Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/35a6c1ad-c1ba-4522-a911-1f8a24c8ae38/0a8c8684-8ddc-30fd-a22c-66c4ab72ca1a.roa
File:                     0a8c8684-8ddc-30fd-a22c-66c4ab72ca1a.roa (raw, json)
Hash identifier:          4t7Cjr9AVQFpWEksI8/pcqfk7Od7tFhY3p+/vqddBFk=
Subject key identifier:   57:B2:41:45:E9:34:9B:72:0E:F7:FC:59:AF:27:C4:99:B0:7A:2A:DA
Certificate issuer:       /CN=35a6c1ad-c1ba-4522-a911-1f8a24c8ae38
Certificate serial:       010D0C9F4328584CCBA75F9C2BA2E1D996AABD00
Authority key identifier: 6B:96:63:42:FE:61:F5:C8:CE:92:57:7F:63:77:AD:57:36:04:F0:A9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/35a6c1ad-c1ba-4522-a911-1f8a24c8ae38.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/35a6c1ad-c1ba-4522-a911-1f8a24c8ae38/0a8c8684-8ddc-30fd-a22c-66c4ab72ca1a.roa
Signing time:             Sun 08 Feb 2026 14:00:41 +0000
ROA not before:           Sun 08 Feb 2026 14:00:41 +0000
ROA not after:            Sat 09 May 2026 13:00:41 +0000
asID:                     18973
IP address blocks:        2606:1a00::/32 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/35a6c1ad-c1ba-4522-a911-1f8a24c8ae38/35a6c1ad-c1ba-4522-a911-1f8a24c8ae38.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/35a6c1ad-c1ba-4522-a911-1f8a24c8ae38/35a6c1ad-c1ba-4522-a911-1f8a24c8ae38.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/35a6c1ad-c1ba-4522-a911-1f8a24c8ae38.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 24 Feb 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:cb:a7:5f:9c:2b:a2:e1:d9:96:aa:bd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35a6c1ad-c1ba-4522-a911-1f8a24c8ae38
        Validity
            Not Before: Feb  8 14:00:41 2026 GMT
            Not After : May  9 13:00:41 2026 GMT
        Subject: CN=8a7d2df6-c3c6-4aaa-b82c-d41e973b9718
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:5c:87:68:fc:9d:fd:22:5d:5c:1c:16:d2:b8:
                    93:8a:36:62:ae:b4:22:1d:79:c7:42:a2:41:6f:bc:
                    d4:89:6d:0f:cc:54:0b:92:c3:20:9e:49:1a:7f:1e:
                    42:77:dd:38:cd:a3:8f:f9:c3:6a:8b:4b:ab:fd:57:
                    17:b6:9d:44:71:6e:17:38:26:6a:8d:fa:ad:29:97:
                    f2:d5:40:76:0d:af:71:70:30:50:a6:1a:6e:fb:fb:
                    0c:e9:8c:93:e7:cf:bf:c3:63:fe:44:7a:57:1d:8e:
                    88:4d:b9:23:73:fa:0a:f7:b2:39:a4:73:7f:58:f0:
                    98:c9:3a:7a:d5:ea:0d:e5:e8:e0:fd:e1:10:8b:ad:
                    d5:cf:fa:6d:d3:a2:b1:45:d8:87:0f:99:79:06:aa:
                    e9:b0:d6:40:27:73:43:d4:4b:9a:68:b1:94:cd:42:
                    cb:f5:4e:0a:22:25:0a:2a:c0:e0:32:26:f2:7b:eb:
                    d2:0e:60:a3:b6:bb:58:7a:0d:49:82:e0:e6:95:25:
                    f0:2f:04:84:c2:ae:77:ff:e3:f3:35:47:10:0b:2b:
                    22:69:e2:51:ec:e4:44:13:ef:eb:d5:ae:20:e2:79:
                    76:e5:b6:e4:82:2f:ed:97:dd:fc:53:34:09:7f:87:
                    df:cd:b3:6e:1e:76:97:ee:70:e8:21:19:70:14:61:
                    84:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:B2:41:45:E9:34:9B:72:0E:F7:FC:59:AF:27:C4:99:B0:7A:2A:DA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/35a6c1ad-c1ba-4522-a911-1f8a24c8ae38/0a8c8684-8ddc-30fd-a22c-66c4ab72ca1a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/35a6c1ad-c1ba-4522-a911-1f8a24c8ae38/35a6c1ad-c1ba-4522-a911-1f8a24c8ae38.crl

            X509v3 Authority Key Identifier:
                keyid:6B:96:63:42:FE:61:F5:C8:CE:92:57:7F:63:77:AD:57:36:04:F0:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/35a6c1ad-c1ba-4522-a911-1f8a24c8ae38.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:1a00::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:37:18:3b:61:fe:93:1e:33:d3:cc:60:f3:7f:cc:80:92:5e:
         7a:4a:f7:2b:01:ff:a2:96:ed:84:55:7a:87:99:87:7d:b2:a3:
         e4:9b:c4:80:1c:e4:10:75:f0:00:b3:17:d0:d9:2d:01:7f:69:
         c0:de:d8:4a:14:f9:66:f8:38:01:f9:bd:56:33:24:8c:27:52:
         bf:53:ea:14:3c:ac:d6:de:bd:cd:ca:28:e0:cb:f5:b7:2e:1a:
         85:31:e7:35:d1:fa:0d:c0:47:b9:18:95:11:79:cb:7c:64:bd:
         a7:a8:ac:ee:61:5d:1f:0b:19:dc:90:d7:db:11:03:02:1b:72:
         da:11:2b:14:ad:84:b7:70:62:3e:b2:17:60:ed:d8:df:b5:d4:
         50:d6:ac:5d:57:15:f6:af:cb:bf:16:71:24:f8:8d:97:b2:18:
         e0:2a:b2:89:50:c8:40:47:9a:ab:b4:37:47:92:8d:dc:1d:18:
         ed:ca:0d:e0:48:43:c4:39:19:08:4c:45:06:03:01:1b:6e:3d:
         5c:85:52:67:d7:75:21:cb:7b:dd:36:61:4e:9e:26:a0:ae:8a:
         d9:16:6f:cd:7c:21:c8:36:8a:ce:08:ef:4f:57:63:67:29:bd:
         fb:62:07:94:97:f6:e6:05:e5:70:67:8f:21:6e:be:14:aa:ff:
         cb:0d:b4:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 14:42:42 2026 by rpki-client