Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/1831f34a-97fe-41f4-8c90-0c35201574c4/e0ff5e4e-1494-38c2-aac5-a83dbdfe9a1e.roa
File:                     e0ff5e4e-1494-38c2-aac5-a83dbdfe9a1e.roa (raw, json)
Hash identifier:          grguNujkgyQZvw+4u+Y2k6ZRSqI3QqQtWRv+/YJr9NA=
Subject key identifier:   CC:6B:AA:4E:24:0F:16:53:10:65:EA:06:67:8F:85:0B:99:4A:60:4E
Certificate issuer:       /CN=1831f34a-97fe-41f4-8c90-0c35201574c4
Certificate serial:       010D0C9F4328584CFB20CFA0FC1A80A7FF5D5D00
Authority key identifier: 82:CA:3B:52:39:D0:75:A1:50:50:AB:74:E4:F3:0C:75:88:FB:A9:CA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/1831f34a-97fe-41f4-8c90-0c35201574c4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/1831f34a-97fe-41f4-8c90-0c35201574c4/e0ff5e4e-1494-38c2-aac5-a83dbdfe9a1e.roa
Signing time:             Wed 25 Feb 2026 14:08:39 +0000
ROA not before:           Wed 25 Feb 2026 14:08:39 +0000
ROA not after:            Tue 26 May 2026 13:08:39 +0000
asID:                     402197
IP address blocks:        2604:ecc0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/1831f34a-97fe-41f4-8c90-0c35201574c4/1831f34a-97fe-41f4-8c90-0c35201574c4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/1831f34a-97fe-41f4-8c90-0c35201574c4/1831f34a-97fe-41f4-8c90-0c35201574c4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/1831f34a-97fe-41f4-8c90-0c35201574c4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:fb:20:cf:a0:fc:1a:80:a7:ff:5d:5d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1831f34a-97fe-41f4-8c90-0c35201574c4
        Validity
            Not Before: Feb 25 14:08:39 2026 GMT
            Not After : May 26 13:08:39 2026 GMT
        Subject: CN=42528f72-b400-4315-a18e-65468c747821
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:34:75:5b:94:07:5a:ca:bf:35:95:bf:c3:f7:
                    8d:cf:d1:40:32:14:85:79:de:38:d8:90:62:89:8d:
                    5a:d3:e2:b1:09:93:4f:2d:47:0a:8e:98:9d:a3:0c:
                    60:e9:bf:de:f6:9c:8f:4b:ba:92:40:2b:45:75:56:
                    c8:62:67:91:c0:54:0e:2d:70:3e:b4:c6:a8:ca:e4:
                    29:61:a0:18:f5:05:3d:81:bf:b3:a6:3b:60:6d:bb:
                    48:62:41:72:a6:0a:65:5c:09:3a:cd:78:78:b1:7a:
                    b3:8c:4e:99:18:91:7e:77:a1:ad:fa:fd:7f:04:cb:
                    08:48:b3:48:67:e8:d6:b9:8f:34:e5:1d:2e:78:3d:
                    dd:31:e7:43:9e:ea:51:f2:a5:8d:cf:80:44:da:28:
                    52:98:5e:b4:10:1e:87:2f:86:29:f7:ec:99:46:b3:
                    b2:43:7a:21:72:57:f7:9d:29:9a:ab:69:bd:f7:34:
                    31:f1:5e:ea:cf:54:7d:32:45:1e:15:93:46:81:3d:
                    59:78:1a:22:31:1a:cf:89:de:02:95:bf:9a:12:0a:
                    fe:b0:09:af:f7:52:5b:db:05:06:0f:7e:da:b0:1b:
                    fc:4a:48:6d:ab:e0:34:36:c9:f5:ff:f8:47:6d:97:
                    4a:54:cf:7d:f8:56:ea:2c:93:a1:20:a2:8b:f4:cd:
                    68:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:6B:AA:4E:24:0F:16:53:10:65:EA:06:67:8F:85:0B:99:4A:60:4E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/1831f34a-97fe-41f4-8c90-0c35201574c4/e0ff5e4e-1494-38c2-aac5-a83dbdfe9a1e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/1831f34a-97fe-41f4-8c90-0c35201574c4/1831f34a-97fe-41f4-8c90-0c35201574c4.crl

            X509v3 Authority Key Identifier:
                keyid:82:CA:3B:52:39:D0:75:A1:50:50:AB:74:E4:F3:0C:75:88:FB:A9:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/1831f34a-97fe-41f4-8c90-0c35201574c4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:ecc0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:61:eb:ea:ae:7a:fa:19:ff:3a:85:d8:06:02:ef:22:15:19:
         38:e4:a7:26:bb:2f:bd:2f:05:6e:b3:02:f1:75:cb:3e:43:7e:
         06:a0:16:93:e9:94:85:5e:03:ad:ab:8c:44:d5:c0:76:f5:50:
         34:80:4f:88:94:61:2b:68:49:8d:9b:82:73:34:12:be:49:d3:
         8d:d7:41:e5:a9:64:6a:0a:77:ba:d0:af:d6:be:f8:cc:57:90:
         be:73:8a:30:1d:db:f7:ae:bc:25:46:43:88:45:23:24:a1:9c:
         9f:f3:71:08:e5:91:b3:67:8e:7b:bd:e9:48:f9:ee:66:2c:40:
         c5:eb:90:64:8a:55:52:6c:95:88:b0:0f:11:7c:bb:6f:50:51:
         83:a8:9d:c7:72:c0:c5:f1:d7:56:a5:5f:28:6b:b7:26:81:85:
         05:89:f1:e5:b0:17:17:2f:78:40:fd:9f:94:8f:0a:d1:4f:ee:
         47:7e:5d:6d:9f:a7:fb:68:59:32:65:e9:23:01:ce:0f:0a:a2:
         1e:18:00:22:66:d8:b9:e9:ba:f9:8b:66:80:15:96:41:e9:79:
         5c:d2:29:b9:33:31:8c:10:40:86:ec:9f:89:42:c5:00:87:26:
         5c:b5:0f:bb:9f:0d:1a:01:b6:57:cf:2f:c4:be:83:45:cc:3e:
         9b:99:0b:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:36:34 2026 by rpki-client