Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/229738f4-d0a5-308d-b8e1-54df7daa41fc.roa
File:                     229738f4-d0a5-308d-b8e1-54df7daa41fc.roa (raw, json)
Hash identifier:          pTt7Xh+nrxWJ6/hswDC3ZftqNd8p6OcYMLtBHnuhvss=
Subject key identifier:   1A:8F:BC:45:E8:97:11:A9:C2:59:A8:46:EE:F3:B1:FE:06:04:63:FC
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584CEDCFDE225A6EAA27FF221B80
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/229738f4-d0a5-308d-b8e1-54df7daa41fc.roa
Signing time:             Fri 20 Feb 2026 19:40:03 +0000
ROA not before:           Fri 20 Feb 2026 19:40:03 +0000
ROA not after:            Thu 21 May 2026 18:40:03 +0000
asID:                     19905
IP address blocks:        2604:2d80:6800::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ed:cf:de:22:5a:6e:aa:27:ff:22:1b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Feb 20 19:40:03 2026 GMT
            Not After : May 21 18:40:03 2026 GMT
        Subject: CN=a2a089d1-0495-482e-9e70-5357cc945c98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:13:ec:5f:b7:1b:ad:39:2b:52:3e:58:8b:ba:
                    ad:13:7e:c4:d7:e1:27:8b:88:c6:20:2d:07:ef:22:
                    e0:d4:bb:65:e7:57:5a:05:26:15:37:ab:ca:e3:1e:
                    12:75:4f:9d:5f:90:7d:76:73:c2:71:b5:ef:55:b1:
                    18:0e:0a:36:55:5f:3f:28:58:ba:d3:bb:52:81:44:
                    6d:47:8a:c4:e3:90:38:c3:4f:8e:03:c6:ae:de:85:
                    ec:af:ab:0d:5a:bf:59:c6:b7:ca:82:52:47:0b:ea:
                    f8:d2:4b:11:72:f8:ca:4e:1f:e2:14:c3:7f:00:78:
                    94:ea:fe:81:a5:c7:67:8b:d7:d4:5c:ae:8d:52:34:
                    bc:50:66:33:b6:1e:ed:7d:ab:ab:2c:40:89:1f:63:
                    e3:58:9e:df:d1:a2:05:90:f0:11:35:4f:56:4d:19:
                    34:e5:90:12:e9:5b:53:ab:2f:10:63:b1:15:35:aa:
                    ae:f6:5c:18:7c:bf:ee:f8:7c:b8:f3:04:37:8e:4b:
                    e3:99:71:72:68:00:49:71:89:70:85:a2:fe:22:45:
                    14:2c:93:46:18:b5:5b:0b:e6:ba:1e:bd:32:42:6c:
                    54:79:54:2b:8a:a1:5a:88:0f:f6:ad:8d:57:51:72:
                    ab:be:92:2b:09:63:5f:f2:61:0e:ad:af:b8:ad:9b:
                    02:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:8F:BC:45:E8:97:11:A9:C2:59:A8:46:EE:F3:B1:FE:06:04:63:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/229738f4-d0a5-308d-b8e1-54df7daa41fc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:6800::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:9d:71:ed:eb:f2:c8:be:5e:35:c8:2b:6a:31:67:63:60:ac:
         47:44:41:7e:69:94:66:e3:9b:56:65:22:dd:f7:75:0a:c7:a8:
         9b:01:26:fb:7a:a1:2e:00:e8:88:26:9e:64:20:49:13:67:48:
         02:3a:8c:ce:ad:20:ab:8b:94:88:7c:24:2f:88:62:b8:39:d5:
         b8:30:08:8f:6b:47:b3:b1:00:ce:a6:30:2d:53:3d:7d:ba:24:
         44:ca:ec:df:05:b0:53:55:33:90:b9:63:6e:8e:80:72:9e:0d:
         bb:db:89:0e:68:ca:9d:1c:29:ec:66:72:57:e0:9f:17:04:e1:
         3d:11:10:2c:50:21:e3:48:a7:5f:ad:c0:e5:f2:b8:38:a1:04:
         0b:3b:e0:df:9b:21:47:73:9c:ea:97:a7:8c:a2:2e:2b:07:45:
         db:07:a1:ea:43:1c:4c:29:d9:78:fd:f1:5b:7a:e1:ac:6a:7f:
         ea:7c:d3:e4:88:b4:09:0d:48:2f:fb:a7:8c:da:5f:6d:88:ff:
         c9:28:57:63:ff:85:89:bf:84:6c:c9:74:25:2f:73:38:a9:d5:
         66:ae:5c:fe:3a:37:60:f3:3d:5e:30:1c:2d:93:d8:d7:0e:39:
         4c:24:ad:2f:fe:6d:a1:96:3a:e2:5a:a6:3a:26:05:df:9d:d6:
         98:e3:7a:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:10:21 2026 by rpki-client