Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f7322b5f-0541-4784-9e5e-c4e8dd728e59/15ace347-9bf7-3fb7-bb44-972bc332ba18.roa
File:                     15ace347-9bf7-3fb7-bb44-972bc332ba18.roa (raw, json)
Hash identifier:          VeKR1gbJcJlJWdFQRFs8Xh1zH9PTdqLOkbFRYNA11JE=
Subject key identifier:   59:02:52:B8:52:FA:36:8E:8A:C4:41:03:D5:02:4C:9E:65:EA:37:68
Certificate issuer:       /CN=f7322b5f-0541-4784-9e5e-c4e8dd728e59
Certificate serial:       010D0C9F4328584CA5F742076853CBDAFB0617C0
Authority key identifier: 3B:72:1A:C5:54:9A:F6:70:C0:81:FD:58:38:ED:59:4E:48:46:A3:D5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f7322b5f-0541-4784-9e5e-c4e8dd728e59.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f7322b5f-0541-4784-9e5e-c4e8dd728e59/15ace347-9bf7-3fb7-bb44-972bc332ba18.roa
Signing time:             Mon 26 Jan 2026 02:00:32 +0000
ROA not before:           Mon 26 Jan 2026 02:00:32 +0000
ROA not after:            Sun 26 Apr 2026 01:00:32 +0000
asID:                     393462
IP address blocks:        2620:129:f000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f7322b5f-0541-4784-9e5e-c4e8dd728e59/f7322b5f-0541-4784-9e5e-c4e8dd728e59.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f7322b5f-0541-4784-9e5e-c4e8dd728e59/f7322b5f-0541-4784-9e5e-c4e8dd728e59.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f7322b5f-0541-4784-9e5e-c4e8dd728e59.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Feb 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:a5:f7:42:07:68:53:cb:da:fb:06:17:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f7322b5f-0541-4784-9e5e-c4e8dd728e59
        Validity
            Not Before: Jan 26 02:00:32 2026 GMT
            Not After : Apr 26 01:00:32 2026 GMT
        Subject: CN=6683ee7d-f6e6-4114-8316-1e5c350ec52f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:be:09:8a:d2:d6:59:7a:ee:f8:75:33:ef:78:
                    4e:22:aa:3d:60:c1:02:5e:fa:77:99:73:3f:79:c2:
                    14:f1:5a:73:f2:37:90:10:7f:e9:b1:96:c4:94:12:
                    ad:d9:ae:50:c7:3c:4a:5d:02:63:e2:c3:eb:91:c2:
                    94:73:0c:5b:dc:b9:24:3e:de:c9:11:a0:44:cf:af:
                    94:de:33:ef:69:67:7a:65:ea:90:2b:33:56:ac:db:
                    91:52:53:79:7d:44:26:35:80:0f:ef:21:3c:0d:ac:
                    fd:f0:f6:ca:f4:8a:3b:56:6a:f6:af:00:3d:05:a3:
                    7d:f9:26:16:76:9d:5b:d8:ca:28:9d:fb:bf:48:a7:
                    58:bb:c7:ec:fc:66:15:aa:61:7d:05:11:3a:c0:74:
                    a7:e7:b7:14:de:e6:62:83:fc:30:ca:29:e6:6c:89:
                    94:6d:d2:3a:4b:ef:01:fc:ba:a7:28:e5:57:bb:22:
                    03:79:d7:96:d9:f9:73:e5:fa:6e:41:14:9c:eb:6c:
                    19:5c:c8:e2:02:40:4b:56:fc:43:d5:0f:1e:22:d0:
                    44:ee:96:1c:fa:3a:d8:36:8c:2c:0e:e3:4d:99:5f:
                    59:e8:e0:f6:7d:b0:f6:fb:c5:45:03:fc:c6:9c:d5:
                    69:64:22:1c:2b:07:15:24:2e:2d:d2:57:8c:b9:0b:
                    69:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:02:52:B8:52:FA:36:8E:8A:C4:41:03:D5:02:4C:9E:65:EA:37:68
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f7322b5f-0541-4784-9e5e-c4e8dd728e59/15ace347-9bf7-3fb7-bb44-972bc332ba18.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f7322b5f-0541-4784-9e5e-c4e8dd728e59/f7322b5f-0541-4784-9e5e-c4e8dd728e59.crl

            X509v3 Authority Key Identifier:
                keyid:3B:72:1A:C5:54:9A:F6:70:C0:81:FD:58:38:ED:59:4E:48:46:A3:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f7322b5f-0541-4784-9e5e-c4e8dd728e59.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:129:f000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:b1:70:03:3f:0f:ab:e1:5a:2d:af:28:c0:a9:76:3d:dd:2c:
         6f:2b:d4:27:c7:ac:95:dc:1e:2d:18:24:cf:6a:27:c0:d1:84:
         16:79:6b:93:00:35:81:a7:bc:c3:99:fb:ad:8f:95:4d:a3:f4:
         0a:1f:3f:87:39:71:5d:f8:8f:23:b3:38:74:b5:2c:0f:f3:ea:
         18:a2:d3:97:7a:2c:e7:a1:ea:ef:ca:71:3c:9b:65:d2:92:f3:
         ad:d0:30:b6:f3:18:9f:42:93:0d:07:6b:5f:a1:80:36:99:7e:
         e8:67:70:ef:72:a9:18:10:3c:eb:09:24:3f:7d:57:1d:5e:0d:
         86:09:f5:00:ed:36:86:7d:d2:e5:5a:68:d1:56:a0:e2:6d:27:
         40:66:4e:f7:be:0b:56:13:4d:64:3d:39:a5:1d:f2:48:c0:f8:
         8d:43:54:5b:36:20:ca:cc:59:d2:d4:4c:c4:6e:8f:1e:e0:38:
         e1:55:a1:73:ff:17:58:bc:47:c8:d8:6f:13:f0:ad:08:92:dd:
         f9:4b:29:2f:eb:d1:15:ae:bd:b1:f3:53:fe:d0:0f:d4:64:d7:
         24:8a:00:fa:3b:33:8a:23:c4:a6:79:01:6c:9d:b3:4f:f1:da:
         3d:2e:b8:c6:78:b8:41:88:00:63:40:da:a3:a4:49:11:d1:2e:
         57:56:c8:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 26 22:58:45 2026 by rpki-client