Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/aafa7218-9f55-3fdd-b76a-aefa27a87775.roa
File:                     aafa7218-9f55-3fdd-b76a-aefa27a87775.roa (raw, json)
Hash identifier:          FOsLGO9DA3OeGf2llVdi9cdvyUPsQQMe2v/9Vbh5hp0=
Subject key identifier:   F0:B6:18:DF:07:74:98:F7:02:05:77:44:24:46:66:56:32:97:08:C5
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584CDF327C20506B6BCAA7F987E0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/aafa7218-9f55-3fdd-b76a-aefa27a87775.roa
Signing time:             Sun 15 Feb 2026 14:00:41 +0000
ROA not before:           Sun 15 Feb 2026 14:00:41 +0000
ROA not after:            Sat 16 May 2026 13:00:41 +0000
asID:                     40300
IP address blocks:        2001:470:266::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 21 Feb 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:df:32:7c:20:50:6b:6b:ca:a7:f9:87:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Feb 15 14:00:41 2026 GMT
            Not After : May 16 13:00:41 2026 GMT
        Subject: CN=fa13def5-2090-436c-af4d-7c8952e1815c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:98:1c:79:61:9e:f2:39:eb:02:cc:97:f8:04:
                    bf:95:4d:6e:f6:1b:cd:2e:f0:f5:af:c6:dc:f2:16:
                    e3:39:b5:bf:dc:8a:17:49:44:09:ca:13:5f:89:2f:
                    2f:88:64:bf:e5:fa:de:a9:b6:db:91:a8:9c:9f:c2:
                    8e:57:ad:a3:35:03:7b:1c:88:cc:67:71:52:b3:b3:
                    f0:14:36:e6:d7:42:05:7d:6a:0e:7e:74:4a:d2:d8:
                    b4:49:c2:94:03:e6:d5:0f:fe:eb:22:15:cd:8a:fb:
                    af:26:64:e7:39:85:de:50:c7:c6:24:24:77:0a:56:
                    15:5d:ea:c9:45:a6:e9:6b:86:9c:da:e6:64:93:6a:
                    4d:6d:77:52:8a:bb:d9:32:85:7c:24:e5:a9:f3:86:
                    00:53:bf:90:fa:9e:fc:29:ff:ca:d4:ae:b7:95:ee:
                    75:58:ad:46:27:0b:78:41:5b:c0:9c:78:84:42:29:
                    23:aa:ca:d8:ea:71:53:3e:e3:5d:ae:eb:53:3b:32:
                    5f:9f:98:88:f2:a7:74:3a:d0:df:fd:e8:f9:59:60:
                    ba:06:28:24:a0:d1:42:75:4e:85:01:a6:53:b3:16:
                    bb:36:83:8b:69:d5:f5:4e:2e:13:01:68:ab:93:85:
                    b4:6e:7d:d3:58:65:65:a8:93:c9:18:da:4f:60:02:
                    5b:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:B6:18:DF:07:74:98:F7:02:05:77:44:24:46:66:56:32:97:08:C5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/aafa7218-9f55-3fdd-b76a-aefa27a87775.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:266::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bb:e7:16:e9:ce:dc:c1:7b:0c:7c:fe:16:32:f2:7c:1b:45:12:
         fa:c3:1c:4b:f7:87:3e:66:60:18:82:5f:35:75:a7:ca:f0:ed:
         88:2d:df:b4:66:55:51:01:2f:4d:5d:63:e6:0c:3e:19:87:3d:
         45:9e:b8:bd:09:a3:1d:fe:99:1b:1d:de:62:48:8d:ee:4b:1f:
         81:06:77:0f:34:b5:b8:15:0f:95:17:d1:ad:17:31:7f:ee:05:
         bd:b7:07:6f:58:32:07:ec:4a:e5:2d:99:62:9f:a1:1c:ac:5f:
         46:0c:bb:fe:67:79:de:c3:1a:58:68:fa:b7:b3:88:76:b6:06:
         36:5d:25:58:60:6e:ce:a3:af:48:e2:6c:5f:5a:23:43:c0:fa:
         44:69:fa:fb:fd:0b:e4:fe:0d:4d:72:d7:40:20:fb:c4:41:8d:
         6b:7b:45:ca:6d:22:1e:2d:9b:21:cd:b1:ac:5d:ce:9e:76:2f:
         aa:f9:bb:07:1b:ac:89:04:d1:a3:6a:c7:7c:b4:4e:10:e9:34:
         c5:80:cc:4f:19:40:f6:8b:86:85:f1:f3:33:3f:c3:53:8f:b3:
         80:ed:96:ca:b4:48:86:e7:60:fe:8e:8f:26:69:fd:5c:69:91:
         ec:1d:29:c7:9f:43:7a:f7:e2:fd:4a:2a:17:28:6e:df:b2:5a:
         37:f2:cc:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 19:05:22 2026 by rpki-client