Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25/f37e12b1-762c-3d49-8b93-8ba5322717de.roa
File:                     f37e12b1-762c-3d49-8b93-8ba5322717de.roa (raw, json)
Hash identifier:          MNsSqQgDlMWAhFbmzmpLDAM95bkqGmdRAXV60WAALdg=
Subject key identifier:   08:67:F9:EE:15:B4:67:6B:0D:E3:32:25:D2:5B:40:34:46:34:9A:A1
Certificate issuer:       /CN=6a8a6f79-08ff-4512-9f3e-58c42a84ed25
Certificate serial:       010D0C9F4328584CF2BCE4CF1CD67B139B970D80
Authority key identifier: C2:C0:7A:6B:38:EF:AA:81:55:58:0F:37:73:DA:9F:93:48:1E:B3:7F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25/f37e12b1-762c-3d49-8b93-8ba5322717de.roa
Signing time:             Sun 22 Feb 2026 14:00:41 +0000
ROA not before:           Sun 22 Feb 2026 14:00:41 +0000
ROA not after:            Sat 23 May 2026 13:00:41 +0000
asID:                     395123
IP address blocks:        2606:db40::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25/6a8a6f79-08ff-4512-9f3e-58c42a84ed25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25/6a8a6f79-08ff-4512-9f3e-58c42a84ed25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:f2:bc:e4:cf:1c:d6:7b:13:9b:97:0d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6a8a6f79-08ff-4512-9f3e-58c42a84ed25
        Validity
            Not Before: Feb 22 14:00:41 2026 GMT
            Not After : May 23 13:00:41 2026 GMT
        Subject: CN=3709e081-670c-4746-ac79-4fddf958e0fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:23:a4:19:15:14:c3:3a:82:af:f3:32:a9:29:
                    81:64:c1:ba:42:c2:e0:c0:6c:07:82:d0:39:43:72:
                    91:3c:29:a5:1e:a9:c9:fa:0d:4b:8c:6e:a1:36:a1:
                    c9:82:21:6f:c0:7e:cb:84:8f:d7:76:71:d7:ec:c9:
                    57:8f:82:fa:69:bc:ee:4a:58:57:46:1d:da:40:2a:
                    91:d3:28:43:34:0b:eb:69:df:b7:50:11:b8:cf:56:
                    4c:88:6b:ab:94:82:35:86:80:eb:d5:2f:82:52:4b:
                    0a:4b:c7:b5:8e:5b:a4:42:d4:14:21:b6:98:66:0c:
                    d6:69:29:ca:d9:e6:89:71:ac:95:1c:02:a6:d8:e5:
                    8e:64:0b:94:41:79:d8:00:4e:3d:0c:e0:3c:2c:b8:
                    35:d6:1c:cc:fa:94:2d:17:72:d5:e7:a2:ae:91:05:
                    e3:9e:f5:91:a3:ee:de:fb:c3:57:8e:0b:51:fb:0e:
                    bc:20:91:31:fd:8b:9b:41:90:a2:93:4a:40:fb:e5:
                    b4:8f:aa:f6:a2:1c:a4:c7:25:b4:ca:60:d8:92:71:
                    91:17:b1:c4:ab:f6:a4:5b:50:cf:08:af:fd:65:e0:
                    fc:77:ec:9c:35:6e:9e:3a:78:1c:3e:dd:b2:05:82:
                    84:a9:ca:b0:e6:01:34:3e:32:f9:50:84:b3:b9:f6:
                    f5:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:67:F9:EE:15:B4:67:6B:0D:E3:32:25:D2:5B:40:34:46:34:9A:A1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25/f37e12b1-762c-3d49-8b93-8ba5322717de.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25/6a8a6f79-08ff-4512-9f3e-58c42a84ed25.crl

            X509v3 Authority Key Identifier:
                keyid:C2:C0:7A:6B:38:EF:AA:81:55:58:0F:37:73:DA:9F:93:48:1E:B3:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:db40::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:a0:85:66:2f:a0:67:9d:57:5c:b2:d9:3a:92:5b:49:7a:22:
         1e:0a:d1:53:fc:0a:c0:00:08:c0:35:52:82:3b:fc:6c:d4:b3:
         86:5d:d2:be:de:1b:28:86:24:82:f6:9b:7e:ae:14:16:b3:3f:
         aa:16:b3:ff:5a:3d:15:c0:e9:04:91:4b:4b:5b:98:e8:86:db:
         32:67:00:73:b9:ab:ee:d4:26:c1:c0:37:ce:38:6f:58:c1:52:
         be:06:d0:a7:5e:37:2d:b2:5a:ee:65:49:77:80:bd:46:49:44:
         60:eb:14:f6:6b:c9:5c:2b:91:21:72:7d:6b:b0:32:f3:9d:91:
         0f:31:85:24:e0:bc:97:94:70:00:bb:6c:bd:d2:88:b3:a7:7d:
         6d:18:f3:da:f1:83:2c:49:5e:34:55:80:8b:10:4d:cb:25:78:
         65:53:fa:92:70:de:56:c0:05:46:8d:59:8e:26:b3:67:8c:b6:
         f3:7e:a9:32:c3:76:b5:82:c0:ab:d1:47:cd:40:35:28:6d:89:
         27:2f:c9:69:0e:6f:80:c3:b2:b2:5d:c5:ab:e0:d7:ab:11:a5:
         83:77:1a:e5:64:18:95:a9:8b:06:29:27:67:ba:96:5e:6a:7f:
         55:08:e5:eb:61:51:ad:d9:59:1c:98:bb:df:bf:75:ae:ce:26:
         c3:2a:1e:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:11:36 2026 by rpki-client