Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d23bf149-3e89-4ca4-b96d-918c2eab87d8/5a0ad764-c5b7-33ff-9e89-d83378aefdc2.roa
File:                     5a0ad764-c5b7-33ff-9e89-d83378aefdc2.roa (raw, json)
Hash identifier:          J2pwiys5wda0lPcP6Pji7hDwKAHpXhENCiSqF3dn84U=
Subject key identifier:   7C:96:90:05:1B:BC:0B:0A:7A:62:0F:BA:29:C6:19:6F:AB:DD:79:7E
Certificate issuer:       /CN=d23bf149-3e89-4ca4-b96d-918c2eab87d8
Certificate serial:       010D0C9F4328584CCF3DE44B8D7BBE8F88BFA200
Authority key identifier: 59:DA:25:1D:FF:DB:09:20:84:C1:22:8B:2F:20:BE:28:0D:90:A2:E9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d23bf149-3e89-4ca4-b96d-918c2eab87d8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d23bf149-3e89-4ca4-b96d-918c2eab87d8/5a0ad764-c5b7-33ff-9e89-d83378aefdc2.roa
Signing time:             Mon 09 Feb 2026 20:51:40 +0000
ROA not before:           Mon 09 Feb 2026 20:51:40 +0000
ROA not after:            Sun 10 May 2026 19:51:40 +0000
asID:                     22223
IP address blocks:        2606:f80::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d23bf149-3e89-4ca4-b96d-918c2eab87d8/d23bf149-3e89-4ca4-b96d-918c2eab87d8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d23bf149-3e89-4ca4-b96d-918c2eab87d8/d23bf149-3e89-4ca4-b96d-918c2eab87d8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d23bf149-3e89-4ca4-b96d-918c2eab87d8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Feb 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:cf:3d:e4:4b:8d:7b:be:8f:88:bf:a2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d23bf149-3e89-4ca4-b96d-918c2eab87d8
        Validity
            Not Before: Feb  9 20:51:40 2026 GMT
            Not After : May 10 19:51:40 2026 GMT
        Subject: CN=04b671e0-4468-42ac-89ec-b1eaa5c2901b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:96:9f:f7:ba:d8:92:85:c2:54:f0:6b:31:7d:
                    c5:01:79:c8:c5:6a:f4:c1:84:90:e7:11:8f:68:1a:
                    42:3f:73:1e:2e:b0:3b:c2:dd:64:68:ea:43:18:74:
                    e1:04:d0:31:8f:72:85:35:14:ca:db:66:bf:04:fc:
                    84:13:09:4b:0c:eb:04:1c:40:ae:0e:5d:58:54:7c:
                    f3:36:c6:00:91:d2:b3:e0:29:cb:96:eb:09:9f:95:
                    03:f2:6e:d8:12:eb:39:bf:2f:d4:71:c1:86:b9:ea:
                    11:7d:bd:0f:7a:52:a8:d9:8c:ff:09:14:fc:69:1c:
                    2d:6a:b7:ab:c5:84:78:42:57:72:48:53:a1:15:7f:
                    f1:07:4f:5e:de:80:41:e9:e8:83:5a:ab:e3:cb:54:
                    62:b5:5e:28:5c:96:be:f3:05:ed:7f:74:d8:1d:ae:
                    c1:5b:33:9e:bd:b9:4b:44:ea:63:06:df:9f:c4:b2:
                    ba:05:cc:c3:f2:87:07:a4:7c:7a:65:41:0c:1e:f7:
                    e7:8c:bd:2d:bc:ab:cd:ac:b4:2d:bd:48:c8:fe:22:
                    61:41:fe:33:6f:39:15:55:06:43:7a:66:b0:be:a7:
                    7e:a8:eb:91:d5:6c:19:1f:21:d1:77:96:56:ac:af:
                    c6:60:9a:43:c1:66:3a:c0:8d:95:6b:7f:17:8b:87:
                    45:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:96:90:05:1B:BC:0B:0A:7A:62:0F:BA:29:C6:19:6F:AB:DD:79:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d23bf149-3e89-4ca4-b96d-918c2eab87d8/5a0ad764-c5b7-33ff-9e89-d83378aefdc2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d23bf149-3e89-4ca4-b96d-918c2eab87d8/d23bf149-3e89-4ca4-b96d-918c2eab87d8.crl

            X509v3 Authority Key Identifier:
                keyid:59:DA:25:1D:FF:DB:09:20:84:C1:22:8B:2F:20:BE:28:0D:90:A2:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d23bf149-3e89-4ca4-b96d-918c2eab87d8.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:f80::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:71:3a:26:54:e6:4b:f1:93:0a:1c:88:74:9e:84:82:e3:59:
         91:4e:ac:f7:27:21:00:43:ac:88:ba:b1:77:32:19:b3:4e:49:
         19:ef:de:21:06:e2:f8:b8:35:d7:57:02:bb:4c:3b:10:86:62:
         aa:cc:2b:42:58:c8:1e:1e:f1:6c:39:3e:97:94:56:50:6f:d3:
         f6:0b:4c:46:2d:5e:2f:a4:7c:37:97:3b:71:8b:b6:ff:4d:3e:
         cc:29:ce:35:b0:1a:b9:c1:2c:a6:d6:f5:a1:4e:12:24:bc:86:
         20:98:35:1f:03:88:9e:86:00:88:60:dd:12:d1:b1:3b:70:7e:
         10:20:7b:fd:33:db:3a:f5:97:32:a6:1b:51:21:f5:70:62:af:
         e1:51:22:74:1b:34:bf:48:89:a7:ab:ba:15:18:59:66:5d:48:
         55:78:c3:f6:6e:22:1f:dc:ef:df:30:98:d0:55:59:41:88:42:
         fd:65:34:c6:9f:a6:20:32:8d:28:5a:28:9e:e4:e4:47:bb:f8:
         f1:3e:ba:7b:fd:5d:ec:2b:83:45:f1:89:d5:2e:46:02:46:28:
         ec:29:32:ce:a8:69:a7:66:d7:29:63:a0:7a:21:7e:ee:42:6f:
         39:fb:5d:33:01:8e:31:d3:6d:d6:a9:6b:5d:80:f4:a0:b3:9a:
         67:43:0c:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 26 19:28:28 2026 by rpki-client