Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34592396-ac3d-4a48-97f1-caed65436525/e3009fff-3e87-3212-b198-2e279f6b6609.roa
File:                     e3009fff-3e87-3212-b198-2e279f6b6609.roa (raw, json)
Hash identifier:          unVUl9g5Zi6+XknX3n7jxGRZYKOXl6n/0pCSQDfNQBY=
Subject key identifier:   4A:8A:E0:18:34:5B:68:68:E6:5B:23:27:DD:C8:D8:A2:DA:82:6D:09
Certificate issuer:       /CN=34592396-ac3d-4a48-97f1-caed65436525
Certificate serial:       010D0C9F4328584CC611EE4B901B213BA28E27E0
Authority key identifier: E0:F9:1F:E1:0F:59:EE:87:BC:BA:61:8A:CE:E9:74:C9:83:E1:41:41
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34592396-ac3d-4a48-97f1-caed65436525.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34592396-ac3d-4a48-97f1-caed65436525/e3009fff-3e87-3212-b198-2e279f6b6609.roa
Signing time:             Fri 06 Feb 2026 14:00:40 +0000
ROA not before:           Fri 06 Feb 2026 14:00:40 +0000
ROA not after:            Thu 07 May 2026 13:00:40 +0000
asID:                     40818
IP address blocks:        2602:fdeb:2::/48 maxlen: 48
                          2602:fdeb:3::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34592396-ac3d-4a48-97f1-caed65436525/34592396-ac3d-4a48-97f1-caed65436525.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34592396-ac3d-4a48-97f1-caed65436525/34592396-ac3d-4a48-97f1-caed65436525.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34592396-ac3d-4a48-97f1-caed65436525.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Feb 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:c6:11:ee:4b:90:1b:21:3b:a2:8e:27:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34592396-ac3d-4a48-97f1-caed65436525
        Validity
            Not Before: Feb  6 14:00:40 2026 GMT
            Not After : May  7 13:00:40 2026 GMT
        Subject: CN=89aa4328-0bdf-4fc9-8d58-057b48dabe33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:95:00:a9:a4:8f:80:78:0c:ca:99:06:ac:bd:
                    10:af:f1:72:0d:a8:a3:60:c0:d6:6d:5e:38:40:eb:
                    20:46:8e:8a:23:08:29:64:9c:aa:5c:36:6e:c6:69:
                    a2:4a:da:c7:39:8b:74:fd:69:61:0b:e6:97:d0:fc:
                    81:20:c2:d2:d0:66:4f:3b:7b:f4:6a:03:8c:1d:3f:
                    91:f9:3c:51:17:59:08:bc:88:2b:2f:59:bd:0a:37:
                    09:22:4f:19:b1:31:7c:c0:40:db:91:34:2a:9e:2f:
                    43:c6:55:78:eb:01:43:04:f3:11:b3:ca:09:de:a3:
                    6c:67:71:5c:7a:9d:14:14:92:7b:b6:d5:64:70:18:
                    74:d8:8d:44:3e:8d:5b:fb:ff:1f:13:15:42:46:49:
                    b9:ef:12:07:91:5b:73:40:4a:f6:c3:f3:63:c7:da:
                    78:d1:d0:b8:cf:01:7f:fc:6e:09:f2:a5:39:39:ec:
                    c0:eb:34:fb:00:86:65:30:ca:73:14:88:0b:ce:fe:
                    c3:25:b9:bc:3c:4c:83:a7:5c:e0:83:a8:ff:49:8c:
                    8e:6c:6a:fa:67:c1:9d:9a:d9:7c:a0:0f:5a:c9:ff:
                    f9:eb:9b:f3:39:08:fe:cd:d3:11:66:44:bb:8a:f6:
                    fc:c6:f4:bd:3c:c6:69:5d:3c:bf:4b:f9:00:6e:a9:
                    de:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:8A:E0:18:34:5B:68:68:E6:5B:23:27:DD:C8:D8:A2:DA:82:6D:09
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34592396-ac3d-4a48-97f1-caed65436525/e3009fff-3e87-3212-b198-2e279f6b6609.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34592396-ac3d-4a48-97f1-caed65436525/34592396-ac3d-4a48-97f1-caed65436525.crl

            X509v3 Authority Key Identifier:
                keyid:E0:F9:1F:E1:0F:59:EE:87:BC:BA:61:8A:CE:E9:74:C9:83:E1:41:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34592396-ac3d-4a48-97f1-caed65436525.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fdeb:2::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:45:9c:36:d5:b1:fb:52:e1:db:ce:38:6a:6d:42:4a:90:20:
         f1:66:9f:db:b6:94:14:3d:2e:41:b5:91:d3:8a:b5:2c:d6:7e:
         3d:74:1a:5a:a8:32:05:a6:6e:1c:af:7e:2b:28:07:0f:d1:1e:
         d4:c5:be:33:63:e4:81:bb:e2:19:07:63:0a:f7:97:ed:a0:7f:
         82:18:04:64:f8:b0:21:80:0e:2e:7a:75:72:2a:58:48:9b:d2:
         7f:82:50:b4:fe:74:d0:c1:2b:dd:fc:d2:b1:db:ed:08:3a:62:
         68:12:cd:9c:91:88:47:97:32:13:22:d7:08:99:9f:5b:a2:c2:
         5e:69:e7:9c:62:9d:f6:8a:aa:2b:01:15:15:cc:77:4b:28:a7:
         95:b3:18:42:33:24:81:0a:57:ab:d9:41:ea:9b:87:9a:90:65:
         e0:4b:5f:f0:a8:a4:7b:c1:01:6c:4f:dd:c4:4f:c4:22:31:13:
         26:93:de:d7:a7:03:43:e3:78:15:85:68:b8:85:88:38:a5:89:
         e9:0d:42:39:d5:07:c1:db:f3:b2:67:da:f2:d7:2e:07:31:f9:
         2f:39:01:8b:2d:e2:92:34:3f:7d:c7:b4:1c:e6:1e:31:48:d0:
         56:c4:b3:5f:bd:a6:a9:29:95:42:c7:8e:32:d3:8f:a0:10:db:
         0f:c0:8c:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 26 06:35:17 2026 by rpki-client