Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b741a525-1b5e-4308-93b6-815fed38e182/ae858c3c-2288-3e41-9e51-5d4476b7a73a.roa
File:                     ae858c3c-2288-3e41-9e51-5d4476b7a73a.roa (raw, json)
Hash identifier:          J8+/fuqFTGggvTDtlMgS4C/QfJLNyuzIOv7mUwuhA78=
Subject key identifier:   7A:CA:7A:39:DB:73:21:7A:DE:99:10:C2:31:76:22:76:DA:CA:42:EC
Certificate issuer:       /CN=b741a525-1b5e-4308-93b6-815fed38e182
Certificate serial:       010D0C9F4328584D037CF50647B494A3E3EAA940
Authority key identifier: B9:2F:F8:2F:D3:08:81:EE:3C:3A:BC:B0:88:BD:60:E2:F0:88:EE:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b741a525-1b5e-4308-93b6-815fed38e182.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b741a525-1b5e-4308-93b6-815fed38e182/ae858c3c-2288-3e41-9e51-5d4476b7a73a.roa
Signing time:             Sat 28 Feb 2026 14:00:40 +0000
ROA not before:           Sat 28 Feb 2026 14:00:40 +0000
ROA not after:            Fri 29 May 2026 13:00:40 +0000
asID:                     26253
IP address blocks:        2606:2740::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b741a525-1b5e-4308-93b6-815fed38e182/b741a525-1b5e-4308-93b6-815fed38e182.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b741a525-1b5e-4308-93b6-815fed38e182/b741a525-1b5e-4308-93b6-815fed38e182.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b741a525-1b5e-4308-93b6-815fed38e182.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:03:7c:f5:06:47:b4:94:a3:e3:ea:a9:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b741a525-1b5e-4308-93b6-815fed38e182
        Validity
            Not Before: Feb 28 14:00:40 2026 GMT
            Not After : May 29 13:00:40 2026 GMT
        Subject: CN=52993079-206e-461a-9ed6-f99acfb23376
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:b9:c9:13:58:33:f4:64:99:ba:25:80:82:70:
                    3f:88:8a:2f:9b:fa:ef:09:78:d3:dc:4f:22:27:18:
                    c5:fa:b4:5c:2e:28:b6:d2:d7:55:6c:d0:fa:63:c7:
                    90:d1:35:a0:34:af:da:f2:f5:16:99:eb:c5:50:3f:
                    b1:8c:13:4b:b8:31:2b:8e:84:97:d2:b1:5d:9b:84:
                    71:a0:26:bc:27:9d:03:37:32:2b:21:3c:78:f6:db:
                    f0:09:71:32:1f:0c:9b:f9:18:84:40:da:3b:19:c3:
                    7b:65:1f:da:d1:78:6c:ec:ec:0d:e5:ff:09:67:c7:
                    d0:48:6a:eb:26:e2:69:bc:9a:5b:5c:42:5a:1f:c3:
                    c4:0f:ab:e8:21:9a:25:a5:23:3f:08:72:2f:2a:11:
                    2b:ed:bb:6c:4f:29:e1:77:c7:c8:94:6b:f6:60:92:
                    b7:ef:e8:69:f9:a8:f8:4d:c9:82:83:85:ed:d5:5b:
                    b3:0e:1b:19:14:31:49:f0:9e:97:b3:cd:55:0b:2c:
                    cc:49:a2:83:df:79:7c:05:43:a4:85:af:c5:5d:9a:
                    b0:1c:79:75:d0:3c:0a:d2:1c:a6:5d:8c:29:b1:80:
                    65:34:5a:d9:06:7a:c2:ce:c5:9f:00:85:56:0f:d0:
                    ea:26:59:07:59:40:69:60:d6:03:d5:c9:3f:aa:e1:
                    66:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:CA:7A:39:DB:73:21:7A:DE:99:10:C2:31:76:22:76:DA:CA:42:EC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b741a525-1b5e-4308-93b6-815fed38e182/ae858c3c-2288-3e41-9e51-5d4476b7a73a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b741a525-1b5e-4308-93b6-815fed38e182/b741a525-1b5e-4308-93b6-815fed38e182.crl

            X509v3 Authority Key Identifier:
                keyid:B9:2F:F8:2F:D3:08:81:EE:3C:3A:BC:B0:88:BD:60:E2:F0:88:EE:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b741a525-1b5e-4308-93b6-815fed38e182.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:2740::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:e2:4e:a6:35:35:01:61:bc:0b:b5:7e:6d:46:97:b1:6d:ac:
         d1:36:7b:bb:85:34:d0:ed:79:62:df:ff:58:34:1a:ae:ad:b1:
         71:16:94:e9:46:7b:21:c9:a6:ef:1a:53:a4:75:e2:15:34:c0:
         13:66:f0:16:5e:18:70:fd:0d:f2:08:37:cf:be:d1:8c:5a:63:
         9d:e6:4a:79:28:89:58:02:3c:2b:63:7c:bb:75:f0:e9:1c:2f:
         2c:fe:e7:48:4d:98:b8:42:2d:df:16:d0:0d:81:03:9b:d7:a9:
         5c:4d:28:0a:44:49:45:1b:07:ec:4c:f6:81:11:ab:93:bb:cc:
         ca:75:0b:66:fd:12:67:96:08:83:a7:1c:91:17:dc:cd:ec:41:
         62:60:54:09:9d:ec:1b:70:01:fa:b3:89:2b:7e:67:ef:fd:46:
         d3:f1:53:ba:16:05:e9:5e:94:06:2f:3b:cd:59:be:ea:fe:43:
         d5:f0:5e:85:5c:b9:77:5d:c0:29:c7:8a:dc:0d:5d:d4:50:d7:
         9b:c7:b1:6c:57:ae:f8:50:aa:de:7f:0b:37:94:b5:da:6f:24:
         96:5b:d1:4c:0e:84:2e:2b:3e:b5:0d:06:ef:bc:90:9a:65:e4:
         e2:79:a7:c6:82:e1:3a:24:44:f8:53:9b:12:3b:35:7a:63:dd:
         3c:eb:44:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:30:48 2026 by rpki-client