Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5553566f-cbda-48fe-ba4a-9ce4cb36a6c5/ca5f6813-066e-3e44-86a2-84ddf46b4431.roa
File:                     ca5f6813-066e-3e44-86a2-84ddf46b4431.roa (raw, json)
Hash identifier:          nVP/1CtIk1TbmC0M7PvLLDGrcljjlCvLMMKsFl7BJAw=
Subject key identifier:   31:B3:BB:F4:AA:E3:30:E3:3C:BF:37:8F:9C:09:92:69:F7:78:6D:E3
Certificate issuer:       /CN=5553566f-cbda-48fe-ba4a-9ce4cb36a6c5
Certificate serial:       010D0C9F4328584CB28729D2DFCEE4090B2C7400
Authority key identifier: 72:9E:02:D1:42:AA:4B:6A:97:7E:8C:D8:BB:26:FE:0F:5F:41:94:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5553566f-cbda-48fe-ba4a-9ce4cb36a6c5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5553566f-cbda-48fe-ba4a-9ce4cb36a6c5/ca5f6813-066e-3e44-86a2-84ddf46b4431.roa
Signing time:             Fri 30 Jan 2026 14:00:40 +0000
ROA not before:           Fri 30 Jan 2026 14:00:40 +0000
ROA not after:            Thu 30 Apr 2026 13:00:40 +0000
asID:                     6649
IP address blocks:        2606:5240:2445::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5553566f-cbda-48fe-ba4a-9ce4cb36a6c5/5553566f-cbda-48fe-ba4a-9ce4cb36a6c5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5553566f-cbda-48fe-ba4a-9ce4cb36a6c5/5553566f-cbda-48fe-ba4a-9ce4cb36a6c5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5553566f-cbda-48fe-ba4a-9ce4cb36a6c5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Feb 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:b2:87:29:d2:df:ce:e4:09:0b:2c:74:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5553566f-cbda-48fe-ba4a-9ce4cb36a6c5
        Validity
            Not Before: Jan 30 14:00:40 2026 GMT
            Not After : Apr 30 13:00:40 2026 GMT
        Subject: CN=ceef73d1-3cab-4532-95c8-de548570bf15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:36:c6:d4:2e:ad:70:00:37:07:59:6d:cf:37:
                    57:d2:6c:ef:ed:cb:4d:e8:c7:a5:a5:cc:ab:35:3f:
                    15:91:65:79:9a:17:57:34:26:aa:96:83:99:c6:3d:
                    02:7d:fe:b6:41:f6:94:85:96:8d:93:43:bc:d1:dc:
                    11:29:4b:71:aa:62:26:6b:5a:dc:93:51:67:9f:d4:
                    ca:d2:4a:b4:ea:f8:12:50:de:82:c3:5f:90:a4:27:
                    48:42:52:c9:37:08:71:62:37:ee:67:38:c0:e1:13:
                    28:b0:d1:1e:de:50:33:08:28:ba:b7:4a:a8:7a:41:
                    a5:fc:ff:4e:28:1d:b8:c9:c8:3f:1c:d1:ba:8b:aa:
                    49:df:a4:fe:10:74:a5:f1:de:00:df:af:b2:22:cf:
                    03:88:75:f7:3a:ff:bd:5c:2f:98:8f:bd:cb:ab:46:
                    41:7d:cb:05:b5:3f:2b:9b:24:54:7a:43:de:6b:e3:
                    62:73:8f:56:e4:04:b1:00:9e:c8:17:34:e7:99:04:
                    a7:91:64:cb:0f:19:2c:0e:ce:89:f2:07:45:d5:cf:
                    96:ed:cb:74:60:5d:7d:f5:a6:8e:7c:ed:dd:01:41:
                    00:19:68:89:72:e6:b0:fa:09:48:b7:9d:bc:d3:61:
                    56:0c:95:7d:aa:f1:bc:00:82:34:57:96:3f:2d:96:
                    60:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:B3:BB:F4:AA:E3:30:E3:3C:BF:37:8F:9C:09:92:69:F7:78:6D:E3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5553566f-cbda-48fe-ba4a-9ce4cb36a6c5/ca5f6813-066e-3e44-86a2-84ddf46b4431.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5553566f-cbda-48fe-ba4a-9ce4cb36a6c5/5553566f-cbda-48fe-ba4a-9ce4cb36a6c5.crl

            X509v3 Authority Key Identifier:
                keyid:72:9E:02:D1:42:AA:4B:6A:97:7E:8C:D8:BB:26:FE:0F:5F:41:94:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5553566f-cbda-48fe-ba4a-9ce4cb36a6c5.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:5240:2445::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:5c:cf:74:c4:78:bd:e6:4c:47:ce:8c:55:38:4e:f5:30:92:
         da:c5:86:e3:40:e5:95:42:f6:0f:bf:9a:b3:c2:84:d6:2a:8c:
         95:25:01:bf:87:54:ce:78:cb:96:55:f7:7b:b1:62:04:27:54:
         b2:c9:39:7f:44:d6:1e:60:75:ce:a7:2b:0d:92:44:de:5f:94:
         98:a0:fd:c1:44:24:25:38:7d:8d:f3:63:8f:06:de:6c:1f:bf:
         a8:ea:d7:24:be:e8:3c:b4:11:e0:65:50:22:3c:a2:e5:32:cd:
         2f:94:78:51:40:14:28:22:aa:84:d4:6d:d6:8d:ab:5d:df:53:
         f6:15:da:13:ed:00:58:a3:f0:b8:3f:a2:ab:14:9f:c3:36:6e:
         d5:fd:dc:df:97:cc:8f:c2:07:9d:0b:67:92:14:39:0b:22:30:
         92:3d:09:30:2c:25:03:ac:5f:ae:52:bf:15:14:1d:0a:3f:0d:
         07:9f:09:7e:ea:56:d0:a0:30:40:ca:87:76:f6:3c:26:96:51:
         5f:47:fd:1c:a0:72:fe:20:9e:7a:93:5e:af:35:18:75:11:5f:
         c4:de:d5:fb:66:dd:e6:58:63:dd:f2:1c:8d:1f:02:fc:7d:72:
         b2:c2:33:52:7f:4c:72:24:89:22:53:2c:79:5f:ea:9c:f2:82:
         c9:b5:d1:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 27 07:33:05 2026 by rpki-client