Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2ff061ee-e6cf-447c-8c04-b4a8b1f7e404/eac6c9b9-2407-3738-897c-e5e1ee7f9dd6.roa
File:                     eac6c9b9-2407-3738-897c-e5e1ee7f9dd6.roa (raw, json)
Hash identifier:          VPOapGGejazG/fskYUgNoo2NErjfsgGf5bVTCQfGbtw=
Subject key identifier:   39:52:00:9F:3D:F9:04:B9:E0:3F:E9:B2:9C:AF:B0:BB:C7:5A:B3:37
Certificate issuer:       /CN=2ff061ee-e6cf-447c-8c04-b4a8b1f7e404
Certificate serial:       010D0C9F4328584C7631219DB0D1ABA68F3C4B40
Authority key identifier: 7C:D0:FD:8A:78:11:6A:24:5F:B5:B7:33:D4:92:60:13:FA:58:F9:48
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2ff061ee-e6cf-447c-8c04-b4a8b1f7e404.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2ff061ee-e6cf-447c-8c04-b4a8b1f7e404/eac6c9b9-2407-3738-897c-e5e1ee7f9dd6.roa
Signing time:             Thu 08 Jan 2026 23:19:01 +0000
ROA not before:           Thu 08 Jan 2026 23:19:01 +0000
ROA not after:            Wed 08 Apr 2026 22:19:01 +0000
asID:                     6428
IP address blocks:        2606:9200::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2ff061ee-e6cf-447c-8c04-b4a8b1f7e404/2ff061ee-e6cf-447c-8c04-b4a8b1f7e404.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2ff061ee-e6cf-447c-8c04-b4a8b1f7e404/2ff061ee-e6cf-447c-8c04-b4a8b1f7e404.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2ff061ee-e6cf-447c-8c04-b4a8b1f7e404.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 19 Feb 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:76:31:21:9d:b0:d1:ab:a6:8f:3c:4b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ff061ee-e6cf-447c-8c04-b4a8b1f7e404
        Validity
            Not Before: Jan  8 23:19:01 2026 GMT
            Not After : Apr  8 22:19:01 2026 GMT
        Subject: CN=abdd9761-689a-4b96-b2bf-3e13f56887fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:30:5c:61:3d:3d:c6:f5:f5:11:5c:73:83:cc:
                    4b:f0:37:ca:1a:ca:1f:b5:ac:48:54:d5:73:fd:bb:
                    81:3e:67:b0:d0:07:06:bd:c3:a8:20:4e:0a:b9:79:
                    32:ae:c2:dd:53:8d:8a:7d:d6:c9:16:6b:cb:4a:f2:
                    d0:d1:57:40:21:7c:24:28:63:1b:56:bb:0d:e8:ab:
                    09:f6:c6:40:58:02:83:85:a4:64:cd:19:7d:a0:08:
                    12:77:93:9d:02:15:da:db:64:e3:a8:99:33:68:f7:
                    88:dc:cf:c2:34:6b:94:a7:e3:7f:d1:d5:68:25:ec:
                    48:a4:72:14:ca:68:93:42:c0:d6:1f:ed:b5:0a:74:
                    cf:66:cc:00:df:d7:07:40:72:5f:b2:c1:84:bf:31:
                    79:3f:6d:ed:db:e9:be:04:02:39:55:1d:09:a4:b8:
                    e0:f3:08:f2:e8:74:b5:b4:16:7c:36:91:03:f6:85:
                    3c:cc:5e:74:e2:2e:d2:ed:c2:99:10:94:6a:e0:0c:
                    e4:91:10:f2:b0:32:4b:f0:dc:7e:81:4e:a7:fd:c8:
                    77:ad:08:6a:f5:9b:9a:57:7f:3d:10:89:e8:7e:79:
                    b7:17:6f:ef:a5:41:aa:2b:de:9e:7c:0d:65:0b:d8:
                    be:7c:e2:d9:25:d8:46:29:c2:e7:91:33:d0:7c:0a:
                    bd:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:52:00:9F:3D:F9:04:B9:E0:3F:E9:B2:9C:AF:B0:BB:C7:5A:B3:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2ff061ee-e6cf-447c-8c04-b4a8b1f7e404/eac6c9b9-2407-3738-897c-e5e1ee7f9dd6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2ff061ee-e6cf-447c-8c04-b4a8b1f7e404/2ff061ee-e6cf-447c-8c04-b4a8b1f7e404.crl

            X509v3 Authority Key Identifier:
                keyid:7C:D0:FD:8A:78:11:6A:24:5F:B5:B7:33:D4:92:60:13:FA:58:F9:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2ff061ee-e6cf-447c-8c04-b4a8b1f7e404.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:9200::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:35:c9:c9:31:c9:66:9f:bd:35:82:9a:d6:a3:0d:d6:20:11:
         b3:10:9d:7b:02:db:a4:bc:5d:af:f0:83:39:ca:af:1f:9f:31:
         58:28:02:f5:0f:bb:8e:f2:b8:09:52:c1:05:2c:b3:5e:74:70:
         6c:db:34:02:9c:76:b3:a6:93:76:ca:93:ae:0e:3b:91:b9:96:
         a0:fc:bd:0a:fa:b3:26:ab:94:69:5e:dd:30:99:a9:42:a4:e6:
         a5:e6:e2:8c:87:7a:04:1d:0f:04:68:cd:06:28:5a:26:77:99:
         84:dd:85:92:69:03:46:dd:f4:92:bf:06:b5:e5:f2:12:05:e1:
         1c:28:18:8a:26:0b:53:a1:82:54:99:3c:68:10:40:49:17:2e:
         86:0c:20:31:e6:f2:da:ee:76:f8:cf:84:d8:4b:dc:ff:6f:52:
         3e:94:68:e3:7f:f5:d6:b3:25:2f:b3:21:bd:fa:da:b7:92:0f:
         15:24:a3:d7:0a:c3:39:4d:41:45:32:9f:4b:0d:45:0a:50:13:
         20:78:78:c1:2d:df:84:59:f5:0e:e8:14:d1:ea:72:61:7e:ff:
         f7:2b:b9:84:8a:18:f7:ee:6d:51:22:f9:d4:80:d3:a1:68:41:
         2d:c0:82:9b:f9:66:60:f6:79:22:bc:00:0c:bd:73:4f:02:dc:
         70:4c:26:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 18 04:05:47 2026 by rpki-client