Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2e8a2dcd-c473-4343-ab03-233f389ee575/dc7930bb-db3d-313e-ad61-5da4eddf65b5.roa
File:                     dc7930bb-db3d-313e-ad61-5da4eddf65b5.roa (raw, json)
Hash identifier:          qoc6jnRfEKrD6jaK2PZnIuRyXFw6ZJhyxLllwtQ691Y=
Subject key identifier:   D7:B8:E9:5E:47:BF:55:3D:57:A1:C2:AE:38:BB:80:1A:9C:86:A2:23
Certificate issuer:       /CN=2e8a2dcd-c473-4343-ab03-233f389ee575
Certificate serial:       010D0C9F4328584CBF17171DA3D007070E79A340
Authority key identifier: E8:83:04:30:A6:ED:C0:6C:58:03:AE:9E:4C:4B:94:3A:2C:AD:CE:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2e8a2dcd-c473-4343-ab03-233f389ee575.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2e8a2dcd-c473-4343-ab03-233f389ee575/dc7930bb-db3d-313e-ad61-5da4eddf65b5.roa
Signing time:             Wed 04 Feb 2026 02:00:31 +0000
ROA not before:           Wed 04 Feb 2026 02:00:31 +0000
ROA not after:            Tue 05 May 2026 01:00:31 +0000
asID:                     213510
IP address blocks:        2602:f718:84::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2e8a2dcd-c473-4343-ab03-233f389ee575/2e8a2dcd-c473-4343-ab03-233f389ee575.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2e8a2dcd-c473-4343-ab03-233f389ee575/2e8a2dcd-c473-4343-ab03-233f389ee575.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2e8a2dcd-c473-4343-ab03-233f389ee575.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:bf:17:17:1d:a3:d0:07:07:0e:79:a3:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2e8a2dcd-c473-4343-ab03-233f389ee575
        Validity
            Not Before: Feb  4 02:00:31 2026 GMT
            Not After : May  5 01:00:31 2026 GMT
        Subject: CN=eb3d3bed-8b25-4381-94ed-312b3cbd0d85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:da:09:9b:7e:9c:35:59:f8:c6:83:1a:eb:f0:
                    bb:bb:1b:36:82:6c:38:19:a8:b4:ba:48:35:a8:d9:
                    23:4e:9d:df:1f:f4:d9:7c:8d:a0:33:11:23:d1:5d:
                    1c:52:d4:7c:e2:a3:40:77:28:54:cd:4b:65:30:8c:
                    44:af:c4:cc:c8:9f:90:2a:66:e2:79:8a:50:af:6a:
                    cf:fe:68:6f:eb:aa:1f:37:0e:12:44:c6:53:4a:e5:
                    23:c9:79:72:b0:f5:ac:e8:73:3b:2a:ef:b9:e7:1b:
                    a9:0d:86:bd:c4:cf:68:61:71:be:62:55:28:c3:a9:
                    bb:15:a7:d4:c2:68:93:57:06:b2:54:13:b4:0b:70:
                    9d:8e:88:ca:97:ba:2e:fc:0e:0c:4a:9c:19:65:d2:
                    44:e3:a1:de:d7:e3:c2:d3:99:5b:9e:26:d3:f1:8a:
                    c3:73:26:bc:30:78:a3:37:2a:c0:7a:28:d9:40:1b:
                    0d:33:cd:56:d6:c2:ec:13:08:5c:ea:a0:19:3f:31:
                    c5:7d:49:34:54:b0:2d:6a:ff:bc:f0:0c:b7:08:f2:
                    fd:10:f0:a4:7b:4f:db:e1:bb:28:be:c6:a9:eb:9d:
                    c3:a1:6b:a9:1e:55:6f:83:23:27:cf:5a:53:97:17:
                    00:99:d7:d2:2a:e3:c7:db:c4:d8:0d:77:39:93:3d:
                    76:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:B8:E9:5E:47:BF:55:3D:57:A1:C2:AE:38:BB:80:1A:9C:86:A2:23
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2e8a2dcd-c473-4343-ab03-233f389ee575/dc7930bb-db3d-313e-ad61-5da4eddf65b5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2e8a2dcd-c473-4343-ab03-233f389ee575/2e8a2dcd-c473-4343-ab03-233f389ee575.crl

            X509v3 Authority Key Identifier:
                keyid:E8:83:04:30:A6:ED:C0:6C:58:03:AE:9E:4C:4B:94:3A:2C:AD:CE:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2e8a2dcd-c473-4343-ab03-233f389ee575.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f718:84::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:df:a0:0b:43:67:3c:69:e4:c1:a1:8a:99:c8:61:9e:1d:16:
         55:d1:47:65:89:5c:7b:69:60:5b:e3:1f:f6:9f:21:ae:52:79:
         1a:6c:46:34:39:45:45:22:97:12:d4:b1:55:ee:47:e4:93:34:
         22:17:85:79:bd:97:2f:0b:cd:f2:e8:5f:a1:0e:d3:c8:9c:b5:
         85:82:bc:71:97:a4:57:a2:5c:ba:d1:00:26:75:14:19:33:c5:
         d0:73:4d:7d:3e:68:7e:18:38:c1:10:ed:f6:cb:cf:1f:76:ab:
         d3:48:94:28:6e:e1:49:4b:62:98:07:84:85:9d:86:13:74:07:
         17:01:1d:ba:fc:d7:92:bc:a8:a4:9e:3c:66:66:99:48:db:71:
         f5:c1:92:cf:a6:27:bd:2b:06:22:d0:c2:3e:4d:e1:fe:42:ff:
         70:e8:c7:71:3f:22:0a:4d:de:26:d9:6c:21:f7:f2:cb:03:3c:
         5b:d0:8b:3c:c1:2a:cc:29:33:19:86:ff:05:28:dc:bf:be:41:
         81:74:13:ed:a8:6e:b5:31:54:da:f9:72:ae:c7:7a:94:49:fa:
         c7:6f:45:b1:04:67:38:5c:bd:d8:21:8f:c4:68:23:94:33:bd:
         6b:ab:f4:0e:26:c9:41:aa:27:7c:f4:da:03:78:b5:19:a3:1c:
         cd:5f:eb:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:41:51 2026 by rpki-client