Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e8264592-bcc3-48f1-a782-8ba48fc506fa/d9ce6bbd-81a9-38b0-b6d2-ed3b6017a668.roa
File:                     d9ce6bbd-81a9-38b0-b6d2-ed3b6017a668.roa (raw, json)
Hash identifier:          2Gw5vv7FhESQcOaMe9xL+89ccY1zCuSIRj99EYynGuk=
Subject key identifier:   26:C0:D9:BF:B0:69:3B:CD:67:35:83:7B:E1:9D:22:0D:50:32:65:F7
Certificate issuer:       /CN=e8264592-bcc3-48f1-a782-8ba48fc506fa
Certificate serial:       010D0C9F4328584CEFF23CEEB1AD80B63CDCF8C0
Authority key identifier: 88:77:4C:4E:9F:3F:F4:C2:E0:44:36:A9:F1:0A:B6:D4:84:9D:A7:0A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e8264592-bcc3-48f1-a782-8ba48fc506fa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e8264592-bcc3-48f1-a782-8ba48fc506fa/d9ce6bbd-81a9-38b0-b6d2-ed3b6017a668.roa
Signing time:             Sat 21 Feb 2026 14:00:41 +0000
ROA not before:           Sat 21 Feb 2026 14:00:41 +0000
ROA not after:            Fri 22 May 2026 13:00:41 +0000
asID:                     397952
IP address blocks:        2605:3dc0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e8264592-bcc3-48f1-a782-8ba48fc506fa/e8264592-bcc3-48f1-a782-8ba48fc506fa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e8264592-bcc3-48f1-a782-8ba48fc506fa/e8264592-bcc3-48f1-a782-8ba48fc506fa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e8264592-bcc3-48f1-a782-8ba48fc506fa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ef:f2:3c:ee:b1:ad:80:b6:3c:dc:f8:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8264592-bcc3-48f1-a782-8ba48fc506fa
        Validity
            Not Before: Feb 21 14:00:41 2026 GMT
            Not After : May 22 13:00:41 2026 GMT
        Subject: CN=3dc81cb0-3bec-410c-ad00-bc96b4cd164b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:f8:9b:27:39:2a:fc:b7:d6:30:d9:6f:82:15:
                    7f:f0:e9:37:c0:bb:52:4d:47:21:ea:8e:9b:df:94:
                    ec:44:7e:45:66:7c:f7:4f:c4:d9:0a:66:0e:dc:45:
                    32:ab:bd:12:6e:e4:92:94:25:77:7d:2c:b7:04:d6:
                    a4:ee:1e:5c:45:0f:43:70:20:d9:c3:2c:93:05:61:
                    d7:5a:ec:7a:7b:56:8a:d1:f2:b9:72:cd:09:2f:34:
                    61:bb:14:d6:00:0c:53:59:c2:c0:5c:6e:97:81:20:
                    cb:2b:16:8c:8b:e6:cd:4d:88:93:83:29:58:eb:37:
                    02:29:5f:a3:06:5d:b9:f9:83:d2:53:24:74:f8:e2:
                    d6:a6:dc:1b:55:23:bb:31:fc:ac:e9:23:68:05:bc:
                    77:a0:12:76:68:bd:0e:a7:66:45:dc:1c:3d:50:fc:
                    23:55:9b:ff:39:4a:5e:8a:a2:2e:f3:f9:79:c7:51:
                    3f:bf:10:74:08:1d:eb:00:b6:52:6a:38:fd:e5:12:
                    e5:5d:49:92:04:f7:8e:52:b5:c6:b4:52:4f:b6:6f:
                    f0:ab:60:ff:01:3f:d6:5a:e2:10:3b:61:7d:83:42:
                    c3:f6:ce:70:59:0c:72:b3:d4:7b:42:2a:e6:79:50:
                    dc:6e:26:51:56:1b:aa:1f:b0:3d:47:35:38:75:79:
                    2f:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:C0:D9:BF:B0:69:3B:CD:67:35:83:7B:E1:9D:22:0D:50:32:65:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e8264592-bcc3-48f1-a782-8ba48fc506fa/d9ce6bbd-81a9-38b0-b6d2-ed3b6017a668.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e8264592-bcc3-48f1-a782-8ba48fc506fa/e8264592-bcc3-48f1-a782-8ba48fc506fa.crl

            X509v3 Authority Key Identifier:
                keyid:88:77:4C:4E:9F:3F:F4:C2:E0:44:36:A9:F1:0A:B6:D4:84:9D:A7:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e8264592-bcc3-48f1-a782-8ba48fc506fa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:3dc0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:33:a1:2c:34:cd:89:c4:7e:28:01:5a:8d:41:09:45:7c:90:
         88:be:2e:e7:b4:82:d7:60:1f:04:03:67:38:a9:6c:3b:0c:35:
         43:e8:bb:35:b8:fc:a0:68:8a:6e:8e:29:a8:60:a7:5e:69:bb:
         0a:87:cf:82:5b:2d:5e:bb:7f:53:72:4d:93:fe:dd:3f:48:8a:
         6b:eb:90:77:32:66:dd:7b:51:1d:11:b1:4a:ef:a5:68:77:ee:
         c5:3f:47:a2:39:7f:32:e0:a1:9b:25:66:e9:58:80:c4:78:c0:
         83:36:c6:3c:9a:95:21:29:be:f9:80:50:35:c3:02:fb:c4:0b:
         b7:ab:bc:3d:79:4b:f2:0b:7c:70:4f:1c:67:f4:d7:d7:26:87:
         e8:43:b8:5e:45:3f:c2:51:0f:90:77:51:50:d3:72:7b:9c:e0:
         99:36:62:38:bd:40:a5:c3:3b:52:18:f5:b5:c2:ec:50:a2:9e:
         13:47:04:56:3c:4e:3c:18:7a:d0:e7:22:f2:7c:8c:d6:88:10:
         1f:79:7b:89:be:92:9d:d6:5a:79:69:9f:7b:80:36:00:92:d1:
         41:c6:12:90:28:b6:a6:19:24:51:60:8b:bb:26:7e:80:3f:b2:
         a8:2d:2d:4c:b4:7e:28:d4:a2:d6:81:66:19:57:d6:c3:6a:a5:
         2c:f2:42:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 04:17:16 2026 by rpki-client