Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/095e61cd-fe3f-37b0-9ae4-c72658930a6b.roa
File:                     095e61cd-fe3f-37b0-9ae4-c72658930a6b.roa (raw, json)
Hash identifier:          Xrw8R4CDls5DaYmnxoEGS3qVYWvwmCGg2nqjdmjCQzY=
Subject key identifier:   A0:D0:8D:54:A8:A5:06:A7:C5:A8:5E:38:46:5F:CF:B8:A8:AC:9F:CC
Certificate issuer:       /CN=9906748d-5823-4cd3-9a11-f3dc69a3e751
Certificate serial:       010D0C9F4328584CC612113A11D84E3ECA852580
Authority key identifier: A7:31:13:DA:A8:C2:6D:D3:40:47:B6:C3:2B:BA:78:43:31:2F:01:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/095e61cd-fe3f-37b0-9ae4-c72658930a6b.roa
Signing time:             Fri 06 Feb 2026 14:00:40 +0000
ROA not before:           Fri 06 Feb 2026 14:00:40 +0000
ROA not after:            Thu 07 May 2026 13:00:40 +0000
asID:                     13778
IP address blocks:        2620:147:140::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:c6:12:11:3a:11:d8:4e:3e:ca:85:25:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9906748d-5823-4cd3-9a11-f3dc69a3e751
        Validity
            Not Before: Feb  6 14:00:40 2026 GMT
            Not After : May  7 13:00:40 2026 GMT
        Subject: CN=c4312715-9150-436d-b208-dac3cd05cf66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:01:86:cd:96:bc:d8:f5:e0:a5:34:b9:06:e9:
                    50:81:24:33:16:0c:b9:ee:93:3e:08:4e:ba:1e:90:
                    f3:b5:01:9f:77:31:d4:32:c7:6e:f9:fb:fb:ea:d4:
                    87:07:c3:cf:42:2f:88:dd:7c:27:1f:0b:d7:e2:b1:
                    1e:3d:e7:70:7e:37:80:e5:f3:20:58:13:6d:e9:ee:
                    65:02:95:5c:e9:6a:69:be:88:f4:eb:57:09:c6:41:
                    8f:48:23:a9:da:67:40:75:7a:6c:9c:cc:49:1e:d1:
                    fc:4b:c9:ba:d2:ad:94:aa:05:9b:cc:f0:1e:c9:54:
                    ba:e8:b8:b2:14:38:e0:3b:a1:d4:87:09:a1:ce:83:
                    51:96:24:3e:a2:2f:49:05:8f:08:cf:0c:96:a5:d5:
                    e2:ba:01:e6:ee:27:89:0b:00:34:65:1c:bb:ad:bc:
                    0f:2f:cd:df:1b:ae:7f:fd:c5:77:3b:c2:06:91:38:
                    81:78:93:15:bb:47:10:bb:61:53:27:25:9c:d3:63:
                    0a:b7:ae:51:b0:4c:85:ea:28:f9:cc:1a:52:57:4e:
                    d9:d7:e6:de:14:91:f2:d9:78:46:d5:06:d7:bc:2d:
                    bf:72:2d:14:d8:81:90:87:57:c5:d8:87:07:17:c5:
                    24:d9:4d:c1:73:97:4d:73:d4:39:f2:c0:8b:ca:cf:
                    d0:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:D0:8D:54:A8:A5:06:A7:C5:A8:5E:38:46:5F:CF:B8:A8:AC:9F:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/095e61cd-fe3f-37b0-9ae4-c72658930a6b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.crl

            X509v3 Authority Key Identifier:
                keyid:A7:31:13:DA:A8:C2:6D:D3:40:47:B6:C3:2B:BA:78:43:31:2F:01:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:147:140::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:e9:9b:b3:75:34:a1:f5:ed:88:96:42:e6:00:28:fe:11:f4:
         3d:e1:7d:21:f5:95:f8:6f:a2:f2:f6:78:2b:d0:63:0f:9b:2e:
         c2:b9:c8:19:8b:8f:60:a3:2f:13:20:c6:e9:95:7c:88:d1:c2:
         b2:e4:56:47:da:f6:59:d5:1f:39:99:47:fe:79:a0:4f:4e:2c:
         60:6c:02:49:fc:25:6e:c7:10:8e:2b:38:0f:6a:48:f8:84:02:
         08:17:2f:02:93:f7:df:c8:31:45:80:70:cf:60:ea:fb:3d:d1:
         91:f2:d0:fc:a7:cb:52:72:5c:bd:b9:03:39:e9:37:6d:d1:7a:
         30:ec:5a:22:9c:f9:e3:1a:c1:1e:f6:c9:f3:b1:6a:a1:1f:b9:
         06:08:1c:fd:9d:d3:43:67:c3:e8:0a:15:f0:c5:be:48:b7:38:
         32:f4:66:ff:92:29:21:f9:3e:09:22:19:2f:ad:1d:dc:e9:03:
         9f:ce:ae:a5:31:51:f3:b2:66:3a:03:37:37:69:30:e3:0e:86:
         99:b3:18:2f:1c:07:6d:ba:dd:4a:32:56:26:41:27:f4:38:f2:
         9d:9d:65:25:6a:17:a3:ac:1d:cd:fb:21:e3:5b:fc:a2:2b:f0:
         4f:34:93:42:8f:a9:8c:83:98:be:b8:0f:04:bc:1c:0c:c2:b2:
         3b:ad:90:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:44:37 2026 by rpki-client