Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ccaa9c27-6b68-45a8-b777-4c7b00482ab8/422fb5a6-9f2e-3c33-8ba0-7a8127216540.roa
File:                     422fb5a6-9f2e-3c33-8ba0-7a8127216540.roa (raw, json)
Hash identifier:          dws63Uu42spmJog5lMXoaVFJkY1aVA2Fi+EQaaMkxkY=
Subject key identifier:   B9:06:94:1E:A2:55:AA:DC:A3:8A:90:D3:1F:F0:A5:15:64:65:23:52
Certificate issuer:       /CN=ccaa9c27-6b68-45a8-b777-4c7b00482ab8
Certificate serial:       010D0C9F4328584CE8F764054E4C0EDF378C6C90
Authority key identifier: A2:41:EF:5B:9A:6A:4B:E6:91:56:9C:87:8A:A8:6E:DC:54:B2:7F:86
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ccaa9c27-6b68-45a8-b777-4c7b00482ab8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ccaa9c27-6b68-45a8-b777-4c7b00482ab8/422fb5a6-9f2e-3c33-8ba0-7a8127216540.roa
Signing time:             Thu 19 Feb 2026 02:00:32 +0000
ROA not before:           Thu 19 Feb 2026 02:00:32 +0000
ROA not after:            Wed 20 May 2026 01:00:32 +0000
asID:                     400598
IP address blocks:        192.40.40.0/23 maxlen: 24
                          2602:faf9::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ccaa9c27-6b68-45a8-b777-4c7b00482ab8/ccaa9c27-6b68-45a8-b777-4c7b00482ab8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ccaa9c27-6b68-45a8-b777-4c7b00482ab8/ccaa9c27-6b68-45a8-b777-4c7b00482ab8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ccaa9c27-6b68-45a8-b777-4c7b00482ab8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 22 Feb 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:e8:f7:64:05:4e:4c:0e:df:37:8c:6c:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ccaa9c27-6b68-45a8-b777-4c7b00482ab8
        Validity
            Not Before: Feb 19 02:00:32 2026 GMT
            Not After : May 20 01:00:32 2026 GMT
        Subject: CN=8ee8f809-9bf7-4ff3-9904-7050b4a22bea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:93:36:cf:e0:91:7f:14:90:60:ce:b9:7f:2f:
                    44:ba:76:56:5a:dc:ee:fe:27:04:23:c0:64:e4:0d:
                    0d:8a:08:88:85:63:a3:c7:11:31:15:28:27:1a:a3:
                    bc:3a:fc:f7:7f:9f:f4:cf:21:74:45:70:69:0d:5e:
                    85:d3:1c:30:4d:aa:53:34:a3:bc:24:cf:ea:f9:03:
                    95:64:87:60:0e:4c:5d:64:30:2e:66:d4:ab:fe:39:
                    68:2b:e2:72:22:d8:f2:f3:3d:2b:b3:5c:7c:a8:f9:
                    d4:bb:99:9e:f2:6f:29:5b:0c:6a:99:f5:2b:5a:bf:
                    47:35:ff:5d:47:44:8b:83:ce:97:f5:01:82:f7:15:
                    36:86:02:d7:1e:34:97:ca:d1:e5:53:71:1d:e3:82:
                    33:9d:a9:95:2a:e4:50:5d:7c:47:06:b1:db:3a:80:
                    2f:f4:cd:47:d9:e0:48:a8:8d:db:a9:0c:2b:aa:09:
                    5c:95:4e:42:6b:c9:48:a1:82:f0:19:1b:a9:f4:f2:
                    2c:f4:14:f8:96:89:49:d2:95:12:f3:82:a1:fe:42:
                    b8:2f:5b:29:d2:e8:97:29:97:c5:15:1f:c6:36:1d:
                    06:ce:dc:16:db:ed:90:df:19:06:1a:2c:b0:73:ff:
                    f3:58:fc:c5:36:d0:ea:7c:30:36:c8:47:34:a4:01:
                    f8:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:06:94:1E:A2:55:AA:DC:A3:8A:90:D3:1F:F0:A5:15:64:65:23:52
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ccaa9c27-6b68-45a8-b777-4c7b00482ab8/422fb5a6-9f2e-3c33-8ba0-7a8127216540.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ccaa9c27-6b68-45a8-b777-4c7b00482ab8/ccaa9c27-6b68-45a8-b777-4c7b00482ab8.crl

            X509v3 Authority Key Identifier:
                keyid:A2:41:EF:5B:9A:6A:4B:E6:91:56:9C:87:8A:A8:6E:DC:54:B2:7F:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ccaa9c27-6b68-45a8-b777-4c7b00482ab8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.40.40.0/23
                IPv6:
                  2602:faf9::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:f0:33:1d:bc:75:30:ff:56:77:da:02:2e:12:9b:d1:df:ea:
         84:04:22:cc:2b:32:07:f5:7c:d4:e4:09:4c:fa:91:7c:ec:98:
         92:2e:9f:9e:c1:9a:a1:59:ae:b1:2c:02:67:af:76:61:4e:3e:
         a0:1b:ac:5a:69:d0:46:44:d2:0c:d3:25:10:b5:a8:be:ae:2d:
         7a:7e:22:66:b5:b2:60:3b:f9:e6:f0:a7:dd:94:68:02:8e:d7:
         fd:9b:3c:8e:64:1e:8a:49:61:22:a7:47:23:27:9a:3e:9e:c3:
         22:64:ae:2e:65:11:b4:bb:64:a5:7e:7d:1b:76:28:47:15:89:
         71:3e:05:27:9e:37:d3:d2:8b:5d:1b:e6:95:25:21:86:22:e8:
         e0:1e:ee:c3:16:d5:5b:52:90:5f:8c:d2:b6:5d:73:79:b5:5d:
         19:d8:9c:48:7e:58:55:9c:fa:f9:8c:9e:f9:3f:95:b3:bb:da:
         1a:ca:d1:14:31:9f:04:a8:fd:c7:76:2b:e6:52:0a:b7:26:ab:
         94:3d:d6:78:2c:3a:56:10:74:32:c1:e3:af:e2:0b:23:29:87:
         d1:87:9e:5e:09:80:04:80:7a:45:ab:5b:a5:cd:3b:f1:d8:40:
         b9:0b:3e:5e:aa:ec:1a:ed:59:dc:d9:82:6e:08:45:50:85:a6:
         4d:54:34:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 21 06:28:00 2026 by rpki-client