Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dc8dacf3-283f-4888-8217-ee30c6e58c44/094a52c0-3cf2-3dc5-9242-e0e5db445d48.roa
File:                     094a52c0-3cf2-3dc5-9242-e0e5db445d48.roa (raw, json)
Hash identifier:          B/5S51stNpG02ZIBgR6bT7XK1Nu1q9UBfMA98ECZ3/E=
Subject key identifier:   F8:48:C5:52:24:3F:D6:06:DB:5A:81:11:3D:B4:75:92:CA:3B:0B:02
Certificate issuer:       /CN=dc8dacf3-283f-4888-8217-ee30c6e58c44
Certificate serial:       010D0C9F4328584C8046C68E790608ABFE15BD80
Authority key identifier: BC:78:88:8A:0C:C4:26:DC:74:DC:53:A1:5F:F0:3B:F8:4A:D7:51:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dc8dacf3-283f-4888-8217-ee30c6e58c44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dc8dacf3-283f-4888-8217-ee30c6e58c44/094a52c0-3cf2-3dc5-9242-e0e5db445d48.roa
Signing time:             Mon 12 Jan 2026 14:00:40 +0000
ROA not before:           Mon 12 Jan 2026 14:00:40 +0000
ROA not after:            Sun 12 Apr 2026 13:00:40 +0000
asID:                     14434
IP address blocks:        2607:8580::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dc8dacf3-283f-4888-8217-ee30c6e58c44/dc8dacf3-283f-4888-8217-ee30c6e58c44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dc8dacf3-283f-4888-8217-ee30c6e58c44/dc8dacf3-283f-4888-8217-ee30c6e58c44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dc8dacf3-283f-4888-8217-ee30c6e58c44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 24 Feb 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:80:46:c6:8e:79:06:08:ab:fe:15:bd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc8dacf3-283f-4888-8217-ee30c6e58c44
        Validity
            Not Before: Jan 12 14:00:40 2026 GMT
            Not After : Apr 12 13:00:40 2026 GMT
        Subject: CN=28c8d8cb-6ff8-4548-b794-312feb3f7c91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:4d:4e:1e:3c:00:40:c7:c3:81:37:2d:59:d1:
                    5e:70:59:99:20:b3:28:fd:51:34:05:c8:c9:e1:5b:
                    42:39:5f:b6:fe:e0:11:95:77:6d:7b:c2:90:1e:87:
                    0c:f1:6f:8a:33:1c:82:2f:bd:c9:91:28:de:c0:60:
                    75:e3:d6:2c:ac:36:78:96:06:92:65:39:cd:cf:3d:
                    d6:86:95:80:b4:4d:53:0f:08:e0:54:f7:1b:54:b4:
                    72:47:98:73:fb:0a:43:a7:68:d7:3d:33:29:75:6d:
                    83:17:1e:18:b5:07:5e:b3:65:db:94:35:86:f7:85:
                    41:b1:21:dc:99:3c:95:62:ed:5f:ad:63:22:93:d5:
                    32:06:6b:3d:cf:94:fb:e6:50:37:38:53:7d:98:71:
                    92:4a:53:5d:a4:70:a2:95:bc:b2:d4:e5:38:17:09:
                    0d:45:18:b6:39:ab:ee:44:a7:9f:7c:7e:d9:1e:43:
                    b2:38:9e:99:d4:60:58:7f:3b:12:1d:2d:2c:67:9e:
                    28:8a:3b:47:7f:27:96:24:57:58:c6:c9:76:a7:93:
                    39:36:56:ab:26:3c:11:c8:d1:ac:3e:03:6c:b5:25:
                    18:1a:c6:dc:e5:b3:e3:9d:5f:64:ff:ec:99:8b:b9:
                    65:53:99:7c:f2:72:c4:f3:f4:de:c7:90:df:fe:df:
                    6d:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:48:C5:52:24:3F:D6:06:DB:5A:81:11:3D:B4:75:92:CA:3B:0B:02
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dc8dacf3-283f-4888-8217-ee30c6e58c44/094a52c0-3cf2-3dc5-9242-e0e5db445d48.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dc8dacf3-283f-4888-8217-ee30c6e58c44/dc8dacf3-283f-4888-8217-ee30c6e58c44.crl

            X509v3 Authority Key Identifier:
                keyid:BC:78:88:8A:0C:C4:26:DC:74:DC:53:A1:5F:F0:3B:F8:4A:D7:51:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dc8dacf3-283f-4888-8217-ee30c6e58c44.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8580::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:77:60:c2:69:72:39:ef:3a:d9:fc:84:5b:95:9c:74:04:4c:
         69:ae:f4:06:3e:df:97:79:e4:55:dd:73:97:0a:70:67:57:e1:
         25:18:d5:94:3f:aa:16:5d:fe:eb:3c:d4:86:43:50:66:54:fa:
         fa:6a:d6:dd:e2:6a:e4:1c:91:59:23:54:25:4b:f1:06:ff:44:
         a0:5a:63:bf:bb:55:11:f6:0f:47:bf:5e:a7:f7:02:62:f9:4d:
         e2:e6:73:62:92:45:91:ba:f2:df:12:d0:82:4b:41:79:fb:d8:
         c0:40:de:3b:88:bc:8d:65:9c:71:02:e2:8b:e4:16:f4:46:4f:
         1b:14:30:17:2f:15:2e:c6:46:ea:13:b6:3d:1b:f3:85:7e:e2:
         b0:c4:0e:e6:d9:51:e8:be:66:be:3e:d3:9c:66:36:55:b4:4a:
         25:63:a6:5e:54:ae:e5:bc:70:92:e5:71:ed:89:48:de:df:57:
         a1:0e:41:97:ba:76:54:f8:cc:3b:f3:4c:0f:28:06:58:a0:5b:
         bb:7c:03:3e:97:8f:7a:1f:c0:0c:e7:f2:06:fc:a7:ba:a7:7b:
         15:2f:0f:0d:70:c3:d2:a2:7d:44:dd:65:10:f1:9d:86:9b:f7:
         13:6e:10:7e:fd:5e:5a:9d:28:42:cf:06:ea:7f:1b:65:b0:b6:
         89:bf:23:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 22 19:17:30 2026 by rpki-client