Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ecc7bb42-b9f8-4638-86ba-c2a809d45c1e/c74bb307-13ea-3c21-9f9b-c9965b45b85e.roa
File:                     c74bb307-13ea-3c21-9f9b-c9965b45b85e.roa (raw, json)
Hash identifier:          s7fINFsBeIODDgeMJAMENyg65/MYaqr1ZCYJEIp0BmI=
Subject key identifier:   92:34:9D:44:83:33:FC:67:F6:66:46:87:C7:B3:38:90:27:67:EA:63
Certificate issuer:       /CN=ecc7bb42-b9f8-4638-86ba-c2a809d45c1e
Certificate serial:       010D0C9F4328584CBB798E4403F82EEFAD76EF80
Authority key identifier: 44:96:EE:C3:8A:2E:9F:8D:30:BB:84:5B:4C:9F:37:01:BE:D0:0E:AF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ecc7bb42-b9f8-4638-86ba-c2a809d45c1e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ecc7bb42-b9f8-4638-86ba-c2a809d45c1e/c74bb307-13ea-3c21-9f9b-c9965b45b85e.roa
Signing time:             Mon 02 Feb 2026 18:55:43 +0000
ROA not before:           Mon 02 Feb 2026 18:55:43 +0000
ROA not after:            Sun 03 May 2026 17:55:43 +0000
asID:                     174
IP address blocks:        2604:7000::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ecc7bb42-b9f8-4638-86ba-c2a809d45c1e/ecc7bb42-b9f8-4638-86ba-c2a809d45c1e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ecc7bb42-b9f8-4638-86ba-c2a809d45c1e/ecc7bb42-b9f8-4638-86ba-c2a809d45c1e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ecc7bb42-b9f8-4638-86ba-c2a809d45c1e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Feb 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:bb:79:8e:44:03:f8:2e:ef:ad:76:ef:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ecc7bb42-b9f8-4638-86ba-c2a809d45c1e
        Validity
            Not Before: Feb  2 18:55:43 2026 GMT
            Not After : May  3 17:55:43 2026 GMT
        Subject: CN=1718ddb1-69cf-4529-962e-8f9f6a682f4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:44:51:41:5a:ca:fb:b9:59:91:83:e9:ad:79:
                    46:9a:e6:62:aa:d5:96:eb:e2:5d:3f:97:f4:90:83:
                    ec:3d:ee:52:ed:2f:3d:42:4e:b5:f6:5a:36:16:2c:
                    99:1d:60:c6:64:0c:c0:1c:29:49:a7:35:73:67:45:
                    2a:51:d8:49:eb:ce:61:51:45:f9:d3:5c:54:36:46:
                    37:1c:14:87:5d:5a:78:53:88:2e:28:5c:7f:3b:8e:
                    b0:75:c1:2a:8c:64:d0:d9:50:51:31:6b:55:97:53:
                    27:15:ab:aa:2c:a6:e1:a5:f4:15:0b:44:12:3f:dc:
                    d1:c3:84:05:38:2d:a9:37:62:86:22:29:d3:96:e4:
                    cd:eb:52:64:47:33:ee:24:3e:81:76:0d:70:a2:3f:
                    25:cc:44:2a:74:a2:eb:ed:cd:50:65:83:a3:1f:5d:
                    12:15:51:7e:03:db:ad:d3:4a:54:12:3d:76:a1:4a:
                    67:e3:af:94:f0:6e:72:5d:45:61:73:09:81:7d:2d:
                    f2:d1:e1:c8:89:88:94:13:54:38:86:e3:13:4d:2d:
                    cc:eb:05:7d:95:67:5d:6e:e1:94:16:a8:1f:02:3d:
                    f1:d1:f3:25:28:f5:37:4f:87:cf:18:bd:ad:87:55:
                    49:c9:c4:c9:b7:0a:12:83:e9:78:e9:be:11:9a:3f:
                    01:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:34:9D:44:83:33:FC:67:F6:66:46:87:C7:B3:38:90:27:67:EA:63
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ecc7bb42-b9f8-4638-86ba-c2a809d45c1e/c74bb307-13ea-3c21-9f9b-c9965b45b85e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ecc7bb42-b9f8-4638-86ba-c2a809d45c1e/ecc7bb42-b9f8-4638-86ba-c2a809d45c1e.crl

            X509v3 Authority Key Identifier:
                keyid:44:96:EE:C3:8A:2E:9F:8D:30:BB:84:5B:4C:9F:37:01:BE:D0:0E:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ecc7bb42-b9f8-4638-86ba-c2a809d45c1e.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:7000::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ab:c3:b4:1f:38:d3:82:0e:b5:5c:83:4f:39:69:9f:a4:ad:72:
         ff:c1:37:a7:6d:f1:7a:b9:46:38:04:44:c9:32:3a:5c:c3:d5:
         c0:2a:ab:d9:4a:84:42:7e:27:6f:4f:d6:8a:82:63:25:03:c9:
         50:90:8a:aa:ec:ec:c6:dc:50:6b:b5:d0:8a:3c:4e:9d:81:31:
         6e:9f:51:0a:b3:df:04:9b:3d:fb:ad:32:26:4d:d0:ca:6e:a8:
         41:c9:ba:14:ec:64:f5:8a:14:7f:51:2f:60:12:27:43:05:c0:
         0b:a3:27:1b:67:28:d0:54:f0:d3:52:62:95:81:67:0a:ee:87:
         2d:cc:7d:0a:b6:3c:2d:db:ae:59:14:76:b0:85:ce:a4:d9:29:
         c5:8b:74:92:45:86:f6:cf:f5:29:21:92:f9:d1:39:0e:a0:42:
         7c:b3:06:c0:b6:c9:f1:4d:d5:04:8b:e5:ed:99:87:79:44:b8:
         56:63:ff:05:e5:e6:67:93:93:a0:4f:86:4d:1c:2f:ac:03:54:
         9a:93:34:56:3b:71:c4:58:66:62:4f:8c:db:05:22:65:03:29:
         b3:c2:67:15:cc:f2:6e:77:d7:d5:05:c3:8c:14:4e:c9:b8:83:
         4a:b9:bf:0b:93:9d:dd:32:25:31:53:b0:ec:01:16:84:cf:b5:
         87:0b:55:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 26 10:33:04 2026 by rpki-client