Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/cd6a0dce-34d3-3443-8f65-55c2d98a3d96.roa
File:                     cd6a0dce-34d3-3443-8f65-55c2d98a3d96.roa (raw, json)
Hash identifier:          qlyTZBRZb/z1jbSq9F5A74sa67s61mh0qj1az9e+268=
Subject key identifier:   DF:01:76:7C:C2:36:A8:E6:55:2B:8C:FB:49:8A:0E:1C:64:F0:0D:A8
Certificate issuer:       /CN=934f4dde-b680-46f3-8723-45f78b94fd80
Certificate serial:       010D0C9F4328584CE3620D422BD70550817E5400
Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/cd6a0dce-34d3-3443-8f65-55c2d98a3d96.roa
Signing time:             Tue 17 Feb 2026 02:00:31 +0000
ROA not before:           Tue 17 Feb 2026 02:00:31 +0000
ROA not after:            Mon 18 May 2026 01:00:31 +0000
asID:                     30058
IP address blocks:        2001:49f0:d13a::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:e3:62:0d:42:2b:d7:05:50:81:7e:54:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80
        Validity
            Not Before: Feb 17 02:00:31 2026 GMT
            Not After : May 18 01:00:31 2026 GMT
        Subject: CN=cf2a4244-41a0-4e08-8fd8-485e4b39059b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:46:b8:8f:46:df:f1:d7:52:66:e7:08:4a:2a:
                    c3:54:41:85:3d:96:95:2a:83:82:2d:51:d5:19:a6:
                    58:76:37:9e:3d:ef:88:80:46:85:1a:63:22:93:ad:
                    74:00:07:98:c3:19:39:0f:fe:49:66:22:b1:cd:20:
                    14:b9:92:ee:3d:38:95:ee:36:c5:70:06:ea:c8:f0:
                    6f:33:a3:4e:25:0f:5f:29:c5:75:40:5e:ef:ae:c6:
                    29:2e:b8:89:75:49:e8:06:80:fe:61:f4:52:1a:4c:
                    1f:de:c0:2e:5d:10:ac:58:dc:15:b6:14:14:e1:40:
                    41:94:94:2c:5e:b0:3d:95:50:14:35:ea:bb:f5:be:
                    75:0b:0f:89:6d:95:e9:0e:75:f0:e8:b1:31:6d:dd:
                    cb:86:8c:ed:62:31:3f:6b:1c:49:c6:ae:d6:dc:49:
                    b9:a6:54:6e:06:88:db:c8:fd:91:1f:3f:b7:0a:07:
                    fc:1c:13:19:72:26:4c:58:c4:9f:d7:bd:61:30:c2:
                    02:b4:ab:e8:bb:41:74:92:0e:9b:c4:25:24:c8:e9:
                    41:f8:82:39:69:ed:94:81:6a:d1:3d:f1:56:ed:9c:
                    a4:fe:de:b9:b3:06:c2:14:cf:dc:81:92:3c:68:dd:
                    55:a8:05:37:d4:f5:e2:cb:46:54:4a:62:bc:f5:ef:
                    fa:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:01:76:7C:C2:36:A8:E6:55:2B:8C:FB:49:8A:0E:1C:64:F0:0D:A8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/cd6a0dce-34d3-3443-8f65-55c2d98a3d96.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl

            X509v3 Authority Key Identifier:
                keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:49f0:d13a::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         cc:b6:73:4f:67:ff:ef:5c:dd:8a:1a:44:64:17:5a:c3:fb:18:
         92:e3:82:3c:23:ed:d4:b4:f6:71:ff:21:df:01:09:2b:1b:94:
         c6:0a:67:2f:8d:08:d6:bf:53:8b:85:a4:0b:5b:d3:b6:f8:7c:
         d4:4b:f8:3d:a8:69:7b:3f:95:7b:cd:22:23:51:7e:47:8a:b3:
         94:2f:2c:56:2b:67:97:3a:36:11:46:03:27:b2:ed:3b:6f:8d:
         8b:5c:0c:a9:91:96:a5:7d:ec:b4:ac:14:e9:10:37:3e:c3:90:
         4b:09:a7:53:82:4c:d8:b1:3c:3e:7c:41:22:0a:24:e2:28:77:
         c9:f7:fb:53:75:0a:be:fa:84:5c:28:33:a2:e5:bd:96:9e:fc:
         b6:ff:d1:da:2c:66:ac:01:4f:c9:bd:0c:b5:03:58:fd:cf:78:
         7e:c6:3a:42:c9:14:22:a7:39:aa:71:9e:a2:40:4b:ec:86:d3:
         7d:23:86:fa:ff:96:9a:58:c1:6f:de:77:0e:2e:78:be:81:ac:
         68:2e:c7:37:96:43:cb:9c:e8:a4:82:fa:2e:cc:90:f4:0e:48:
         49:36:ec:00:7e:9f:c3:84:20:1d:19:c3:9a:97:c2:34:f5:7b:
         08:fa:40:df:be:47:00:81:8f:82:76:6c:27:65:89:70:4d:56:
         c6:b2:b9:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:36:38 2026 by rpki-client