Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03b51393-7784-45a0-9621-168719782436/2d7daa58-218f-39af-b1a6-d801c0aa78ec.roa
File:                     2d7daa58-218f-39af-b1a6-d801c0aa78ec.roa (raw, json)
Hash identifier:          6BFAOxgp5udyEqT8uXds/iubvq3Kw39qAaWcuLk/vE8=
Subject key identifier:   EB:1A:1C:C7:E8:F5:F5:8D:C3:23:52:BB:0F:13:04:92:AE:C1:1D:42
Certificate issuer:       /CN=03b51393-7784-45a0-9621-168719782436
Certificate serial:       010D0C9F4328584CCD0CB0527ABAB5B4B541CE00
Authority key identifier: EC:99:4B:99:9B:94:26:05:74:C3:31:52:EC:B9:D2:FA:8E:3F:05:22
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03b51393-7784-45a0-9621-168719782436.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03b51393-7784-45a0-9621-168719782436/2d7daa58-218f-39af-b1a6-d801c0aa78ec.roa
Signing time:             Mon 09 Feb 2026 02:00:31 +0000
ROA not before:           Mon 09 Feb 2026 02:00:31 +0000
ROA not after:            Sun 10 May 2026 01:00:31 +0000
asID:                     10384
IP address blocks:        2604:700::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03b51393-7784-45a0-9621-168719782436/03b51393-7784-45a0-9621-168719782436.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03b51393-7784-45a0-9621-168719782436/03b51393-7784-45a0-9621-168719782436.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03b51393-7784-45a0-9621-168719782436.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:cd:0c:b0:52:7a:ba:b5:b4:b5:41:ce:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03b51393-7784-45a0-9621-168719782436
        Validity
            Not Before: Feb  9 02:00:31 2026 GMT
            Not After : May 10 01:00:31 2026 GMT
        Subject: CN=869ff398-7f4d-40e4-b30a-6e8f68248d16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:3a:f8:a7:af:96:d9:a0:c3:b2:2c:ad:a1:71:
                    0d:ce:e3:87:9e:47:a9:a4:62:a9:89:83:20:c2:d6:
                    4f:56:a9:1c:b9:3c:a0:c0:5b:84:1f:ff:cd:9c:f3:
                    20:3a:ab:e9:09:92:0f:d2:6a:19:f7:31:ee:f7:57:
                    e9:17:ad:1e:93:8f:69:be:93:ff:53:23:d8:4b:0b:
                    e5:65:64:02:22:df:68:c2:b4:62:86:3e:e9:30:c6:
                    a8:09:73:19:f8:1a:30:15:62:66:b1:23:1c:4f:7a:
                    7b:05:39:bc:fb:a4:d9:41:9f:2d:d5:62:33:34:f9:
                    00:53:ea:4e:0b:3a:92:81:d4:90:4a:c4:8f:21:ab:
                    ef:48:dd:81:5a:f4:d8:9c:20:00:ff:01:0a:e1:6c:
                    a9:13:a2:9e:f5:0b:b1:c1:38:28:a8:7c:72:ca:1b:
                    e1:d7:94:8e:7c:3e:ac:5f:32:27:db:3b:bf:5d:25:
                    c1:6b:e6:b1:13:b1:1a:36:c3:96:5d:a2:e6:a2:8b:
                    86:31:b3:77:6d:59:79:63:ca:0d:39:06:14:66:ef:
                    4e:5d:08:64:55:eb:5d:4b:47:61:2e:dd:a4:25:d5:
                    81:a0:25:f2:47:b3:0d:86:fd:ef:2f:e7:33:74:f9:
                    e1:e6:db:29:92:0f:ba:e0:46:71:77:8b:b5:14:ac:
                    5d:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:1A:1C:C7:E8:F5:F5:8D:C3:23:52:BB:0F:13:04:92:AE:C1:1D:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03b51393-7784-45a0-9621-168719782436/2d7daa58-218f-39af-b1a6-d801c0aa78ec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03b51393-7784-45a0-9621-168719782436/03b51393-7784-45a0-9621-168719782436.crl

            X509v3 Authority Key Identifier:
                keyid:EC:99:4B:99:9B:94:26:05:74:C3:31:52:EC:B9:D2:FA:8E:3F:05:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03b51393-7784-45a0-9621-168719782436.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:700::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:8c:cc:d5:ad:3e:fa:d2:2e:86:b3:a4:03:f7:c2:d7:db:be:
         29:7b:48:5c:45:84:a4:2b:9e:2f:eb:02:bd:5e:ba:1d:53:98:
         a4:1b:5b:7d:45:81:d3:85:55:be:84:ed:6c:ce:9a:ed:bd:77:
         b4:e5:54:73:ac:c7:d5:58:f6:12:89:73:5f:20:ff:6d:e9:10:
         45:98:e0:9d:4d:dc:20:fb:00:77:61:e8:e3:ad:8a:3a:d7:0a:
         19:98:b0:44:54:e0:71:a7:51:5b:7f:24:41:c6:3b:8a:c0:42:
         22:72:61:37:25:4c:7a:f1:87:d9:a7:fc:77:e1:d0:6a:9e:a9:
         97:d7:b0:3a:32:57:11:3e:99:ad:c3:3d:a6:73:41:08:08:fe:
         70:16:e4:07:2f:58:a8:f7:20:8e:67:53:20:ae:65:c2:17:b3:
         98:cd:23:85:95:75:2c:7f:64:c4:d1:e9:e0:70:00:da:ef:aa:
         07:9e:96:78:02:a1:d9:85:df:91:2b:64:98:60:d7:7b:45:87:
         2f:34:92:e8:32:3a:67:ba:17:97:b3:b1:93:e5:f9:64:38:f9:
         3d:72:a4:7a:8b:d1:3c:9d:81:9e:89:2a:1d:5a:f8:36:d5:90:
         50:30:62:02:c2:61:db:34:d7:93:5a:62:a3:16:81:36:5a:aa:
         01:ce:ab:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 23:09:58 2026 by rpki-client