Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6aca9c18-e31c-4eb9-b651-d49d41d3a6db/bc426fed-fada-323e-8db0-afd0fab751de.roa
File:                     bc426fed-fada-323e-8db0-afd0fab751de.roa (raw, json)
Hash identifier:          BuScwnmiXjKqzs1e+ri0M5a/r54FjF52iDO/uYi5+TQ=
Subject key identifier:   49:A5:C4:99:77:55:D7:03:B1:BB:70:4A:CD:02:1D:A0:BE:54:40:BD
Certificate issuer:       /CN=6aca9c18-e31c-4eb9-b651-d49d41d3a6db
Certificate serial:       010D0C9F4328584CC77749235231FAE7385F8680
Authority key identifier: AE:A2:37:87:2E:2B:AC:A0:BF:D8:32:33:50:97:44:76:33:E4:0D:2C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6aca9c18-e31c-4eb9-b651-d49d41d3a6db.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6aca9c18-e31c-4eb9-b651-d49d41d3a6db/bc426fed-fada-323e-8db0-afd0fab751de.roa
Signing time:             Sat 07 Feb 2026 02:00:31 +0000
ROA not before:           Sat 07 Feb 2026 02:00:31 +0000
ROA not after:            Fri 08 May 2026 01:00:31 +0000
asID:                     36666
IP address blocks:        2620:c1:6000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6aca9c18-e31c-4eb9-b651-d49d41d3a6db/6aca9c18-e31c-4eb9-b651-d49d41d3a6db.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6aca9c18-e31c-4eb9-b651-d49d41d3a6db/6aca9c18-e31c-4eb9-b651-d49d41d3a6db.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6aca9c18-e31c-4eb9-b651-d49d41d3a6db.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Feb 2026 03:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:c7:77:49:23:52:31:fa:e7:38:5f:86:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6aca9c18-e31c-4eb9-b651-d49d41d3a6db
        Validity
            Not Before: Feb  7 02:00:31 2026 GMT
            Not After : May  8 01:00:31 2026 GMT
        Subject: CN=f1a602b7-fc83-482e-85cf-ce452383c90d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:f2:74:e6:75:68:6b:73:0c:a7:d7:25:af:dc:
                    8f:2a:7e:98:59:40:01:6f:dc:39:8e:0f:3d:69:49:
                    94:b8:46:71:07:53:00:c4:a1:92:a6:20:b0:71:05:
                    84:b5:48:37:96:44:f3:6a:36:21:64:a7:ff:c9:0c:
                    69:0f:11:04:c0:59:3d:37:f5:71:6c:db:6d:71:12:
                    50:df:63:d5:1b:3b:4d:6c:7c:eb:1f:48:22:4c:3a:
                    a2:f0:85:a9:39:ce:3a:0e:fc:06:b0:cb:23:a2:6a:
                    25:72:1f:65:63:17:56:6b:0c:96:98:c7:88:f1:16:
                    ce:1e:fa:d9:5c:b9:05:e2:b4:d6:a9:2e:d6:aa:2c:
                    cc:26:02:93:15:04:43:fd:8a:ed:12:12:37:73:69:
                    97:59:4b:dd:35:a0:ee:15:1f:4b:44:e2:1f:cb:8f:
                    62:b0:0b:ec:38:7d:58:6e:8c:94:58:a8:2f:a4:c5:
                    a4:df:92:b5:c6:a2:04:87:8a:5e:97:99:7a:16:30:
                    39:51:61:b2:e2:68:dc:63:97:db:10:8e:c9:2d:64:
                    1d:6a:c5:3f:62:70:31:04:1f:4d:1f:b3:05:19:7a:
                    e6:c3:dc:b8:ca:1b:22:fc:68:da:4a:85:08:ba:26:
                    72:03:e9:9c:8e:b0:24:2a:6d:cc:c1:87:82:c3:23:
                    cb:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:A5:C4:99:77:55:D7:03:B1:BB:70:4A:CD:02:1D:A0:BE:54:40:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6aca9c18-e31c-4eb9-b651-d49d41d3a6db/bc426fed-fada-323e-8db0-afd0fab751de.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6aca9c18-e31c-4eb9-b651-d49d41d3a6db/6aca9c18-e31c-4eb9-b651-d49d41d3a6db.crl

            X509v3 Authority Key Identifier:
                keyid:AE:A2:37:87:2E:2B:AC:A0:BF:D8:32:33:50:97:44:76:33:E4:0D:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6aca9c18-e31c-4eb9-b651-d49d41d3a6db.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:c1:6000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:54:00:20:f9:02:6c:64:73:32:37:dc:dc:e4:c9:1d:38:cf:
         ed:5d:7c:9f:16:bb:1b:13:58:ea:6e:eb:31:78:e3:cf:c5:e4:
         81:cb:b3:94:db:75:88:39:d1:71:75:7b:7d:1b:85:b5:4f:55:
         6a:da:bb:3d:a3:cd:43:29:52:cb:44:6d:50:ae:bb:c2:92:fa:
         5b:f5:41:63:a3:66:9b:da:fa:b1:81:9f:96:a3:e9:e0:fe:67:
         62:f2:8d:60:bb:96:4f:91:b8:d2:b3:59:34:35:2e:bc:2c:ea:
         9b:35:f0:0b:29:b8:aa:a0:80:67:93:18:56:65:c2:eb:20:0c:
         f1:a8:46:1d:a2:a8:82:d4:31:02:99:5d:b8:71:06:05:0e:0f:
         0f:b9:a5:04:0d:37:9b:c9:99:ea:19:67:ed:9b:24:40:64:51:
         76:48:05:8b:b0:fe:03:ff:92:78:48:4c:30:32:75:9c:c6:e1:
         18:73:ac:07:22:eb:6d:55:91:a5:0f:ee:91:32:87:cf:d0:57:
         52:9c:35:67:84:4e:38:83:01:2b:0a:82:98:8f:b4:00:b1:4d:
         ec:f5:62:15:53:4d:0a:7d:6f:2c:8d:11:ae:ab:11:9c:10:37:
         e0:a0:5e:8f:36:b0:bc:cc:bd:be:a1:8e:0c:9e:e8:46:ec:68:
         f6:1f:5d:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 27 01:58:35 2026 by rpki-client