Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1bd95bb6-f8e6-4d66-8d7b-d5a342b3587f/3d8645fc-35c8-35da-ac88-7a4e41c4bf61.roa
File:                     3d8645fc-35c8-35da-ac88-7a4e41c4bf61.roa (raw, json)
Hash identifier:          bVq9C/xoYe3uVcik15DDaoOZTOWr+OLKTOnlyV1SJho=
Subject key identifier:   80:E8:0B:23:25:55:3A:6E:6C:1A:18:F8:C9:5C:C5:8C:F8:09:72:EB
Certificate issuer:       /CN=1bd95bb6-f8e6-4d66-8d7b-d5a342b3587f
Certificate serial:       010D0C9F4328584C6B56ABC0B6C261ACC6C94F80
Authority key identifier: B7:57:F9:6B:5B:30:14:07:9A:7E:C9:8B:1D:DE:34:96:DD:EE:A8:50
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1bd95bb6-f8e6-4d66-8d7b-d5a342b3587f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1bd95bb6-f8e6-4d66-8d7b-d5a342b3587f/3d8645fc-35c8-35da-ac88-7a4e41c4bf61.roa
Signing time:             Mon 05 Jan 2026 02:00:31 +0000
ROA not before:           Mon 05 Jan 2026 02:00:31 +0000
ROA not after:            Sun 05 Apr 2026 01:00:31 +0000
asID:                     19518
IP address blocks:        2605:1500::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1bd95bb6-f8e6-4d66-8d7b-d5a342b3587f/1bd95bb6-f8e6-4d66-8d7b-d5a342b3587f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1bd95bb6-f8e6-4d66-8d7b-d5a342b3587f/1bd95bb6-f8e6-4d66-8d7b-d5a342b3587f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1bd95bb6-f8e6-4d66-8d7b-d5a342b3587f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 22 Feb 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:6b:56:ab:c0:b6:c2:61:ac:c6:c9:4f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1bd95bb6-f8e6-4d66-8d7b-d5a342b3587f
        Validity
            Not Before: Jan  5 02:00:31 2026 GMT
            Not After : Apr  5 01:00:31 2026 GMT
        Subject: CN=2a6e72ba-876f-4700-a2c1-c916b31a3b27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:24:b3:4c:3a:19:b2:b3:86:fd:c6:63:59:3d:
                    6a:96:1a:e2:6a:6e:f6:64:be:59:fa:60:1f:77:ab:
                    fe:cc:17:51:b9:66:d7:5b:85:d0:c6:47:3f:3c:f9:
                    d8:a7:33:d3:da:33:c0:17:37:3e:06:27:1f:34:ce:
                    9c:d1:88:95:4b:b3:f7:f2:6f:e7:22:14:c4:9f:3e:
                    e3:32:d3:5c:1e:ff:dc:fe:9e:b0:d6:22:f1:dd:28:
                    49:33:6e:46:b8:e6:e0:4e:8d:9c:60:a6:7c:9d:2f:
                    a0:d2:5e:fa:5c:56:a8:50:cc:0a:e8:0c:8f:cc:43:
                    5f:d8:eb:ef:f9:5e:a2:15:68:b1:a6:2c:e0:c6:2a:
                    eb:81:92:de:6e:f5:94:02:f0:21:d6:af:d8:0f:70:
                    67:be:3d:74:68:11:7f:7f:0a:94:06:a8:29:85:09:
                    12:de:8d:2e:80:af:ef:c3:b3:68:bf:68:b1:be:5a:
                    1b:db:49:23:42:64:e3:0b:4c:e0:79:92:15:6c:c3:
                    d3:67:ac:16:54:05:f3:6d:9b:73:59:17:b4:b4:51:
                    a3:3e:e3:84:ed:8d:c2:1a:1c:80:0f:ad:a8:27:cf:
                    1c:2b:93:a8:17:29:9d:58:6a:6e:56:37:85:85:dc:
                    d9:50:6a:2f:b6:95:58:5d:11:54:54:a7:fa:7c:9a:
                    fb:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:E8:0B:23:25:55:3A:6E:6C:1A:18:F8:C9:5C:C5:8C:F8:09:72:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1bd95bb6-f8e6-4d66-8d7b-d5a342b3587f/3d8645fc-35c8-35da-ac88-7a4e41c4bf61.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1bd95bb6-f8e6-4d66-8d7b-d5a342b3587f/1bd95bb6-f8e6-4d66-8d7b-d5a342b3587f.crl

            X509v3 Authority Key Identifier:
                keyid:B7:57:F9:6B:5B:30:14:07:9A:7E:C9:8B:1D:DE:34:96:DD:EE:A8:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1bd95bb6-f8e6-4d66-8d7b-d5a342b3587f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:1500::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:1e:4b:1b:30:c5:5d:d6:20:91:5f:83:c5:d6:11:01:fd:0e:
         11:d3:6e:46:69:e8:ce:3a:4d:05:5b:f1:50:44:bc:1c:35:53:
         90:99:1f:4e:27:1b:34:b9:11:a8:04:31:48:eb:92:6e:b4:2d:
         95:f0:e8:bf:f7:43:0b:a0:e0:2c:4b:f8:ec:07:f6:3a:96:c4:
         96:d4:68:ab:7c:10:0d:d3:2d:7b:dc:92:24:b9:1f:e2:41:26:
         b6:07:1d:e9:9d:13:33:89:b2:67:ad:d6:f6:de:2b:eb:de:af:
         6a:2c:7f:70:b1:e2:54:25:89:32:5d:8a:18:ee:81:2b:66:d8:
         dd:70:f9:5f:ce:b6:8c:dc:e7:bf:92:a9:d4:a7:f3:64:6f:c2:
         a7:c1:00:61:a5:05:4e:10:08:28:af:27:96:25:c0:40:8d:ef:
         4f:ce:98:cc:8c:4f:43:4a:0e:a8:22:b0:a0:87:c2:0e:e4:25:
         6d:51:55:f6:9f:08:b6:44:2b:34:b3:50:aa:9b:c1:55:03:6d:
         3e:ef:0a:07:d3:7b:04:53:da:69:18:86:f1:82:7c:d7:2a:58:
         01:71:e9:1b:1a:b7:30:00:20:6b:47:c6:40:f6:ac:9f:31:63:
         53:34:e4:99:31:0e:d7:6f:24:26:88:5a:d0:93:ea:d0:dc:8f:
         c0:df:64:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 21 03:42:33 2026 by rpki-client