Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/03cc167a-73db-3d69-bdf0-84a39df3a3ad.roa
File:                     03cc167a-73db-3d69-bdf0-84a39df3a3ad.roa (raw, json)
Hash identifier:          YOHzCOpfAUVNYRNhnZDljHX83mra4FFZQ2g8KmRuj38=
Subject key identifier:   B6:A1:DB:92:40:F7:4E:67:38:CA:0E:CA:96:5D:80:60:52:97:C9:E4
Certificate issuer:       /CN=3aba2284-9d24-4b6f-bc96-aa407d7a426f
Certificate serial:       010D0C9F4328584CFF4CD0DA03251E5ED7ADCC50
Authority key identifier: B5:BE:EE:25:A1:3A:DA:9E:A2:53:19:6E:15:87:43:3E:67:0B:53:58
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/03cc167a-73db-3d69-bdf0-84a39df3a3ad.roa
Signing time:             Fri 27 Feb 2026 02:00:31 +0000
ROA not before:           Fri 27 Feb 2026 02:00:31 +0000
ROA not after:            Thu 28 May 2026 01:00:31 +0000
asID:                     16740
IP address blocks:        2602:f5c1:1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/3aba2284-9d24-4b6f-bc96-aa407d7a426f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/3aba2284-9d24-4b6f-bc96-aa407d7a426f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ff:4c:d0:da:03:25:1e:5e:d7:ad:cc:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3aba2284-9d24-4b6f-bc96-aa407d7a426f
        Validity
            Not Before: Feb 27 02:00:31 2026 GMT
            Not After : May 28 01:00:31 2026 GMT
        Subject: CN=c3dc8295-90c0-4c12-9f76-a64106cf7f50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:ac:7a:20:99:9c:7e:ed:91:2e:65:8d:5c:9c:
                    47:80:e1:f5:a9:a2:10:7d:82:9e:be:39:94:05:62:
                    c7:23:6a:b5:75:60:8e:29:21:58:4d:7c:84:79:a1:
                    e2:d8:67:4f:4b:d5:f6:83:98:93:c3:15:47:1a:b9:
                    95:66:3d:79:bc:23:a7:62:7e:de:6e:83:27:90:df:
                    d5:83:ac:d6:9d:c2:15:18:2b:42:9b:e2:f0:35:a5:
                    70:92:7b:bb:74:f8:c9:10:64:e4:72:64:ec:16:0d:
                    4e:87:c9:aa:f1:22:bb:2e:80:5f:e4:c3:08:61:10:
                    d7:8b:d4:3f:9a:d0:ad:aa:f0:73:6d:51:f1:62:8c:
                    8e:d2:84:64:2a:43:16:a6:f2:ff:9d:14:8a:21:81:
                    6c:bb:72:02:51:c4:57:d5:98:10:3f:25:d3:52:7a:
                    89:da:94:b0:04:16:f1:f9:a2:c2:44:c3:e5:7a:2d:
                    e6:12:19:e8:59:57:79:11:0b:76:fd:8d:49:1f:c6:
                    45:3f:5e:fb:1f:9b:a5:72:36:9b:03:68:dd:b0:d7:
                    17:2d:6c:d5:fd:9f:35:2b:19:83:e1:1d:b8:fe:c0:
                    e5:a9:40:63:7d:69:83:92:19:71:f0:0e:d8:39:24:
                    14:17:76:c4:ee:6f:89:c4:bd:8b:b6:96:5d:9f:dd:
                    9f:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:A1:DB:92:40:F7:4E:67:38:CA:0E:CA:96:5D:80:60:52:97:C9:E4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/03cc167a-73db-3d69-bdf0-84a39df3a3ad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/3aba2284-9d24-4b6f-bc96-aa407d7a426f.crl

            X509v3 Authority Key Identifier:
                keyid:B5:BE:EE:25:A1:3A:DA:9E:A2:53:19:6E:15:87:43:3E:67:0B:53:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f5c1:1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a6:e3:35:ff:b3:ec:87:1a:bb:17:ea:ca:d1:48:66:b4:5f:2b:
         27:0a:da:a2:ac:84:f9:eb:76:fa:be:72:81:6a:c4:2c:c6:a6:
         d5:e9:18:d9:60:87:88:ae:ec:30:07:e8:b8:78:af:8f:a8:12:
         7e:ab:80:91:2f:b4:49:76:a1:ee:65:97:22:54:ae:d9:7f:73:
         2f:94:61:38:14:1c:6e:21:e1:5d:20:29:4f:a3:ed:01:3b:48:
         78:17:a5:1a:ba:a5:73:90:91:96:40:a6:78:d8:4d:13:e0:ec:
         d1:9d:e2:b7:b6:f0:70:72:da:af:48:8c:37:a7:5d:14:6a:46:
         30:16:51:25:c8:44:f6:c3:41:f8:e4:50:97:aa:17:af:51:12:
         de:01:25:d5:ae:35:d8:04:b6:5c:5b:0e:f9:18:8f:ba:c8:93:
         ce:01:e8:70:c3:dc:aa:1f:43:fd:85:ff:c9:6f:58:33:3a:36:
         21:fb:3c:3e:53:60:ea:ca:c8:0b:7c:d5:14:e8:96:02:fe:d8:
         5c:a7:86:10:be:d7:e9:ba:d7:2d:18:d3:21:16:90:de:13:61:
         1f:b1:51:2a:a8:68:bb:73:6a:36:84:39:38:ab:92:8b:1c:8c:
         df:6b:d6:7c:d7:cb:f8:e1:3e:50:c0:55:ef:82:16:56:c6:43:
         e3:25:63:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:25:34 2026 by rpki-client