Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/f954eaec-5757-3b49-bbea-1a28e36e9e95.roa
File:                     f954eaec-5757-3b49-bbea-1a28e36e9e95.roa (raw, json)
Hash identifier:          VpD6wWUx9cbjl3EYhnN4Fx2mP3Bqs8eiuoSiT41r/IY=
Subject key identifier:   74:90:79:A3:5E:68:F9:CB:C9:60:E2:FE:03:7F:D4:F7:A2:56:AC:D1
Certificate issuer:       /CN=e4bb5ad3-d823-4023-aace-329885f50c4b
Certificate serial:       010D0C9F4328584CB21C93F40F090644E65B9B80
Authority key identifier: DC:69:AA:B9:66:57:CC:BC:06:0C:8E:4F:6E:DB:01:2B:81:42:7F:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/f954eaec-5757-3b49-bbea-1a28e36e9e95.roa
Signing time:             Fri 30 Jan 2026 10:26:06 +0000
ROA not before:           Fri 30 Jan 2026 10:26:06 +0000
ROA not after:            Thu 30 Apr 2026 09:26:06 +0000
asID:                     14618
IP address blocks:        2607:dbc0:3000::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/e4bb5ad3-d823-4023-aace-329885f50c4b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/e4bb5ad3-d823-4023-aace-329885f50c4b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 22 Feb 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:b2:1c:93:f4:0f:09:06:44:e6:5b:9b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4bb5ad3-d823-4023-aace-329885f50c4b
        Validity
            Not Before: Jan 30 10:26:06 2026 GMT
            Not After : Apr 30 09:26:06 2026 GMT
        Subject: CN=573e936c-b5d2-43d1-aa09-1a378f127777
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:65:e5:bb:47:31:96:26:a6:87:31:12:9f:4f:
                    e7:b1:4e:53:5a:d2:94:36:e7:7a:13:52:b6:25:c5:
                    39:59:d7:7c:23:15:6b:14:b3:05:8b:3f:52:4f:d9:
                    bd:8d:67:bb:55:fd:8b:a3:81:05:d9:05:0a:ee:d0:
                    2b:6f:f3:57:11:8e:e1:5b:56:30:b6:cd:ca:82:dc:
                    38:f6:a9:06:c2:1f:9b:67:73:f8:be:2d:4e:a8:47:
                    c6:73:01:64:31:65:38:c0:80:1b:50:3a:4a:e6:9c:
                    92:ac:5f:be:f5:3b:27:24:c5:a3:19:90:69:7d:cf:
                    27:3e:0e:23:06:59:d0:cc:0f:3a:d2:1c:fb:1e:70:
                    fe:1a:f8:67:b9:c9:6f:1c:30:06:d5:c9:f6:34:d8:
                    ff:c1:ae:cb:d0:93:08:c9:c0:92:9e:61:6e:66:82:
                    1e:8f:cb:dd:31:fe:a9:4c:73:ff:cd:2d:eb:78:bb:
                    81:d3:43:b0:e8:b4:25:26:3e:ab:e5:2a:4e:25:8e:
                    f2:eb:92:26:59:aa:8d:39:e5:85:b0:08:d9:2f:3d:
                    8a:14:8e:78:3e:f8:18:f9:84:13:81:f1:17:10:ec:
                    48:2b:5b:2f:45:b0:66:70:8a:07:73:52:6c:5b:13:
                    53:f9:b7:03:a3:8f:14:6c:0b:3f:76:a1:ab:65:9c:
                    e2:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:90:79:A3:5E:68:F9:CB:C9:60:E2:FE:03:7F:D4:F7:A2:56:AC:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/f954eaec-5757-3b49-bbea-1a28e36e9e95.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/e4bb5ad3-d823-4023-aace-329885f50c4b.crl

            X509v3 Authority Key Identifier:
                keyid:DC:69:AA:B9:66:57:CC:BC:06:0C:8E:4F:6E:DB:01:2B:81:42:7F:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:dbc0:3000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:93:4a:48:05:43:b5:d3:92:17:97:87:2d:f2:a5:71:58:9a:
         59:3a:1e:b9:49:a0:51:b7:2e:36:86:94:4d:a9:fc:fa:2c:e5:
         d5:9c:a3:43:7c:3d:d4:f9:a1:86:21:d0:6d:f7:b9:f5:16:db:
         a7:3b:29:54:0a:ef:28:1e:25:f6:c6:cc:c6:fe:9c:cd:9b:33:
         f2:b6:db:2b:23:23:65:81:aa:72:ca:8f:ca:53:54:f6:ae:bd:
         a7:bb:62:68:ae:22:39:9d:d4:88:dc:05:d6:a1:b7:d8:eb:75:
         5b:9e:79:5a:1d:21:bb:9e:8b:c3:06:71:7b:b7:83:0b:52:68:
         d0:c9:7f:45:43:a7:45:89:12:5a:dc:9d:24:7c:f6:78:c0:7c:
         d0:c4:a6:bc:c5:15:aa:46:41:08:b9:4c:d6:3d:5b:ac:7f:2d:
         60:cb:91:31:77:4c:56:a7:12:b4:91:2a:5b:b5:dc:a2:09:59:
         97:42:42:ac:fa:0e:3a:67:06:1e:d6:b8:53:d5:41:97:a7:b1:
         52:40:89:46:4c:67:92:f7:3e:e2:c6:c4:d3:85:fa:41:ec:ba:
         25:f1:c1:fc:5f:d4:73:f9:21:14:47:bc:a4:32:e2:24:ab:3d:
         07:c4:68:41:ba:03:af:25:4f:40:c6:16:89:b2:7a:f2:35:3c:
         53:8c:74:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 21 04:51:31 2026 by rpki-client