Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/3404f366-4cca-3ba6-b6a6-e0345e51e8fc.roa
File:                     3404f366-4cca-3ba6-b6a6-e0345e51e8fc.roa (raw, json)
Hash identifier:          spcKBY4bPmNV6sNZllwImWyuXaCYNX19ct3fkcaYZdI=
Subject key identifier:   CB:ED:76:86:76:F1:4B:C4:4D:90:57:18:18:98:DE:D9:5E:A5:4C:86
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F4328584CEA5CD1812B6C3633B4917F00
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/3404f366-4cca-3ba6-b6a6-e0345e51e8fc.roa
Signing time:             Thu 19 Feb 2026 14:00:40 +0000
ROA not before:           Thu 19 Feb 2026 14:00:40 +0000
ROA not after:            Wed 20 May 2026 13:00:40 +0000
asID:                     15290
IP address blocks:        2001:4c8:1108::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Feb 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ea:5c:d1:81:2b:6c:36:33:b4:91:7f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Feb 19 14:00:40 2026 GMT
            Not After : May 20 13:00:40 2026 GMT
        Subject: CN=87fa3959-e7e2-46db-8c68-b823fd0f2cd9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:2a:5a:13:d0:41:82:4b:90:b4:fe:23:a2:e8:
                    a6:05:c9:74:02:5b:01:c2:97:c9:1d:e4:b4:87:19:
                    64:f9:62:b4:51:19:45:58:50:b1:dc:23:e4:2d:2a:
                    45:71:85:c3:90:12:05:94:fe:6d:0b:5c:42:49:c6:
                    fd:81:dd:6e:3e:b3:b1:90:1c:8f:f4:91:b2:2d:39:
                    62:43:80:56:0b:06:2b:d0:01:fc:b8:69:44:8a:62:
                    90:a6:47:ad:ad:10:43:ff:b5:4f:84:be:10:6a:5a:
                    38:d5:0c:2f:e0:b1:94:f0:a0:65:00:91:9f:52:b8:
                    53:64:68:af:6e:57:27:35:24:58:7f:00:5b:44:7d:
                    c4:17:10:fa:79:a8:f3:20:79:f3:73:ea:53:10:59:
                    a6:5b:9f:47:67:9d:3d:86:a2:9b:b9:22:01:3c:b6:
                    85:cf:b9:dd:6a:44:63:e6:72:9d:c9:41:30:04:cb:
                    f7:a6:05:85:d6:4d:7f:fc:bf:b7:6b:37:e6:54:27:
                    f3:9d:55:c4:14:1c:46:6a:15:f7:65:5f:11:1f:ee:
                    c4:d5:e4:64:0e:5e:3c:8f:d4:06:6c:b7:e1:d0:51:
                    fe:09:a1:5e:67:eb:5f:9f:76:8e:6d:1e:24:91:3b:
                    eb:91:c8:34:76:f8:24:88:98:a2:d7:30:5c:a0:3c:
                    d4:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:ED:76:86:76:F1:4B:C4:4D:90:57:18:18:98:DE:D9:5E:A5:4C:86
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/3404f366-4cca-3ba6-b6a6-e0345e51e8fc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:4c8:1108::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:cb:5a:d4:fb:82:fc:12:ab:6c:56:25:f5:b8:41:78:c5:bf:
         58:b8:44:74:34:cf:72:d5:17:fc:a4:f8:4f:3b:e0:3f:42:2d:
         0a:ad:08:8b:69:3a:be:61:f6:42:0e:1f:0f:24:12:22:68:a8:
         aa:ca:a7:a3:4e:0d:69:2e:e5:3b:ae:94:7c:0f:78:0e:d3:34:
         3a:80:3e:1d:f0:df:5d:0f:37:b6:ca:82:e4:99:d2:58:b3:05:
         c5:42:35:27:8f:7f:0a:70:f7:0b:cf:f6:af:1b:fc:fd:79:e3:
         c4:cf:de:4b:f8:bc:ca:83:aa:1c:fd:ee:71:52:c6:ed:0b:6a:
         26:4f:42:4c:07:f7:83:83:61:28:6c:c6:25:51:53:bc:bc:83:
         17:53:70:9a:0c:67:25:c9:a9:08:61:5f:f7:68:e3:a3:79:4c:
         79:fe:4b:c4:ba:ac:33:79:d2:4f:a5:f6:92:c6:eb:d1:85:56:
         fb:d4:50:24:b7:37:f2:ce:a6:29:c7:2a:d8:0e:83:03:27:4c:
         83:d4:c1:51:a9:ef:c4:d1:cd:4a:6c:e7:fb:e2:55:4d:db:e4:
         3a:6a:cf:8b:84:6c:32:0f:64:09:7a:59:89:80:77:d4:0e:9d:
         e2:85:f2:e4:80:de:a5:80:f3:f9:d9:a7:78:a2:1a:6f:82:06:
         14:9f:f0:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 27 07:30:01 2026 by rpki-client