Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/93efedd2-1e8b-4d2a-b834-4cc0388fe9a7/21c39b56-e45a-336b-8cd3-9e3eff45daf4.roa
File:                     21c39b56-e45a-336b-8cd3-9e3eff45daf4.roa (raw, json)
Hash identifier:          LVOTNV0S8l63nL7m24HSfG7nPEHI8CzviopdlaJFuYs=
Subject key identifier:   2A:36:A1:AF:B5:48:5B:0B:9A:A7:A1:03:A8:DC:A8:A1:0D:DB:D0:88
Certificate issuer:       /CN=93efedd2-1e8b-4d2a-b834-4cc0388fe9a7
Certificate serial:       010D0C9F4328584CE85577ADD4F1A9A0C67F2180
Authority key identifier: BA:1E:C3:C3:4A:E1:45:8F:CE:6A:CA:C5:1C:2C:21:80:95:84:99:44
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/93efedd2-1e8b-4d2a-b834-4cc0388fe9a7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/93efedd2-1e8b-4d2a-b834-4cc0388fe9a7/21c39b56-e45a-336b-8cd3-9e3eff45daf4.roa
Signing time:             Wed 18 Feb 2026 20:34:23 +0000
ROA not before:           Wed 18 Feb 2026 20:34:23 +0000
ROA not after:            Tue 19 May 2026 19:34:23 +0000
asID:                     13576
IP address blocks:        2605:4900::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/93efedd2-1e8b-4d2a-b834-4cc0388fe9a7/93efedd2-1e8b-4d2a-b834-4cc0388fe9a7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/93efedd2-1e8b-4d2a-b834-4cc0388fe9a7/93efedd2-1e8b-4d2a-b834-4cc0388fe9a7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/93efedd2-1e8b-4d2a-b834-4cc0388fe9a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:e8:55:77:ad:d4:f1:a9:a0:c6:7f:21:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93efedd2-1e8b-4d2a-b834-4cc0388fe9a7
        Validity
            Not Before: Feb 18 20:34:23 2026 GMT
            Not After : May 19 19:34:23 2026 GMT
        Subject: CN=15945b0c-777b-44e1-b120-d59d2567629e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:cb:60:73:bf:86:d3:a2:99:ee:66:8b:ac:ec:
                    b0:fb:91:3d:82:04:c2:5a:3e:d2:ca:bd:ee:b3:91:
                    69:a0:c6:fe:cc:b1:84:7f:b2:81:09:5f:4b:26:07:
                    7f:d5:d4:77:ce:ea:81:a5:f5:87:82:0c:a3:45:1b:
                    d3:51:b4:25:43:e5:16:d4:28:06:d7:95:bd:60:73:
                    2f:0a:58:4b:a2:e1:04:9a:62:a1:bb:73:41:0e:4d:
                    10:70:bf:92:24:80:73:83:25:fc:2b:bc:45:81:33:
                    70:7e:bd:3f:c5:e7:8a:9a:31:56:d4:be:73:a6:3a:
                    cd:f2:07:77:7f:11:1d:b0:ae:87:bb:9c:82:a6:bd:
                    42:5a:5d:c2:56:1a:da:e4:49:d6:6d:10:48:54:fe:
                    31:6d:9d:c1:01:57:f5:4c:5e:e1:4e:8a:eb:38:c4:
                    a8:b0:01:d9:81:b7:47:06:08:ea:a9:67:44:d3:e7:
                    77:7f:71:08:cb:c2:9a:ef:fa:4f:3b:b1:0f:b8:c5:
                    9f:ee:a2:fe:e7:32:37:67:b1:90:9f:4e:84:30:a0:
                    08:84:08:e3:be:95:f2:e5:c7:84:61:60:4f:96:88:
                    96:61:da:c7:ca:9c:84:94:99:3e:b9:ca:fe:13:21:
                    aa:34:4a:a9:0b:22:78:a5:86:06:ed:3e:2e:3b:2f:
                    6f:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:36:A1:AF:B5:48:5B:0B:9A:A7:A1:03:A8:DC:A8:A1:0D:DB:D0:88
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/93efedd2-1e8b-4d2a-b834-4cc0388fe9a7/21c39b56-e45a-336b-8cd3-9e3eff45daf4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/93efedd2-1e8b-4d2a-b834-4cc0388fe9a7/93efedd2-1e8b-4d2a-b834-4cc0388fe9a7.crl

            X509v3 Authority Key Identifier:
                keyid:BA:1E:C3:C3:4A:E1:45:8F:CE:6A:CA:C5:1C:2C:21:80:95:84:99:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/93efedd2-1e8b-4d2a-b834-4cc0388fe9a7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:4900::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:69:7e:0b:2f:43:76:41:cb:b6:1c:9b:cc:ca:ae:38:4f:26:
         06:10:d1:3d:e9:1b:bb:e2:58:77:b2:ba:8c:c4:67:10:a4:1c:
         fd:3d:54:6f:42:9d:62:df:52:d7:39:70:6a:be:c6:c4:62:53:
         c5:64:f0:a3:a8:03:e2:4c:d9:e9:f2:85:04:30:c8:f7:45:f8:
         7e:c5:98:4b:46:73:85:6f:4c:d0:ac:7f:37:65:14:4c:20:b5:
         ef:7e:d4:e8:f1:af:bf:46:f8:05:55:ae:00:3d:a6:86:94:a6:
         43:c4:db:fc:97:aa:e1:01:97:3b:6d:d0:90:eb:45:74:b5:30:
         42:38:c5:b2:3c:0c:1e:39:96:c2:36:14:1c:cb:25:da:ee:90:
         ec:8b:bd:fa:67:bc:3a:93:9d:13:51:9f:fb:87:c6:b4:09:ed:
         c3:3c:c6:b9:f1:c2:85:ab:68:49:c3:bf:9d:95:22:be:94:a0:
         27:76:df:b6:91:e9:d3:16:ca:78:37:7c:da:5f:a6:f4:b2:bc:
         1f:87:63:3a:0b:36:2b:75:a6:d1:4c:2d:91:40:84:cd:c2:91:
         8d:66:5c:8a:5c:bb:d3:bc:25:4e:a8:e5:a7:59:51:d9:cb:59:
         d9:20:12:78:4a:a3:4a:5d:d1:62:7d:b3:73:74:0b:2b:96:c8:
         46:09:fd:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:52:23 2026 by rpki-client