Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/3471f982-b02b-3138-9832-449edd753c0b.roa
File:                     3471f982-b02b-3138-9832-449edd753c0b.roa (raw, json)
Hash identifier:          QXD0FGoLyaxJ7nMhNKIJiVq/HBEFQ8FNScv3k9zu/Q4=
Subject key identifier:   2F:61:D0:7E:B9:BB:9A:32:72:49:C3:41:45:28:EA:9D:9C:B8:15:D2
Certificate issuer:       /CN=44bc2b87-223c-4280-a9b3-634e66111eeb
Certificate serial:       010D0C9F4328584CA5F6FC93981647522A568000
Authority key identifier: 3F:18:D6:D5:4B:8C:63:68:AE:0E:D9:F7:7E:98:10:94:E5:E0:ED:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/3471f982-b02b-3138-9832-449edd753c0b.roa
Signing time:             Mon 26 Jan 2026 02:00:32 +0000
ROA not before:           Mon 26 Jan 2026 02:00:32 +0000
ROA not after:            Sun 26 Apr 2026 01:00:32 +0000
asID:                     13768
IP address blocks:        2605:6c80:3::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/44bc2b87-223c-4280-a9b3-634e66111eeb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/44bc2b87-223c-4280-a9b3-634e66111eeb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:a5:f6:fc:93:98:16:47:52:2a:56:80:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44bc2b87-223c-4280-a9b3-634e66111eeb
        Validity
            Not Before: Jan 26 02:00:32 2026 GMT
            Not After : Apr 26 01:00:32 2026 GMT
        Subject: CN=c5cde563-f75c-4997-9105-877b116ee782
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:fe:72:a6:44:35:e4:cf:bf:0a:e5:d3:3a:f6:
                    e3:15:54:ed:e5:38:04:f4:ca:f0:91:84:b0:ba:c2:
                    50:51:8b:85:25:6d:f8:f1:12:7f:23:72:38:e4:38:
                    a4:3f:bc:02:64:6f:db:e8:44:b9:7f:af:71:85:9c:
                    e7:17:6b:70:3d:e8:8f:c8:16:35:6d:2f:68:06:ef:
                    4d:d9:f5:ec:93:48:ef:9f:37:77:82:b9:48:bd:ff:
                    71:04:fa:5f:e8:97:73:a8:6b:b7:37:df:b9:f9:c7:
                    30:90:e1:d7:b8:cd:21:12:6a:bd:72:15:d9:35:29:
                    1d:55:83:3d:b4:2e:8f:bd:3d:a4:e7:89:73:df:9b:
                    79:2e:a6:b2:32:48:9c:26:ee:22:c2:61:a3:12:23:
                    e7:2c:8a:24:1d:e5:ae:24:5b:80:fa:57:cd:6f:bd:
                    35:ed:37:0e:3c:91:9e:48:55:4d:f1:e6:2f:16:e9:
                    10:1c:91:63:ed:37:1c:a3:43:54:73:4b:ce:64:1d:
                    43:d0:66:e4:c7:fb:a8:e1:e2:dd:c5:a7:e0:be:c6:
                    50:0d:1e:3c:5b:fb:d4:25:4a:81:15:31:2c:4d:c5:
                    57:ac:e6:be:84:40:60:f3:2d:10:ee:f9:4d:75:cf:
                    11:27:e0:7b:fa:8d:1f:76:93:2e:b8:8e:78:9c:8a:
                    c4:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:61:D0:7E:B9:BB:9A:32:72:49:C3:41:45:28:EA:9D:9C:B8:15:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/3471f982-b02b-3138-9832-449edd753c0b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/44bc2b87-223c-4280-a9b3-634e66111eeb.crl

            X509v3 Authority Key Identifier:
                keyid:3F:18:D6:D5:4B:8C:63:68:AE:0E:D9:F7:7E:98:10:94:E5:E0:ED:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:6c80:3::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:27:55:81:b4:48:b2:dc:96:bf:74:de:c5:cc:0b:9c:ef:42:
         d9:ef:67:03:31:c5:b1:b9:70:1d:b7:d5:8f:24:b9:1d:2f:62:
         86:e8:c7:9a:71:b6:2b:91:cd:19:a6:34:d8:13:d3:8b:b8:b3:
         ea:73:a8:23:67:88:e5:a7:ae:cb:bc:97:e7:19:17:3c:a2:fd:
         23:32:33:9a:3a:d3:fa:ce:db:26:cb:f8:b3:df:51:5a:03:43:
         75:f3:5d:e6:e9:65:71:5e:35:d4:fe:db:5d:1b:c4:4f:34:ca:
         46:95:67:a4:47:8c:7c:88:ae:fe:1b:b4:cf:19:52:bb:37:62:
         d9:78:03:cd:78:f5:08:5f:81:a5:c6:62:3d:18:22:ba:35:3a:
         7f:39:73:b7:fc:d3:9a:32:63:aa:10:f5:ad:23:fc:ec:46:58:
         f9:a0:ec:30:4a:4b:db:ba:c2:a3:e1:52:d0:fd:eb:9d:76:5f:
         6b:d6:83:ee:fe:82:9c:48:3d:20:66:69:dc:37:1a:f8:ce:5e:
         29:54:7c:fd:95:86:77:37:4f:fa:bd:11:46:69:72:39:7a:3d:
         60:e4:35:b4:23:b8:0b:01:ec:bd:9e:33:0c:ec:88:42:bd:91:
         6e:fc:d4:b6:9f:6f:83:20:3c:8a:cd:02:bc:3d:dd:7b:4f:08:
         24:f4:f8:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:44:41 2026 by rpki-client