Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8b01f829-1ce6-47d5-af2d-f61a257f023f/bd6b9ef4-4d13-3bfd-b0fd-212d7fc9a44b.roa
File:                     bd6b9ef4-4d13-3bfd-b0fd-212d7fc9a44b.roa (raw, json)
Hash identifier:          B8oqRutbs+zJHBJbkRgvlcpORz77TsblW8I6h6ckeu4=
Subject key identifier:   FF:8B:8B:D9:96:17:BE:8C:E5:74:5D:08:16:3F:11:E4:15:E3:7B:41
Certificate issuer:       /CN=8b01f829-1ce6-47d5-af2d-f61a257f023f
Certificate serial:       010D0C9F4328584CC611F117B55A62D517B77480
Authority key identifier: 37:A5:20:1E:1E:FE:C4:2F:B6:6D:D4:EA:E3:16:F7:30:FE:EF:91:0E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8b01f829-1ce6-47d5-af2d-f61a257f023f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8b01f829-1ce6-47d5-af2d-f61a257f023f/bd6b9ef4-4d13-3bfd-b0fd-212d7fc9a44b.roa
Signing time:             Fri 06 Feb 2026 14:00:40 +0000
ROA not before:           Fri 06 Feb 2026 14:00:40 +0000
ROA not after:            Thu 07 May 2026 13:00:40 +0000
asID:                     14478
IP address blocks:        2602:fb65:1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8b01f829-1ce6-47d5-af2d-f61a257f023f/8b01f829-1ce6-47d5-af2d-f61a257f023f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8b01f829-1ce6-47d5-af2d-f61a257f023f/8b01f829-1ce6-47d5-af2d-f61a257f023f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8b01f829-1ce6-47d5-af2d-f61a257f023f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 26 Feb 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:c6:11:f1:17:b5:5a:62:d5:17:b7:74:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b01f829-1ce6-47d5-af2d-f61a257f023f
        Validity
            Not Before: Feb  6 14:00:40 2026 GMT
            Not After : May  7 13:00:40 2026 GMT
        Subject: CN=6dbcd1d5-4288-4ec2-8952-caae05950adc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:78:46:46:b2:eb:1c:4b:3a:04:ec:b7:ea:4b:
                    f5:bf:1c:ca:e0:98:ce:be:77:18:bd:0d:51:54:b5:
                    bd:4e:63:ca:88:8d:d0:58:17:6b:15:cb:09:e9:13:
                    d2:78:f1:31:7c:7f:5b:46:b2:11:73:20:a7:ad:44:
                    0a:43:78:02:a6:4e:2c:8c:63:06:16:d1:e3:55:8b:
                    a2:36:12:5e:10:36:7d:e4:5e:c1:63:83:ff:09:48:
                    ba:8d:5e:00:56:e5:e8:3f:42:66:09:74:3b:0a:85:
                    9d:4e:4d:85:06:f5:77:e9:03:04:4d:a3:26:ab:12:
                    5d:30:1a:fb:07:4a:ea:4a:fa:00:9b:81:70:7a:4b:
                    a7:81:98:dd:db:06:d0:67:8e:f5:e4:12:9d:95:40:
                    6f:df:54:90:8d:76:4c:5d:3c:bb:3b:45:44:7d:5f:
                    d5:8d:b3:6a:0d:49:0d:dd:de:ee:99:7a:42:17:f8:
                    ff:ed:65:b1:7f:48:64:3d:09:18:a1:1b:33:03:39:
                    f4:d3:2e:bb:30:74:2d:d7:03:59:21:35:f1:41:36:
                    26:e2:9c:69:d7:dc:92:6d:7b:02:d9:72:5f:87:6d:
                    cd:a0:a6:a7:d8:3b:d4:cc:05:ee:ad:bc:de:bd:0a:
                    bf:33:b9:65:79:90:8f:02:7d:bd:e6:81:56:3f:16:
                    98:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:8B:8B:D9:96:17:BE:8C:E5:74:5D:08:16:3F:11:E4:15:E3:7B:41
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8b01f829-1ce6-47d5-af2d-f61a257f023f/bd6b9ef4-4d13-3bfd-b0fd-212d7fc9a44b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8b01f829-1ce6-47d5-af2d-f61a257f023f/8b01f829-1ce6-47d5-af2d-f61a257f023f.crl

            X509v3 Authority Key Identifier:
                keyid:37:A5:20:1E:1E:FE:C4:2F:B6:6D:D4:EA:E3:16:F7:30:FE:EF:91:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8b01f829-1ce6-47d5-af2d-f61a257f023f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fb65:1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:6d:02:30:1c:49:81:58:45:c3:04:f6:a1:ea:c8:b5:8f:5e:
         d4:34:ba:da:86:32:3f:f9:15:fa:2d:f6:9a:92:59:7f:54:26:
         26:0d:74:6f:40:ac:e3:1d:ab:59:78:83:fb:8f:1c:3b:c3:2a:
         60:2b:ce:16:b6:df:d8:fc:11:33:1c:4f:77:19:1e:99:a7:35:
         82:85:6c:f1:be:8a:0d:23:ea:f1:b5:77:56:cc:71:63:1b:bc:
         1b:f4:62:ea:91:21:d9:72:ba:33:01:ef:3e:d8:e1:21:8b:95:
         87:8f:7c:ab:de:72:e7:96:1b:66:68:72:66:aa:7d:18:3b:38:
         9a:6a:c9:20:db:66:ba:e0:5a:e4:23:e1:b6:a4:65:ad:aa:56:
         f9:af:25:09:c4:06:8d:e7:9c:67:97:04:3c:0d:ab:38:ee:64:
         85:3c:5d:e2:ae:9d:d9:e0:ff:a9:5f:ff:81:7e:15:d1:34:23:
         c5:14:13:fc:df:60:c6:eb:05:cf:b6:4f:21:71:ff:a2:af:ee:
         00:1b:48:01:57:47:e6:98:33:3c:27:4b:11:61:c8:f8:ba:f1:
         74:a1:d9:4d:98:96:e0:5a:36:84:12:b3:2c:a6:68:13:75:b9:
         e6:34:f9:40:c3:93:c4:c8:f1:15:62:4d:fc:ed:6f:46:a2:48:
         77:8b:bf:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 18:43:37 2026 by rpki-client