Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d/bc7da7a6-43cb-3247-a5c6-6075c36ec5cc.roa
File:                     bc7da7a6-43cb-3247-a5c6-6075c36ec5cc.roa (raw, json)
Hash identifier:          yWoAYDixMuNY+qwmtojlOfMbYa1e02/ZEOmd8MRtH2U=
Subject key identifier:   30:65:0E:7F:16:3D:38:3C:91:D3:FC:ED:C9:0E:96:26:82:6C:07:45
Certificate issuer:       /CN=f2f0585e-a28e-4ead-9b1c-defd291ce54d
Certificate serial:       010D0C9F4328584CDB01FFD7D208242D187DAD00
Authority key identifier: 7B:C6:78:77:88:93:19:53:E7:11:02:39:94:6D:8B:3D:13:7A:C2:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d/bc7da7a6-43cb-3247-a5c6-6075c36ec5cc.roa
Signing time:             Sat 14 Feb 2026 02:00:32 +0000
ROA not before:           Sat 14 Feb 2026 02:00:32 +0000
ROA not after:            Fri 15 May 2026 01:00:32 +0000
asID:                     50842
IP address blocks:        2602:fb68:80::/42 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d/f2f0585e-a28e-4ead-9b1c-defd291ce54d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d/f2f0585e-a28e-4ead-9b1c-defd291ce54d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:db:01:ff:d7:d2:08:24:2d:18:7d:ad:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f2f0585e-a28e-4ead-9b1c-defd291ce54d
        Validity
            Not Before: Feb 14 02:00:32 2026 GMT
            Not After : May 15 01:00:32 2026 GMT
        Subject: CN=ce80cc11-824a-433a-8463-514c4bdd887e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:bf:05:00:c7:2f:d7:3d:97:1a:61:82:21:3f:
                    b1:f3:d1:7c:e6:50:eb:1d:12:1a:f6:5e:6a:3f:70:
                    d4:01:d7:54:e3:7f:9f:dd:09:70:fe:d5:12:2e:be:
                    7a:17:55:42:0e:ec:0f:65:a0:e8:6a:1c:1e:1a:4d:
                    d1:12:c7:61:30:f0:d6:40:f3:e7:65:82:17:b8:09:
                    a0:2c:b1:a4:83:e3:db:01:f6:64:69:40:2f:7c:1a:
                    a7:54:ff:14:3b:2c:7c:cf:d0:6f:78:b8:66:07:07:
                    8a:b8:46:00:e7:d2:47:37:a1:a5:f9:57:2d:d1:53:
                    88:be:75:f4:71:c2:79:8c:20:64:5f:a6:7b:5a:5f:
                    da:6e:a7:15:36:f0:bf:3a:fb:35:a2:94:e7:95:19:
                    ff:14:03:a2:94:45:9c:38:08:69:f3:70:90:02:2f:
                    b8:20:22:1c:0f:ad:4e:92:e2:e7:c0:ea:46:5f:f9:
                    f6:a4:32:53:42:f9:df:dd:9a:e8:72:29:c1:59:b5:
                    9b:10:7a:65:45:f1:96:6e:70:54:15:02:ab:69:aa:
                    87:c6:ec:b6:d0:c7:17:74:aa:91:d9:f7:8e:ce:cc:
                    05:e7:64:7b:8e:70:a3:5a:36:25:7d:ab:e6:e5:54:
                    a6:e1:a3:5f:c6:b5:51:7b:3d:e6:f7:63:a0:c4:3a:
                    28:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:65:0E:7F:16:3D:38:3C:91:D3:FC:ED:C9:0E:96:26:82:6C:07:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d/bc7da7a6-43cb-3247-a5c6-6075c36ec5cc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d/f2f0585e-a28e-4ead-9b1c-defd291ce54d.crl

            X509v3 Authority Key Identifier:
                keyid:7B:C6:78:77:88:93:19:53:E7:11:02:39:94:6D:8B:3D:13:7A:C2:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fb68:80::/42

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:61:aa:b4:30:3d:f9:6b:c8:82:b5:c4:5b:a2:9a:2c:75:59:
         4d:82:b1:5e:d2:ce:27:98:be:d1:2c:b5:00:5f:97:11:bc:34:
         66:ec:46:44:47:8f:e3:1e:40:0c:9c:3b:b1:8f:4c:85:57:17:
         0d:7a:d4:92:af:05:64:08:84:5f:22:61:d4:f6:db:9b:ad:1c:
         e2:a8:f3:18:72:1b:0a:8f:67:fd:ba:98:99:a2:15:28:14:86:
         03:dc:e5:7d:f0:a5:62:71:82:27:7b:55:5b:3f:74:cf:a7:ca:
         70:7a:61:f2:c5:8e:a9:ba:84:bf:4e:f8:8d:4f:e8:84:13:c1:
         37:27:b9:68:32:5c:6d:da:39:e3:d1:81:8f:d7:6d:18:1f:e8:
         cd:e0:cb:20:9e:88:16:f7:45:2e:22:40:44:ba:0a:98:0d:f1:
         d4:8d:2e:ec:92:78:47:6a:88:20:b0:b4:fd:82:09:79:7a:00:
         bb:a9:bb:95:2f:50:5a:fa:60:19:80:49:c1:b4:d2:75:cc:36:
         87:4f:ae:3e:63:d0:2f:c8:a4:5f:b9:32:c4:d3:01:66:c0:d2:
         43:5c:69:f9:95:88:7c:73:d5:fc:e7:23:52:a3:3e:09:1e:f2:
         8e:8f:7a:bf:7f:39:10:2f:1c:03:04:34:8b:43:13:b2:6a:33:
         74:1d:ce:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 16:30:07 2026 by rpki-client