Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3278e708-d128-4790-a8e3-1e0f4a1a6f4a/c322bcb2-1ed8-3132-999a-b219e9f6f9a7.roa
File:                     c322bcb2-1ed8-3132-999a-b219e9f6f9a7.roa (raw, json)
Hash identifier:          hhUEYtEqRK3YS/ES6ocBHcXAlyqsaSCx0NXrPVLStXw=
Subject key identifier:   77:B3:B4:46:92:AF:EB:CB:42:82:3D:F2:C3:2F:3A:F9:A9:75:E7:3D
Certificate issuer:       /CN=3278e708-d128-4790-a8e3-1e0f4a1a6f4a
Certificate serial:       010D0C9F4328584CBDB1EAAE99BB10F7F803A740
Authority key identifier: 11:84:F2:33:1D:BB:25:29:F5:31:3A:68:B9:8F:19:FF:02:0A:EF:56
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3278e708-d128-4790-a8e3-1e0f4a1a6f4a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3278e708-d128-4790-a8e3-1e0f4a1a6f4a/c322bcb2-1ed8-3132-999a-b219e9f6f9a7.roa
Signing time:             Tue 03 Feb 2026 14:00:39 +0000
ROA not before:           Tue 03 Feb 2026 14:00:39 +0000
ROA not after:            Mon 04 May 2026 13:00:39 +0000
asID:                     25968
IP address blocks:        2620:7b::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3278e708-d128-4790-a8e3-1e0f4a1a6f4a/3278e708-d128-4790-a8e3-1e0f4a1a6f4a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3278e708-d128-4790-a8e3-1e0f4a1a6f4a/3278e708-d128-4790-a8e3-1e0f4a1a6f4a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3278e708-d128-4790-a8e3-1e0f4a1a6f4a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:bd:b1:ea:ae:99:bb:10:f7:f8:03:a7:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3278e708-d128-4790-a8e3-1e0f4a1a6f4a
        Validity
            Not Before: Feb  3 14:00:39 2026 GMT
            Not After : May  4 13:00:39 2026 GMT
        Subject: CN=568be003-f254-421a-bbb0-3f3bf8e9d3b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:0a:5e:68:70:49:2b:40:6c:11:c1:dd:09:a9:
                    b6:85:95:d6:a9:43:6a:19:a0:34:22:d2:42:23:75:
                    2f:9d:cc:49:82:fe:9c:0a:5f:3c:ee:3a:8a:f4:db:
                    01:2b:72:73:e3:35:a1:f4:10:c3:84:6e:d2:01:ff:
                    cd:4d:ed:57:1e:74:1b:32:17:dd:ba:6b:a7:62:0a:
                    ee:7b:c7:a5:fe:2a:e2:4c:f5:67:92:3f:84:1b:4e:
                    b7:d0:7f:37:98:0b:13:89:13:a4:ad:6c:23:a6:fd:
                    31:ee:35:5d:ea:98:b2:bd:82:d5:06:6e:67:00:9f:
                    ab:f2:4b:7d:f1:33:65:50:28:8b:86:3e:93:19:81:
                    a5:db:96:86:53:57:60:09:aa:ff:c0:fa:81:11:64:
                    53:8d:2d:91:ee:0e:26:fb:9a:cf:05:f1:5d:f2:36:
                    66:75:8a:25:f5:40:c4:12:89:b3:84:02:9f:7a:57:
                    71:6e:74:b7:03:02:5d:38:2a:af:37:4d:f7:9f:a8:
                    f6:d1:bd:4e:43:cf:d3:c1:dc:1b:b5:5c:08:e8:a2:
                    fa:13:64:73:79:5b:a8:e4:3f:68:3c:6b:24:59:28:
                    27:fc:9b:7a:b5:bf:00:4b:38:67:8f:3e:98:55:ef:
                    d8:2b:f2:02:a1:12:72:b7:f7:70:f2:94:17:49:19:
                    d8:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:B3:B4:46:92:AF:EB:CB:42:82:3D:F2:C3:2F:3A:F9:A9:75:E7:3D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3278e708-d128-4790-a8e3-1e0f4a1a6f4a/c322bcb2-1ed8-3132-999a-b219e9f6f9a7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3278e708-d128-4790-a8e3-1e0f4a1a6f4a/3278e708-d128-4790-a8e3-1e0f4a1a6f4a.crl

            X509v3 Authority Key Identifier:
                keyid:11:84:F2:33:1D:BB:25:29:F5:31:3A:68:B9:8F:19:FF:02:0A:EF:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3278e708-d128-4790-a8e3-1e0f4a1a6f4a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:7b::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:79:92:9e:cd:51:39:df:b7:0c:8f:d6:5a:15:b2:d4:a2:e6:
         d0:b6:49:ee:cd:dc:17:e6:69:99:88:8e:94:75:62:ac:70:b6:
         9e:6e:c9:cf:25:da:c2:a3:8c:bd:19:e5:6c:2a:37:61:0d:a5:
         96:72:bc:cc:a0:3f:aa:7d:cd:92:ea:55:69:0b:6c:bf:d7:87:
         cd:60:3d:6e:30:53:0c:2e:5b:e3:cc:37:a9:b7:e1:95:ae:1e:
         b4:78:79:e6:86:fa:29:a4:67:97:e6:ca:16:34:8e:20:14:d7:
         c0:3d:38:69:b6:ad:2f:26:d2:9c:84:82:15:18:2b:23:39:33:
         63:cd:a6:1c:44:45:a2:30:3f:9b:24:b6:cb:ff:22:7e:d7:f8:
         e4:79:9d:4b:58:b2:13:87:17:19:3c:83:b7:99:9b:8e:59:3f:
         5f:06:d8:ae:79:5f:e9:04:18:bf:08:28:34:f5:71:43:13:6f:
         03:a1:cd:f5:e4:88:2f:a6:59:dd:df:ca:f8:c0:c7:c7:fc:8e:
         d5:55:32:20:b4:0e:19:df:5a:3c:94:4e:2e:5b:b2:62:6a:24:
         84:73:33:ae:a5:1c:a2:d0:1e:11:0f:4b:7f:10:41:d2:12:21:
         f9:6b:38:47:41:da:7e:6a:ec:3c:cf:17:e6:d6:05:b7:2c:1f:
         77:d6:99:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:20:08 2026 by rpki-client