Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7a81e391-2f9f-43ac-a73e-e018e279c2d4/0d179b71-82e9-38f3-b0a1-ea8f84160d6d.roa
File:                     0d179b71-82e9-38f3-b0a1-ea8f84160d6d.roa (raw, json)
Hash identifier:          qW61Qr/h+nLMODwXLP/p1aTnrxnLfL5fKj+IQkc05pE=
Subject key identifier:   9C:94:7C:12:2C:C0:29:3F:8B:92:E5:64:EE:23:C4:C4:52:33:35:9F
Certificate issuer:       /CN=7a81e391-2f9f-43ac-a73e-e018e279c2d4
Certificate serial:       010D0C9F4328584CC3DA4065265E1CA217D75500
Authority key identifier: B3:B4:1C:AF:03:8E:97:E9:4E:5B:2F:D5:D1:EF:58:9C:29:ED:0F:4C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7a81e391-2f9f-43ac-a73e-e018e279c2d4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7a81e391-2f9f-43ac-a73e-e018e279c2d4/0d179b71-82e9-38f3-b0a1-ea8f84160d6d.roa
Signing time:             Thu 05 Feb 2026 18:57:01 +0000
ROA not before:           Thu 05 Feb 2026 18:57:01 +0000
ROA not after:            Wed 06 May 2026 17:57:01 +0000
asID:                     208229
IP address blocks:        2602:f5b0:10::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7a81e391-2f9f-43ac-a73e-e018e279c2d4/7a81e391-2f9f-43ac-a73e-e018e279c2d4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7a81e391-2f9f-43ac-a73e-e018e279c2d4/7a81e391-2f9f-43ac-a73e-e018e279c2d4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7a81e391-2f9f-43ac-a73e-e018e279c2d4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 02 Mar 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:c3:da:40:65:26:5e:1c:a2:17:d7:55:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a81e391-2f9f-43ac-a73e-e018e279c2d4
        Validity
            Not Before: Feb  5 18:57:01 2026 GMT
            Not After : May  6 17:57:01 2026 GMT
        Subject: CN=ec9aa11d-8531-474b-979c-97cb8863d53f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:b8:0c:27:6f:d7:88:89:ce:ea:30:16:12:13:
                    d1:6d:2e:9f:34:c2:eb:f5:04:be:7b:72:19:64:ab:
                    2d:3f:02:34:4a:53:52:9e:c5:c5:bf:7b:4d:61:37:
                    d2:16:72:f3:16:99:b8:79:77:6c:ea:c7:e2:7f:74:
                    8b:2e:24:48:0c:c7:9e:76:19:ab:ad:98:94:84:8b:
                    c3:df:3c:34:cf:8d:60:fc:6f:f3:22:9b:94:03:6e:
                    5b:e4:7a:d0:99:1c:e9:62:9c:73:c0:68:be:7d:98:
                    59:7d:8c:5a:bd:99:62:23:4e:84:60:c4:8f:c5:90:
                    cd:06:9c:03:a7:dd:7c:d3:31:8c:f2:fc:b2:82:b2:
                    00:34:6e:3b:37:04:08:19:8c:67:17:9d:48:19:65:
                    9a:8c:24:5f:e6:73:01:29:eb:4f:f8:27:ab:70:c3:
                    1b:74:2e:d5:fa:99:e2:fc:ba:19:55:a8:f9:4c:1a:
                    69:2a:60:84:e1:47:83:41:c5:19:de:e1:1c:64:a7:
                    54:9b:a6:ce:03:b4:ad:56:39:89:01:6a:01:a2:51:
                    1b:ee:01:98:a2:8b:27:c7:b1:11:db:05:82:e9:9c:
                    c3:46:db:17:b7:8a:05:1d:e0:99:72:b6:04:ed:0a:
                    b3:49:b5:be:06:f0:68:61:a4:a6:8f:ea:a1:8b:62:
                    58:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:94:7C:12:2C:C0:29:3F:8B:92:E5:64:EE:23:C4:C4:52:33:35:9F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7a81e391-2f9f-43ac-a73e-e018e279c2d4/0d179b71-82e9-38f3-b0a1-ea8f84160d6d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7a81e391-2f9f-43ac-a73e-e018e279c2d4/7a81e391-2f9f-43ac-a73e-e018e279c2d4.crl

            X509v3 Authority Key Identifier:
                keyid:B3:B4:1C:AF:03:8E:97:E9:4E:5B:2F:D5:D1:EF:58:9C:29:ED:0F:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7a81e391-2f9f-43ac-a73e-e018e279c2d4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f5b0:10::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:97:5f:41:47:ca:a5:71:69:94:06:68:83:62:2e:72:fd:c9:
         c2:d0:4d:2e:ce:f6:d3:7e:a5:62:77:b4:2b:33:a8:c3:50:25:
         66:f3:e4:98:ef:85:22:b2:b4:9f:9b:7b:73:c6:60:b9:55:84:
         54:49:ea:df:30:5f:c1:fb:f1:a4:f4:a5:ad:44:6f:e1:2b:a2:
         0c:71:b3:b6:eb:8d:b0:76:50:af:d7:a9:1f:1a:1c:5f:82:ac:
         b3:6b:b9:81:67:55:37:63:7f:e5:0c:30:c9:8b:cb:3c:38:a5:
         b3:bb:50:ea:db:d2:64:ee:a1:6d:fd:e0:66:89:c6:ae:10:0f:
         f5:90:bc:9d:cb:c5:78:8a:5d:f3:d5:10:42:49:a2:49:20:30:
         6f:2c:1d:88:59:20:e5:bd:86:a3:f6:31:b6:a9:76:f2:a1:d7:
         31:e1:c6:75:41:99:b4:98:e9:28:af:f0:c9:bc:fc:26:35:33:
         19:a9:fb:67:80:2f:9a:84:11:9f:45:9d:1d:c3:de:5b:07:4b:
         20:05:b1:04:1d:2a:ac:6d:e3:c2:df:fb:17:cb:9a:2b:3d:88:
         e0:ce:3b:b5:82:48:f5:6a:81:e0:e4:fc:90:fa:0c:16:8c:4d:
         b4:ed:e3:2d:0a:7b:2e:5c:16:aa:56:c6:12:78:77:a3:58:eb:
         99:cd:43:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 16:24:10 2026 by rpki-client