Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/1676db65-2019-398d-b78f-4e480fdccaae.roa
File:                     1676db65-2019-398d-b78f-4e480fdccaae.roa (raw, json)
Hash identifier:          LaL6olpjkbgBYf7SZC3xsXMLf5Dnx+9NBxXV8UXqUt4=
Subject key identifier:   92:DE:8D:96:03:30:79:3A:A6:55:1A:E4:85:68:29:2C:3B:12:13:17
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584CF6FB8545590410E5B40285E0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/1676db65-2019-398d-b78f-4e480fdccaae.roa
Signing time:             Tue 24 Feb 2026 02:30:16 +0000
ROA not before:           Tue 24 Feb 2026 02:30:16 +0000
ROA not after:            Mon 25 May 2026 01:30:16 +0000
asID:                     27291
IP address blocks:        2001:470:2ae::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:f6:fb:85:45:59:04:10:e5:b4:02:85:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Feb 24 02:30:16 2026 GMT
            Not After : May 25 01:30:16 2026 GMT
        Subject: CN=52a7aa7b-588c-42d9-b28c-aa0128292ef7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:03:19:5f:ac:33:d4:a5:dd:02:50:6b:70:b1:
                    9f:14:8f:06:f9:b5:03:4e:2f:27:0c:b0:6b:a8:80:
                    7e:32:63:22:3a:d1:51:c8:ff:f4:fb:2a:b9:63:3d:
                    14:92:9f:f5:25:d5:de:09:94:89:41:29:67:ce:7c:
                    1c:7c:fa:06:0f:6f:bd:dc:2f:ea:cb:dd:1c:d5:9a:
                    76:5a:44:bf:50:ff:32:76:ad:49:fb:56:24:54:93:
                    05:4e:91:23:cf:ab:90:70:8b:c3:39:c9:04:3b:50:
                    be:89:d8:ae:cb:86:4a:4f:9a:2c:84:a0:5b:e5:fe:
                    62:a7:ac:a9:51:29:be:1b:46:2f:74:65:c0:71:75:
                    e0:8a:fc:aa:00:fb:7d:89:0d:4b:e8:d0:9a:30:27:
                    b0:5a:3e:0c:90:0e:70:f5:dd:b1:e7:a1:e5:c1:88:
                    9d:59:04:ae:1f:df:96:c6:37:f5:d0:3b:bf:ed:1f:
                    c9:bd:40:df:c6:a6:55:15:7e:80:4f:c9:dc:54:32:
                    b9:70:76:70:01:85:3c:c4:8f:18:7e:b1:89:5d:d1:
                    c1:50:27:1d:5f:99:b4:ed:0e:17:f3:17:2d:a8:af:
                    2e:7d:8f:55:97:64:83:ad:4d:59:1e:76:1e:a4:28:
                    1f:8c:24:95:eb:88:34:ec:bc:85:0b:46:57:ee:7a:
                    ee:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:DE:8D:96:03:30:79:3A:A6:55:1A:E4:85:68:29:2C:3B:12:13:17
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/1676db65-2019-398d-b78f-4e480fdccaae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:2ae::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c3:ec:be:5f:37:5b:bc:b9:cd:f6:c7:c2:e2:da:83:e0:be:10:
         93:64:45:4f:ab:f4:75:14:db:ae:1e:3a:3f:7c:ce:1e:ec:4d:
         32:b9:5f:3c:4a:94:1e:ac:dd:5a:00:08:9f:a5:38:f8:bc:c8:
         45:69:4d:43:27:20:d2:c9:f0:ee:74:89:d8:33:e7:5d:5a:05:
         0e:33:0d:e5:85:c1:1d:af:43:f7:b0:10:5e:99:7e:60:b7:ec:
         7c:67:85:a6:fa:84:c1:96:68:c8:07:e4:44:a9:31:83:0b:f4:
         78:97:fc:00:b7:9b:00:d3:99:cc:69:bc:74:93:3c:44:cf:49:
         6e:cd:15:97:05:1f:f9:7a:7a:ec:fd:18:f3:77:25:63:6d:88:
         39:5c:af:e1:77:eb:7b:43:d1:f5:a2:62:25:2b:83:41:71:3e:
         44:f9:23:03:31:63:c6:02:9b:12:89:f2:4d:d1:50:18:09:04:
         a8:c4:f3:30:a9:cf:1f:5e:8a:a5:1c:80:08:0f:d6:6b:bd:a2:
         08:02:2a:6a:68:c7:78:a1:cb:25:a5:9b:33:1a:80:96:84:72:
         e6:4c:1b:d9:57:78:ca:d6:41:8f:60:29:17:f3:26:3d:08:e8:
         9a:dc:b3:f2:f7:d0:14:ef:fc:06:9f:f9:5a:b0:d0:f8:28:9b:
         d9:94:74:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:52:36 2026 by rpki-client