Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d59d504d-c28c-3f8d-9858-c1f3f4a30c46.roa
File:                     d59d504d-c28c-3f8d-9858-c1f3f4a30c46.roa (raw, json)
Hash identifier:          3fm9Isoembv4VcfZUiUP0aGV+gCjSd1xvE4Md834+nI=
Subject key identifier:   0E:03:9E:88:CF:56:C5:BA:70:00:6B:7F:EF:6A:30:05:7C:14:A8:FF
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584CEA5D006BF1795247548B43E0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d59d504d-c28c-3f8d-9858-c1f3f4a30c46.roa
Signing time:             Thu 19 Feb 2026 14:00:40 +0000
ROA not before:           Thu 19 Feb 2026 14:00:40 +0000
ROA not after:            Wed 20 May 2026 13:00:40 +0000
asID:                     46440
IP address blocks:        2001:470:3f0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 21 Feb 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ea:5d:00:6b:f1:79:52:47:54:8b:43:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Feb 19 14:00:40 2026 GMT
            Not After : May 20 13:00:40 2026 GMT
        Subject: CN=0d9f5e33-d017-4e9b-b86c-fc8d165a1904
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:53:66:ce:9d:e1:8b:e5:d6:b7:db:53:a4:ad:
                    77:20:f3:3b:ea:80:36:61:66:88:b8:29:c7:a7:28:
                    e3:a8:a1:d4:6f:d1:77:64:7f:d2:b9:77:0e:a7:7d:
                    65:26:30:b1:54:3d:48:57:24:02:e7:37:9d:5e:50:
                    96:08:5f:ca:2c:1b:a9:fa:a5:a2:4c:2d:4c:d5:b3:
                    07:bd:9c:6f:94:a9:0c:e1:1d:55:21:92:82:58:70:
                    b0:50:78:00:f1:7f:2e:51:91:37:81:cf:d7:a7:07:
                    fd:e1:7f:e1:8d:fe:d8:2d:b2:e5:86:a2:e3:1e:5f:
                    9d:17:2f:a2:7e:5c:4c:88:72:39:9e:37:83:0b:3c:
                    19:2e:42:ff:f3:9a:15:3c:d7:65:e2:f9:ed:69:e6:
                    50:01:de:d9:5d:53:ae:ca:3e:35:19:47:b5:2a:11:
                    df:34:27:43:1c:42:72:86:10:70:74:39:29:1c:6b:
                    3a:ed:3f:f1:d7:d5:09:06:b7:d1:aa:03:a5:ea:cd:
                    a1:d5:89:c7:49:33:3d:46:f5:5a:d5:90:4d:7d:e7:
                    6b:d7:86:ad:a2:9c:d1:ff:28:37:8a:00:aa:be:23:
                    01:af:9b:c8:80:0a:ed:15:eb:49:f1:9d:c3:49:84:
                    a4:f0:f2:bb:25:fa:0c:c6:25:b3:e7:87:49:2f:7b:
                    62:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:03:9E:88:CF:56:C5:BA:70:00:6B:7F:EF:6A:30:05:7C:14:A8:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d59d504d-c28c-3f8d-9858-c1f3f4a30c46.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:3f0::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b8:43:46:66:0f:c1:1a:0d:38:d2:3c:7e:dd:cc:11:40:81:2e:
         63:5f:f9:ef:9b:f6:95:a8:c2:7e:ba:69:84:8d:73:ca:04:a9:
         bf:40:c6:3d:a6:8b:79:9f:87:18:d8:ab:00:a1:28:69:2d:db:
         d5:38:4f:52:30:fe:b1:4f:59:e7:c6:b1:12:ea:60:e5:1f:5b:
         01:62:b2:d1:b7:7b:ca:04:05:98:b8:32:9e:16:85:78:91:d9:
         d1:a6:ca:84:e1:29:79:ea:27:eb:2b:79:53:69:2d:83:68:1d:
         49:c6:df:10:5a:c0:77:e6:87:3a:c3:2f:78:16:af:0f:a9:54:
         f8:63:64:51:3e:1e:09:b9:d9:8c:41:96:b7:a5:c9:7a:38:dd:
         f2:fe:86:4b:b3:25:d2:ac:0f:74:e1:1e:8f:e9:07:f4:31:0a:
         d2:39:5a:9f:77:27:31:9b:29:35:b5:ae:2d:9f:aa:4f:03:36:
         48:68:27:3c:fa:46:b3:b5:14:51:ba:0b:be:9c:b9:84:8a:83:
         e1:38:ba:8d:d4:ca:b1:ec:06:c6:1e:41:e2:67:4a:c9:4b:2c:
         c5:aa:b4:d4:8a:92:25:bc:fe:a7:f4:25:f0:9f:14:8e:f7:09:
         8b:ca:f7:2d:8d:2f:97:31:2a:df:f4:63:c4:84:a5:ae:fb:6d:
         79:1b:de:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 17:56:54 2026 by rpki-client