Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/34ff191a-57a4-361c-bcdf-9d2448d1e01b.roa
File:                     34ff191a-57a4-361c-bcdf-9d2448d1e01b.roa (raw, json)
Hash identifier:          7vnbI/vK/J9L3oVmDGN/rvrZ/3korpJPW/RuUBJUU2E=
Subject key identifier:   B7:9D:4E:68:A4:B4:3D:0C:89:BC:B3:F5:BF:7F:78:02:E1:67:07:D2
Certificate issuer:       /CN=65dae2a0-0cb7-46e8-ae17-abeb06007e1a
Certificate serial:       010D0C9F4328584CD2A1E9B6B473C1AAA1DE0780
Authority key identifier: 1A:49:9D:8B:77:A3:3A:DF:1F:CD:4E:BA:51:CC:1A:A3:FA:A3:F6:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/34ff191a-57a4-361c-bcdf-9d2448d1e01b.roa
Signing time:             Wed 11 Feb 2026 02:00:32 +0000
ROA not before:           Wed 11 Feb 2026 02:00:32 +0000
ROA not after:            Tue 12 May 2026 01:00:32 +0000
asID:                     212238
IP address blocks:        2607:6b80:5c::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:d2:a1:e9:b6:b4:73:c1:aa:a1:de:07:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65dae2a0-0cb7-46e8-ae17-abeb06007e1a
        Validity
            Not Before: Feb 11 02:00:32 2026 GMT
            Not After : May 12 01:00:32 2026 GMT
        Subject: CN=981a3d37-da6e-49d5-8e57-ae1ddebfb895
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:f9:9a:4d:36:0c:90:34:65:45:6c:63:2d:23:
                    fb:8c:67:d3:02:93:31:cf:ff:be:ed:8f:8a:f5:3c:
                    6e:83:fd:6d:e7:24:ee:e4:d4:f2:25:15:54:78:17:
                    ad:c2:28:8f:63:dc:41:58:e0:93:f0:74:1c:71:a9:
                    5b:a1:c1:a8:10:a2:33:fd:de:fd:65:44:96:d9:09:
                    a6:e4:ef:93:43:89:36:75:d1:f5:40:6b:9b:fc:e4:
                    e0:6b:cf:f2:b0:49:7a:21:87:a5:db:f9:cc:db:8c:
                    19:7a:24:07:e6:5b:79:76:63:f4:75:2f:35:fe:d1:
                    31:d2:a1:0c:ed:78:89:c8:13:79:e6:a0:45:76:26:
                    65:ad:e3:cb:2a:11:55:97:4a:8b:c9:fe:5e:43:41:
                    37:59:d1:2c:b7:6a:ad:02:af:95:85:68:50:de:08:
                    bb:84:f2:a3:3d:5e:9c:a1:0e:62:c1:8d:75:da:e0:
                    e4:78:c7:02:86:d7:6e:97:a8:b7:a9:b9:31:80:dc:
                    39:c6:2b:47:97:7a:30:0a:67:90:3c:72:91:cc:47:
                    93:1c:fe:5c:ec:b0:00:2d:5f:4d:2b:d7:a5:a1:96:
                    ed:3a:93:ad:5d:f5:0d:1a:1f:03:a2:3d:75:32:1f:
                    62:2d:63:46:80:fc:b9:54:23:ac:68:a5:b4:f0:2e:
                    9a:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:9D:4E:68:A4:B4:3D:0C:89:BC:B3:F5:BF:7F:78:02:E1:67:07:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/34ff191a-57a4-361c-bcdf-9d2448d1e01b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.crl

            X509v3 Authority Key Identifier:
                keyid:1A:49:9D:8B:77:A3:3A:DF:1F:CD:4E:BA:51:CC:1A:A3:FA:A3:F6:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:6b80:5c::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:ac:fc:d7:9c:2f:4a:0b:04:a7:b2:e7:11:7f:b3:be:2e:cc:
         c1:50:82:4c:6f:7c:0e:94:bc:6c:07:09:37:2f:ed:e8:20:a9:
         90:da:b6:29:c6:16:72:eb:49:94:0a:e3:42:58:1f:30:66:e4:
         c6:3a:fc:6b:01:34:3e:58:bc:10:07:15:b5:df:5d:c6:f7:63:
         fb:e1:b9:09:52:dd:f5:cf:5b:bc:cd:e9:3f:09:ff:fa:9a:c5:
         44:e2:7d:2b:5e:0a:1f:0a:3c:a8:1d:97:e0:08:d3:6c:0c:c1:
         76:1d:20:60:f1:12:c8:64:11:06:47:5d:1b:02:a8:09:8d:b5:
         17:1b:50:ad:9a:ce:e3:1f:fc:8d:3b:84:bf:ce:eb:f4:a9:5e:
         82:51:0a:44:c7:d5:4f:17:be:2d:c6:6e:b7:11:e5:bc:02:11:
         45:43:c5:5c:52:12:be:a7:dd:60:fe:47:9f:26:71:28:b1:44:
         15:5f:1c:22:ea:85:e4:d8:d3:7c:80:09:cc:0e:99:f6:03:4d:
         4c:11:d4:f7:e7:2e:e5:4a:a4:8e:21:08:5e:7c:79:b7:44:ab:
         f5:df:3f:e3:65:ac:6d:8f:c3:b1:99:3f:04:9b:9a:8f:6e:6b:
         3e:9d:3e:66:75:7c:22:81:c0:b0:3c:8a:48:03:60:49:8b:81:
         18:dd:cd:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:12:56 2026 by rpki-client