Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e056707d-838a-4b8b-bd8e-8a874ea0684d/f158e334-ca0c-3bb7-a2d1-fe14eadfc36d.roa
File:                     f158e334-ca0c-3bb7-a2d1-fe14eadfc36d.roa (raw, json)
Hash identifier:          VVFXCu4TGU/2Js0VbIe7Vf6T242k717zNC/JHoP0Mv8=
Subject key identifier:   72:EC:A3:36:75:0E:22:3C:60:EB:23:A8:D9:CE:3D:4C:55:86:5B:A8
Certificate issuer:       /CN=e056707d-838a-4b8b-bd8e-8a874ea0684d
Certificate serial:       010D0C9F4328584D01FD92C17A4803C86B5F0540
Authority key identifier: 21:73:27:CC:A7:57:0A:AF:9B:53:F6:47:A1:F4:EE:A3:36:32:1C:73
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e056707d-838a-4b8b-bd8e-8a874ea0684d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e056707d-838a-4b8b-bd8e-8a874ea0684d/f158e334-ca0c-3bb7-a2d1-fe14eadfc36d.roa
Signing time:             Sat 28 Feb 2026 01:08:18 +0000
ROA not before:           Sat 28 Feb 2026 01:08:18 +0000
ROA not after:            Fri 29 May 2026 00:08:18 +0000
asID:                     400011
IP address blocks:        2605:b9c0:1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e056707d-838a-4b8b-bd8e-8a874ea0684d/e056707d-838a-4b8b-bd8e-8a874ea0684d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e056707d-838a-4b8b-bd8e-8a874ea0684d/e056707d-838a-4b8b-bd8e-8a874ea0684d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e056707d-838a-4b8b-bd8e-8a874ea0684d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:01:fd:92:c1:7a:48:03:c8:6b:5f:05:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e056707d-838a-4b8b-bd8e-8a874ea0684d
        Validity
            Not Before: Feb 28 01:08:18 2026 GMT
            Not After : May 29 00:08:18 2026 GMT
        Subject: CN=b114e063-ddf0-4c27-98ad-d3cadde3fe20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:5f:a8:71:3e:30:49:60:d5:ae:4d:32:57:d7:
                    b6:57:1c:71:8e:dc:05:94:14:8e:93:7f:1d:05:3d:
                    e5:3f:45:1c:2d:d9:56:ba:84:03:c2:2d:4a:6d:44:
                    28:87:ab:69:5c:18:d3:68:96:27:56:3b:da:06:ad:
                    ca:3e:a7:9e:87:e6:c1:c6:c6:94:00:67:40:62:d7:
                    cf:66:c0:13:97:57:3f:9e:c1:3e:28:85:a6:40:2d:
                    59:57:8b:30:a8:a9:13:84:d5:7f:6e:a7:0b:26:44:
                    17:80:19:5d:eb:64:11:3b:01:c3:00:56:41:b7:71:
                    67:a0:3f:c6:81:f7:ce:66:66:4f:a1:a3:2e:c3:84:
                    df:eb:97:ed:fe:d0:b1:e3:88:73:4d:94:3a:15:1d:
                    13:57:76:ab:da:ec:1e:95:90:1a:31:e9:2f:16:3d:
                    c0:da:5a:a5:90:1a:07:aa:73:c7:ae:bc:32:22:49:
                    af:b5:70:eb:d5:bf:26:32:8b:61:0d:fe:71:cf:aa:
                    6a:cc:86:35:ba:57:b8:98:4e:98:d4:01:c5:5e:e9:
                    1e:dd:a6:16:6c:99:e7:14:4c:64:c6:44:23:02:db:
                    24:c9:6b:44:6d:40:57:63:66:68:ed:7c:11:96:88:
                    d1:a3:d6:17:04:80:ac:d4:6e:52:a3:6a:d3:ee:8c:
                    c9:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:EC:A3:36:75:0E:22:3C:60:EB:23:A8:D9:CE:3D:4C:55:86:5B:A8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e056707d-838a-4b8b-bd8e-8a874ea0684d/f158e334-ca0c-3bb7-a2d1-fe14eadfc36d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e056707d-838a-4b8b-bd8e-8a874ea0684d/e056707d-838a-4b8b-bd8e-8a874ea0684d.crl

            X509v3 Authority Key Identifier:
                keyid:21:73:27:CC:A7:57:0A:AF:9B:53:F6:47:A1:F4:EE:A3:36:32:1C:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e056707d-838a-4b8b-bd8e-8a874ea0684d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:b9c0:1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:0b:be:fa:8d:f5:ce:6d:b8:38:83:6b:55:e0:c2:7b:50:2a:
         3a:15:22:39:98:52:5f:8a:6e:92:4f:df:56:55:08:5e:e7:b8:
         bd:1e:fc:32:31:88:58:63:99:82:7f:48:e2:66:74:c3:1a:77:
         c7:bb:d3:3a:e1:c6:dc:c2:dd:04:67:9b:d2:2c:d4:cd:d8:98:
         9f:46:06:ea:a2:fe:78:0a:ba:5c:e5:9a:fb:91:52:0c:da:17:
         5c:95:c8:ff:20:78:70:8b:66:34:8b:2d:70:4a:ad:50:b0:9f:
         94:65:59:76:e2:fc:60:b3:0a:37:b9:c2:1f:4b:5a:41:05:79:
         58:1e:ef:cd:18:5c:5a:9d:3e:87:f0:0d:52:12:85:36:27:d2:
         7a:83:d0:df:6f:7b:e5:e7:98:b5:ee:06:d0:f2:4c:c3:2d:75:
         a9:f5:75:cc:c4:b5:6c:4c:48:09:73:6d:bb:19:a6:69:89:e2:
         1c:5b:21:27:5f:69:69:8b:6a:4e:76:e0:ac:3c:0a:1b:e2:c2:
         1e:98:b5:20:38:c1:08:0a:28:2b:eb:14:ee:8a:2e:ac:56:94:
         b4:07:cc:ea:91:05:54:32:96:b3:35:e2:83:80:63:de:91:d6:
         b2:00:37:c5:dd:2e:5a:7b:ee:af:5c:74:b6:f3:83:3a:b6:20:
         4f:8b:cd:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:08:53 2026 by rpki-client