Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a21bd716-bd35-3e68-a169-5c3f107b52e9.roa
File:                     a21bd716-bd35-3e68-a169-5c3f107b52e9.roa (raw, json)
Hash identifier:          MA5ZQ3EA75FZrK7+RUJk3l3spI1wSWNKPrAP5oBvjMo=
Subject key identifier:   FA:52:DB:55:AF:8C:18:30:39:6A:F7:53:29:C5:41:32:EA:88:50:8A
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584CAFBC857439458BFED2C92780
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a21bd716-bd35-3e68-a169-5c3f107b52e9.roa
Signing time:             Thu 29 Jan 2026 14:00:40 +0000
ROA not before:           Thu 29 Jan 2026 14:00:40 +0000
ROA not after:            Wed 29 Apr 2026 13:00:40 +0000
asID:                     49984
IP address blocks:        2001:470:4bd::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 21 Feb 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:af:bc:85:74:39:45:8b:fe:d2:c9:27:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Jan 29 14:00:40 2026 GMT
            Not After : Apr 29 13:00:40 2026 GMT
        Subject: CN=49196103-a274-49a1-881c-cc6024a61247
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:23:8c:c6:7e:d9:71:0b:d8:56:bb:c8:ac:9e:
                    04:8d:6b:33:35:24:99:e6:12:8b:a9:b0:7f:7d:b3:
                    a0:ca:ab:46:34:09:a8:70:1e:d1:cf:81:e7:fc:d0:
                    d4:f4:6a:c6:a8:10:c2:59:87:fe:ea:89:1b:81:07:
                    36:0f:70:ba:13:30:69:7c:5c:fa:61:90:28:43:a3:
                    e8:6d:dc:39:a7:38:29:d1:6f:86:67:4e:86:10:b3:
                    07:9d:94:e3:a6:9d:d7:06:e0:ec:82:19:9e:d6:01:
                    8d:99:9a:98:b1:de:96:1b:6d:30:0a:52:02:24:e0:
                    02:07:ec:64:64:70:2e:04:71:67:34:fa:ce:dd:12:
                    72:67:61:6b:db:bd:cd:de:20:98:1d:e5:4d:67:d0:
                    02:e1:e1:08:56:bd:e5:7c:98:e6:22:49:bf:c6:2e:
                    cf:df:5b:2c:96:76:7f:7d:21:54:54:20:dd:05:dc:
                    82:40:a1:90:3f:50:f4:f8:af:d7:dc:24:7b:71:95:
                    13:ad:88:b2:3f:40:72:b9:b4:67:0c:30:b4:d2:32:
                    69:57:92:c3:0e:b6:a1:2b:ad:f7:39:21:c6:a0:13:
                    04:33:85:65:bd:06:1b:08:22:74:97:c9:e7:06:62:
                    3b:98:71:62:36:df:45:bb:dd:d3:de:ea:83:9e:ea:
                    77:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:52:DB:55:AF:8C:18:30:39:6A:F7:53:29:C5:41:32:EA:88:50:8A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a21bd716-bd35-3e68-a169-5c3f107b52e9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:4bd::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:1c:0e:c7:ac:53:92:2a:a4:79:99:99:40:1e:a2:cb:3f:57:
         8b:b3:17:06:d1:26:24:ba:55:8e:ff:51:1e:6c:ab:c4:f4:08:
         5f:ad:08:52:4f:d6:7b:10:10:1b:d7:6b:1f:0b:9d:94:1f:43:
         d2:57:00:70:3b:39:00:1f:ee:b7:ce:7c:b6:ef:cb:93:7c:83:
         35:7f:cb:42:e8:dc:dc:55:76:01:6d:68:41:a9:9a:50:ed:37:
         31:f6:6d:e4:6c:d1:01:5b:0d:5a:04:a8:50:e6:64:ce:00:36:
         43:9b:7b:fe:bf:cd:3d:67:78:2d:04:19:f9:a0:74:3b:4a:51:
         e0:5e:7b:1b:61:0e:fb:12:70:dd:95:65:b4:97:ee:10:2c:9c:
         39:bb:68:02:cc:e3:cb:8c:05:b9:5f:d6:dd:c7:fa:87:4f:10:
         0f:70:6e:56:f1:5e:73:d5:1c:71:f5:30:37:3b:f9:0e:a3:94:
         28:37:31:8a:f9:e4:34:62:a8:4c:2f:0d:a6:51:a5:9a:a9:71:
         cf:8a:28:c2:78:24:cb:b7:c5:52:02:1f:03:76:4c:79:c5:dd:
         c3:b6:f8:78:bb:df:3b:6d:71:e2:26:1f:21:17:fd:53:53:f0:
         e8:09:05:3f:f6:28:86:b8:74:e1:4d:4a:32:8c:ce:dd:f7:0c:
         44:3f:eb:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 17:57:42 2026 by rpki-client