Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a24d6518-0415-4e7a-a0e9-6ed875b32fdb/6391a8d4-56fa-3aed-a9c1-86fd5c798a06.roa
File:                     6391a8d4-56fa-3aed-a9c1-86fd5c798a06.roa (raw, json)
Hash identifier:          ZzCw8wjN890gvXsJ6qLizRd//BbLrZ5Xp9marwHSeqg=
Subject key identifier:   B1:CB:69:A7:56:65:F5:F6:E0:77:5B:9D:DB:72:EF:B0:98:7E:CA:36
Certificate issuer:       /CN=a24d6518-0415-4e7a-a0e9-6ed875b32fdb
Certificate serial:       010D0C9F4328584CF2BCE03EDE360C59F42038F0
Authority key identifier: C9:5C:59:92:B9:97:2E:9A:8A:C3:94:FE:50:DE:A4:02:55:49:5F:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a24d6518-0415-4e7a-a0e9-6ed875b32fdb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a24d6518-0415-4e7a-a0e9-6ed875b32fdb/6391a8d4-56fa-3aed-a9c1-86fd5c798a06.roa
Signing time:             Sun 22 Feb 2026 14:00:41 +0000
ROA not before:           Sun 22 Feb 2026 14:00:41 +0000
ROA not after:            Sat 23 May 2026 13:00:41 +0000
asID:                     138997
IP address blocks:        2602:f7ac::/42 maxlen: 42
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a24d6518-0415-4e7a-a0e9-6ed875b32fdb/a24d6518-0415-4e7a-a0e9-6ed875b32fdb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a24d6518-0415-4e7a-a0e9-6ed875b32fdb/a24d6518-0415-4e7a-a0e9-6ed875b32fdb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a24d6518-0415-4e7a-a0e9-6ed875b32fdb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:f2:bc:e0:3e:de:36:0c:59:f4:20:38:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a24d6518-0415-4e7a-a0e9-6ed875b32fdb
        Validity
            Not Before: Feb 22 14:00:41 2026 GMT
            Not After : May 23 13:00:41 2026 GMT
        Subject: CN=166746be-0a37-4eaa-989a-7790a956ce37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:1f:69:2c:23:be:8e:a0:f8:fd:88:32:db:04:
                    f2:33:91:8a:40:fd:ec:e0:d8:1b:f6:e4:ce:7f:84:
                    64:a9:53:05:c2:a1:f8:33:f5:b7:02:0b:65:df:56:
                    75:66:24:27:1d:75:50:03:86:6e:6d:a6:c6:42:4a:
                    1a:48:1f:cf:b7:24:df:c8:87:c5:2d:d8:b3:80:f4:
                    fe:55:67:af:71:29:8d:11:fd:74:04:ca:a5:38:9d:
                    9b:34:07:80:ec:73:8d:c5:7f:b0:38:8b:83:ae:f5:
                    90:eb:10:48:04:b7:46:0b:89:2d:39:7c:4a:22:2c:
                    23:98:80:29:01:a4:d7:dd:03:4d:d0:38:74:c0:35:
                    2c:d0:7b:27:53:be:94:5d:a4:1c:43:87:07:c2:7e:
                    a2:4d:e5:5e:44:7e:b0:18:9c:01:10:d1:53:99:43:
                    57:06:57:14:0e:56:ec:63:23:f5:df:21:4c:80:12:
                    72:db:ab:31:32:8e:5a:90:8d:aa:3f:b1:c0:98:12:
                    b4:76:1d:16:c3:79:80:6a:1a:59:f1:a2:6b:63:ee:
                    af:48:f9:91:1f:8e:d9:5e:a2:00:f0:32:9e:30:04:
                    b6:9e:30:9d:2f:ab:5e:5a:5f:46:bb:a7:b1:8d:90:
                    e6:a8:8b:5c:b5:4f:a6:74:d4:69:94:88:06:f2:fe:
                    50:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:CB:69:A7:56:65:F5:F6:E0:77:5B:9D:DB:72:EF:B0:98:7E:CA:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a24d6518-0415-4e7a-a0e9-6ed875b32fdb/6391a8d4-56fa-3aed-a9c1-86fd5c798a06.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a24d6518-0415-4e7a-a0e9-6ed875b32fdb/a24d6518-0415-4e7a-a0e9-6ed875b32fdb.crl

            X509v3 Authority Key Identifier:
                keyid:C9:5C:59:92:B9:97:2E:9A:8A:C3:94:FE:50:DE:A4:02:55:49:5F:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a24d6518-0415-4e7a-a0e9-6ed875b32fdb.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f7ac::/42

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:52:97:d1:f9:cc:fa:1b:c1:e9:71:51:b5:e9:bd:36:e2:b3:
         4a:81:ac:23:78:c5:d6:c2:e3:7d:f8:c7:c7:49:f7:28:8b:06:
         a6:c3:dc:96:a7:0b:d8:7e:7a:e9:0b:43:5d:81:80:41:f8:58:
         ab:c7:ae:07:44:1a:8e:ec:63:c3:88:16:8f:8c:6e:21:47:8e:
         cc:ff:87:8e:b2:2d:f4:9b:7f:13:5b:c2:2e:9e:52:43:03:8c:
         28:54:8a:4c:ff:a4:b4:6e:ee:27:7c:40:39:71:18:ee:28:75:
         6f:0e:ea:b7:8c:73:d4:38:e5:4b:18:c9:92:38:fe:e6:58:3d:
         3c:2f:67:7f:1b:45:d8:e1:90:70:79:9f:4c:20:ed:a9:9f:39:
         ff:57:64:63:27:b1:dc:23:32:b2:6d:85:9f:3d:d1:86:63:15:
         51:87:32:28:af:d9:16:67:e6:40:be:33:a6:d7:6a:c9:ad:df:
         35:a0:16:bd:ef:51:be:8b:70:88:61:0a:61:ba:74:9c:c2:29:
         f7:bb:72:f9:06:d4:37:fa:c0:61:db:11:b4:a5:d6:c8:80:31:
         a2:70:52:bc:b9:27:9b:bd:6e:85:45:c3:2b:d4:79:e3:82:2c:
         4d:80:bf:f0:ec:10:4f:c4:7c:c1:d8:1d:56:16:dd:af:3f:cf:
         29:74:eb:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:27:25 2026 by rpki-client