Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dc4cc6c8-47aa-4b0e-b0b0-04400f7f99b0/6c012601-5967-36bb-8cf9-ef0310269f45.roa
File:                     6c012601-5967-36bb-8cf9-ef0310269f45.roa (raw, json)
Hash identifier:          iNrJucNlGSyi19lIGcKAD5VWpX+PkIGjZTMBzPvAEgA=
Subject key identifier:   D1:4A:CC:FE:04:89:40:21:E3:9A:57:B9:7C:D7:E9:BE:13:F5:94:96
Certificate issuer:       /CN=dc4cc6c8-47aa-4b0e-b0b0-04400f7f99b0
Certificate serial:       010D0C9F4328584CCBA74E763CF49919E250A900
Authority key identifier: 6C:55:D1:A4:32:7B:96:D3:67:EE:5C:4D:89:D6:D2:3C:9C:76:27:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dc4cc6c8-47aa-4b0e-b0b0-04400f7f99b0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dc4cc6c8-47aa-4b0e-b0b0-04400f7f99b0/6c012601-5967-36bb-8cf9-ef0310269f45.roa
Signing time:             Sun 08 Feb 2026 14:00:41 +0000
ROA not before:           Sun 08 Feb 2026 14:00:41 +0000
ROA not after:            Sat 09 May 2026 13:00:41 +0000
asID:                     2701
IP address blocks:        129.130.0.0/16 maxlen: 16
                          192.31.97.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dc4cc6c8-47aa-4b0e-b0b0-04400f7f99b0/dc4cc6c8-47aa-4b0e-b0b0-04400f7f99b0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dc4cc6c8-47aa-4b0e-b0b0-04400f7f99b0/dc4cc6c8-47aa-4b0e-b0b0-04400f7f99b0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dc4cc6c8-47aa-4b0e-b0b0-04400f7f99b0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 26 Feb 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:cb:a7:4e:76:3c:f4:99:19:e2:50:a9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc4cc6c8-47aa-4b0e-b0b0-04400f7f99b0
        Validity
            Not Before: Feb  8 14:00:41 2026 GMT
            Not After : May  9 13:00:41 2026 GMT
        Subject: CN=c8e08fcf-9a36-49bb-91a2-8f90d4619a78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:4f:df:cb:6d:93:ca:9c:c4:76:64:e0:7c:80:
                    e9:59:1c:3e:4e:0e:1f:99:4d:a9:88:61:33:cc:68:
                    64:88:fc:7e:e1:84:4c:6d:1d:0a:19:64:ff:d4:fc:
                    9d:d5:d5:a2:29:36:40:56:15:4f:bd:f8:c4:51:6a:
                    00:fb:95:e3:6b:92:7c:48:69:bb:65:5c:37:44:6c:
                    d6:25:56:ea:71:8b:72:dc:35:fe:1e:34:ee:61:89:
                    d3:2e:85:d3:59:b4:0c:77:43:f1:25:dc:17:07:bd:
                    e2:4f:bb:ff:85:03:3e:d5:e0:1c:dc:de:1d:12:cc:
                    34:48:f1:01:87:6f:92:5a:8f:99:de:71:d2:f3:9d:
                    d8:4d:33:1c:44:ef:f6:92:7f:10:2f:83:55:25:07:
                    e7:5b:dd:60:aa:e9:ac:59:7c:e8:6d:7a:8f:f0:c1:
                    e9:0a:bc:30:09:27:52:4d:90:fb:e7:05:20:d1:32:
                    01:26:3e:91:fa:96:6a:ed:e1:b3:70:bf:55:a1:8b:
                    92:29:67:35:14:1c:4a:b5:f9:5c:39:e8:e8:08:c2:
                    72:c9:60:01:6b:d0:70:cf:20:ec:25:69:fd:2e:b1:
                    9c:72:be:81:ad:ff:6c:d7:bb:ac:9d:c3:9f:ab:b5:
                    19:86:a8:ee:83:d1:5c:91:30:97:47:95:c2:e4:e1:
                    fc:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:4A:CC:FE:04:89:40:21:E3:9A:57:B9:7C:D7:E9:BE:13:F5:94:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dc4cc6c8-47aa-4b0e-b0b0-04400f7f99b0/6c012601-5967-36bb-8cf9-ef0310269f45.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dc4cc6c8-47aa-4b0e-b0b0-04400f7f99b0/dc4cc6c8-47aa-4b0e-b0b0-04400f7f99b0.crl

            X509v3 Authority Key Identifier:
                keyid:6C:55:D1:A4:32:7B:96:D3:67:EE:5C:4D:89:D6:D2:3C:9C:76:27:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dc4cc6c8-47aa-4b0e-b0b0-04400f7f99b0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  129.130.0.0/16
                  192.31.97.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:16:63:c4:67:36:13:7d:73:b4:0e:16:47:66:77:e7:11:d1:
         c1:1f:a6:e7:7b:d9:0f:e7:b7:f3:9d:3c:0b:a0:5e:5f:9c:81:
         eb:e6:7b:a7:25:08:46:b6:7a:c9:97:48:67:6d:db:de:99:9d:
         8c:91:b7:3a:d5:7f:c2:7e:75:ee:8a:64:99:88:96:fc:95:31:
         f1:98:f8:82:a6:b0:b7:12:5e:8e:3c:78:62:54:11:34:2b:6f:
         f4:1d:a8:c6:ce:79:e4:e7:43:20:3c:f8:12:a7:59:bd:81:ca:
         48:54:fb:a7:c8:69:78:b1:fe:3e:0e:a7:2f:ff:2c:f5:33:58:
         8c:f3:5a:19:89:06:c1:9d:fb:11:59:c6:e1:fb:56:f2:22:b0:
         50:96:c6:f1:77:88:29:a0:7a:33:b1:76:51:ea:c6:29:ab:78:
         fa:57:94:b9:04:7b:c8:7a:60:96:80:b8:05:3b:12:6f:b3:67:
         a4:8a:7b:ef:83:c5:05:de:38:c5:3e:90:13:18:d9:f5:6d:47:
         7d:ba:71:a9:ce:e5:df:57:eb:d3:91:4f:16:87:d8:f2:c0:b8:
         04:7c:d3:a3:b3:b9:0b:57:54:5e:26:80:bb:bc:ee:00:65:e1:
         d5:f2:2c:b3:a8:03:64:d5:d6:49:6e:6f:3c:4c:b3:e4:0f:a1:
         a8:2c:e9:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 18:42:12 2026 by rpki-client