Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/295cb1ee-8016-3635-a0bf-50d5f9a7f3de.roa
File:                     295cb1ee-8016-3635-a0bf-50d5f9a7f3de.roa (raw, json)
Hash identifier:          x7F7nDF1+87mKhW4kPJ90ccOHSwd5H6eKUJuuOPEAI4=
Subject key identifier:   F1:AA:EB:94:BF:D7:03:F4:14:DD:71:76:CA:24:4E:2C:95:BD:D9:EA
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F4328584C7D7C1AF61F9463BBB455E3C0
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/295cb1ee-8016-3635-a0bf-50d5f9a7f3de.roa
Signing time:             Sun 11 Jan 2026 14:00:39 +0000
ROA not before:           Sun 11 Jan 2026 14:00:39 +0000
ROA not after:            Sat 11 Apr 2026 13:00:39 +0000
asID:                     32703
IP address blocks:        2607:fb08::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 25 Feb 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:7d:7c:1a:f6:1f:94:63:bb:b4:55:e3:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Jan 11 14:00:39 2026 GMT
            Not After : Apr 11 13:00:39 2026 GMT
        Subject: CN=8441578e-6422-489e-9ede-5fc7fa82f5c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:10:9d:80:e3:17:33:1d:86:48:5c:98:0d:bc:
                    aa:05:79:0b:a4:d6:33:f0:a4:a1:11:be:03:9e:82:
                    70:6a:2f:e5:d9:39:92:17:e9:1a:12:73:cc:ff:f1:
                    b3:7f:9a:f0:ca:13:3d:7d:c1:3c:fe:77:2e:99:d7:
                    a7:88:3e:9a:89:de:e6:e4:6b:82:9b:d3:1e:d4:da:
                    6e:01:a9:fe:ee:d0:92:0f:7c:8e:ac:f8:f4:f0:64:
                    97:ca:a5:db:cc:ed:56:46:a7:1c:96:d2:eb:bc:f3:
                    fe:57:6c:35:64:0d:38:99:45:17:c9:54:70:c5:b3:
                    a2:af:d3:9d:55:e2:68:89:74:7a:8d:c6:f1:f1:94:
                    76:16:52:93:fd:8a:fb:02:60:cc:18:cc:f0:af:2e:
                    91:4d:33:de:fb:1c:88:96:ca:66:78:62:a5:b6:7e:
                    75:aa:4c:d8:92:28:dd:16:ad:47:9c:ac:20:25:b1:
                    0d:5d:95:96:1a:a7:9f:f6:95:14:6c:52:03:43:06:
                    af:e3:ca:0e:54:bc:80:26:86:1b:cd:99:54:8f:fb:
                    49:f2:eb:9c:c0:27:16:32:d4:48:7f:b6:a6:4a:29:
                    3e:d9:fd:90:1d:b3:dc:60:83:0e:fb:5f:87:11:c9:
                    ac:3e:e3:55:d6:b8:de:9e:d8:2e:a5:b8:31:38:d3:
                    82:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:AA:EB:94:BF:D7:03:F4:14:DD:71:76:CA:24:4E:2C:95:BD:D9:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/295cb1ee-8016-3635-a0bf-50d5f9a7f3de.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:fb08::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:23:9c:78:b7:7e:a0:1f:22:1a:9f:e3:63:51:2f:2d:fb:f6:
         4d:77:a8:68:bc:23:ef:df:c0:56:a2:c1:98:3a:97:4e:d9:d2:
         9e:b2:f2:60:58:3d:4a:90:ca:69:49:95:7f:95:cf:70:56:5b:
         44:a5:9d:31:81:14:74:c3:87:43:68:55:8c:1b:38:91:81:28:
         c7:43:3f:b3:c3:d6:ab:bd:20:0e:a3:d5:aa:b6:54:59:92:97:
         04:a1:3a:30:95:75:7f:8b:91:4a:ca:98:08:35:37:e6:ad:ae:
         c6:c0:f4:bb:2a:a4:d5:aa:35:76:7c:6b:ec:3b:c5:df:dc:34:
         45:56:43:65:ae:4d:ec:66:a6:c5:72:a5:4a:f7:7d:73:52:76:
         95:bd:7a:3f:07:4f:17:4e:4f:36:4c:48:01:e3:37:c5:1f:d2:
         10:a1:91:bf:8e:4a:12:b6:b5:3f:55:df:0f:1e:fa:07:35:dd:
         8c:5d:1b:35:d8:8d:17:18:91:5d:ec:f7:4f:66:15:2f:53:71:
         5e:7c:fe:f2:5f:26:ae:a7:b4:1f:5a:40:9d:3b:79:8e:89:48:
         8e:6d:a4:5e:a4:ff:92:88:26:7c:1a:6a:5e:03:6f:14:d1:f2:
         21:4a:1b:2e:aa:b2:f0:09:88:22:28:48:78:7c:2e:1f:92:25:
         41:4f:d0:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 17:24:50 2026 by rpki-client