Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2066f865-d2fa-47da-8496-ab361acb9ef1/b3d06358-bc50-3177-be66-23fc4b4b45c5.roa
File:                     b3d06358-bc50-3177-be66-23fc4b4b45c5.roa (raw, json)
Hash identifier:          M76OPCxd8JoVo98e2Z/2NefEoZe9lfc1ajk3MYwwtis=
Subject key identifier:   E8:F4:9C:13:96:2C:14:C0:91:F9:2B:56:7F:B3:84:1B:05:17:D1:B3
Certificate issuer:       /CN=2066f865-d2fa-47da-8496-ab361acb9ef1
Certificate serial:       010D0C9F4328584CC43DFD68C544D70B5FE34D00
Authority key identifier: E0:4F:0E:DA:0D:36:E0:C1:06:27:5F:00:8D:41:2B:68:D1:0C:48:74
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2066f865-d2fa-47da-8496-ab361acb9ef1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2066f865-d2fa-47da-8496-ab361acb9ef1/b3d06358-bc50-3177-be66-23fc4b4b45c5.roa
Signing time:             Thu 05 Feb 2026 22:17:59 +0000
ROA not before:           Thu 05 Feb 2026 22:17:59 +0000
ROA not after:            Wed 06 May 2026 21:17:59 +0000
asID:                     23255
IP address blocks:        2605:9ac0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2066f865-d2fa-47da-8496-ab361acb9ef1/2066f865-d2fa-47da-8496-ab361acb9ef1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2066f865-d2fa-47da-8496-ab361acb9ef1/2066f865-d2fa-47da-8496-ab361acb9ef1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2066f865-d2fa-47da-8496-ab361acb9ef1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:c4:3d:fd:68:c5:44:d7:0b:5f:e3:4d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2066f865-d2fa-47da-8496-ab361acb9ef1
        Validity
            Not Before: Feb  5 22:17:59 2026 GMT
            Not After : May  6 21:17:59 2026 GMT
        Subject: CN=601b9d0f-912d-46e0-a94b-c26bb4fb269e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:ee:32:ad:20:96:7d:6b:ee:2c:3e:30:3d:af:
                    0d:87:84:07:db:9c:f5:1c:d2:3e:21:27:b1:ec:79:
                    64:90:61:31:c9:29:a3:7a:ee:6e:6b:4b:dd:62:f6:
                    de:c4:4f:10:57:d3:41:0a:fd:ea:ce:7d:36:c7:70:
                    73:41:e7:02:90:30:21:6a:db:d4:7e:ad:7f:fc:ed:
                    05:8a:d2:53:92:35:49:c9:6c:45:70:1f:b0:54:c6:
                    df:e0:d0:ad:f5:dc:35:dc:8f:1f:d6:09:93:e4:a6:
                    31:8b:bd:d4:e7:4a:39:55:94:a9:04:bf:85:86:48:
                    30:02:59:91:a4:9b:e1:76:f7:d1:5a:f8:a3:3f:fb:
                    42:40:b0:64:36:ab:60:cd:ed:db:ab:26:79:8e:52:
                    fc:d4:e0:9e:3e:98:35:84:59:59:26:24:5b:e0:dd:
                    51:52:db:a7:80:3b:09:22:ee:fc:3e:90:a4:4a:af:
                    ba:39:6e:73:ea:b8:8b:42:2b:91:5e:3f:1d:bd:4b:
                    4c:5d:87:4a:20:d7:45:d9:bc:89:46:b4:b5:f4:25:
                    06:c1:f1:e0:9d:a4:e0:e2:5a:fa:5b:03:d2:9b:2f:
                    b7:08:e5:67:e3:a6:26:2e:84:cb:6c:bd:93:a7:d3:
                    74:95:8c:03:64:59:4a:b2:18:b6:ba:c0:a8:8b:8f:
                    76:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:F4:9C:13:96:2C:14:C0:91:F9:2B:56:7F:B3:84:1B:05:17:D1:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2066f865-d2fa-47da-8496-ab361acb9ef1/b3d06358-bc50-3177-be66-23fc4b4b45c5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2066f865-d2fa-47da-8496-ab361acb9ef1/2066f865-d2fa-47da-8496-ab361acb9ef1.crl

            X509v3 Authority Key Identifier:
                keyid:E0:4F:0E:DA:0D:36:E0:C1:06:27:5F:00:8D:41:2B:68:D1:0C:48:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2066f865-d2fa-47da-8496-ab361acb9ef1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9ac0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:58:98:bb:80:97:95:bd:6b:8f:17:ca:53:f0:0d:91:1f:59:
         1c:fe:c4:4f:69:85:e6:31:82:09:96:f6:c9:bc:bf:a8:e8:06:
         f3:07:1c:a9:ba:0b:cc:b7:a1:7d:d8:5d:50:5d:43:be:54:5d:
         7b:4c:23:51:c5:b1:db:9e:89:7c:29:ce:f6:52:e5:f0:62:5f:
         da:a8:28:17:43:71:46:1c:2f:5f:f2:38:f0:0e:38:e1:c6:09:
         1d:5b:05:f6:d5:c9:be:06:5c:5d:a8:6d:81:27:dd:6b:96:8a:
         64:39:4d:f6:ad:56:3a:75:e6:72:88:09:fc:5f:7d:7b:e0:5d:
         5a:92:e4:af:26:c1:54:6b:2e:c0:a1:8f:91:66:8f:44:bc:6b:
         72:7f:c6:33:d7:54:fc:da:b7:7d:be:94:41:4e:04:35:45:4b:
         df:f5:57:0d:bc:97:df:91:42:e2:d8:c8:ac:42:e4:08:71:18:
         be:fd:72:d0:ae:fa:43:c4:9c:fd:6e:2f:21:17:91:31:b0:22:
         61:a9:03:08:d1:96:c2:fd:61:7b:98:0c:55:e5:03:b7:3a:8f:
         4d:27:0e:8a:81:42:9d:f5:92:a8:d0:5f:9f:f4:62:2c:77:ae:
         d2:10:70:84:d0:f9:db:7b:3c:f5:1a:0e:11:57:0c:71:39:4e:
         ba:84:0c:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:16:26 2026 by rpki-client