Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03d20efd-729c-46b2-b268-510d1f9f7dd3/2b0dfe27-e6b9-3bb5-9ace-aa78419a3e82.roa
File:                     2b0dfe27-e6b9-3bb5-9ace-aa78419a3e82.roa (raw, json)
Hash identifier:          D7vE6u6Y1PNzvHTCaB2rYyfoGybTRQ1SJdTeOkGFrbY=
Subject key identifier:   95:83:2F:67:BA:79:14:7C:7F:73:99:92:3D:D4:44:64:BC:84:79:4C
Certificate issuer:       /CN=03d20efd-729c-46b2-b268-510d1f9f7dd3
Certificate serial:       010D0C9F4328584CD99CFD2F533FB81EB70A9140
Authority key identifier: EE:28:10:71:FC:4B:A1:89:5B:96:F5:A7:39:16:B2:72:08:13:DF:D4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03d20efd-729c-46b2-b268-510d1f9f7dd3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03d20efd-729c-46b2-b268-510d1f9f7dd3/2b0dfe27-e6b9-3bb5-9ace-aa78419a3e82.roa
Signing time:             Fri 13 Feb 2026 14:00:41 +0000
ROA not before:           Fri 13 Feb 2026 14:00:41 +0000
ROA not after:            Thu 14 May 2026 13:00:41 +0000
asID:                     400803
IP address blocks:        2602:fde5:100::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03d20efd-729c-46b2-b268-510d1f9f7dd3/03d20efd-729c-46b2-b268-510d1f9f7dd3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03d20efd-729c-46b2-b268-510d1f9f7dd3/03d20efd-729c-46b2-b268-510d1f9f7dd3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03d20efd-729c-46b2-b268-510d1f9f7dd3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:d9:9c:fd:2f:53:3f:b8:1e:b7:0a:91:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03d20efd-729c-46b2-b268-510d1f9f7dd3
        Validity
            Not Before: Feb 13 14:00:41 2026 GMT
            Not After : May 14 13:00:41 2026 GMT
        Subject: CN=55420af6-f053-4152-90cc-8cd780a296ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:65:dd:cd:9c:b7:32:52:9e:28:6b:e8:2e:92:
                    e9:bd:9d:c4:57:ed:dc:6c:50:b4:34:46:62:a8:82:
                    15:85:61:e6:c6:47:a1:ed:fa:f0:af:99:e4:8b:b8:
                    ce:19:bb:54:1b:ef:13:a8:d4:8e:63:0a:83:f1:85:
                    db:16:52:96:fd:ba:eb:c3:7f:16:71:96:9d:17:1d:
                    8a:40:cf:4d:65:92:a7:90:64:fa:90:f3:be:d6:f8:
                    36:2a:d5:0a:7b:aa:2a:f7:bf:c6:79:fd:70:ac:06:
                    ad:30:d1:55:4f:dc:42:58:6f:b1:8e:65:55:da:41:
                    7b:e9:92:80:e4:43:19:33:8e:fe:d1:c2:e2:53:30:
                    dc:e9:e6:ec:88:e3:01:f1:ba:2a:72:41:5a:3e:be:
                    b4:a6:53:f6:f0:cc:f3:d4:73:b6:ba:08:04:3d:9f:
                    eb:08:a0:af:01:27:cf:03:9b:b5:98:3c:7c:af:c1:
                    b1:29:69:bf:d4:1d:b3:0c:f5:98:5f:7a:d8:3d:76:
                    94:50:c2:e5:b5:f1:87:37:cf:62:6d:6b:a6:0c:68:
                    35:89:8f:eb:65:b4:70:54:9f:22:05:40:2e:42:1d:
                    7e:da:4e:c4:9a:99:7a:62:38:e7:cf:53:f2:aa:71:
                    87:20:ac:e1:49:22:08:89:51:2c:d9:89:45:29:2d:
                    60:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:83:2F:67:BA:79:14:7C:7F:73:99:92:3D:D4:44:64:BC:84:79:4C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03d20efd-729c-46b2-b268-510d1f9f7dd3/2b0dfe27-e6b9-3bb5-9ace-aa78419a3e82.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03d20efd-729c-46b2-b268-510d1f9f7dd3/03d20efd-729c-46b2-b268-510d1f9f7dd3.crl

            X509v3 Authority Key Identifier:
                keyid:EE:28:10:71:FC:4B:A1:89:5B:96:F5:A7:39:16:B2:72:08:13:DF:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03d20efd-729c-46b2-b268-510d1f9f7dd3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fde5:100::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:d5:17:24:0c:4c:64:80:8e:a1:f0:81:69:c2:2b:df:9f:74:
         9d:e9:f4:46:fb:a9:f4:78:a4:df:95:88:ef:36:d2:8c:bc:30:
         80:6c:52:a1:4b:8a:c3:ed:1b:6f:f9:e7:03:29:e1:f3:95:10:
         dc:71:9c:91:67:03:86:cc:e2:ef:02:11:12:3d:b3:0a:d2:47:
         d9:38:47:ed:d0:a6:09:23:6b:16:1d:77:36:9c:6c:a1:ab:17:
         f9:03:ba:67:aa:f8:fb:c8:2d:cb:d9:aa:ac:84:d2:3a:94:90:
         7d:d4:0c:7b:ca:c9:51:59:c6:2d:d9:b8:84:08:6a:83:a9:e2:
         d3:fc:79:9a:96:bc:c8:03:e7:9d:33:68:4f:cc:4c:7f:78:2e:
         8f:b4:cc:06:40:72:d0:53:6a:96:81:37:02:35:1c:51:74:8a:
         cb:a7:37:c4:3d:c8:ea:15:26:ac:b7:d6:c6:f6:6b:a8:e3:75:
         42:1a:ff:78:7a:3c:a1:0b:7d:b6:9b:4a:05:17:a6:42:a4:ab:
         15:3e:01:5e:c3:2f:90:e3:de:80:4e:a0:f9:ac:cc:58:5d:3a:
         5e:b3:9f:fb:22:f9:c0:d3:53:a7:b6:0a:1e:93:25:85:fa:42:
         e8:cb:16:85:f8:df:c8:a9:15:66:11:44:bf:d3:74:4f:b1:9e:
         c4:d5:e9:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:43:10 2026 by rpki-client