Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9b2dd4d6-06da-4602-9071-aee92968f31a/575aa4d8-88aa-34d0-80b3-35c82af29649.roa
File:                     575aa4d8-88aa-34d0-80b3-35c82af29649.roa (raw, json)
Hash identifier:          J4FI8XkG9wCwX5STe4JSyfOhead+5j3nZEmFCNookzs=
Subject key identifier:   03:9C:55:5B:28:4D:01:C3:5F:49:83:16:6B:37:1F:16:03:07:45:DF
Certificate issuer:       /CN=9b2dd4d6-06da-4602-9071-aee92968f31a
Certificate serial:       010D0C9F4328584CF6ECE3580894FDB63A34F040
Authority key identifier: 86:DB:48:E7:9B:A5:A8:A6:88:5A:54:D5:60:13:CD:82:74:72:89:8A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9b2dd4d6-06da-4602-9071-aee92968f31a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9b2dd4d6-06da-4602-9071-aee92968f31a/575aa4d8-88aa-34d0-80b3-35c82af29649.roa
Signing time:             Tue 24 Feb 2026 02:00:31 +0000
ROA not before:           Tue 24 Feb 2026 02:00:31 +0000
ROA not after:            Mon 25 May 2026 01:00:31 +0000
asID:                     400596
IP address blocks:        2602:f758::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9b2dd4d6-06da-4602-9071-aee92968f31a/9b2dd4d6-06da-4602-9071-aee92968f31a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9b2dd4d6-06da-4602-9071-aee92968f31a/9b2dd4d6-06da-4602-9071-aee92968f31a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9b2dd4d6-06da-4602-9071-aee92968f31a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:f6:ec:e3:58:08:94:fd:b6:3a:34:f0:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b2dd4d6-06da-4602-9071-aee92968f31a
        Validity
            Not Before: Feb 24 02:00:31 2026 GMT
            Not After : May 25 01:00:31 2026 GMT
        Subject: CN=50e8f8d8-1d38-4065-b694-31fd75d5aa91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:9d:a3:b7:74:49:e1:61:ac:99:f4:e6:f2:de:
                    0b:42:56:10:81:c6:80:f6:1d:ac:09:ea:6f:73:15:
                    b6:24:7d:d8:c3:a0:e1:5f:92:f6:49:b2:f7:ac:8b:
                    c0:6e:68:10:73:9f:30:05:b5:be:7e:cb:38:52:b6:
                    f4:16:77:c1:90:dd:a9:c8:e7:ae:e4:63:cc:d6:ce:
                    6c:be:f1:c4:03:19:b5:83:78:7e:19:df:53:90:2c:
                    4e:fb:de:33:da:87:07:2a:86:c1:8e:95:68:34:e8:
                    48:2c:84:5b:82:01:f0:85:c4:54:0c:88:e3:80:75:
                    69:ba:d6:c7:03:6e:be:c0:40:73:6c:ab:0a:9e:f8:
                    b9:62:0e:86:6a:d2:bb:b5:0a:21:d0:e3:4e:c0:12:
                    d9:d9:2e:f5:8c:d1:a7:f0:81:22:9c:89:b4:29:35:
                    5c:0c:29:1c:8e:c4:e4:4c:78:81:b9:4e:52:44:14:
                    d5:19:07:71:14:ae:ac:d9:4c:8c:df:1b:ee:6f:67:
                    6e:f2:e7:a8:a2:76:0c:68:30:b6:68:2d:17:cf:c5:
                    10:1d:0a:fd:8d:1c:83:72:bf:21:06:d7:e0:df:af:
                    38:e2:70:8f:83:34:af:42:21:8a:c7:84:6d:04:3a:
                    65:b9:a7:0f:93:49:5b:d2:11:23:3c:a6:c9:19:26:
                    a3:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:9C:55:5B:28:4D:01:C3:5F:49:83:16:6B:37:1F:16:03:07:45:DF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9b2dd4d6-06da-4602-9071-aee92968f31a/575aa4d8-88aa-34d0-80b3-35c82af29649.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9b2dd4d6-06da-4602-9071-aee92968f31a/9b2dd4d6-06da-4602-9071-aee92968f31a.crl

            X509v3 Authority Key Identifier:
                keyid:86:DB:48:E7:9B:A5:A8:A6:88:5A:54:D5:60:13:CD:82:74:72:89:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9b2dd4d6-06da-4602-9071-aee92968f31a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f758::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:88:e8:2a:75:ff:2b:50:c5:73:8b:8f:00:8a:ed:df:f7:31:
         fe:3b:07:55:a1:53:8f:b4:60:c1:78:b1:1b:ef:60:8d:e6:3a:
         6e:67:48:20:05:31:2c:7d:25:13:3a:44:6d:55:4f:db:94:84:
         65:b9:b1:a4:87:87:8d:79:ae:4f:68:6e:3d:0d:84:1f:d6:a4:
         19:74:b2:d8:bf:f2:6a:c8:ff:89:d8:0d:a8:3f:21:a0:36:8f:
         24:7e:5d:9b:76:21:97:fa:bb:27:0f:6b:a7:38:9e:1e:09:9d:
         a0:83:8d:f8:fa:55:df:51:c7:e4:ed:55:5d:e5:b2:8c:58:aa:
         ee:91:10:62:ce:17:e0:55:1e:d1:66:38:db:91:19:9d:c7:89:
         42:48:f2:e4:ac:86:c0:f2:10:45:a9:9a:e3:c1:f4:d5:46:be:
         1d:d7:4d:6b:7b:3e:77:c0:9c:97:42:5a:ff:8e:bd:e3:18:ba:
         d6:c0:85:48:3e:9a:9f:16:d3:cd:1e:c6:01:66:5a:88:cf:29:
         fe:8c:e9:f0:85:12:57:df:46:47:d3:8c:95:04:f6:84:f0:03:
         32:fa:f0:fe:ff:63:ea:4a:2a:7b:c5:bd:68:7f:03:3a:63:31:
         87:86:56:ae:94:ba:d5:60:fb:b9:e2:00:5c:42:e8:78:df:d7:
         90:79:68:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 02:21:17 2026 by rpki-client