Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/624ed502-24b2-4939-bd7e-39531ca3404a/2117e668-d2f2-3039-be13-8676224ae1ae.roa
File:                     2117e668-d2f2-3039-be13-8676224ae1ae.roa (raw, json)
Hash identifier:          SSr1/dxDTmZ/f0r38EfBCB1NnXnBoc12HDNxfghhfsA=
Subject key identifier:   EF:F1:19:50:4E:DE:54:59:62:8F:B9:87:D6:A9:FD:51:F4:28:34:51
Certificate issuer:       /CN=624ed502-24b2-4939-bd7e-39531ca3404a
Certificate serial:       010D0C9F4328584CC61210C618E75715568CE600
Authority key identifier: 9F:18:AC:DB:16:0D:4C:DC:2A:88:3A:D8:8D:7C:A8:9E:5A:5D:44:A4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/624ed502-24b2-4939-bd7e-39531ca3404a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/624ed502-24b2-4939-bd7e-39531ca3404a/2117e668-d2f2-3039-be13-8676224ae1ae.roa
Signing time:             Fri 06 Feb 2026 14:00:40 +0000
ROA not before:           Fri 06 Feb 2026 14:00:40 +0000
ROA not after:            Thu 07 May 2026 13:00:40 +0000
asID:                     16509
IP address blocks:        2620:fe:2040::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/624ed502-24b2-4939-bd7e-39531ca3404a/624ed502-24b2-4939-bd7e-39531ca3404a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/624ed502-24b2-4939-bd7e-39531ca3404a/624ed502-24b2-4939-bd7e-39531ca3404a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/624ed502-24b2-4939-bd7e-39531ca3404a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:c6:12:10:c6:18:e7:57:15:56:8c:e6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=624ed502-24b2-4939-bd7e-39531ca3404a
        Validity
            Not Before: Feb  6 14:00:40 2026 GMT
            Not After : May  7 13:00:40 2026 GMT
        Subject: CN=ea79f091-72b3-4a6b-861d-0f2e793f66f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:ea:e3:97:e9:f9:a2:d6:4c:d3:56:fc:87:c4:
                    6c:c7:ea:bd:7f:f8:e0:f9:b2:56:00:10:cb:1a:82:
                    50:47:0c:5f:94:29:d9:74:90:9e:05:93:58:4a:58:
                    bf:7a:dd:ae:54:1f:7d:79:d4:ba:7c:5d:4f:4c:55:
                    55:aa:1e:7f:6b:25:fd:f6:84:d9:2d:ba:e1:a5:11:
                    6b:08:46:03:a2:0b:c2:4c:dd:6f:bd:2a:d2:ef:ba:
                    a7:8b:0d:e9:71:37:36:f1:f7:c5:01:e3:8f:5d:56:
                    ac:b1:65:40:33:e2:8e:00:73:8c:26:f4:51:81:9f:
                    2d:1c:ae:60:ef:f7:8a:14:ac:e0:3f:84:ab:b1:26:
                    27:3c:15:c8:74:49:95:bc:6d:26:8d:de:ec:38:57:
                    5d:33:2c:db:a9:5e:44:ee:87:7b:1c:7f:cc:0a:3d:
                    d2:6a:ca:3e:55:d7:e1:bb:04:45:96:7b:51:22:64:
                    86:92:dd:ca:0f:c3:88:46:66:2f:4c:76:ee:27:e9:
                    9c:90:53:0f:ab:57:2a:35:8b:0a:94:dc:60:1e:58:
                    ac:5a:fc:e8:c2:66:32:45:9a:49:e3:8c:87:34:06:
                    65:a6:41:37:ca:39:3f:ad:21:11:66:07:e2:28:a8:
                    4e:bf:86:d8:a9:b3:be:2b:a6:d3:94:71:e1:45:fb:
                    e7:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:F1:19:50:4E:DE:54:59:62:8F:B9:87:D6:A9:FD:51:F4:28:34:51
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/624ed502-24b2-4939-bd7e-39531ca3404a/2117e668-d2f2-3039-be13-8676224ae1ae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/624ed502-24b2-4939-bd7e-39531ca3404a/624ed502-24b2-4939-bd7e-39531ca3404a.crl

            X509v3 Authority Key Identifier:
                keyid:9F:18:AC:DB:16:0D:4C:DC:2A:88:3A:D8:8D:7C:A8:9E:5A:5D:44:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/624ed502-24b2-4939-bd7e-39531ca3404a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:fe:2040::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:0e:09:bd:82:0a:55:6e:b2:57:aa:5d:d9:71:37:86:0a:e5:
         e9:b5:d1:10:b7:98:e3:6a:23:ad:88:d5:c1:81:49:fb:89:53:
         c7:ac:b0:44:6d:9e:21:ac:5b:68:af:92:51:be:37:cf:b4:0c:
         fe:65:0c:26:76:4e:b5:ca:85:e4:a9:33:48:29:89:03:80:3e:
         fe:80:93:a4:dd:4c:20:70:25:1c:b7:c9:b8:73:dc:6c:49:98:
         90:ce:6a:56:f4:c8:39:9a:67:4d:6f:df:de:9d:cb:25:d2:c6:
         c1:2d:17:be:ec:ee:7e:99:87:56:99:a4:7d:b8:8b:be:b0:d2:
         63:ea:cf:32:dd:ac:4b:4e:e8:3c:7c:70:78:6c:0f:59:d6:01:
         74:2e:84:b0:86:c7:95:66:fd:61:ad:5e:39:86:fd:6d:9d:5d:
         32:4a:7d:23:4e:3e:53:46:9b:cf:4e:ff:87:c6:67:95:83:6f:
         d5:8d:9f:94:1e:a5:00:df:1e:83:06:4d:78:15:69:d7:d8:bc:
         91:80:89:57:8e:ef:3a:28:18:12:a0:85:0a:5b:2d:db:5d:37:
         6f:1c:32:52:9f:ac:b3:6a:87:f7:36:9c:d9:40:9d:d1:22:18:
         47:cd:6e:35:c5:71:67:aa:2f:c9:98:70:ea:48:c8:5d:f9:f6:
         45:ae:13:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 19:09:33 2026 by rpki-client