Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7bba0e0-fb7b-49e5-bcf8-5494a1f4cde7/573dfa7c-ce27-31a9-a765-ae048e0cb5a7.roa
File:                     573dfa7c-ce27-31a9-a765-ae048e0cb5a7.roa (raw, json)
Hash identifier:          EoGmBWfbAdRLYJXZyI6j9g9TuJVAXieP25ftC/+0uGM=
Subject key identifier:   F4:AC:2F:82:AA:E2:A7:6A:17:73:79:65:96:B6:74:7C:E5:6D:6E:C5
Certificate issuer:       /CN=c7bba0e0-fb7b-49e5-bcf8-5494a1f4cde7
Certificate serial:       010D0C9F4328584CD99D019BCF54E9118BE9AF00
Authority key identifier: 1D:C1:30:50:A3:52:2D:3C:9C:17:AD:6C:F0:EE:55:82:42:33:93:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7bba0e0-fb7b-49e5-bcf8-5494a1f4cde7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7bba0e0-fb7b-49e5-bcf8-5494a1f4cde7/573dfa7c-ce27-31a9-a765-ae048e0cb5a7.roa
Signing time:             Fri 13 Feb 2026 14:00:41 +0000
ROA not before:           Fri 13 Feb 2026 14:00:41 +0000
ROA not after:            Thu 14 May 2026 13:00:41 +0000
asID:                     214483
IP address blocks:        2602:f756:29::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7bba0e0-fb7b-49e5-bcf8-5494a1f4cde7/c7bba0e0-fb7b-49e5-bcf8-5494a1f4cde7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7bba0e0-fb7b-49e5-bcf8-5494a1f4cde7/c7bba0e0-fb7b-49e5-bcf8-5494a1f4cde7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7bba0e0-fb7b-49e5-bcf8-5494a1f4cde7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:d9:9d:01:9b:cf:54:e9:11:8b:e9:af:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c7bba0e0-fb7b-49e5-bcf8-5494a1f4cde7
        Validity
            Not Before: Feb 13 14:00:41 2026 GMT
            Not After : May 14 13:00:41 2026 GMT
        Subject: CN=1cfb7754-11c2-4864-a03c-18c9846a677e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:b0:99:8c:8b:ad:3f:cb:a1:f7:7a:92:a7:d2:
                    1a:72:4c:b7:dc:a9:a5:be:53:d6:82:68:c8:ab:cf:
                    c0:19:df:ed:bf:ee:41:6e:88:47:ef:1c:46:1b:e2:
                    73:49:fc:aa:94:ff:52:3b:97:83:a6:19:88:9a:ee:
                    23:b5:9e:d4:9a:ac:e9:43:ac:4e:d3:aa:1e:4d:4a:
                    ff:66:0b:db:20:d0:c9:12:69:6a:2a:1a:53:bd:a9:
                    a7:bf:b9:64:7b:88:96:99:3f:e4:15:3f:75:71:78:
                    d6:85:56:51:b7:39:19:3c:0e:2b:96:65:93:1d:10:
                    cb:3c:bc:7b:90:25:bf:fe:17:ff:8d:a8:0a:41:d4:
                    3e:85:50:d6:76:11:34:6f:3f:ef:86:4c:e5:e6:5f:
                    b4:91:f6:09:df:a2:38:9d:75:a8:5f:6d:b0:15:9c:
                    e9:10:f5:be:b8:1e:e8:65:ba:6d:e9:f6:99:f0:6b:
                    60:2f:f6:4d:35:a6:80:ec:69:d4:25:e5:29:27:29:
                    60:eb:07:e7:2a:a1:cf:e9:39:5e:7a:e0:f6:93:cb:
                    91:7c:09:0f:b3:c8:80:bd:16:76:30:4b:66:cc:95:
                    4d:72:30:61:b0:43:14:52:19:6f:3a:b5:ac:e4:fd:
                    8a:ce:de:a1:ee:da:bf:51:91:ef:70:37:45:61:a0:
                    57:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:AC:2F:82:AA:E2:A7:6A:17:73:79:65:96:B6:74:7C:E5:6D:6E:C5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7bba0e0-fb7b-49e5-bcf8-5494a1f4cde7/573dfa7c-ce27-31a9-a765-ae048e0cb5a7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7bba0e0-fb7b-49e5-bcf8-5494a1f4cde7/c7bba0e0-fb7b-49e5-bcf8-5494a1f4cde7.crl

            X509v3 Authority Key Identifier:
                keyid:1D:C1:30:50:A3:52:2D:3C:9C:17:AD:6C:F0:EE:55:82:42:33:93:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7bba0e0-fb7b-49e5-bcf8-5494a1f4cde7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f756:29::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:6b:6a:af:81:54:d3:14:0f:eb:6e:7d:b7:b1:05:78:76:7a:
         da:e2:82:60:41:ef:84:2e:39:c3:38:bb:da:14:70:67:43:8d:
         bf:c8:2f:cf:cc:ab:b3:17:cb:37:e7:2d:c0:f4:69:c1:68:f2:
         4f:88:23:12:a0:40:51:2b:ad:1d:11:91:05:16:b6:46:5a:99:
         7d:52:78:9f:3e:5c:2b:3d:3f:a9:e5:81:c4:ee:6f:9a:e7:81:
         7e:eb:ec:35:25:bf:9c:e3:ca:10:6e:f2:a3:ee:8e:82:3d:76:
         f7:8d:f4:51:cc:19:1d:0a:f4:8a:dc:70:35:8f:d7:bd:c5:fd:
         ab:89:55:d4:d7:9c:67:88:8f:40:2f:03:ad:d2:3c:86:77:f1:
         50:73:e6:69:a1:18:2a:cc:fb:89:08:cf:89:85:39:30:69:24:
         38:13:1c:a4:fa:79:e2:d2:c7:12:93:1c:bb:2c:56:8e:7f:56:
         a9:20:17:fb:53:8b:90:51:46:f9:2c:eb:50:8e:0e:f9:95:6c:
         f9:d9:e3:1c:e3:64:ae:be:64:90:a0:b2:bd:34:80:e6:e9:b9:
         d1:4d:af:76:56:47:34:13:f3:84:45:d6:57:37:ba:e1:1c:46:
         b3:33:93:56:b0:cb:05:39:d4:8a:af:42:16:49:0b:d6:5e:08:
         11:8e:cf:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:23:50 2026 by rpki-client