3:94:7f:3c:5a:23:88:
                    7c:82:ea:47:dd:1f:b9:24:12:30:a9:0b:be:64:73:
                    a5:fc:6d:c7:a6:30:2b:c0:a5:7b:2d:3a:2c:99:71:
                    ad:54:f4:9a:bc:05:26:37:4b:de:c4:96:43:af:4f:
                    99:de:e1:82:c5:d2:bc:70:48:37:33:9a:16:20:ef:
                    a0:08:a8:0c:dd:1d:72:41:b3:ba:8e:a9:62:8c:aa:
                    0f:36:2b:c0:b4:50:bc:6e:26:96:30:2a:db:26:af:
                    93:23:ac:bf:1b:f0:1f:c4:05:b9:03:39:04:4c:2b:
                    cb:ea:f3:d0:9d:fb:bf:f2:21:da:12:0f:7c:c5:e0:
                    99:d5:6c:6b:2d:44:3b:eb:55:c7:09:93:8e:96:8a:
                    84:ce:1a:b3:0c:92:39:fd:10:17:f9:f6:56:ac:bc:
                    14:80:ac:4d:99:d1:31:ee:23:34:34:5e:cd:31:9e:
                    2f:4c:03:1c:63:5a:95:1c:8f:e5:6c:9e:51:21:c5:
                    3d:0a:3b:f5:fe:c0:1d:f9:aa:3b:f0:b0:d0:c0:8f:
                    86:1e:f2:e4:3c:71:c9:ad:6b:8a:42:4a:4e:cf:b4:
                    a5:05:ca:db:01:a4:a0:27:9f:52:25:2e:ee:62:db:
                    22:3f:f5:37:8d:71:28:7e:7c:02:50:90:6c:5f:5f:
                    e5:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:84:9C:51:EA:74:8E:C2:80:66:71:9D:EA:CD:40:29:0C:7F:49:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c/ff13f8f7-3fd1-398b-ad32-69e951ae8a44.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c/e301bd0f-c80a-4158-9ada-f506bae0aa3c.crl

            X509v3 Authority Key Identifier:
                keyid:DB:EB:72:1B:D0:C2:5D:DA:E9:75:37:6A:AD:9F:34:76:FE:2C:95:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:fcc0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:7c:c0:ef:51:0c:e0:8d:0a:78:5b:6f:36:53:c5:89:ac:a1:
         57:f4:42:70:6d:2d:ab:ab:49:50:21:79:3a:e3:75:8d:76:fc:
         86:0b:b1:e2:22:54:58:db:96:d9:12:b0:0d:f7:30:a4:58:b8:
         bd:60:08:f8:46:ea:b1:68:fb:2f:ac:a3:f4:d7:0f:c1:bb:00:
         6f:ff:8f:e1:6f:9f:a0:85:fb:b7:87:f4:40:7e:4d:e4:64:29:
         e3:4d:21:a1:1e:e6:4a:4d:8c:48:4f:b6:09:9e:2e:5d:29:43:
         87:00:e6:ed:07:5f:bb:42:cf:b1:5c:3d:b6:0e:30:2a:a9:5b:
         a7:69:32:14:02:57:d8:dd:53:fa:25:d5:5b:80:69:f8:29:9d:
         7e:2f:ca:ab:96:5e:9b:65:27:7e:6b:b3:52:2b:43:d6:53:a5:
         65:82:b2:83:a8:62:e5:b7:cb:94:ac:16:e1:d0:d1:9c:e3:4d:
         ce:ab:43:5f:72:a5:a5:33:91:d1:0b:c1:b8:9c:5b:83:35:dc:
         35:a4:96:d3:a3:7b:1a:29:ad:49:14:52:22:44:40:68:e8:de:
         09:66:76:6d:7b:95:1e:88:f9:f6:ed:5c:cf:36:72:dd:c8:2c:
         30:a5:38:57:cb:07:f1:b0:fa:e7:9b:fb:70:c1:29:28:20:8f:
         81:8a:67:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:29:35 2026 by rpki-client