Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c2bb4c54-14a6-4e32-b3a0-defad300d9fc/ce57448a-06a9-3322-9bfc-4b5a2868a615.roa
File:                     ce57448a-06a9-3322-9bfc-4b5a2868a615.roa (raw, json)
Hash identifier:          1yDe/WsfR661yP2HgYS/KskkTUWFKvXJIIK6fEDi7Qc=
Subject key identifier:   6E:68:F3:B9:26:59:A1:01:86:19:5D:83:9F:31:B8:FA:B2:12:12:07
Certificate issuer:       /CN=c2bb4c54-14a6-4e32-b3a0-defad300d9fc
Certificate serial:       010D0C9F4328584CE0974BBBCCCDC3C61C337F0E
Authority key identifier: D4:59:63:34:92:D3:89:75:82:AD:E5:DE:DF:1B:B8:18:9B:E7:7A:2F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c2bb4c54-14a6-4e32-b3a0-defad300d9fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c2bb4c54-14a6-4e32-b3a0-defad300d9fc/ce57448a-06a9-3322-9bfc-4b5a2868a615.roa
Signing time:             Mon 16 Feb 2026 02:00:32 +0000
ROA not before:           Mon 16 Feb 2026 02:00:32 +0000
ROA not after:            Sun 17 May 2026 01:00:32 +0000
asID:                     8143
IP address blocks:        2602:f732:3::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c2bb4c54-14a6-4e32-b3a0-defad300d9fc/c2bb4c54-14a6-4e32-b3a0-defad300d9fc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c2bb4c54-14a6-4e32-b3a0-defad300d9fc/c2bb4c54-14a6-4e32-b3a0-defad300d9fc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c2bb4c54-14a6-4e32-b3a0-defad300d9fc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Feb 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:e0:97:4b:bb:cc:cd:c3:c6:1c:33:7f:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2bb4c54-14a6-4e32-b3a0-defad300d9fc
        Validity
            Not Before: Feb 16 02:00:32 2026 GMT
            Not After : May 17 01:00:32 2026 GMT
        Subject: CN=9dc7c89d-c384-46b9-9a97-26202bcd469b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:24:48:b2:97:f7:d6:ba:3a:ed:dd:dd:33:dc:
                    c3:0e:12:ba:0d:03:6a:aa:d9:5a:1a:9b:5e:a1:7a:
                    c6:5d:fe:5d:0f:e1:83:64:1b:57:e5:2b:d6:08:a3:
                    e3:7c:b3:66:0a:32:e5:dc:72:6e:71:4d:e1:bc:ca:
                    02:b5:93:8b:d6:d1:9b:79:42:f3:5d:96:97:0c:72:
                    16:ae:34:ad:71:ab:57:82:3a:39:cf:5e:64:cb:5f:
                    0a:e8:5e:b4:5b:a4:c8:97:bb:f6:0e:a6:51:43:60:
                    32:dc:6d:30:de:24:bb:65:85:88:33:3f:a5:1c:67:
                    97:89:30:ed:c7:47:48:27:5b:38:68:45:d3:d1:73:
                    fb:ca:1d:2c:03:72:fc:aa:20:ee:cd:ec:3d:65:83:
                    92:63:cd:b4:db:dc:63:3c:f1:55:66:de:3c:7d:c3:
                    49:ca:18:fd:4a:a7:da:57:4d:f1:fb:3a:0d:dd:5e:
                    76:3b:d6:75:7d:db:67:e7:ed:ac:64:07:22:db:49:
                    6f:a1:e3:0a:ac:2b:2b:30:2c:97:ce:d1:9a:27:49:
                    ec:6f:92:58:d1:d4:4f:e2:fb:66:86:bd:a7:c6:72:
                    be:01:33:4d:c8:a9:0a:fb:db:b3:57:f7:fc:ae:06:
                    9f:c6:84:d9:4e:41:bd:8d:95:db:10:63:b9:c8:ca:
                    a3:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:68:F3:B9:26:59:A1:01:86:19:5D:83:9F:31:B8:FA:B2:12:12:07
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c2bb4c54-14a6-4e32-b3a0-defad300d9fc/ce57448a-06a9-3322-9bfc-4b5a2868a615.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c2bb4c54-14a6-4e32-b3a0-defad300d9fc/c2bb4c54-14a6-4e32-b3a0-defad300d9fc.crl

            X509v3 Authority Key Identifier:
                keyid:D4:59:63:34:92:D3:89:75:82:AD:E5:DE:DF:1B:B8:18:9B:E7:7A:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c2bb4c54-14a6-4e32-b3a0-defad300d9fc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f732:3::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:1f:97:db:45:7e:e2:da:e6:f2:b0:e1:e5:98:7a:80:ba:80:
         92:71:00:01:20:59:a5:ad:ed:03:39:74:f6:27:a6:2c:21:d3:
         ac:ff:d1:c5:30:2e:45:9b:a2:fb:9f:ce:b5:84:2f:0c:b9:01:
         17:7e:48:0f:ad:ca:4b:59:88:4b:9b:81:8e:28:62:ec:06:d9:
         c6:2d:70:45:5d:0d:09:cb:9d:31:e3:db:38:a3:ac:bb:6a:2b:
         68:0c:65:60:53:bc:14:34:5c:cf:2b:29:c2:b5:ec:7e:69:78:
         dd:f1:30:c7:e4:ce:68:f8:4b:b1:7f:5d:81:4e:74:43:17:e1:
         37:0a:45:fc:6b:0f:dd:84:4d:fc:28:e0:50:bb:00:58:6c:db:
         08:6e:18:29:37:98:7e:fc:62:0e:b5:c6:41:65:1a:c9:46:f4:
         08:e7:55:16:a4:20:d5:04:00:89:9b:c9:8a:5a:7e:02:65:9a:
         ea:e4:31:04:6a:76:42:0a:3f:45:2d:c8:37:b7:f6:4d:b2:e9:
         10:4d:90:da:7c:9b:31:f6:9c:67:b8:95:f6:ab:9d:0c:bc:d7:
         6f:2a:b2:3e:8c:7a:29:cf:8a:fd:54:07:9a:53:0a:10:4f:9a:
         85:3b:e5:d4:c3:0e:f3:10:18:6e:a1:74:a1:3b:65:02:cb:65:
         c5:03:a1:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 27 02:21:44 2026 by rpki-client