Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f29a16-e7b1-40c8-87bc-34e2c5624862/dbba7ca1-e240-340f-a279-d7e188661046.roa
File:                     dbba7ca1-e240-340f-a279-d7e188661046.roa (raw, json)
Hash identifier:          UDXcoBgiBE0FVkSIY0WCzw4tBl/XrOEuK8y51ncCe7Q=
Subject key identifier:   F4:66:1E:0C:38:E9:FA:41:C7:F5:C9:56:1A:EE:62:3A:DD:2B:07:C7
Certificate issuer:       /CN=d9f29a16-e7b1-40c8-87bc-34e2c5624862
Certificate serial:       010D0C9F4328584CB121D03B053C5D7FF825C980
Authority key identifier: DB:FA:83:FE:6D:96:CD:CC:6C:DE:3A:15:B4:20:98:9D:63:D7:B6:33
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f29a16-e7b1-40c8-87bc-34e2c5624862.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f29a16-e7b1-40c8-87bc-34e2c5624862/dbba7ca1-e240-340f-a279-d7e188661046.roa
Signing time:             Fri 30 Jan 2026 02:00:31 +0000
ROA not before:           Fri 30 Jan 2026 02:00:31 +0000
ROA not after:            Thu 30 Apr 2026 01:00:31 +0000
asID:                     396982
IP address blocks:        2606:3dc0:8c0::/42 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f29a16-e7b1-40c8-87bc-34e2c5624862/d9f29a16-e7b1-40c8-87bc-34e2c5624862.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f29a16-e7b1-40c8-87bc-34e2c5624862/d9f29a16-e7b1-40c8-87bc-34e2c5624862.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f29a16-e7b1-40c8-87bc-34e2c5624862.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 24 Feb 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:b1:21:d0:3b:05:3c:5d:7f:f8:25:c9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f29a16-e7b1-40c8-87bc-34e2c5624862
        Validity
            Not Before: Jan 30 02:00:31 2026 GMT
            Not After : Apr 30 01:00:31 2026 GMT
        Subject: CN=f06c776f-0111-46fb-8b35-cb8c3d3d7fd4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:e9:e5:08:b2:2c:66:48:c6:48:95:e5:68:b2:
                    cd:f0:ff:75:b8:e6:e3:04:b0:d0:6f:aa:3f:61:92:
                    95:38:b1:e4:0c:a7:7e:c3:f9:59:25:1a:75:1e:e0:
                    c1:c2:01:7f:5f:02:04:e7:3a:14:7e:f8:ff:37:ca:
                    d2:01:dc:47:6a:9d:dd:84:a0:c3:9a:83:88:ea:11:
                    85:5d:e5:17:5b:77:86:ee:1b:20:3b:36:69:e3:81:
                    6b:19:2b:c8:dc:c1:6b:15:6d:68:b3:12:ce:2b:70:
                    79:e3:2a:6d:bb:41:e6:a7:9b:5b:65:4e:f2:ff:a2:
                    2a:a2:1b:c5:b2:c6:a3:df:82:fd:04:86:8f:7f:31:
                    d5:2e:46:c9:42:a8:3c:e3:41:59:6c:7a:9a:fd:5e:
                    95:19:65:80:e1:2f:99:ef:b3:49:d8:2c:05:ad:b3:
                    6a:83:5b:03:61:d3:e7:ad:5b:3f:9d:91:21:bc:20:
                    4c:48:eb:e1:a7:1c:64:0a:17:11:03:27:21:9a:bc:
                    cc:b0:46:e0:0f:14:2e:cd:ea:ff:df:3c:27:e8:11:
                    73:c2:18:98:d4:3b:49:ae:e7:88:fe:1d:1b:db:8c:
                    ee:d2:81:51:2b:ea:d9:6a:67:51:0c:ed:a4:f5:9f:
                    7c:4c:eb:ac:fa:8b:ba:11:f0:59:a5:9d:97:1a:8a:
                    52:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:66:1E:0C:38:E9:FA:41:C7:F5:C9:56:1A:EE:62:3A:DD:2B:07:C7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f29a16-e7b1-40c8-87bc-34e2c5624862/dbba7ca1-e240-340f-a279-d7e188661046.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f29a16-e7b1-40c8-87bc-34e2c5624862/d9f29a16-e7b1-40c8-87bc-34e2c5624862.crl

            X509v3 Authority Key Identifier:
                keyid:DB:FA:83:FE:6D:96:CD:CC:6C:DE:3A:15:B4:20:98:9D:63:D7:B6:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f29a16-e7b1-40c8-87bc-34e2c5624862.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3dc0:8c0::/42

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:07:93:b6:e7:38:94:ea:41:4e:1e:62:b3:30:05:52:23:fa:
         6b:1f:37:3e:64:17:d3:24:d1:65:2c:1b:cd:7a:9e:e5:70:d1:
         f1:06:a3:5b:68:12:69:9f:3a:a4:27:a2:18:23:0a:2b:59:94:
         fa:cb:f0:6b:98:f6:40:e8:9e:af:f2:ae:0a:6e:c4:77:65:0a:
         73:1d:d5:a7:1d:80:1e:19:2d:c3:fc:eb:36:d2:6c:3e:95:27:
         85:ee:13:57:b5:62:1a:b5:f5:f4:44:a1:80:c0:13:54:58:39:
         49:fd:c0:d3:d7:cf:01:ff:7b:8b:bc:34:7d:be:4d:ad:22:e8:
         75:07:6d:f2:8c:25:5f:3f:12:38:eb:f1:2b:df:11:28:02:ad:
         20:a8:98:ca:41:2c:c0:cc:4e:95:4e:b5:da:4a:72:82:43:5e:
         d6:c7:1c:a2:d6:2c:97:7d:6d:f3:7b:c4:f9:a3:63:ca:2c:be:
         2b:c3:76:07:f9:6f:61:16:fd:90:e6:26:15:a4:fa:e3:66:8b:
         65:69:3c:9a:c8:50:4b:5c:a2:8a:03:31:84:b7:45:7b:c7:d3:
         12:10:c0:78:a2:1f:d8:77:72:e3:5a:2e:93:64:89:9e:52:3a:
         c1:c3:25:76:f1:54:3e:89:2f:ae:b0:b8:49:66:1f:7d:fa:9d:
         71:bc:e1:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 22 22:02:00 2026 by rpki-client