Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/1a619059-97c9-44aa-a7ee-431e94f1b4d6/656b534b-a728-3c53-9be9-363ec5e34df5.roa
File:                     656b534b-a728-3c53-9be9-363ec5e34df5.roa (raw, json)
Hash identifier:          LQEpqQFL4ig/gIKb4g3kIoWE/IhjWXA2VWM7Uxsuf6M=
Subject key identifier:   8F:AF:EF:C1:18:3F:AE:7D:46:5A:0F:07:A0:56:8C:C0:36:00:D2:05
Certificate issuer:       /CN=1a619059-97c9-44aa-a7ee-431e94f1b4d6
Certificate serial:       010D0C9F4328584CD99D0F0002BB9DEA2E2D8830
Authority key identifier: 23:EF:A0:A2:D0:BC:5A:4C:8A:96:EA:7E:1C:56:80:5E:00:EB:D1:58
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/1a619059-97c9-44aa-a7ee-431e94f1b4d6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/1a619059-97c9-44aa-a7ee-431e94f1b4d6/656b534b-a728-3c53-9be9-363ec5e34df5.roa
Signing time:             Fri 13 Feb 2026 14:00:41 +0000
ROA not before:           Fri 13 Feb 2026 14:00:41 +0000
ROA not after:            Thu 14 May 2026 13:00:41 +0000
asID:                     395596
IP address blocks:        2602:f573::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/1a619059-97c9-44aa-a7ee-431e94f1b4d6/1a619059-97c9-44aa-a7ee-431e94f1b4d6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/1a619059-97c9-44aa-a7ee-431e94f1b4d6/1a619059-97c9-44aa-a7ee-431e94f1b4d6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/1a619059-97c9-44aa-a7ee-431e94f1b4d6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:d9:9d:0f:00:02:bb:9d:ea:2e:2d:88:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a619059-97c9-44aa-a7ee-431e94f1b4d6
        Validity
            Not Before: Feb 13 14:00:41 2026 GMT
            Not After : May 14 13:00:41 2026 GMT
        Subject: CN=cfe7498f-cabb-4355-ad1d-4f78117b1887
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:fa:77:f5:da:3c:0e:c2:8a:3b:9f:36:04:ea:
                    90:ce:b3:50:48:64:c7:35:09:38:20:56:36:b0:e8:
                    60:25:94:55:7b:5d:31:ec:4c:d7:4a:67:0e:c5:31:
                    ed:db:fe:dd:24:ef:de:85:dc:f0:f6:c9:30:d5:17:
                    52:c5:98:3b:0b:6f:51:cd:b9:0f:e0:ca:70:4d:da:
                    dd:67:d2:9d:36:dc:ca:2a:fe:85:48:62:4b:0f:c9:
                    cd:42:b2:1f:1d:e3:72:18:b3:c7:75:d1:0c:5f:26:
                    d6:4f:2c:d1:bd:28:3a:79:c4:71:8f:15:73:9b:e5:
                    dd:a7:de:fe:bd:eb:18:61:ee:8b:17:d5:49:c5:a9:
                    38:3c:e9:04:d2:52:9f:15:54:77:c1:86:83:9a:89:
                    25:83:da:0c:f9:35:12:3e:8c:9c:cf:85:de:ed:1c:
                    90:ee:e4:7c:6d:93:36:0e:e4:ed:34:74:5f:06:db:
                    2d:fd:a8:ce:41:be:5e:49:07:a0:ad:51:ba:6c:27:
                    ff:ce:06:ec:cc:65:72:1d:9b:f4:43:00:ab:c9:c5:
                    ee:5a:c4:29:31:98:f6:9b:bd:42:94:08:84:70:78:
                    a3:3d:98:51:13:03:1a:ba:be:25:40:e1:ab:04:3c:
                    23:56:6b:f3:22:b8:73:df:b6:70:16:dd:8b:c6:b0:
                    0d:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:AF:EF:C1:18:3F:AE:7D:46:5A:0F:07:A0:56:8C:C0:36:00:D2:05
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/1a619059-97c9-44aa-a7ee-431e94f1b4d6/656b534b-a728-3c53-9be9-363ec5e34df5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/1a619059-97c9-44aa-a7ee-431e94f1b4d6/1a619059-97c9-44aa-a7ee-431e94f1b4d6.crl

            X509v3 Authority Key Identifier:
                keyid:23:EF:A0:A2:D0:BC:5A:4C:8A:96:EA:7E:1C:56:80:5E:00:EB:D1:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/1a619059-97c9-44aa-a7ee-431e94f1b4d6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f573::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:ff:a6:c3:1d:bf:91:0f:87:95:1b:ef:6a:da:66:95:b0:f6:
         06:19:24:10:2d:19:96:0b:cd:97:83:06:c0:57:31:3d:f7:0b:
         20:a4:00:d5:66:ff:b7:3b:68:48:bd:58:d0:1a:a3:29:95:3a:
         3d:9a:f9:e8:5c:f1:6f:42:b0:d2:d0:9d:16:a2:69:19:9d:51:
         4f:b3:ea:bd:a9:b4:13:24:fa:c6:14:cf:98:f7:c9:42:30:e4:
         6f:de:6b:14:65:e4:9b:dc:f8:fc:15:13:3e:47:e8:63:42:e7:
         5d:77:b0:89:a5:39:d7:21:62:62:74:d1:71:49:48:5e:5e:ba:
         80:85:42:32:33:34:46:0d:c3:4b:e0:9b:7c:39:76:b7:f0:f5:
         a3:14:a0:bb:da:00:85:4a:96:5e:ff:e8:c5:eb:67:90:12:ef:
         bf:26:8e:a2:05:80:f6:a6:d4:3b:71:c6:f4:ed:3f:44:da:ce:
         f2:d7:09:af:5e:43:a0:29:d8:c3:42:5e:f1:fc:22:3e:b8:3b:
         ad:45:2a:22:1a:bb:68:b6:56:d9:99:17:26:8e:26:dd:7d:8e:
         c0:0d:f8:ab:34:7b:fb:c6:81:da:3c:c3:e4:fd:22:9d:87:39:
         fb:bc:a1:f8:9e:ee:4c:27:04:c6:f5:76:15:1a:62:ca:24:01:
         01:bc:7f:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:59:13 2026 by rpki-client