Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5323dac-a15d-4f82-a70b-30e1a4ca1279/7251ede9-db40-315e-96d5-145116a009a0.roa
File:                     7251ede9-db40-315e-96d5-145116a009a0.roa (raw, json)
Hash identifier:          ZQhpIrxxWP8CWBzvp/l9ggadFlWHnq8S/WXelJnDf7w=
Subject key identifier:   C5:CE:7C:CA:D8:61:CE:36:7A:B1:C0:04:B4:CB:52:99:A7:9F:0B:44
Certificate issuer:       /CN=d5323dac-a15d-4f82-a70b-30e1a4ca1279
Certificate serial:       010D0C9F4328584C8A0C1D3AF1B60232864F7A00
Authority key identifier: C8:36:37:73:F5:2A:CA:E8:CB:EB:92:19:6E:5C:AF:20:55:F1:1A:BE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5323dac-a15d-4f82-a70b-30e1a4ca1279.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5323dac-a15d-4f82-a70b-30e1a4ca1279/7251ede9-db40-315e-96d5-145116a009a0.roa
Signing time:             Fri 16 Jan 2026 02:00:31 +0000
ROA not before:           Fri 16 Jan 2026 02:00:31 +0000
ROA not after:            Thu 16 Apr 2026 01:00:31 +0000
asID:                     46562
IP address blocks:        2604:2880::/32 maxlen: 64
                          2607:f7a0::/32 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5323dac-a15d-4f82-a70b-30e1a4ca1279/d5323dac-a15d-4f82-a70b-30e1a4ca1279.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5323dac-a15d-4f82-a70b-30e1a4ca1279/d5323dac-a15d-4f82-a70b-30e1a4ca1279.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5323dac-a15d-4f82-a70b-30e1a4ca1279.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:8a:0c:1d:3a:f1:b6:02:32:86:4f:7a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5323dac-a15d-4f82-a70b-30e1a4ca1279
        Validity
            Not Before: Jan 16 02:00:31 2026 GMT
            Not After : Apr 16 01:00:31 2026 GMT
        Subject: CN=1193d511-d5fa-43e7-8614-8c2e41a9776b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:dd:ab:d4:8e:ff:6d:c3:6c:a5:b5:9e:33:04:
                    f6:aa:d5:20:b2:3d:80:66:da:aa:b1:f3:4b:d6:4b:
                    a0:a7:2d:31:09:3c:9f:8c:8a:10:98:77:a9:60:92:
                    48:a6:8c:5c:86:f7:21:b2:e0:05:65:bc:04:79:3e:
                    74:cc:80:6b:42:bb:cd:77:8e:24:e7:a8:35:ff:04:
                    e8:d6:f4:58:29:b5:04:44:de:13:2e:f7:f8:dd:08:
                    f2:17:dd:a3:99:c9:cf:73:73:ec:17:cf:d3:b6:42:
                    5b:99:21:5d:c7:4b:1b:89:a3:fb:91:3e:f8:62:6c:
                    2b:12:55:f8:71:90:38:03:ab:02:fb:b2:a4:cc:ff:
                    b2:20:03:bb:a9:a4:39:77:f4:76:14:cd:27:50:93:
                    23:37:a2:93:90:df:cc:22:dc:cd:a3:35:0f:c1:62:
                    34:74:15:63:3f:05:05:d6:34:91:59:f2:f3:ad:17:
                    c0:78:df:89:61:cb:a5:11:06:d3:dc:5a:99:13:39:
                    87:d2:3e:5c:f5:03:ff:e7:3a:66:1b:f2:9c:c9:b7:
                    ec:cd:11:85:7e:60:81:27:27:8c:d1:0f:b9:00:81:
                    e8:4b:67:80:cb:bc:ed:20:c7:b7:bd:5d:39:42:ad:
                    eb:03:4c:e4:a6:7a:18:27:8b:af:20:78:e7:96:44:
                    0d:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:CE:7C:CA:D8:61:CE:36:7A:B1:C0:04:B4:CB:52:99:A7:9F:0B:44
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5323dac-a15d-4f82-a70b-30e1a4ca1279/7251ede9-db40-315e-96d5-145116a009a0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5323dac-a15d-4f82-a70b-30e1a4ca1279/d5323dac-a15d-4f82-a70b-30e1a4ca1279.crl

            X509v3 Authority Key Identifier:
                keyid:C8:36:37:73:F5:2A:CA:E8:CB:EB:92:19:6E:5C:AF:20:55:F1:1A:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5323dac-a15d-4f82-a70b-30e1a4ca1279.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2880::/32
                  2607:f7a0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:3d:88:9f:4e:b0:03:06:72:84:61:7d:a6:f3:56:3c:81:a8:
         bc:50:11:1a:64:b1:5f:12:7c:8e:b6:61:c6:4e:a1:66:82:71:
         ae:5b:53:9c:5e:3a:66:03:2f:7e:4b:62:ce:6d:92:84:2c:c8:
         cc:97:55:f7:ef:81:f1:d6:86:7c:94:d1:55:92:a6:35:9d:69:
         c8:2d:02:00:26:94:07:55:99:30:73:84:f2:21:14:91:18:09:
         93:6f:2d:41:42:af:4b:4f:9e:1d:00:8e:33:55:40:1e:47:d7:
         b4:88:e9:3d:93:87:59:0f:c7:ed:ad:4d:f7:26:46:92:1c:4b:
         a3:e8:8c:bc:9f:e8:11:be:e8:5f:12:ba:79:ef:ef:f6:a3:fe:
         24:a3:72:73:41:12:6f:ce:d4:e0:48:78:73:c2:e2:84:ca:2e:
         66:92:37:8f:55:e8:5d:ee:ec:d0:72:d6:74:dc:5e:c1:e6:52:
         a7:2a:4e:f8:49:e5:32:20:09:94:1b:57:2c:78:6d:2a:b9:24:
         81:d4:8f:6a:05:11:73:68:6f:e9:c0:a5:9b:f4:56:55:8d:80:
         4a:e5:20:5c:63:12:f2:33:b3:4b:75:a4:be:ec:86:70:1a:72:
         ab:33:dc:af:a5:4d:d5:3a:30:6a:c5:c9:4f:c0:17:49:d0:12:
         87:3c:64:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:47:45 2026 by rpki-client