Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/c4d746a7-8890-3514-adb3-bf2813a22fe1.roa
File:                     c4d746a7-8890-3514-adb3-bf2813a22fe1.roa (raw, json)
Hash identifier:          IjvKxa1Egya2niYwYFV2ahDqy+J6EOZ07aFwzRk93lo=
Subject key identifier:   94:02:B2:A5:99:20:B1:1B:03:5E:90:1C:BB:22:BC:1B:56:5E:79:E8
Certificate issuer:       /CN=994b2ed8-1a2a-4bd1-b709-7479db7c4ea9
Certificate serial:       010D0C9F4328584CF2BCE510B362349C137A0B40
Authority key identifier: 90:7D:4E:BD:0C:A7:F5:DD:13:FF:42:95:1E:9A:F4:9B:33:E9:79:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/c4d746a7-8890-3514-adb3-bf2813a22fe1.roa
Signing time:             Sun 22 Feb 2026 14:00:41 +0000
ROA not before:           Sun 22 Feb 2026 14:00:41 +0000
ROA not after:            Sat 23 May 2026 13:00:41 +0000
asID:                     393336
IP address blocks:        2602:ffd1:1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:f2:bc:e5:10:b3:62:34:9c:13:7a:0b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=994b2ed8-1a2a-4bd1-b709-7479db7c4ea9
        Validity
            Not Before: Feb 22 14:00:41 2026 GMT
            Not After : May 23 13:00:41 2026 GMT
        Subject: CN=529c445c-beb1-4e3c-a9f4-d6acb0bbe950
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:52:6b:e5:31:63:c9:2c:23:6e:e5:c4:da:31:
                    5e:f3:8c:f4:e0:87:99:bf:80:52:ea:40:46:10:9b:
                    f1:2f:12:55:eb:c9:ed:b8:09:33:8d:86:97:e4:13:
                    0a:fc:b8:bf:42:78:8b:9d:d7:ba:46:b3:65:27:6d:
                    93:94:ae:fd:19:68:23:d5:b6:6d:73:01:e7:ac:d9:
                    9f:93:a6:13:cf:c3:1a:e5:ca:6c:48:77:91:ba:d0:
                    9f:3b:0b:ec:66:b0:42:21:f0:5a:da:9e:12:b4:80:
                    c9:d0:06:38:19:87:35:5c:38:dd:bc:c8:1c:10:77:
                    36:f9:2b:4e:30:bb:a6:e7:b3:d3:45:37:0c:c0:b2:
                    a4:79:79:0f:d6:ab:f2:8a:ca:f9:d1:11:fa:45:62:
                    ef:f2:a6:27:dd:55:cf:9c:fd:64:58:df:4f:5d:8c:
                    d6:67:53:f2:9d:89:bd:63:f9:ad:84:0e:46:aa:b7:
                    de:c2:ee:6c:c2:4c:29:1e:51:c6:ee:48:23:57:ba:
                    cc:d3:df:a4:ee:72:75:84:4f:6a:02:25:d1:62:66:
                    3b:cd:26:f0:42:95:a6:aa:67:9d:46:d0:bb:af:4d:
                    2a:44:5e:96:18:51:21:06:50:eb:92:c8:cd:0d:bb:
                    b8:55:7d:88:8e:d6:72:1e:39:59:12:ea:da:e5:4d:
                    c7:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:02:B2:A5:99:20:B1:1B:03:5E:90:1C:BB:22:BC:1B:56:5E:79:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/c4d746a7-8890-3514-adb3-bf2813a22fe1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9.crl

            X509v3 Authority Key Identifier:
                keyid:90:7D:4E:BD:0C:A7:F5:DD:13:FF:42:95:1E:9A:F4:9B:33:E9:79:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:ffd1:1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c2:f3:b7:d0:fa:1c:8d:d8:cf:42:53:17:48:20:85:e8:e2:89:
         a4:38:19:33:6b:63:a8:ff:c3:7f:ff:48:7b:42:a1:22:00:5a:
         02:4d:f8:13:d1:16:6b:4f:4b:25:73:65:a0:16:37:8e:24:1f:
         d3:ba:a8:76:dc:29:6a:c4:c4:cd:7c:2c:9f:bb:78:36:20:a6:
         53:19:76:08:01:b6:fb:40:c9:4a:e1:0e:85:31:b4:52:0b:61:
         75:d5:38:18:0f:9f:05:23:f2:41:d3:65:33:c5:4a:c0:1f:b0:
         6c:35:27:9c:e8:f6:fd:66:f4:af:7a:21:5a:9b:7d:a2:db:23:
         a5:49:b3:b1:d2:fe:55:18:5f:8b:66:01:cd:11:b8:d1:02:fb:
         27:f2:bd:d5:1f:ee:29:0b:00:9f:4e:4c:c4:fc:ae:a4:85:cc:
         f8:84:d5:f0:f1:e4:17:94:b8:ae:e5:38:a5:67:40:4c:05:d5:
         f8:83:4a:4e:77:d0:2f:cd:ec:64:9e:77:e1:2a:5c:6e:0e:cf:
         82:a8:d4:03:ab:91:4d:17:e5:75:f7:2f:bb:53:e4:90:d2:d2:
         c4:10:c8:51:d3:46:b8:a5:c4:f4:fe:bc:fe:d5:d4:d9:92:40:
         b5:63:53:99:d9:ca:c8:bf:26:53:cf:be:ef:3f:5b:6d:ab:65:
         a2:cb:dd:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:52:01 2026 by rpki-client