Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/67fdd9bc-f848-365e-a862-3a4a49efad0d.roa
File:                     67fdd9bc-f848-365e-a862-3a4a49efad0d.roa (raw, json)
Hash identifier:          Z8vr3we2ukmHsLdklXrxoRxJB5+Krj9skUWAgZOtkcM=
Subject key identifier:   1B:E9:87:46:32:6B:A6:97:28:B1:F9:FA:E8:06:85:3B:A4:1B:F5:BC
Certificate issuer:       /CN=b1898100-f40c-4002-b68a-8a97b548e69d
Certificate serial:       010D0C9F4328584CAE573DFE504F744E7381D5C0
Authority key identifier: 89:4C:F8:BD:0D:34:34:87:18:70:33:F9:00:70:4A:CB:0F:78:52:53
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/67fdd9bc-f848-365e-a862-3a4a49efad0d.roa
Signing time:             Thu 29 Jan 2026 02:00:32 +0000
ROA not before:           Thu 29 Jan 2026 02:00:32 +0000
ROA not after:            Wed 29 Apr 2026 01:00:32 +0000
asID:                     400655
IP address blocks:        2602:fd6f:e::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/b1898100-f40c-4002-b68a-8a97b548e69d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/b1898100-f40c-4002-b68a-8a97b548e69d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 23 Feb 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ae:57:3d:fe:50:4f:74:4e:73:81:d5:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1898100-f40c-4002-b68a-8a97b548e69d
        Validity
            Not Before: Jan 29 02:00:32 2026 GMT
            Not After : Apr 29 01:00:32 2026 GMT
        Subject: CN=bfeb6a8a-4129-4300-9dca-3850faa6eb8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:5f:8d:0e:86:6a:15:9c:e5:ce:e3:5a:f3:b2:
                    14:4a:35:b5:2e:33:89:09:47:59:20:92:a4:72:a1:
                    c0:32:32:ae:9d:e5:1f:b8:82:c5:90:d9:c1:d0:96:
                    df:84:6c:9c:3a:a7:c6:f5:9e:48:db:0e:cb:bb:d0:
                    f7:ad:56:b3:ea:53:c3:49:d7:36:a2:7e:65:c5:9f:
                    a0:6f:c2:48:25:31:43:a2:1f:71:0a:a9:48:9a:3e:
                    66:c5:2f:42:12:90:98:35:84:05:6f:27:14:7f:bd:
                    dd:06:d1:93:1b:16:5d:4e:dc:a4:13:bd:c3:ff:1a:
                    a3:87:1c:d1:ce:8c:7f:27:a0:38:ea:a1:1e:33:ef:
                    09:65:73:04:83:15:a8:b1:17:9d:78:71:ac:4c:2c:
                    85:f6:f7:eb:e3:b6:78:7f:ab:28:54:f5:fd:d1:51:
                    bf:17:51:c6:29:1b:48:de:78:4b:80:a1:8c:41:4e:
                    cb:01:84:c7:73:1d:15:0f:f6:76:27:f4:6c:16:8e:
                    cb:23:8e:d9:dd:3d:13:e1:62:bd:11:8a:b8:e5:30:
                    9f:38:3c:94:8d:23:c5:79:2e:fb:7a:de:77:25:e8:
                    41:2c:24:15:a7:42:6d:5b:e9:53:86:c5:e2:30:e6:
                    60:03:c2:7e:55:3d:53:9c:d9:52:5c:7f:ec:f9:44:
                    f4:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:E9:87:46:32:6B:A6:97:28:B1:F9:FA:E8:06:85:3B:A4:1B:F5:BC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/67fdd9bc-f848-365e-a862-3a4a49efad0d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/b1898100-f40c-4002-b68a-8a97b548e69d.crl

            X509v3 Authority Key Identifier:
                keyid:89:4C:F8:BD:0D:34:34:87:18:70:33:F9:00:70:4A:CB:0F:78:52:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fd6f:e::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:af:c1:64:85:3c:a3:9b:9a:4e:3b:47:8c:e7:f4:cb:55:e1:
         fe:33:7d:91:17:59:fb:47:6b:ba:60:ad:93:83:56:73:20:7f:
         c6:6c:a2:b3:12:63:c1:62:c1:3f:4c:98:57:f4:f4:dd:ca:43:
         68:ed:4d:2e:95:68:1d:d0:fd:13:c2:01:24:6e:b1:03:31:7e:
         af:87:ec:9e:b5:cb:48:95:e3:8f:0b:dc:15:53:69:7b:26:9d:
         66:b8:20:af:19:d8:3f:97:a6:61:9a:cf:a1:24:2d:cc:55:b5:
         5a:e9:98:7c:85:41:72:57:bd:1c:b1:61:3f:a9:1b:1e:92:f4:
         fe:f6:d6:35:62:c6:fe:eb:f7:f5:61:d4:16:83:e6:7e:42:6b:
         df:28:c7:8b:c2:d3:9f:c7:eb:6b:0a:bb:89:9f:2c:87:92:1d:
         c4:bb:3b:49:6e:7c:a5:49:fb:ee:57:0d:40:88:7d:c6:e6:78:
         96:c6:37:c5:34:dd:ca:98:d0:e5:72:d2:cd:14:e5:e0:b9:f2:
         29:ab:73:9d:23:4a:72:5e:1f:46:48:f9:e6:eb:01:81:3b:15:
         e8:5a:2d:bf:7a:92:f2:00:41:fb:f3:2b:1c:d4:8f:c4:72:0e:
         3e:e1:06:89:95:f3:f8:2f:81:8a:c7:bd:7f:04:f7:48:89:c7:
         1c:9a:fc:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 22 19:46:59 2026 by rpki-client