Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8eef875a-c9a4-45e0-9b80-3ea10becad9f/354b6b4b-fe0d-3804-a420-3adce649b26a.roa
File:                     354b6b4b-fe0d-3804-a420-3adce649b26a.roa (raw, json)
Hash identifier:          SxMEWWzVSTqTGWIwtH8F5qzLhYoDLtFflYJxcpfxoSc=
Subject key identifier:   50:15:9B:48:4F:A1:AD:99:48:BD:E2:CD:62:4B:17:7A:38:3C:CC:E4
Certificate issuer:       /CN=8eef875a-c9a4-45e0-9b80-3ea10becad9f
Certificate serial:       010D0C9F4328584CA32C7314B88BA7E3B0803080
Authority key identifier: DA:17:75:BB:11:3E:F2:6B:F0:F9:5E:6E:89:5C:C3:0E:E0:A8:CA:72
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8eef875a-c9a4-45e0-9b80-3ea10becad9f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8eef875a-c9a4-45e0-9b80-3ea10becad9f/354b6b4b-fe0d-3804-a420-3adce649b26a.roa
Signing time:             Sun 25 Jan 2026 02:00:31 +0000
ROA not before:           Sun 25 Jan 2026 02:00:31 +0000
ROA not after:            Sat 25 Apr 2026 01:00:31 +0000
asID:                     20259
IP address blocks:        2604:440::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8eef875a-c9a4-45e0-9b80-3ea10becad9f/8eef875a-c9a4-45e0-9b80-3ea10becad9f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8eef875a-c9a4-45e0-9b80-3ea10becad9f/8eef875a-c9a4-45e0-9b80-3ea10becad9f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8eef875a-c9a4-45e0-9b80-3ea10becad9f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 19 Feb 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:a3:2c:73:14:b8:8b:a7:e3:b0:80:30:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8eef875a-c9a4-45e0-9b80-3ea10becad9f
        Validity
            Not Before: Jan 25 02:00:31 2026 GMT
            Not After : Apr 25 01:00:31 2026 GMT
        Subject: CN=2084aa94-e06f-436f-b5e9-b8271c4bd4c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:e0:02:2c:53:1f:c9:15:74:81:af:f1:1d:ed:
                    6d:82:3b:5e:b1:c3:41:7b:0f:11:7d:22:be:98:18:
                    a9:4f:44:c9:c1:8c:f2:cf:05:5c:99:b0:d3:21:a7:
                    e6:67:f4:88:c0:9d:c6:3d:c8:ee:64:91:ca:e6:3d:
                    43:67:22:91:03:4d:5e:75:84:70:46:26:ad:b2:30:
                    82:9b:b9:a3:e0:6a:c7:d2:2a:9b:4a:be:83:a9:5b:
                    ae:24:1e:a8:07:90:6b:07:99:d8:fe:9c:b6:cd:43:
                    c6:76:5e:0b:32:04:7d:13:cd:96:bf:8d:b2:3c:9c:
                    92:5e:f8:0c:3f:35:92:7d:59:db:e4:1e:ce:b6:79:
                    5b:ce:75:6c:19:dc:00:cd:8d:dc:f7:eb:c5:7a:8c:
                    71:9e:6d:11:0c:84:07:1d:1a:a0:60:83:89:92:ca:
                    2a:6c:61:11:f8:f2:f0:99:70:ff:7f:73:b1:22:e7:
                    14:9a:28:6d:03:7c:64:dc:35:2a:6a:30:94:9b:d1:
                    6a:3f:d6:c5:8a:e5:bd:f9:ea:14:d6:8f:cf:b5:10:
                    22:4d:58:12:40:ae:c6:7a:f5:c1:d8:d5:7a:79:a9:
                    3a:1e:c0:b2:75:48:7c:84:de:f3:d9:a2:91:85:f6:
                    5c:c1:ec:6a:04:c4:75:a0:f5:95:9e:fd:14:11:28:
                    a8:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:15:9B:48:4F:A1:AD:99:48:BD:E2:CD:62:4B:17:7A:38:3C:CC:E4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8eef875a-c9a4-45e0-9b80-3ea10becad9f/354b6b4b-fe0d-3804-a420-3adce649b26a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8eef875a-c9a4-45e0-9b80-3ea10becad9f/8eef875a-c9a4-45e0-9b80-3ea10becad9f.crl

            X509v3 Authority Key Identifier:
                keyid:DA:17:75:BB:11:3E:F2:6B:F0:F9:5E:6E:89:5C:C3:0E:E0:A8:CA:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8eef875a-c9a4-45e0-9b80-3ea10becad9f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:440::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:30:a1:d7:8f:1b:95:fb:95:af:06:43:d3:66:2e:2c:28:ee:
         d3:10:cf:4d:16:08:8f:07:f7:5f:49:74:2d:03:2d:94:0c:c7:
         c6:f2:52:26:87:08:c3:f0:e4:7f:45:b4:9e:df:df:01:7a:7c:
         3e:c9:b2:0f:10:72:0a:2c:10:df:7c:43:f4:e5:3d:11:79:5a:
         22:57:02:c6:74:14:4c:70:53:54:cd:87:1c:70:de:90:a2:83:
         bf:b5:4e:9b:f4:df:c7:61:93:eb:ea:20:31:53:63:8a:48:97:
         d4:5c:d5:68:c4:23:1b:21:d0:f9:44:05:f4:e0:1d:eb:84:19:
         fa:c6:8c:75:b4:8b:91:a6:3e:2c:78:3f:1b:6d:38:22:f8:ca:
         34:cd:72:15:b0:1a:7c:82:91:8c:db:50:ff:91:29:7e:c5:9b:
         20:9e:29:ff:5f:4b:58:dd:f4:5a:ba:34:bc:60:a9:0a:63:6a:
         1a:32:53:99:5e:fc:51:a1:76:c0:6f:34:a4:6e:e8:c7:0a:a2:
         ae:9b:fc:ea:b0:2e:18:37:b0:55:a6:86:71:94:67:70:e8:c0:
         de:c4:2e:ee:b6:29:85:3c:4e:68:aa:94:e1:2b:c8:58:2d:6c:
         64:9c:f7:ae:fb:2c:77:d6:bc:5d:2c:b4:4b:e2:40:3d:a6:54:
         30:b2:c6:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 18 04:08:46 2026 by rpki-client