Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/c4f4ccfc-6cf6-390e-a6d0-9fa3a30cb545.roa
File:                     c4f4ccfc-6cf6-390e-a6d0-9fa3a30cb545.roa (raw, json)
Hash identifier:          2ASNnNcRr5+qBzKlgSORyiKQfvPGTkDaxQiTcyyM3QA=
Subject key identifier:   D3:58:1D:3D:FE:67:6A:11:0F:9C:A0:FF:E8:19:85:91:A3:05:02:77
Certificate issuer:       /CN=ebd609f9-488f-4ccb-b562-f82edd8191dd
Certificate serial:       010D0C9F4328584CCA41E1FA3FEF429D9C5BA680
Authority key identifier: FF:0A:1B:E6:8C:45:D3:56:2A:30:F0:43:8D:C2:17:72:44:C0:A5:94
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/c4f4ccfc-6cf6-390e-a6d0-9fa3a30cb545.roa
Signing time:             Sun 08 Feb 2026 02:00:32 +0000
ROA not before:           Sun 08 Feb 2026 02:00:32 +0000
ROA not after:            Sat 09 May 2026 01:00:32 +0000
asID:                     33083
IP address blocks:        2001:4830:c400::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/ebd609f9-488f-4ccb-b562-f82edd8191dd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/ebd609f9-488f-4ccb-b562-f82edd8191dd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ca:41:e1:fa:3f:ef:42:9d:9c:5b:a6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ebd609f9-488f-4ccb-b562-f82edd8191dd
        Validity
            Not Before: Feb  8 02:00:32 2026 GMT
            Not After : May  9 01:00:32 2026 GMT
        Subject: CN=39d15ec8-71c9-41c8-bd7d-1db085c8dbae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:92:37:8f:2e:ea:bf:35:33:b5:07:d6:d6:fd:
                    f3:5a:6b:c6:8e:bf:f0:f0:f4:49:48:75:db:eb:6a:
                    4e:ea:24:fd:db:21:83:6c:48:ba:3f:fc:ff:37:43:
                    dc:1d:27:62:81:0d:5f:02:0d:d7:da:88:f4:9a:95:
                    e6:e5:8a:54:23:1a:79:fd:19:15:0e:b5:dd:79:78:
                    f4:49:ef:fc:c1:1b:3b:2e:3b:30:56:41:9f:5f:00:
                    24:0e:27:70:64:c6:87:2e:34:71:ca:bb:fd:35:ee:
                    30:a0:73:fe:4f:f5:ce:e5:a4:fc:59:2c:91:ce:a3:
                    9d:9f:b5:b5:01:60:38:30:66:2b:8d:91:58:2e:17:
                    ea:22:9a:c5:59:38:62:dd:c1:87:7a:67:d4:f9:39:
                    2c:1d:e6:c1:8f:cd:78:5c:3d:11:a7:53:ce:ef:5f:
                    43:e3:df:17:a1:49:f6:31:38:41:a3:88:64:d1:e1:
                    e4:94:02:c1:e2:a7:14:3c:9a:32:2c:e4:28:85:fa:
                    c7:d5:37:8d:82:fb:d6:80:06:26:3f:7b:8f:b9:92:
                    7f:c5:88:68:ca:8f:6f:db:a4:a3:f3:c3:ca:b5:5f:
                    45:35:d7:c6:d8:4c:0d:0a:eb:ae:68:d5:14:fb:f7:
                    c5:50:56:e0:e3:ff:92:8d:81:b5:20:2e:a8:10:ba:
                    e1:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:58:1D:3D:FE:67:6A:11:0F:9C:A0:FF:E8:19:85:91:A3:05:02:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/c4f4ccfc-6cf6-390e-a6d0-9fa3a30cb545.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/ebd609f9-488f-4ccb-b562-f82edd8191dd.crl

            X509v3 Authority Key Identifier:
                keyid:FF:0A:1B:E6:8C:45:D3:56:2A:30:F0:43:8D:C2:17:72:44:C0:A5:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:4830:c400::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:20:71:90:08:53:74:4d:a9:9b:2c:35:30:db:06:c5:85:9f:
         58:78:5a:85:d5:72:1a:9b:a0:71:68:0b:bc:3d:59:44:66:f7:
         94:a9:45:28:14:8c:60:5d:4a:62:8d:f5:63:ae:93:be:6e:c8:
         38:5d:7d:8d:7a:c2:1e:70:e9:f6:2e:f7:66:b1:8f:35:c9:e2:
         47:7a:5a:ea:4b:f1:e2:52:31:f8:e8:eb:24:2b:35:4b:85:6c:
         8f:09:c4:68:46:61:4c:2c:8e:fa:0c:bb:a8:91:93:55:d5:eb:
         53:3d:4d:81:d7:6f:3f:01:73:26:e8:e4:83:eb:00:fd:88:f3:
         b5:18:8a:aa:16:47:a7:bb:cb:90:09:56:94:72:58:39:56:88:
         68:34:fe:ad:69:33:f5:1c:b2:fd:9c:60:6a:5c:96:61:9d:73:
         34:fc:88:12:c4:72:00:86:17:ab:dd:86:5d:69:cc:e2:da:73:
         39:b7:b9:4f:f3:a8:e5:3d:6b:8c:23:67:5f:28:44:77:4b:a8:
         b1:96:57:63:67:d9:9a:d8:19:ec:9c:93:43:6a:30:7a:76:e9:
         e3:8f:ef:7d:c3:74:93:42:df:9c:84:5a:1b:23:96:30:67:00:
         26:c7:23:76:ef:1c:24:c9:88:f8:db:68:25:48:f2:fe:38:8e:
         62:e2:4f:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:20:11 2026 by rpki-client