Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ecad7c94-7be3-3525-af2e-bcf0c0d32d7f.roa
File:                     ecad7c94-7be3-3525-af2e-bcf0c0d32d7f.roa (raw, json)
Hash identifier:          nIdyVpk9OyOfyBUoSt5jCF7DQadDBtAPpfkw1Up+5zc=
Subject key identifier:   31:2A:0D:3E:C5:EE:0F:2F:71:2A:73:2D:6B:D0:89:FE:60:BB:60:32
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584C8046D1DFFB31F0544A1CE0C0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ecad7c94-7be3-3525-af2e-bcf0c0d32d7f.roa
Signing time:             Mon 12 Jan 2026 14:00:40 +0000
ROA not before:           Mon 12 Jan 2026 14:00:40 +0000
ROA not after:            Sun 12 Apr 2026 13:00:40 +0000
asID:                     12222
IP address blocks:        2001:4878:8217::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:80:46:d1:df:fb:31:f0:54:4a:1c:e0:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jan 12 14:00:40 2026 GMT
            Not After : Apr 12 13:00:40 2026 GMT
        Subject: CN=62652ca0-d8d3-4a2f-88a2-c9d1974dd8d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:68:71:08:d9:8d:0f:32:02:ca:e9:b3:aa:cd:
                    eb:ce:85:12:e6:ff:52:64:2a:68:18:d2:0e:4a:f5:
                    fc:23:d9:f1:fd:4d:2f:a1:eb:fd:5d:cc:b7:d3:d6:
                    cd:52:92:74:5d:5b:d1:cf:fc:1a:5d:cd:d6:1a:7f:
                    fb:f4:4f:45:d7:5b:d8:23:16:6b:da:c7:f3:07:86:
                    57:18:21:7e:dc:bb:5d:74:ec:11:f2:78:36:a2:c1:
                    b4:d1:e9:32:00:ad:f9:65:7a:f0:e9:d4:0a:57:20:
                    78:99:10:6a:cb:15:fa:e8:ba:ab:b3:98:22:36:eb:
                    85:4a:67:3a:ab:10:0d:e2:a5:39:0d:8b:6a:96:1d:
                    dd:d3:90:dd:27:52:84:34:c2:78:11:c9:d1:27:3f:
                    81:a8:91:37:84:4e:4c:dc:fd:1c:4e:bb:ec:a7:96:
                    49:7f:0e:11:ce:75:8e:b7:d9:e3:ac:b9:e3:0b:e9:
                    4f:61:cb:73:0a:b8:76:8f:2d:88:2f:85:1e:78:39:
                    ff:eb:51:93:c8:c9:a9:80:8b:8a:52:b2:69:dd:c1:
                    0d:fc:d7:19:03:f5:7e:d9:46:9f:66:c3:b8:ce:5d:
                    4e:68:a7:55:0c:a3:b7:d1:58:19:33:1f:b0:9e:2e:
                    77:ef:eb:09:70:ed:c6:a7:98:61:6e:3b:84:4d:9b:
                    16:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:2A:0D:3E:C5:EE:0F:2F:71:2A:73:2D:6B:D0:89:FE:60:BB:60:32
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ecad7c94-7be3-3525-af2e-bcf0c0d32d7f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:4878:8217::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:0e:0d:20:9b:4d:4a:a2:b6:58:70:cb:dc:8d:a8:a5:be:66:
         f6:84:e5:a1:1c:06:37:b6:80:8f:82:96:66:45:9b:f6:4a:1a:
         a3:20:a1:a6:ca:91:8a:cc:99:c4:29:f7:1a:70:20:c4:9a:8d:
         4e:4d:c2:a8:7a:5e:2b:26:d6:15:07:8b:2c:15:81:99:f2:fb:
         a8:87:19:aa:ad:0b:4d:78:7f:77:4b:1f:ce:73:f8:21:39:ac:
         d2:3e:e8:1d:60:dd:67:bf:0f:a6:48:88:06:6a:b4:2c:59:80:
         b6:51:1b:1f:35:bd:13:fb:73:4f:f0:a0:6e:d8:7a:3f:a3:c4:
         43:c5:f8:ce:9f:39:2a:74:65:cc:f2:71:83:a8:42:80:e1:f2:
         f5:82:15:1d:81:27:f2:dc:89:c4:29:03:5f:dc:91:cb:8c:aa:
         03:c9:4e:5b:b4:5c:94:ff:83:d2:f5:2b:36:21:0e:af:b8:8d:
         cf:68:09:60:4c:2c:c6:27:68:6a:08:68:20:28:ba:fe:93:63:
         d5:0f:86:e6:ce:55:8f:38:25:15:f0:05:a2:fe:0e:57:93:43:
         eb:13:0b:11:52:f7:a2:ca:23:7a:ce:4e:f1:32:f9:ad:7f:cf:
         d1:e7:98:89:57:3f:fb:4d:3e:25:55:69:03:e5:1c:0a:57:14:
         7d:41:31:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:51:29 2026 by rpki-client