Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8d2f044f-e9ba-4827-afd6-8e01d323d3ec/acfc2405-05cc-314e-8ebb-55e89f88c48f.roa
File:                     acfc2405-05cc-314e-8ebb-55e89f88c48f.roa (raw, json)
Hash identifier:          r/a56Fwc1mVuPt1GSo7m+gYhdsG1O06NOnTKevSZnUo=
Subject key identifier:   3A:97:4D:81:34:58:3F:B7:03:60:83:60:E7:90:F2:BB:6D:FA:13:A2
Certificate issuer:       /CN=8d2f044f-e9ba-4827-afd6-8e01d323d3ec
Certificate serial:       010D0C9F4328584CB81C8275CEE24D5053592440
Authority key identifier: AF:3F:E4:D8:29:57:9D:AE:9B:52:E2:DF:D1:82:AB:8C:FA:84:53:DA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8d2f044f-e9ba-4827-afd6-8e01d323d3ec.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8d2f044f-e9ba-4827-afd6-8e01d323d3ec/acfc2405-05cc-314e-8ebb-55e89f88c48f.roa
Signing time:             Sun 01 Feb 2026 14:00:40 +0000
ROA not before:           Sun 01 Feb 2026 14:00:40 +0000
ROA not after:            Sat 02 May 2026 13:00:40 +0000
asID:                     36744
IP address blocks:        2602:f76f::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8d2f044f-e9ba-4827-afd6-8e01d323d3ec/8d2f044f-e9ba-4827-afd6-8e01d323d3ec.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8d2f044f-e9ba-4827-afd6-8e01d323d3ec/8d2f044f-e9ba-4827-afd6-8e01d323d3ec.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8d2f044f-e9ba-4827-afd6-8e01d323d3ec.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:b8:1c:82:75:ce:e2:4d:50:53:59:24:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d2f044f-e9ba-4827-afd6-8e01d323d3ec
        Validity
            Not Before: Feb  1 14:00:40 2026 GMT
            Not After : May  2 13:00:40 2026 GMT
        Subject: CN=14c1e2d7-386d-487a-88b4-860be98fbc3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:68:ef:88:d0:b1:df:ef:b8:20:96:58:a4:37:
                    b5:83:80:07:d3:92:96:ac:e5:92:25:ad:53:2a:e8:
                    07:ed:1f:4a:3b:5d:ef:5e:c8:02:c8:6c:cb:4d:42:
                    3f:59:c3:2f:e0:9c:7d:2b:af:19:9f:81:fb:ba:19:
                    97:2d:96:90:57:b1:0a:2a:cb:66:d7:6f:b9:67:54:
                    bc:34:70:df:23:22:dc:ca:3a:cb:4b:c2:83:f9:81:
                    43:1c:2d:57:66:57:06:df:34:ea:df:2e:c9:fb:6b:
                    73:88:6e:c8:65:ae:68:be:e4:57:9d:cb:fe:7c:2a:
                    d8:b6:3d:db:f7:6c:31:08:15:18:37:9c:5f:fa:86:
                    3e:8e:6b:16:b6:09:1e:dd:a3:3e:b7:b1:09:7f:1d:
                    d0:8f:65:49:b1:21:e8:48:ae:d0:1f:19:22:d4:a0:
                    52:ef:ab:ac:d7:d6:5e:f0:40:a3:41:a1:a4:48:dd:
                    56:74:a0:6b:51:7c:02:9a:5a:8d:c3:7f:9b:ca:4f:
                    b3:18:47:a8:42:49:39:8f:c7:31:67:d9:cf:4e:c8:
                    2c:d1:0c:58:d6:a9:e8:b2:ae:94:ba:59:4f:48:9c:
                    b9:ec:6f:6f:f8:2c:20:8c:4a:fd:ff:c6:32:1e:2a:
                    2a:74:bd:40:68:9f:fb:46:eb:a2:e5:7d:77:f6:81:
                    b4:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:97:4D:81:34:58:3F:B7:03:60:83:60:E7:90:F2:BB:6D:FA:13:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8d2f044f-e9ba-4827-afd6-8e01d323d3ec/acfc2405-05cc-314e-8ebb-55e89f88c48f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8d2f044f-e9ba-4827-afd6-8e01d323d3ec/8d2f044f-e9ba-4827-afd6-8e01d323d3ec.crl

            X509v3 Authority Key Identifier:
                keyid:AF:3F:E4:D8:29:57:9D:AE:9B:52:E2:DF:D1:82:AB:8C:FA:84:53:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8d2f044f-e9ba-4827-afd6-8e01d323d3ec.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f76f::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a2:b9:33:08:ce:5f:d6:39:0e:5c:73:25:ba:be:7e:d7:20:53:
         af:3f:18:ba:72:b5:02:c5:66:42:ef:8f:d1:c0:99:25:34:7e:
         73:c2:09:be:65:6d:a2:e5:15:9b:06:47:15:9a:15:5b:e0:1c:
         0c:70:96:bc:f3:ee:be:10:19:73:e5:5d:cc:cd:69:1f:47:11:
         66:09:52:b1:c7:f6:3e:3e:53:74:f9:a3:2c:40:f3:9d:46:87:
         8a:db:84:29:a7:a4:a0:61:3b:7a:bd:b6:48:9e:4e:0a:f3:e9:
         6c:fa:ed:02:e5:4e:8d:54:6c:ed:d2:7c:70:7f:28:93:1e:87:
         c1:5c:a6:50:8b:65:2b:e2:35:12:98:38:30:5e:47:a1:54:7f:
         b1:e4:fc:f1:37:43:24:a0:a6:1a:83:6a:eb:bc:2e:61:44:c0:
         33:de:b9:77:26:0e:df:f5:15:35:ab:9c:07:75:f4:7d:9d:3d:
         94:f4:d9:fe:72:be:91:3a:7c:55:b8:e1:f0:4b:8f:59:10:87:
         5c:c3:79:b1:d5:29:72:a7:7e:de:9c:e8:bd:ba:7a:4c:14:52:
         d4:97:24:5d:7b:02:13:f7:c8:18:db:a5:c7:4a:85:bc:ca:5a:
         e4:90:d8:e3:42:57:4b:c6:ce:42:4c:8f:cc:4d:9b:61:5b:31:
         a9:d9:a8:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:22:24 2026 by rpki-client