Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/97e93673-5d19-4ff2-8250-f1094f4e12c9/b1bf8e43-8a6b-301f-961f-e6dfae3de7fb.roa
File:                     b1bf8e43-8a6b-301f-961f-e6dfae3de7fb.roa (raw, json)
Hash identifier:          PMRSkkF1Ms4fh0Ws/Mrz2TyH/VEXy2fKNR/3DSI5ok4=
Subject key identifier:   4A:95:37:21:B4:B7:8D:51:54:2B:3C:D9:20:F3:82:95:EB:67:16:00
Certificate issuer:       /CN=97e93673-5d19-4ff2-8250-f1094f4e12c9
Certificate serial:       010D0C9F4328584CBDB216E8E842160E0E8B9B18
Authority key identifier: 59:A7:65:FA:2D:3E:59:26:BD:68:1C:C1:CC:86:BD:6E:8B:E6:B7:F3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/97e93673-5d19-4ff2-8250-f1094f4e12c9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/97e93673-5d19-4ff2-8250-f1094f4e12c9/b1bf8e43-8a6b-301f-961f-e6dfae3de7fb.roa
Signing time:             Tue 03 Feb 2026 14:00:39 +0000
ROA not before:           Tue 03 Feb 2026 14:00:39 +0000
ROA not after:            Mon 04 May 2026 13:00:39 +0000
asID:                     16509
IP address blocks:        2602:f74b:10::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/97e93673-5d19-4ff2-8250-f1094f4e12c9/97e93673-5d19-4ff2-8250-f1094f4e12c9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/97e93673-5d19-4ff2-8250-f1094f4e12c9/97e93673-5d19-4ff2-8250-f1094f4e12c9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/97e93673-5d19-4ff2-8250-f1094f4e12c9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:bd:b2:16:e8:e8:42:16:0e:0e:8b:9b:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97e93673-5d19-4ff2-8250-f1094f4e12c9
        Validity
            Not Before: Feb  3 14:00:39 2026 GMT
            Not After : May  4 13:00:39 2026 GMT
        Subject: CN=972d193b-97bb-4bc8-8d8e-a2b208837d08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:2b:ab:0c:cb:25:50:4c:5b:38:4d:40:8a:25:
                    f1:02:2d:c3:43:95:19:47:7d:7d:fc:d6:be:eb:e4:
                    86:fa:8d:dc:a5:7f:45:6c:cc:be:ed:11:c4:4d:e3:
                    d6:cd:59:62:d8:e2:2f:e9:2c:e4:d2:20:4c:60:4d:
                    d3:05:62:dd:b8:a1:ee:38:c2:13:02:dd:06:21:d7:
                    10:51:e4:48:ec:f9:80:c1:5d:1a:5c:ec:00:fa:5e:
                    70:64:2a:9e:b3:17:4f:85:4f:13:dc:02:53:a7:89:
                    5b:ad:43:5a:a6:83:b3:9c:02:3d:e2:67:70:46:1b:
                    fd:83:e9:50:c3:e8:df:d7:96:f1:45:ea:35:4e:b3:
                    dd:c9:6a:57:18:ab:99:fd:84:2e:0d:94:a6:08:aa:
                    1a:2c:54:fb:49:73:56:1b:aa:61:06:7b:3d:e6:22:
                    37:88:86:00:e0:78:a1:ae:c8:3f:76:9d:c2:57:81:
                    47:53:27:64:37:66:a7:fa:ec:37:e4:b0:38:b8:be:
                    18:77:2b:99:3c:92:a5:18:61:a8:1f:f0:a9:ff:62:
                    d4:14:09:f9:0e:86:f5:33:38:c1:31:8d:c2:21:6c:
                    cb:f7:52:1e:38:ba:55:1b:b0:fd:27:b6:e8:75:44:
                    a6:77:81:41:16:7d:f9:35:97:0f:ee:2f:6b:a6:73:
                    84:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:95:37:21:B4:B7:8D:51:54:2B:3C:D9:20:F3:82:95:EB:67:16:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/97e93673-5d19-4ff2-8250-f1094f4e12c9/b1bf8e43-8a6b-301f-961f-e6dfae3de7fb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/97e93673-5d19-4ff2-8250-f1094f4e12c9/97e93673-5d19-4ff2-8250-f1094f4e12c9.crl

            X509v3 Authority Key Identifier:
                keyid:59:A7:65:FA:2D:3E:59:26:BD:68:1C:C1:CC:86:BD:6E:8B:E6:B7:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/97e93673-5d19-4ff2-8250-f1094f4e12c9.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f74b:10::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:1e:ab:0b:59:80:c1:e8:94:ff:5f:a4:d2:1c:07:54:16:ee:
         8d:83:dd:8e:9d:e8:4a:04:8b:06:a7:f4:f7:9a:6e:30:92:b6:
         b9:5c:e2:1f:6e:6d:00:18:af:38:13:68:bc:67:fc:fd:a9:44:
         fa:00:91:9d:1d:e4:33:f8:a9:53:06:99:c3:aa:e5:7b:bd:3c:
         96:95:aa:62:58:c1:dd:2f:e5:b8:17:d7:a5:49:05:9b:c8:48:
         0c:40:0c:65:6a:d1:21:71:20:a3:fd:b2:de:d9:07:14:b3:40:
         c7:85:f5:43:1f:9a:6c:8a:9b:46:6a:09:39:a6:a0:51:8e:ae:
         b7:91:39:49:d6:8c:50:19:62:d6:c5:61:1e:8f:1c:1b:32:f4:
         4e:a9:8b:a1:b6:1f:25:75:32:db:79:da:a8:62:13:ee:55:65:
         8d:3a:bc:ac:85:ff:46:d8:9b:97:4d:2b:26:94:e3:e9:01:82:
         ab:1d:30:4e:27:e0:71:8b:ef:6c:ef:72:b7:9a:4e:99:cd:7a:
         f4:cd:d0:96:a5:7b:0a:15:4a:89:e0:84:37:35:84:19:74:54:
         4f:36:a5:42:ba:5c:03:08:82:2c:b3:7e:a0:37:90:b0:41:f6:
         18:2a:2c:3f:3d:47:97:ed:ec:56:5e:b7:e8:05:db:0e:09:5a:
         e8:83:f2:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:12:29 2026 by rpki-client