Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/29d35046-09f2-4630-973c-fde248a9c01c/da3f2220-b78f-32a5-8116-6e612e47c9c6.roa
File:                     da3f2220-b78f-32a5-8116-6e612e47c9c6.roa (raw, json)
Hash identifier:          w+8VGoDgZtz2ccFVdsubJl+I9OENHJtmNUyj5AU1MGE=
Subject key identifier:   1E:62:D3:EE:75:BD:88:26:A9:AF:55:5E:A9:18:81:72:FB:B2:20:07
Certificate issuer:       /CN=29d35046-09f2-4630-973c-fde248a9c01c
Certificate serial:       010D0C9F4328584CFC823FFA7281009BC2E58600
Authority key identifier: EF:01:BF:82:7C:1A:23:EF:4C:63:62:65:05:72:62:36:58:FB:81:C4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/29d35046-09f2-4630-973c-fde248a9c01c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/29d35046-09f2-4630-973c-fde248a9c01c/da3f2220-b78f-32a5-8116-6e612e47c9c6.roa
Signing time:             Thu 26 Feb 2026 02:00:32 +0000
ROA not before:           Thu 26 Feb 2026 02:00:32 +0000
ROA not after:            Wed 27 May 2026 01:00:32 +0000
asID:                     395878
IP address blocks:        2602:f697:1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/29d35046-09f2-4630-973c-fde248a9c01c/29d35046-09f2-4630-973c-fde248a9c01c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/29d35046-09f2-4630-973c-fde248a9c01c/29d35046-09f2-4630-973c-fde248a9c01c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/29d35046-09f2-4630-973c-fde248a9c01c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:fc:82:3f:fa:72:81:00:9b:c2:e5:86:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29d35046-09f2-4630-973c-fde248a9c01c
        Validity
            Not Before: Feb 26 02:00:32 2026 GMT
            Not After : May 27 01:00:32 2026 GMT
        Subject: CN=4db97ff0-86fd-46ac-8880-82ecf413290b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:7e:de:64:e1:06:9f:5c:ae:43:14:66:2a:5e:
                    fb:a2:57:01:b1:4f:10:28:58:05:c7:26:48:f3:6e:
                    7a:17:b0:a0:5e:30:01:e1:af:2b:4d:1c:9f:fc:72:
                    8c:2e:29:8b:d4:b9:b7:9b:38:ca:9c:7e:c2:d8:af:
                    a5:02:37:45:8b:56:2d:6c:3b:b5:e8:a5:37:e8:30:
                    d3:6d:12:02:4a:f7:b7:54:6c:25:2c:23:41:0d:b7:
                    09:58:12:dc:fe:fc:84:6b:0c:09:16:2c:f2:e8:6f:
                    21:be:5c:3f:a0:4a:cf:5c:5e:97:84:0b:8d:e3:69:
                    15:ac:68:90:d6:f9:06:43:09:7a:4d:dd:ee:02:73:
                    9f:c0:ae:16:15:d8:19:72:23:44:46:88:3e:6d:40:
                    07:de:c2:c5:50:87:f0:ae:3b:52:07:4f:b6:49:f9:
                    ec:4a:c0:e3:13:8e:39:a9:a0:95:6e:12:9c:b5:1d:
                    52:f7:f4:14:18:b0:18:73:5b:b4:c6:e0:df:0c:f6:
                    2e:23:f5:4f:0a:79:e6:6b:d2:d2:86:e8:43:1e:76:
                    24:91:b5:b9:ae:3b:a5:85:9b:fd:11:9d:92:48:71:
                    08:8d:34:0f:b1:54:1f:bc:fe:90:49:d5:17:50:c0:
                    36:7a:26:75:6c:f4:d1:d2:0f:14:ce:10:81:54:a6:
                    e7:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:62:D3:EE:75:BD:88:26:A9:AF:55:5E:A9:18:81:72:FB:B2:20:07
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/29d35046-09f2-4630-973c-fde248a9c01c/da3f2220-b78f-32a5-8116-6e612e47c9c6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/29d35046-09f2-4630-973c-fde248a9c01c/29d35046-09f2-4630-973c-fde248a9c01c.crl

            X509v3 Authority Key Identifier:
                keyid:EF:01:BF:82:7C:1A:23:EF:4C:63:62:65:05:72:62:36:58:FB:81:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/29d35046-09f2-4630-973c-fde248a9c01c.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f697:1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:a8:26:92:f0:87:dc:fc:d3:22:fa:f8:fd:72:b8:b9:5d:88:
         af:5f:f2:8c:fe:b2:bb:86:d6:b7:55:62:43:07:b3:7f:1e:27:
         da:e6:fa:ed:93:6a:2d:9e:90:65:38:41:c3:fa:1b:e8:07:22:
         1f:fa:5b:02:17:44:46:0a:76:28:b3:05:a6:0f:98:37:c1:fb:
         b8:8e:10:88:4a:0f:2e:15:6d:66:16:26:9d:e5:97:90:83:53:
         bc:5b:89:f6:43:5e:d4:3e:ff:ea:e2:9a:1c:d6:8c:ad:d3:9f:
         fe:69:dd:34:77:4e:51:88:83:35:7b:13:00:87:cf:7d:2a:49:
         c9:7c:14:76:00:cf:cb:56:a6:fb:a9:48:d2:89:dd:d6:52:e0:
         61:67:65:da:ec:0e:f9:a9:16:09:de:f2:b2:78:24:0d:8f:ad:
         d3:35:20:f9:54:fa:44:6e:a8:17:cf:0e:8a:3d:c5:70:c9:d5:
         30:02:f0:34:0f:b8:ec:12:47:3c:77:33:e4:e8:90:db:d3:aa:
         42:e4:d3:b8:ff:9d:6b:7b:fc:ff:f0:86:24:29:a2:fa:2a:1a:
         dd:da:e9:61:b0:b3:11:99:99:d2:12:1f:ee:7a:19:05:6b:3b:
         18:a2:2f:5c:08:b9:28:71:16:e7:b4:a6:b4:71:a7:ac:b5:8a:
         48:b5:17:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 19:43:41 2026 by rpki-client