Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6f599815-aa39-4cb1-86b8-df65da50cb35/eafd54b7-2e40-3fb1-80a3-b74f7b8a3a39.roa
File:                     eafd54b7-2e40-3fb1-80a3-b74f7b8a3a39.roa (raw, json)
Hash identifier:          s2dBQX/erQG8kWoGY8+kLAyIsLGxcrL5M7djmssaPJQ=
Subject key identifier:   BF:7F:3D:0F:2D:F9:8D:D4:4A:6A:8E:BC:EC:04:70:6F:9C:6C:83:DF
Certificate issuer:       /CN=6f599815-aa39-4cb1-86b8-df65da50cb35
Certificate serial:       010D0C9F4328584CBF171A103FDB7BCF9257A2C0
Authority key identifier: 00:F1:EF:2C:40:3D:8E:FB:D9:80:A7:22:2F:F6:54:88:97:A6:0C:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6f599815-aa39-4cb1-86b8-df65da50cb35.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6f599815-aa39-4cb1-86b8-df65da50cb35/eafd54b7-2e40-3fb1-80a3-b74f7b8a3a39.roa
Signing time:             Wed 04 Feb 2026 02:00:31 +0000
ROA not before:           Wed 04 Feb 2026 02:00:31 +0000
ROA not after:            Tue 05 May 2026 01:00:31 +0000
asID:                     7029
IP address blocks:        2607:eb40:1000::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6f599815-aa39-4cb1-86b8-df65da50cb35/6f599815-aa39-4cb1-86b8-df65da50cb35.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6f599815-aa39-4cb1-86b8-df65da50cb35/6f599815-aa39-4cb1-86b8-df65da50cb35.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6f599815-aa39-4cb1-86b8-df65da50cb35.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:bf:17:1a:10:3f:db:7b:cf:92:57:a2:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f599815-aa39-4cb1-86b8-df65da50cb35
        Validity
            Not Before: Feb  4 02:00:31 2026 GMT
            Not After : May  5 01:00:31 2026 GMT
        Subject: CN=cbaaaea2-9423-49a5-bc51-5c587477b192
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:67:32:6d:19:ae:c1:65:1f:85:00:cd:d2:29:
                    41:6a:3b:a4:27:64:91:09:54:64:71:d0:bf:60:dc:
                    91:86:e8:89:4d:77:67:b1:96:50:ef:8a:39:f3:50:
                    54:62:6d:2a:c6:a6:ee:e9:5d:67:6d:2b:6c:66:bc:
                    1a:bc:be:63:8d:07:6b:2b:72:13:67:25:17:9a:a4:
                    4b:b3:8a:3e:d3:c1:ae:b3:a5:9e:04:81:39:4a:c3:
                    7f:6a:bd:2a:3c:dc:59:5d:c9:d6:e1:81:85:9f:05:
                    95:f5:e4:8d:bb:ad:4a:ae:c6:e5:f6:81:17:6c:0d:
                    de:4a:22:f9:30:36:c3:40:91:9f:18:f5:a5:b7:b7:
                    03:cf:1b:bc:a5:74:cc:36:ad:6a:e2:dc:95:a9:2d:
                    03:1c:c6:f7:ef:07:4e:58:52:7a:8a:79:b6:55:b0:
                    3e:74:dd:1b:7a:17:9b:5e:ff:f4:92:78:33:01:bb:
                    1d:36:74:11:1e:b0:08:b4:6b:30:89:2a:70:c8:20:
                    28:1a:62:84:94:d2:06:6c:0d:e1:eb:67:10:67:dc:
                    6b:8e:08:6f:72:fb:42:73:fa:4a:dd:55:37:d4:b1:
                    6b:60:87:fd:f0:1e:36:35:9a:64:6d:52:ff:db:67:
                    0d:7c:dd:67:44:ad:cc:28:89:e8:c4:23:21:38:3f:
                    b0:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:7F:3D:0F:2D:F9:8D:D4:4A:6A:8E:BC:EC:04:70:6F:9C:6C:83:DF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6f599815-aa39-4cb1-86b8-df65da50cb35/eafd54b7-2e40-3fb1-80a3-b74f7b8a3a39.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6f599815-aa39-4cb1-86b8-df65da50cb35/6f599815-aa39-4cb1-86b8-df65da50cb35.crl

            X509v3 Authority Key Identifier:
                keyid:00:F1:EF:2C:40:3D:8E:FB:D9:80:A7:22:2F:F6:54:88:97:A6:0C:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6f599815-aa39-4cb1-86b8-df65da50cb35.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:eb40:1000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:5e:8c:d7:fe:49:70:cc:36:b6:2d:64:1e:48:97:8e:e3:c1:
         56:ef:1d:45:dc:45:81:dc:37:aa:28:dd:2e:3a:b7:0c:42:4c:
         38:d5:75:77:97:d1:bd:79:8e:2f:34:2a:cc:34:40:46:f1:7e:
         9b:fe:81:73:0c:f4:90:3b:c1:f4:ff:40:e5:09:ca:44:96:e4:
         b4:fa:6a:71:2f:e0:6e:7f:5d:38:75:0f:61:58:3c:48:63:f3:
         ca:bd:e2:5c:c1:e8:7e:7f:de:b2:b1:4a:ac:9d:cf:12:a1:76:
         d3:bc:7f:8b:88:b7:c8:25:8f:82:2b:a7:d9:d4:23:35:ad:c9:
         74:2f:7d:23:42:6f:3e:69:c8:e4:6a:81:18:27:4b:51:cc:93:
         d8:72:f2:bb:a7:a8:0a:a0:25:e7:48:f4:85:f9:99:cd:be:8d:
         3e:21:15:a1:45:d1:82:5b:c5:06:c5:69:b4:b9:5a:c4:68:df:
         eb:04:33:2f:f2:1e:3b:77:6a:16:b8:16:81:f0:46:ab:9f:57:
         e0:16:42:16:ed:a5:6a:5a:4d:84:25:b1:df:92:c6:80:46:31:
         95:f7:0c:c3:2d:73:09:91:c5:77:71:f7:f6:0a:5b:24:f6:b4:
         59:1f:d3:50:db:99:d7:b4:01:7d:6c:97:66:cf:b7:63:92:22:
         f8:94:ff:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:04:07 2026 by rpki-client