Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/890c808c-c003-388e-a54a-7300604313f5.roa
File:                     890c808c-c003-388e-a54a-7300604313f5.roa (raw, json)
Hash identifier:          rt9ENmTpDTYHWe0P4hyU0M4Z/orYsiOj2B8xuQnzYWI=
Subject key identifier:   1B:B5:23:86:D4:BF:9E:16:57:78:6B:9A:9D:63:10:66:82:89:AA:8E
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584C794C97E0971EAEEEC585B300
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/890c808c-c003-388e-a54a-7300604313f5.roa
Signing time:             Sat 10 Jan 2026 02:00:31 +0000
ROA not before:           Sat 10 Jan 2026 02:00:31 +0000
ROA not after:            Fri 10 Apr 2026 01:00:31 +0000
asID:                     13335
IP address blocks:        2001:470:2a2::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 21 Feb 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:79:4c:97:e0:97:1e:ae:ee:c5:85:b3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Jan 10 02:00:31 2026 GMT
            Not After : Apr 10 01:00:31 2026 GMT
        Subject: CN=00274807-6f52-498a-b98d-1c4c108f0a64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:b4:30:7c:83:3a:fe:59:13:3c:54:de:3a:49:
                    64:71:ce:d8:d6:45:b3:3c:d8:09:b2:be:04:d3:b0:
                    5f:ae:4e:5f:ea:15:f0:25:9f:ac:02:f2:9f:e0:11:
                    60:1f:6e:07:18:64:dc:ce:9b:94:96:b6:9d:09:ec:
                    e5:68:55:7e:df:44:75:e0:f2:81:77:3b:08:d0:c2:
                    c4:28:89:e4:e5:1b:93:6a:71:66:29:20:86:92:93:
                    97:70:8a:db:77:11:f7:1d:da:f9:05:bf:f2:20:f1:
                    53:4b:e3:e4:f3:3c:43:32:d6:c5:d9:f6:27:2a:9b:
                    b8:7e:3a:c9:64:04:ad:96:ce:4e:64:f7:d7:4b:90:
                    93:94:c2:ee:fb:83:0b:06:e3:3c:c0:02:6f:de:56:
                    d6:39:61:27:17:0e:90:07:36:1f:d6:28:1e:3e:d1:
                    d0:b1:24:b0:29:9e:6c:fa:d0:6c:49:2f:6c:24:39:
                    a2:eb:b5:f3:55:4b:a9:ea:f8:91:6c:f9:12:27:de:
                    94:20:50:7f:ac:1e:ce:a9:f8:cd:5e:0d:60:9e:ad:
                    cd:d0:1c:dd:9a:98:b5:43:b1:d7:42:f3:bd:9a:9b:
                    fb:a8:3a:ee:4b:f7:f9:68:b8:93:4e:84:e0:16:94:
                    5e:2c:2f:0d:ba:40:ef:92:e5:e8:6a:66:04:41:e1:
                    8c:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:B5:23:86:D4:BF:9E:16:57:78:6B:9A:9D:63:10:66:82:89:AA:8E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/890c808c-c003-388e-a54a-7300604313f5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:2a2::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:c7:cf:72:e5:44:f6:be:31:d0:90:1a:37:47:8b:81:38:a9:
         b5:e7:ca:3d:d4:00:e6:fc:60:35:61:d2:00:ff:e3:3d:b0:10:
         e6:a2:8d:5f:30:09:ef:5e:cd:fe:68:71:2b:27:b0:e8:5e:86:
         e6:aa:18:c4:bf:5e:22:56:45:81:e7:77:d4:a9:7f:65:53:3b:
         95:33:4b:b7:17:08:ad:ed:a5:81:62:ec:fb:ae:db:9b:c9:81:
         36:57:51:96:59:93:87:0a:13:85:64:b2:ea:0c:90:7a:cb:91:
         a9:2f:7a:63:15:b0:a4:42:6f:42:86:d4:ec:3d:8c:86:d7:da:
         15:85:15:7c:41:68:f2:89:d7:e7:be:40:20:07:c4:bb:44:a3:
         82:ce:a6:75:e3:9b:55:18:43:24:de:1c:86:cb:07:45:8d:04:
         00:67:bf:ea:e6:ae:01:37:c6:d5:e0:f1:d9:a9:b2:41:ec:29:
         31:1a:fc:52:34:86:aa:0c:f2:d7:80:38:c6:1e:8f:8b:dc:e2:
         76:90:f1:60:1a:33:6b:b2:ea:a4:a6:34:a7:ed:e2:33:e2:ff:
         f7:07:93:6a:75:3a:96:3e:77:0f:46:73:71:ee:44:be:5c:06:
         3f:77:95:17:7c:a0:c8:9d:34:2a:63:3f:b0:0e:ac:d8:01:46:
         64:79:45:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 18:00:18 2026 by rpki-client