Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/378928e8-c134-40aa-9858-3838053cbbe9/11869df8-11c1-3bf1-903f-f89a2a459e6a.roa
File:                     11869df8-11c1-3bf1-903f-f89a2a459e6a.roa (raw, json)
Hash identifier:          mF38djXjiIom+BvfL5E+ptrVK0vL85LQhtTeZPp8xUs=
Subject key identifier:   6D:6F:45:D5:78:E5:6E:78:58:EF:02:88:EB:5F:5F:6D:77:3A:8B:F2
Certificate issuer:       /CN=378928e8-c134-40aa-9858-3838053cbbe9
Certificate serial:       010D0C9F4328584CCBA7555AC67E6A6457C83000
Authority key identifier: 05:84:E7:4E:37:9B:4A:5E:85:0B:E4:1C:93:61:B8:64:26:15:18:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/378928e8-c134-40aa-9858-3838053cbbe9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/378928e8-c134-40aa-9858-3838053cbbe9/11869df8-11c1-3bf1-903f-f89a2a459e6a.roa
Signing time:             Sun 08 Feb 2026 14:00:41 +0000
ROA not before:           Sun 08 Feb 2026 14:00:41 +0000
ROA not after:            Sat 09 May 2026 13:00:41 +0000
asID:                     12261
IP address blocks:        2606:900::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/378928e8-c134-40aa-9858-3838053cbbe9/378928e8-c134-40aa-9858-3838053cbbe9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/378928e8-c134-40aa-9858-3838053cbbe9/378928e8-c134-40aa-9858-3838053cbbe9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/378928e8-c134-40aa-9858-3838053cbbe9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Feb 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:cb:a7:55:5a:c6:7e:6a:64:57:c8:30:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=378928e8-c134-40aa-9858-3838053cbbe9
        Validity
            Not Before: Feb  8 14:00:41 2026 GMT
            Not After : May  9 13:00:41 2026 GMT
        Subject: CN=5ead3906-263f-41b3-b060-b715430542e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:7a:a1:1b:91:f2:a0:c3:32:91:60:fe:2f:dc:
                    0f:17:46:9c:1e:f3:f6:3c:9a:d8:46:ca:54:76:99:
                    67:48:5d:fb:bb:6f:3c:a3:8e:65:ac:ed:61:25:da:
                    c5:ec:3a:06:cb:4d:0e:f5:01:6a:d8:7b:7a:28:c3:
                    9f:18:58:3f:11:2b:5b:ed:6c:e9:9d:d8:7a:fe:18:
                    3c:14:83:0c:cf:cb:37:5d:d8:ae:89:f3:20:a9:5f:
                    5b:a4:d9:ec:6f:e4:68:b8:8b:05:6e:10:6d:3e:4d:
                    ee:27:f2:41:b2:5d:a8:3f:71:b1:bb:31:47:a4:68:
                    57:11:b4:07:df:f9:fc:f7:a7:de:84:d4:9f:70:06:
                    09:da:7e:3a:24:24:3d:4d:ec:61:5e:91:31:1d:9d:
                    0d:0e:99:bd:40:80:df:46:3f:23:99:b2:60:26:d3:
                    0f:4f:0e:78:05:d9:92:b7:dd:de:d7:d1:11:17:95:
                    15:b8:4a:97:26:c4:70:b0:bc:e3:db:a7:02:00:5f:
                    cd:51:c9:ac:99:2a:62:7d:ee:f5:f0:a4:8e:0e:96:
                    f7:a4:01:9e:f2:1c:f8:87:0a:75:13:af:9e:8d:40:
                    41:e3:38:26:bc:c7:c9:93:83:11:1e:7f:f5:d4:07:
                    32:30:2f:2c:0b:eb:bd:40:db:97:21:5d:86:d3:12:
                    72:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:6F:45:D5:78:E5:6E:78:58:EF:02:88:EB:5F:5F:6D:77:3A:8B:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/378928e8-c134-40aa-9858-3838053cbbe9/11869df8-11c1-3bf1-903f-f89a2a459e6a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/378928e8-c134-40aa-9858-3838053cbbe9/378928e8-c134-40aa-9858-3838053cbbe9.crl

            X509v3 Authority Key Identifier:
                keyid:05:84:E7:4E:37:9B:4A:5E:85:0B:E4:1C:93:61:B8:64:26:15:18:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/378928e8-c134-40aa-9858-3838053cbbe9.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:900::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:73:e7:5c:1e:da:5b:10:b1:ce:a5:ea:ac:7e:4b:b3:62:00:
         03:95:15:f2:ed:c6:5b:d8:96:ce:f9:38:a8:a9:87:64:96:27:
         43:ec:c3:79:4f:6a:32:ae:83:93:78:82:2b:5e:55:87:f3:94:
         ba:73:86:e0:f0:4a:bd:d0:c9:53:79:88:fe:04:61:71:56:ee:
         25:f8:1a:04:a2:5b:e4:ee:04:59:81:80:53:7a:df:27:03:db:
         dc:a6:99:70:47:5b:6e:1a:fd:b9:66:11:14:fe:19:b8:ac:ec:
         94:5c:3b:bb:ba:07:71:bd:ca:d0:c1:8a:3f:dc:2d:01:b7:64:
         d0:ad:8f:7c:ff:61:43:59:ec:54:cd:05:e8:84:56:ca:eb:a8:
         01:7b:aa:1e:a9:6a:df:fe:8e:6b:73:29:15:de:a6:c1:b6:c4:
         67:93:bf:4b:cc:bf:e7:77:8c:7a:82:28:5f:00:40:b8:dd:66:
         ba:5f:bf:aa:a5:1e:50:7d:63:6a:bf:6b:d8:2e:fc:ef:3f:15:
         01:a7:3b:24:71:12:7c:8d:c9:92:d5:7a:9f:b8:6e:35:b8:ab:
         f3:2f:d8:c3:c1:29:21:7a:8a:50:bb:3b:47:67:bf:c7:0d:08:
         87:a4:ab:4d:79:5e:79:7b:fe:e0:ef:92:22:88:73:e5:5d:de:
         36:f5:a3:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 27 13:04:48 2026 by rpki-client