Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/65443887-0807-4b1f-82f3-c04f3da375a8/24856481-7f15-38ce-8f25-bae6fa0b5e1c.roa
File:                     24856481-7f15-38ce-8f25-bae6fa0b5e1c.roa (raw, json)
Hash identifier:          tabd4Ofc57e7qqxCPwvJp3prYjRT4E7RyDxuAamh4ws=
Subject key identifier:   23:EB:7B:8A:A4:BA:E1:9B:DF:3D:CE:11:6C:7B:FA:86:3E:D0:41:5E
Certificate issuer:       /CN=65443887-0807-4b1f-82f3-c04f3da375a8
Certificate serial:       010D0C9F4328584CBF9DC573356C58609361CC40
Authority key identifier: 3A:F7:6B:B7:FE:3B:78:FF:BF:70:88:3E:A0:C2:56:04:AE:DE:D3:1B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/65443887-0807-4b1f-82f3-c04f3da375a8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/65443887-0807-4b1f-82f3-c04f3da375a8/24856481-7f15-38ce-8f25-bae6fa0b5e1c.roa
Signing time:             Wed 04 Feb 2026 06:31:55 +0000
ROA not before:           Wed 04 Feb 2026 06:31:55 +0000
ROA not after:            Tue 05 May 2026 05:31:55 +0000
asID:                     402164
IP address blocks:        2620:5a:d000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/65443887-0807-4b1f-82f3-c04f3da375a8/65443887-0807-4b1f-82f3-c04f3da375a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/65443887-0807-4b1f-82f3-c04f3da375a8/65443887-0807-4b1f-82f3-c04f3da375a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/65443887-0807-4b1f-82f3-c04f3da375a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:bf:9d:c5:73:35:6c:58:60:93:61:cc:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65443887-0807-4b1f-82f3-c04f3da375a8
        Validity
            Not Before: Feb  4 06:31:55 2026 GMT
            Not After : May  5 05:31:55 2026 GMT
        Subject: CN=f06a7547-8417-462a-9e27-9f0003bcf210
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:a3:84:ba:d6:34:0e:a8:f9:5b:a5:eb:aa:4b:
                    17:e8:3c:35:d2:da:64:46:ae:12:af:d3:0d:b4:64:
                    2e:d4:1e:70:f0:d6:f0:f3:ba:55:a3:5a:73:19:64:
                    16:5b:f3:66:d9:9c:76:36:24:ce:a2:dd:67:a7:22:
                    c1:13:f2:5e:51:7c:e2:84:a0:dd:a2:6e:72:a6:ff:
                    c0:63:d1:d0:c6:25:ad:33:28:89:0f:e8:b4:df:08:
                    41:2b:ea:bc:91:bb:1b:b2:64:2d:be:a1:b5:9a:92:
                    a9:97:12:3d:7c:97:c7:60:71:63:6c:2a:1b:04:a2:
                    ca:7f:ba:ac:38:72:fa:7c:7a:6d:3c:ca:82:1a:43:
                    5b:22:56:dc:4f:7a:7f:96:fd:f5:1b:b4:51:4e:0f:
                    37:a5:73:a1:7a:91:d5:c8:a6:25:8f:e0:b7:fe:aa:
                    94:e5:50:ba:86:d9:60:60:0b:ac:21:e6:11:35:4f:
                    01:8e:b6:c3:05:ae:31:4a:99:78:fa:7b:99:8b:7d:
                    ba:70:57:28:2e:b3:61:a4:6e:bf:43:99:fd:f7:e4:
                    46:e4:60:e7:19:ff:2d:c7:16:73:33:f6:d6:38:d3:
                    0d:5f:b6:7b:1c:e5:28:de:83:cd:3a:87:d4:97:ea:
                    89:31:db:81:d1:cf:43:c5:69:4d:d9:91:47:c4:5c:
                    5e:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:EB:7B:8A:A4:BA:E1:9B:DF:3D:CE:11:6C:7B:FA:86:3E:D0:41:5E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/65443887-0807-4b1f-82f3-c04f3da375a8/24856481-7f15-38ce-8f25-bae6fa0b5e1c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/65443887-0807-4b1f-82f3-c04f3da375a8/65443887-0807-4b1f-82f3-c04f3da375a8.crl

            X509v3 Authority Key Identifier:
                keyid:3A:F7:6B:B7:FE:3B:78:FF:BF:70:88:3E:A0:C2:56:04:AE:DE:D3:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/65443887-0807-4b1f-82f3-c04f3da375a8.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:5a:d000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:af:97:cb:6d:05:c6:b3:a4:3e:dd:0b:ee:de:6e:37:e9:3a:
         b9:50:55:00:c2:b6:66:07:47:50:04:3a:39:dc:e7:aa:52:24:
         f7:5c:5d:d3:37:7c:09:3a:54:3c:0f:fb:c3:a1:e2:85:be:1d:
         e1:26:0b:aa:34:0d:22:5c:4a:f5:1e:c7:76:5f:25:34:e0:1b:
         c4:66:a5:7b:99:af:6b:a4:43:8d:33:aa:1b:8d:6e:57:0c:5c:
         a2:e7:54:88:0c:04:97:f3:ba:df:11:0f:ad:3c:37:e3:2f:0d:
         32:51:ce:73:15:a8:31:73:df:ac:da:85:0c:2b:ee:ea:0e:2b:
         0e:cc:42:7f:2a:f0:d3:10:fa:68:e8:d7:1b:7c:13:78:2f:b4:
         14:fa:17:67:58:14:a2:18:1a:0e:be:ec:af:65:ac:25:3c:82:
         87:69:1c:dd:dc:d3:54:31:82:03:23:f2:ab:99:da:df:4b:22:
         b3:aa:d4:c2:22:ae:0d:a9:c0:89:f6:47:11:24:5d:d2:ba:ed:
         81:74:a8:03:3b:b1:00:5a:2e:ea:18:00:21:fa:73:38:88:44:
         7d:f8:9e:44:33:20:8d:d6:57:fd:b2:33:de:77:a8:c0:22:5a:
         70:aa:d5:ed:e9:29:bf:0f:23:59:5c:98:23:79:1c:e4:fd:ac:
         81:de:b3:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:17:17 2026 by rpki-client