Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/47b47588-3e08-42bd-8292-d5cf9cbddd91/44b61732-51f9-3f57-a4b9-c26b0fe1ced2.roa
File:                     44b61732-51f9-3f57-a4b9-c26b0fe1ced2.roa (raw, json)
Hash identifier:          /8xiknqanihQFxZ+kq6liijsewRjm6shR4x7hk2znZc=
Subject key identifier:   74:4B:59:7E:A0:D5:BB:C5:D0:2E:EB:0B:3A:71:D4:3B:49:84:51:6C
Certificate issuer:       /CN=47b47588-3e08-42bd-8292-d5cf9cbddd91
Certificate serial:       010D0C9F4328584CE3620D574F0092CBEAEB5540
Authority key identifier: C4:3B:50:68:E5:B9:8D:F1:EE:E9:9B:B4:DD:10:05:E7:E3:4A:94:22
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/47b47588-3e08-42bd-8292-d5cf9cbddd91.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/47b47588-3e08-42bd-8292-d5cf9cbddd91/44b61732-51f9-3f57-a4b9-c26b0fe1ced2.roa
Signing time:             Tue 17 Feb 2026 02:00:31 +0000
ROA not before:           Tue 17 Feb 2026 02:00:31 +0000
ROA not after:            Mon 18 May 2026 01:00:31 +0000
asID:                     396168
IP address blocks:        2605:f7c0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/47b47588-3e08-42bd-8292-d5cf9cbddd91/47b47588-3e08-42bd-8292-d5cf9cbddd91.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/47b47588-3e08-42bd-8292-d5cf9cbddd91/47b47588-3e08-42bd-8292-d5cf9cbddd91.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/47b47588-3e08-42bd-8292-d5cf9cbddd91.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 24 Feb 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:e3:62:0d:57:4f:00:92:cb:ea:eb:55:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47b47588-3e08-42bd-8292-d5cf9cbddd91
        Validity
            Not Before: Feb 17 02:00:31 2026 GMT
            Not After : May 18 01:00:31 2026 GMT
        Subject: CN=492666f9-294f-4ccb-9a76-cbdd111d5440
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:9a:5f:42:63:b3:3f:d0:b5:ee:ac:97:28:a3:
                    f6:81:19:5c:36:30:12:fe:dc:38:ce:6d:0a:c3:b3:
                    c0:a9:10:9f:c1:62:ad:60:de:95:9f:f3:c8:82:d2:
                    6b:49:7d:8c:fa:a5:35:6b:ad:2f:ec:a5:03:05:b5:
                    96:ab:30:2e:c7:86:64:2f:a6:80:ad:e3:3d:08:d1:
                    ef:5a:f5:20:50:74:87:83:6e:85:82:45:1f:bc:22:
                    1b:b8:cd:43:ae:eb:58:37:e7:b6:c7:3a:ad:50:c3:
                    eb:58:84:5c:ce:4a:73:f1:cb:2b:b5:d9:d4:ce:4e:
                    cf:1f:88:28:94:08:2c:14:6a:c3:d8:e0:a2:4f:22:
                    46:16:65:2a:cc:54:70:62:fb:02:3b:3b:4f:36:e5:
                    21:a4:8f:eb:6e:ec:2b:5b:cc:b9:fd:37:15:d9:b2:
                    f6:dd:66:66:fa:51:2a:a2:9f:28:92:22:67:3d:31:
                    95:df:24:2f:f0:4b:b6:f0:af:1a:85:59:e2:49:68:
                    7a:17:7f:df:82:cf:b6:c5:8c:46:04:ab:16:0c:4a:
                    87:e9:e3:7c:88:53:3d:66:88:85:85:88:69:ca:b3:
                    d0:14:f1:d6:25:d9:7e:9a:22:14:eb:5f:88:d9:28:
                    54:c3:4b:77:a8:52:de:30:3e:3f:a1:3b:b1:90:2d:
                    b5:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:4B:59:7E:A0:D5:BB:C5:D0:2E:EB:0B:3A:71:D4:3B:49:84:51:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/47b47588-3e08-42bd-8292-d5cf9cbddd91/44b61732-51f9-3f57-a4b9-c26b0fe1ced2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/47b47588-3e08-42bd-8292-d5cf9cbddd91/47b47588-3e08-42bd-8292-d5cf9cbddd91.crl

            X509v3 Authority Key Identifier:
                keyid:C4:3B:50:68:E5:B9:8D:F1:EE:E9:9B:B4:DD:10:05:E7:E3:4A:94:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/47b47588-3e08-42bd-8292-d5cf9cbddd91.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:f7c0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:49:e3:bb:b8:ee:7f:d1:fe:c3:33:38:30:65:a1:f3:39:d8:
         30:d8:21:91:6a:31:96:c8:66:1b:52:10:9a:99:e1:dc:ce:0a:
         f5:0a:a7:d6:80:c9:de:63:b8:99:9e:fe:81:c1:b7:a3:89:6d:
         42:12:12:86:b3:e1:4c:33:e5:79:8f:ea:53:da:22:8c:6e:66:
         4e:19:76:3d:a7:cd:74:5a:8c:2a:3f:2f:2f:71:d6:8f:1f:73:
         d8:53:79:29:6d:f6:76:a5:f8:03:16:24:39:8e:85:da:2d:dc:
         f9:b3:f4:30:72:0f:29:05:b1:c5:54:f1:c0:fb:6d:e1:1a:2e:
         6f:8d:2e:a0:5c:5a:c2:a6:bb:f2:7b:77:02:d3:ee:49:55:ff:
         d3:f4:66:0f:45:c3:d3:a3:bc:51:e5:76:a9:06:cc:46:42:28:
         84:00:cb:21:72:2d:d9:e1:be:34:b7:a5:b6:21:df:b0:5a:49:
         8a:63:7a:f1:e9:75:7d:d8:b4:62:9e:21:63:4a:e0:06:be:6d:
         e1:88:3b:79:ca:20:13:d5:46:db:f0:f4:5d:92:0d:e8:46:92:
         8f:f3:81:dd:46:bd:df:74:b3:d4:e1:59:d3:69:61:ad:76:2f:
         a5:db:ec:89:ca:73:6c:0f:10:36:41:44:6c:a6:8f:0f:aa:41:
         52:37:0b:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 22 19:21:42 2026 by rpki-client