Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8461abaf-8773-4e40-ad91-9135219be7a4/ab4ae19a-1bc3-3ce7-b813-35939fcb77e6.roa
File:                     ab4ae19a-1bc3-3ce7-b813-35939fcb77e6.roa (raw, json)
Hash identifier:          AIR5pGfc4bX2AqGgK9q85ZEL92dt+M+JzThpD7UyvgY=
Subject key identifier:   92:A3:4B:69:5B:71:89:B2:BA:00:53:B2:00:1B:BB:DA:B8:40:DA:96
Certificate issuer:       /CN=8461abaf-8773-4e40-ad91-9135219be7a4
Certificate serial:       010D0C9F4328584CBDB1FFDE4FE3D8B3F3BD92E0
Authority key identifier: 1A:BA:E0:13:0C:54:22:7E:8D:CE:29:E4:73:98:C4:65:1E:5D:DF:C8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8461abaf-8773-4e40-ad91-9135219be7a4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8461abaf-8773-4e40-ad91-9135219be7a4/ab4ae19a-1bc3-3ce7-b813-35939fcb77e6.roa
Signing time:             Tue 03 Feb 2026 14:00:39 +0000
ROA not before:           Tue 03 Feb 2026 14:00:39 +0000
ROA not after:            Mon 04 May 2026 13:00:39 +0000
asID:                     7324
IP address blocks:        2620:c::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8461abaf-8773-4e40-ad91-9135219be7a4/8461abaf-8773-4e40-ad91-9135219be7a4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8461abaf-8773-4e40-ad91-9135219be7a4/8461abaf-8773-4e40-ad91-9135219be7a4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8461abaf-8773-4e40-ad91-9135219be7a4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 19 Feb 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:bd:b1:ff:de:4f:e3:d8:b3:f3:bd:92:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8461abaf-8773-4e40-ad91-9135219be7a4
        Validity
            Not Before: Feb  3 14:00:39 2026 GMT
            Not After : May  4 13:00:39 2026 GMT
        Subject: CN=a66cbb72-92ad-4043-9e49-bd225a25c61c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:fa:c3:30:2e:8c:cd:24:1d:a3:cc:d5:3f:76:
                    8a:a8:56:72:85:72:e7:a5:a4:e3:2b:28:ee:b5:98:
                    ae:3d:1d:00:09:d4:18:e3:b5:fb:4c:00:fc:74:52:
                    41:1f:e4:1d:61:0e:eb:1c:8e:f7:90:33:ea:db:ef:
                    a0:17:a5:c0:3a:c4:05:0d:70:a2:f1:40:6a:66:e9:
                    96:c4:c1:98:ce:9b:0f:67:88:89:0b:e4:b2:5e:8a:
                    ba:03:f7:27:30:e5:dd:0d:6d:88:c7:86:31:08:8b:
                    d7:c8:86:d9:64:98:f2:51:80:94:ef:36:07:5f:df:
                    71:df:ba:40:a3:35:18:00:8d:5a:4f:f2:c2:f7:17:
                    9f:36:30:a6:43:c4:42:cd:bb:35:98:23:9a:2e:e6:
                    30:ab:2d:7e:df:31:68:95:59:5e:ed:d1:43:f2:5c:
                    63:68:a0:3e:91:18:2b:3d:43:11:c6:34:95:36:12:
                    92:db:ef:9d:40:db:a2:b3:ff:c0:b2:c6:30:11:b8:
                    4d:4c:f0:9d:17:2e:4f:0c:ae:fb:f5:2d:84:35:39:
                    86:c8:49:27:ce:b6:30:28:8e:1d:a1:02:68:18:8d:
                    97:ad:1d:c2:62:28:9c:92:37:4c:81:57:83:69:67:
                    b0:3f:e5:62:55:a6:e9:d4:f3:42:53:3e:38:ee:2d:
                    8e:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:A3:4B:69:5B:71:89:B2:BA:00:53:B2:00:1B:BB:DA:B8:40:DA:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8461abaf-8773-4e40-ad91-9135219be7a4/ab4ae19a-1bc3-3ce7-b813-35939fcb77e6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8461abaf-8773-4e40-ad91-9135219be7a4/8461abaf-8773-4e40-ad91-9135219be7a4.crl

            X509v3 Authority Key Identifier:
                keyid:1A:BA:E0:13:0C:54:22:7E:8D:CE:29:E4:73:98:C4:65:1E:5D:DF:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8461abaf-8773-4e40-ad91-9135219be7a4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:c::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:c0:a2:9f:a8:b4:74:9a:e0:13:32:79:7f:7b:8b:3a:c8:35:
         41:78:6a:b1:9a:55:b3:f6:c1:1e:0b:76:ac:aa:7b:72:4e:45:
         05:9f:a9:13:5e:a0:83:14:27:64:14:18:89:86:70:46:09:ce:
         7a:72:5e:ee:24:e4:78:54:0e:11:c0:83:09:05:3b:ee:29:d2:
         9a:23:43:7c:af:1c:24:e3:de:8f:32:ac:6b:72:33:1b:e0:dd:
         92:eb:ca:2b:9e:e4:6d:1e:65:c7:12:cb:27:1b:d9:38:c1:7e:
         b4:ea:cb:73:8b:79:e4:11:21:55:08:a4:86:0d:61:53:87:73:
         1e:48:4b:7d:86:75:cc:bb:d4:0d:13:2b:fc:0b:b4:c5:76:89:
         59:55:e7:f0:e9:62:6f:1e:11:61:e3:2e:da:66:2c:6e:8f:28:
         b5:b4:e4:a1:85:4a:24:b9:4a:de:4b:aa:d0:51:04:fd:8c:74:
         fe:8f:d0:c9:80:56:24:22:f0:80:73:ef:64:a3:c4:9b:bd:86:
         e6:c8:05:93:40:44:f0:94:95:f8:cc:b9:c3:23:91:1f:af:a9:
         bc:88:13:6b:60:17:4d:b9:4b:94:da:5d:26:52:ba:4a:ea:7f:
         99:c4:70:36:ae:fe:7c:7d:68:30:d2:78:4a:ff:2b:ab:f5:dd:
         16:8b:8a:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 18 04:08:10 2026 by rpki-client