Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2bd92006-9133-44da-89c6-5e9014a854c9/840cb531-cc21-3eb3-9286-cda6c5a55992.roa
File:                     840cb531-cc21-3eb3-9286-cda6c5a55992.roa (raw, json)
Hash identifier:          oorcYoFZUnBMQyWkuvoagBDmAXKeRAnd97BauqdOuy8=
Subject key identifier:   1D:DC:02:CB:08:73:02:96:94:49:96:39:F0:60:8C:6B:26:31:10:F8
Certificate issuer:       /CN=2bd92006-9133-44da-89c6-5e9014a854c9
Certificate serial:       010D0C9F4328584CBDB2021C66799F718A5700C0
Authority key identifier: DC:1F:BD:E8:05:8E:29:0E:F9:48:55:86:F7:1E:69:7A:0E:DE:7B:07
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2bd92006-9133-44da-89c6-5e9014a854c9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2bd92006-9133-44da-89c6-5e9014a854c9/840cb531-cc21-3eb3-9286-cda6c5a55992.roa
Signing time:             Tue 03 Feb 2026 14:00:39 +0000
ROA not before:           Tue 03 Feb 2026 14:00:39 +0000
ROA not after:            Mon 04 May 2026 13:00:39 +0000
asID:                     27489
IP address blocks:        160.79.127.0/24 maxlen: 24
                          2602:f966::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2bd92006-9133-44da-89c6-5e9014a854c9/2bd92006-9133-44da-89c6-5e9014a854c9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2bd92006-9133-44da-89c6-5e9014a854c9/2bd92006-9133-44da-89c6-5e9014a854c9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2bd92006-9133-44da-89c6-5e9014a854c9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 19 Feb 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:bd:b2:02:1c:66:79:9f:71:8a:57:00:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bd92006-9133-44da-89c6-5e9014a854c9
        Validity
            Not Before: Feb  3 14:00:39 2026 GMT
            Not After : May  4 13:00:39 2026 GMT
        Subject: CN=a4060886-617c-464e-9de4-34140a0a23f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:1a:93:9e:c2:2b:89:97:d3:ef:2f:8b:23:0b:
                    d7:73:8d:91:4d:29:ab:05:c6:5e:8b:56:5c:4e:8b:
                    b4:7a:79:9a:1c:71:1d:a9:81:34:91:9a:cd:4c:30:
                    27:3d:9f:04:9f:d2:77:2d:f8:90:38:8f:b2:b1:bf:
                    15:f0:aa:9b:81:0d:b7:9e:11:d2:ba:be:69:cc:97:
                    26:2e:ec:ba:a6:55:59:7b:73:ea:51:ed:30:ed:c3:
                    af:f3:04:0e:b7:33:fd:94:dc:75:a4:05:94:e6:66:
                    aa:20:1e:03:0d:67:f2:c8:a3:a4:fe:bf:76:90:6a:
                    23:42:7e:8f:b3:0d:02:bb:0d:e6:3f:61:08:15:c2:
                    5f:07:65:df:be:37:78:1d:a4:06:89:90:eb:94:8f:
                    ae:7d:4d:43:38:60:7f:d2:ad:52:20:02:c4:7f:0d:
                    3f:ad:49:00:ed:8b:44:92:e7:dd:da:ee:2d:3c:c4:
                    3d:7b:dc:3b:58:71:dc:e9:03:92:19:9c:3b:49:9d:
                    fe:4f:32:91:7f:7d:5b:cd:3b:1f:fe:b7:1f:2d:02:
                    56:c6:c8:3c:18:02:d1:3a:50:90:92:d2:7f:b7:83:
                    af:d8:a8:33:8a:98:0b:ce:bd:70:06:a7:3a:af:14:
                    3f:07:39:ff:58:b7:ee:29:cd:77:a7:2d:51:80:c5:
                    e5:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:DC:02:CB:08:73:02:96:94:49:96:39:F0:60:8C:6B:26:31:10:F8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2bd92006-9133-44da-89c6-5e9014a854c9/840cb531-cc21-3eb3-9286-cda6c5a55992.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2bd92006-9133-44da-89c6-5e9014a854c9/2bd92006-9133-44da-89c6-5e9014a854c9.crl

            X509v3 Authority Key Identifier:
                keyid:DC:1F:BD:E8:05:8E:29:0E:F9:48:55:86:F7:1E:69:7A:0E:DE:7B:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2bd92006-9133-44da-89c6-5e9014a854c9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.79.127.0/24
                IPv6:
                  2602:f966::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bb:02:ff:5a:c1:31:eb:15:b7:59:a0:d1:5d:b9:50:3b:3c:23:
         e6:72:92:11:eb:dc:3e:24:ac:24:3a:b2:73:f8:da:63:a4:2d:
         c2:16:9f:b8:a9:e1:01:c2:bc:63:a0:19:55:7c:28:f8:14:ac:
         f0:ee:40:5d:f6:7d:4d:a3:9e:47:3b:39:fa:e6:25:bb:32:eb:
         50:87:0c:5b:2e:60:6e:1c:7b:07:49:fd:b8:1c:11:d9:39:4b:
         3b:a5:d8:fb:c9:0a:38:4d:2f:0e:7e:10:61:44:ae:a7:ba:08:
         c3:a6:c7:2e:bb:2f:2d:3c:aa:af:4a:a1:fc:20:95:dc:a2:67:
         c9:3c:09:4d:4a:55:7f:9a:b1:87:9c:12:a5:b3:6a:9b:4b:43:
         0c:75:5b:01:bc:ad:55:a4:2f:34:86:f0:bf:12:a7:9d:ed:9f:
         24:48:5c:17:93:e5:2a:0a:29:5d:c6:b2:28:0b:54:d6:12:8d:
         9b:9e:3e:b9:d8:b2:86:5f:8c:54:13:b4:3a:63:06:9c:30:1d:
         c8:0a:27:4d:b7:e3:30:d4:99:42:0b:79:93:bd:da:d9:2c:88:
         9b:66:eb:c7:1e:f5:7d:6d:75:4b:bc:85:3e:eb:58:fc:dc:8a:
         41:8c:9f:bc:a3:d7:8a:95:92:0f:fc:c3:ae:ca:75:04:b5:c3:
         aa:a4:dd:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 18 04:10:12 2026 by rpki-client