Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f330fac3-f4ae-4421-9305-7e1649195c36/68b02c83-df0a-3c30-9ec1-1c171bb74d7e.roa
File:                     68b02c83-df0a-3c30-9ec1-1c171bb74d7e.roa (raw, json)
Hash identifier:          oUKBrvsmyZM+lWvCcyArK2BCLpohWxAP8tnTcPAqDmQ=
Subject key identifier:   78:8C:94:64:7E:6D:02:42:CA:A8:1B:A8:CA:5D:58:48:8A:55:86:09
Certificate issuer:       /CN=f330fac3-f4ae-4421-9305-7e1649195c36
Certificate serial:       010D0C9F4328584CE8F762B42673588BA36D0780
Authority key identifier: EA:67:D0:88:A5:5B:1B:6E:49:1E:AC:DD:45:69:84:05:20:C7:93:AF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f330fac3-f4ae-4421-9305-7e1649195c36.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f330fac3-f4ae-4421-9305-7e1649195c36/68b02c83-df0a-3c30-9ec1-1c171bb74d7e.roa
Signing time:             Thu 19 Feb 2026 02:00:32 +0000
ROA not before:           Thu 19 Feb 2026 02:00:32 +0000
ROA not after:            Wed 20 May 2026 01:00:32 +0000
asID:                     401293
IP address blocks:        2602:f848::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f330fac3-f4ae-4421-9305-7e1649195c36/f330fac3-f4ae-4421-9305-7e1649195c36.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f330fac3-f4ae-4421-9305-7e1649195c36/f330fac3-f4ae-4421-9305-7e1649195c36.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f330fac3-f4ae-4421-9305-7e1649195c36.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:e8:f7:62:b4:26:73:58:8b:a3:6d:07:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f330fac3-f4ae-4421-9305-7e1649195c36
        Validity
            Not Before: Feb 19 02:00:32 2026 GMT
            Not After : May 20 01:00:32 2026 GMT
        Subject: CN=a1231c00-b9d1-4886-8470-443a520f2b90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:b3:0d:e1:f1:f2:aa:12:cb:c0:bc:1c:07:c0:
                    98:7a:31:46:59:e5:12:d5:8e:8e:4f:e3:b4:bf:88:
                    5e:09:b0:2d:0d:9a:e0:75:bf:f9:bd:23:fa:00:de:
                    19:0c:1b:d8:9e:5d:09:04:e7:5b:04:b2:14:00:c7:
                    b3:e8:45:f1:70:c5:2b:c1:f2:e6:06:c3:fa:26:8a:
                    a2:67:bf:39:50:bd:e2:71:52:60:57:ec:4a:d4:a8:
                    c7:39:39:20:b6:6f:b4:e9:ab:5b:8b:a6:00:52:84:
                    81:79:7c:35:17:a6:42:d2:f7:fb:ae:98:5f:b8:54:
                    8c:4b:86:1c:e8:ec:17:89:1b:12:ee:8a:ca:ed:9a:
                    c7:52:80:c4:97:19:12:88:b1:65:77:84:b8:b9:81:
                    8c:b0:c7:fb:e0:29:41:42:c9:51:9e:d2:b5:b8:1e:
                    2f:4f:c6:df:3c:27:6c:3a:1e:1d:da:9c:c6:a4:d8:
                    06:64:eb:f6:58:97:d4:81:47:a0:66:ae:78:67:80:
                    11:e5:cb:10:a4:73:a7:e6:9f:50:01:19:a7:73:4c:
                    f9:70:52:ea:7b:12:d9:1c:42:44:40:5e:19:a0:5f:
                    07:8c:79:a3:22:16:27:25:0d:30:28:c4:bf:ce:4f:
                    67:92:61:f2:86:6e:fd:f4:2d:db:39:7c:73:4c:06:
                    4e:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:8C:94:64:7E:6D:02:42:CA:A8:1B:A8:CA:5D:58:48:8A:55:86:09
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f330fac3-f4ae-4421-9305-7e1649195c36/68b02c83-df0a-3c30-9ec1-1c171bb74d7e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f330fac3-f4ae-4421-9305-7e1649195c36/f330fac3-f4ae-4421-9305-7e1649195c36.crl

            X509v3 Authority Key Identifier:
                keyid:EA:67:D0:88:A5:5B:1B:6E:49:1E:AC:DD:45:69:84:05:20:C7:93:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f330fac3-f4ae-4421-9305-7e1649195c36.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f848::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:07:4f:f2:fb:3b:00:20:a1:d6:a6:48:a9:32:3c:5c:14:11:
         01:22:0a:37:99:30:ff:1f:bb:10:c6:f8:95:24:e6:a3:6c:92:
         62:c3:d7:83:fa:15:75:13:6c:b1:8b:ad:9b:b1:97:1b:27:d4:
         4d:ea:a4:4c:0d:df:0c:c7:a6:8c:53:73:40:38:9e:de:59:b8:
         32:e5:a8:5b:d5:19:6c:a2:64:4a:84:96:a6:16:78:70:01:26:
         fe:84:52:fa:73:a9:b5:4d:2e:50:6e:26:52:f8:3f:68:46:ae:
         b1:72:35:63:bd:5c:75:38:25:a3:57:a1:9a:ce:8e:20:bd:6e:
         5e:03:9d:d2:e6:2d:a6:75:ad:fa:bb:29:02:dd:36:c8:53:18:
         da:16:1d:09:e9:f0:c5:39:7d:bb:1a:71:f4:62:a0:e3:5b:9c:
         f6:ab:bc:77:a3:a3:64:81:8b:ee:aa:5f:80:c5:19:5f:6b:05:
         aa:d4:a7:e5:f9:49:9d:54:67:0b:6b:28:0e:17:bd:3f:a8:eb:
         af:32:e8:02:e1:ab:47:75:1e:4a:ad:65:f8:a0:50:73:0e:ed:
         a9:c1:28:da:47:95:6b:06:1c:4e:46:cb:a6:99:99:eb:fc:18:
         84:25:d8:59:39:e2:f2:b3:ce:d0:5e:48:31:8b:51:0c:36:08:
         fc:c0:4c:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:09:46 2026 by rpki-client