Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3c17db7-204c-41e2-85ca-6a5a448a8b88/ba7664f1-2748-3772-a538-56d297826de2.roa
File:                     ba7664f1-2748-3772-a538-56d297826de2.roa (raw, json)
Hash identifier:          rLFATELSbeH/d7AAAR69KWob0ZI71BTVqY/aeL6yDC8=
Subject key identifier:   CD:14:02:FF:48:77:68:3D:EA:F1:33:8F:92:C2:A6:7C:9E:BA:F8:F5
Certificate issuer:       /CN=c3c17db7-204c-41e2-85ca-6a5a448a8b88
Certificate serial:       010D0C9F4328584CAE5E8F40DDDBE767FEDB22C0
Authority key identifier: 7D:2D:BA:FF:43:DB:E9:72:96:E9:45:87:95:5C:45:72:54:D4:6B:83
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3c17db7-204c-41e2-85ca-6a5a448a8b88.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3c17db7-204c-41e2-85ca-6a5a448a8b88/ba7664f1-2748-3772-a538-56d297826de2.roa
Signing time:             Thu 29 Jan 2026 02:00:32 +0000
ROA not before:           Thu 29 Jan 2026 02:00:32 +0000
ROA not after:            Wed 29 Apr 2026 01:00:32 +0000
asID:                     214609
IP address blocks:        2607:1c0:2000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3c17db7-204c-41e2-85ca-6a5a448a8b88/c3c17db7-204c-41e2-85ca-6a5a448a8b88.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3c17db7-204c-41e2-85ca-6a5a448a8b88/c3c17db7-204c-41e2-85ca-6a5a448a8b88.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3c17db7-204c-41e2-85ca-6a5a448a8b88.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 24 Feb 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ae:5e:8f:40:dd:db:e7:67:fe:db:22:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3c17db7-204c-41e2-85ca-6a5a448a8b88
        Validity
            Not Before: Jan 29 02:00:32 2026 GMT
            Not After : Apr 29 01:00:32 2026 GMT
        Subject: CN=d07f05b8-c885-457d-8bff-2484dd99a8e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:da:80:4a:13:76:cd:b1:91:89:20:1d:62:0a:
                    40:87:be:1b:f3:bf:a0:3c:19:68:08:2c:ef:0d:01:
                    f1:52:23:06:7e:0f:44:d3:79:6a:eb:2f:ba:c3:f9:
                    a8:b9:14:bc:0a:e5:b6:47:89:9b:a4:2e:b9:ca:94:
                    b8:85:c5:90:f2:1a:f3:ca:86:5f:e5:50:3e:65:e6:
                    74:02:ea:80:a5:18:35:41:f1:2a:b7:e1:3a:65:15:
                    de:77:9f:db:6c:c9:bc:b0:73:91:9b:d2:0a:5d:c1:
                    ab:92:0a:44:16:d3:a8:11:dd:ac:4b:38:24:ab:2e:
                    71:2a:f6:21:95:92:61:aa:8e:d8:74:15:33:b6:20:
                    37:8c:9a:b3:2f:8c:df:ef:18:f4:84:99:b6:88:87:
                    3c:b4:a4:d6:ef:a0:7f:ae:8d:3e:f5:20:03:36:a4:
                    f9:82:cf:8d:b4:19:4d:8b:8e:53:c3:74:49:99:30:
                    89:06:e2:07:5d:2d:75:8d:1f:b9:1b:b2:43:5b:78:
                    f6:a5:39:ea:90:a8:03:49:b2:dc:ed:3f:33:4e:10:
                    0b:33:e9:8b:11:22:bc:25:56:d0:3d:72:fd:6b:c9:
                    da:04:c4:c5:39:04:e5:da:b5:68:7b:8d:9d:d7:39:
                    31:72:00:55:2d:b4:25:d0:66:16:32:b7:99:dd:eb:
                    ba:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:14:02:FF:48:77:68:3D:EA:F1:33:8F:92:C2:A6:7C:9E:BA:F8:F5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3c17db7-204c-41e2-85ca-6a5a448a8b88/ba7664f1-2748-3772-a538-56d297826de2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3c17db7-204c-41e2-85ca-6a5a448a8b88/c3c17db7-204c-41e2-85ca-6a5a448a8b88.crl

            X509v3 Authority Key Identifier:
                keyid:7D:2D:BA:FF:43:DB:E9:72:96:E9:45:87:95:5C:45:72:54:D4:6B:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3c17db7-204c-41e2-85ca-6a5a448a8b88.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:1c0:2000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:d7:b9:5f:3a:3c:74:f3:93:98:b6:81:2b:1e:c1:9c:28:5c:
         0b:bf:9d:48:18:41:f0:7d:ef:af:a8:79:80:06:31:e8:ba:31:
         7c:a7:5b:97:f4:a8:99:d0:5c:9c:c5:c5:42:4c:a6:bc:a9:9d:
         b1:53:b7:c6:5c:d5:bc:80:18:6f:a7:85:63:08:a7:72:ac:18:
         bd:d7:76:a0:93:83:fb:c8:7d:d4:a3:c3:8e:95:15:df:90:aa:
         4b:7d:fb:74:c3:a0:17:4d:78:0b:5c:0b:56:c6:9c:6a:57:3a:
         ac:84:c0:a5:a8:31:6c:73:96:95:6f:cc:18:aa:9e:e4:ad:94:
         2b:e7:1a:9f:1f:9c:6b:14:49:08:c8:2d:a5:52:bc:bb:f0:96:
         b9:c4:3d:e8:3b:b6:2a:04:cc:39:41:b2:5c:b0:a9:b5:04:f1:
         18:52:50:60:85:01:45:e5:4f:8d:e2:4d:b1:c2:65:28:78:ee:
         eb:a8:86:54:ee:6d:30:d8:f9:0c:ab:30:7e:a0:37:96:c8:c6:
         14:a4:40:21:a3:2a:51:f1:5c:8a:c2:29:ae:e8:7d:08:34:e8:
         62:ef:5b:bd:56:8f:c5:de:58:18:bf:cb:29:4b:e5:58:e9:40:
         70:a3:5b:e1:37:89:13:f6:3b:02:6a:2b:d5:45:6c:fc:25:de:
         82:4d:86:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 00:58:38 2026 by rpki-client