Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/7a69da01-24cd-4788-bccf-5053fbca3eb2/9b6cb9be-59e0-3f87-8ad4-12983eeed0e0.roa
File:                     9b6cb9be-59e0-3f87-8ad4-12983eeed0e0.roa (raw, json)
Hash identifier:          Ty5wRsbA1MDb3ahwW3u5q8ViL5RGVdbNCdaj00fnd6s=
Subject key identifier:   0F:5D:93:DA:91:36:B4:8A:39:80:C0:F0:91:EB:9C:EC:DA:B7:58:EE
Certificate issuer:       /CN=7a69da01-24cd-4788-bccf-5053fbca3eb2
Certificate serial:       010D0C9F4328584CC4AC7505E3C751473ECF4A00
Authority key identifier: D8:5C:6E:3B:90:B6:AB:86:4B:CE:05:8F:67:AD:3A:8D:BA:D8:40:38
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/7a69da01-24cd-4788-bccf-5053fbca3eb2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/7a69da01-24cd-4788-bccf-5053fbca3eb2/9b6cb9be-59e0-3f87-8ad4-12983eeed0e0.roa
Signing time:             Fri 06 Feb 2026 02:00:30 +0000
ROA not before:           Fri 06 Feb 2026 02:00:30 +0000
ROA not after:            Thu 07 May 2026 01:00:30 +0000
asID:                     394368
IP address blocks:        2602:f4c7::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/7a69da01-24cd-4788-bccf-5053fbca3eb2/7a69da01-24cd-4788-bccf-5053fbca3eb2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/7a69da01-24cd-4788-bccf-5053fbca3eb2/7a69da01-24cd-4788-bccf-5053fbca3eb2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/7a69da01-24cd-4788-bccf-5053fbca3eb2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Feb 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:c4:ac:75:05:e3:c7:51:47:3e:cf:4a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a69da01-24cd-4788-bccf-5053fbca3eb2
        Validity
            Not Before: Feb  6 02:00:30 2026 GMT
            Not After : May  7 01:00:30 2026 GMT
        Subject: CN=d4994745-0c63-4f55-8d42-76742731f4cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:04:d0:8e:8a:f6:0c:d0:bb:60:36:b4:af:88:
                    aa:d6:5e:d8:d7:16:d7:e8:8a:a7:d6:10:3c:c0:6c:
                    fc:a8:33:ce:2a:81:a4:ac:2a:b0:78:0e:53:92:04:
                    dd:48:55:5f:c9:fd:b4:33:6a:02:a4:5c:16:87:8f:
                    a6:0f:64:48:b2:ec:23:a5:21:2b:5f:e6:5a:fe:01:
                    78:57:0b:e5:0c:44:89:f9:6e:b5:cb:23:2c:24:83:
                    60:ba:84:7b:a8:75:56:8e:8e:1f:62:e7:e4:f2:8e:
                    99:18:29:b9:48:db:c0:b3:2d:47:12:a7:4f:09:53:
                    8b:fd:c0:a9:d8:83:f0:bf:c4:df:80:1a:60:3f:94:
                    30:54:84:ff:e5:34:f3:91:ca:76:de:84:4a:3f:e7:
                    4d:63:e7:74:12:ed:21:ce:3e:41:0a:49:69:83:90:
                    26:5e:3b:9c:c8:4f:18:23:d6:1b:1d:cb:0f:c0:c2:
                    61:59:81:e7:a5:1c:ba:7f:3c:61:1e:5c:3b:d3:27:
                    1e:12:ee:c4:32:a8:01:02:ea:6d:e6:d1:d4:4a:dd:
                    4d:fa:a0:b0:c0:29:08:31:2e:79:d6:26:e7:80:eb:
                    38:bf:a6:c9:b2:00:74:ac:cb:38:b9:ec:19:35:fb:
                    da:fc:76:8a:3a:25:f7:72:3c:82:2d:0b:24:72:fc:
                    a5:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:5D:93:DA:91:36:B4:8A:39:80:C0:F0:91:EB:9C:EC:DA:B7:58:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/7a69da01-24cd-4788-bccf-5053fbca3eb2/9b6cb9be-59e0-3f87-8ad4-12983eeed0e0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/7a69da01-24cd-4788-bccf-5053fbca3eb2/7a69da01-24cd-4788-bccf-5053fbca3eb2.crl

            X509v3 Authority Key Identifier:
                keyid:D8:5C:6E:3B:90:B6:AB:86:4B:CE:05:8F:67:AD:3A:8D:BA:D8:40:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/7a69da01-24cd-4788-bccf-5053fbca3eb2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f4c7::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:3e:1c:f3:94:03:96:e7:e2:4e:11:de:91:4d:ba:e0:44:93:
         f6:99:5a:05:02:d9:04:d4:82:7b:0d:c2:47:95:a8:c1:6a:2f:
         95:4d:0c:12:92:27:1c:a5:22:e1:83:49:04:c4:e3:ba:db:14:
         34:32:74:87:67:ef:63:be:6e:bc:63:5a:ee:4c:36:1c:b0:01:
         22:53:2f:f7:df:68:96:9b:53:21:ad:56:ea:32:31:b0:84:c5:
         b6:b6:b4:4b:70:80:a4:fb:c1:a8:31:78:b4:af:2a:e0:56:19:
         33:40:3b:01:ea:f2:a9:b2:d3:fd:48:ec:dd:2b:2c:db:89:09:
         19:10:ba:06:be:bc:37:94:b9:14:4e:46:d6:d4:59:0f:59:50:
         36:98:63:41:6c:7e:51:93:87:93:bf:b3:1d:b4:2b:3a:c3:2c:
         b4:5b:06:d1:5a:07:df:94:50:15:eb:b7:41:f8:c4:d8:07:e3:
         ed:21:c3:31:d0:32:6a:80:2d:04:ce:d3:a4:3f:ca:91:d1:08:
         d7:10:6b:4b:c4:51:5e:d7:8b:64:d5:fe:fc:4d:b0:98:c4:08:
         c9:b7:91:48:20:71:a7:53:37:3e:ca:89:3d:47:9b:04:7c:85:
         3c:f5:e6:b0:02:4e:73:1e:95:17:9e:60:16:60:c0:77:1f:f9:
         2a:98:6c:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 26 22:52:22 2026 by rpki-client