Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/e4ad92f1-933f-3dd0-bce3-d90f6ce921df.roa
File:                     e4ad92f1-933f-3dd0-bce3-d90f6ce921df.roa (raw, json)
Hash identifier:          r+pFBiazVuhAaXv/FiU8KuTSYd3ImcLud3lNIMyJMmE=
Subject key identifier:   47:D4:90:01:A0:E4:FF:3F:76:83:FC:11:81:3E:D8:F9:79:51:F5:AB
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584C794C5B7E0ED19B42AA656000
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/e4ad92f1-933f-3dd0-bce3-d90f6ce921df.roa
Signing time:             Sat 10 Jan 2026 02:00:31 +0000
ROA not before:           Sat 10 Jan 2026 02:00:31 +0000
ROA not after:            Fri 10 Apr 2026 01:00:31 +0000
asID:                     26679
IP address blocks:        2001:470:5f::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 21 Feb 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:79:4c:5b:7e:0e:d1:9b:42:aa:65:60:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Jan 10 02:00:31 2026 GMT
            Not After : Apr 10 01:00:31 2026 GMT
        Subject: CN=75881702-76d7-46d9-b824-611cbb4b618b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:ae:5c:37:3c:0c:bb:50:8e:ff:3a:ef:05:1b:
                    7f:c4:be:c1:cf:b3:30:9e:2f:77:26:28:d8:63:a3:
                    06:d5:7d:c5:9f:e7:93:02:be:61:c5:46:a6:b9:a2:
                    a3:23:82:a9:87:39:8c:46:2e:05:51:9f:22:c7:24:
                    9c:df:e6:30:78:8e:4d:8b:d7:18:a3:43:58:d6:f3:
                    28:cc:4e:17:df:89:82:dc:4f:44:54:68:a3:65:6a:
                    c1:47:af:b8:95:88:18:4d:05:c3:89:29:4c:f0:88:
                    ff:47:1b:57:0a:39:96:e4:2b:aa:e4:30:3b:13:7b:
                    15:15:ac:25:f1:d6:61:11:47:b1:96:9e:23:0c:d6:
                    17:79:5c:1b:35:ec:36:43:c9:f5:34:8d:32:64:b8:
                    ba:ff:58:c3:88:65:b6:c4:70:d9:8b:05:a5:b9:5e:
                    8a:be:af:2e:55:17:d0:a1:84:8f:26:32:b1:9a:1e:
                    22:f5:b5:96:c8:55:25:15:59:e3:26:20:01:d1:85:
                    dd:f4:e2:16:f7:91:90:bb:7e:bd:7c:3f:02:02:04:
                    8d:00:f4:93:76:3e:97:c0:fd:a1:06:8e:15:1e:85:
                    73:5a:57:65:e2:f9:b1:cf:ea:b1:31:01:2f:5a:1f:
                    de:3f:6c:9f:8b:e8:11:f5:22:dd:e8:62:e2:62:d0:
                    ac:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:D4:90:01:A0:E4:FF:3F:76:83:FC:11:81:3E:D8:F9:79:51:F5:AB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/e4ad92f1-933f-3dd0-bce3-d90f6ce921df.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:5f::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:36:a7:af:33:77:19:2e:6c:ed:10:eb:65:c1:58:bc:a8:7b:
         6f:5e:8e:6b:13:54:0b:39:38:ad:2a:92:2c:77:03:f5:f2:d0:
         31:9c:59:71:fc:03:c9:b1:c0:c0:74:68:e7:aa:3b:1f:c7:60:
         6b:0a:a2:bf:bf:26:51:aa:ca:d5:a5:c0:76:9e:1a:ab:24:4c:
         f9:35:83:7c:0f:8f:2a:6d:ea:d0:fd:d5:6b:62:f7:7a:b3:3d:
         43:fe:3e:f8:79:61:8b:bc:9a:e3:74:e1:bc:ab:04:ce:6b:d5:
         b4:95:27:72:1f:26:9f:da:5c:45:f8:a5:93:fa:ac:42:c5:92:
         f6:ed:30:c2:1b:8b:6c:5f:52:9f:26:a0:45:5c:d2:8a:98:d3:
         a9:3d:9c:3a:4d:d9:88:a9:dc:d0:94:70:a6:c2:a9:2a:1b:fe:
         32:fa:71:67:a7:7a:99:92:df:37:0b:c4:c5:52:e3:03:d9:88:
         10:1d:e0:9b:6b:7e:2f:9d:62:33:dc:ad:bc:89:7e:ef:a1:c0:
         c3:f1:3d:45:4e:29:16:07:de:77:11:29:11:66:54:15:2f:21:
         ca:b4:7d:4a:b0:41:f3:93:26:79:13:18:3f:e9:61:39:cb:10:
         c1:c4:3f:57:46:ad:b6:d1:22:20:d2:34:7c:ed:61:66:87:4b:
         4b:6c:02:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 17:56:11 2026 by rpki-client