Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c3821293-eea8-46fe-8eaf-ca46323c5e8b/8b1938a2-c955-3378-b400-ac21f2c42f3a.roa
File:                     8b1938a2-c955-3378-b400-ac21f2c42f3a.roa (raw, json)
Hash identifier:          /Vg0wbOR8diZ4jZ9IXlBXraTq8K8g7udtsdtC2cTRw0=
Subject key identifier:   A0:14:BD:D5:38:93:2A:E5:59:D0:82:15:E4:BF:B5:B8:F7:1C:BD:21
Certificate issuer:       /CN=c3821293-eea8-46fe-8eaf-ca46323c5e8b
Certificate serial:       010D0C9F4328584CED27865F5D75429D2FE82000
Authority key identifier: BD:B9:87:F5:10:82:35:D2:BC:A9:95:94:6A:29:F2:F1:DE:1D:46:22
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c3821293-eea8-46fe-8eaf-ca46323c5e8b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c3821293-eea8-46fe-8eaf-ca46323c5e8b/8b1938a2-c955-3378-b400-ac21f2c42f3a.roa
Signing time:             Fri 20 Feb 2026 14:00:41 +0000
ROA not before:           Fri 20 Feb 2026 14:00:41 +0000
ROA not after:            Thu 21 May 2026 13:00:41 +0000
asID:                     394781
IP address blocks:        2602:faf6::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c3821293-eea8-46fe-8eaf-ca46323c5e8b/c3821293-eea8-46fe-8eaf-ca46323c5e8b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c3821293-eea8-46fe-8eaf-ca46323c5e8b/c3821293-eea8-46fe-8eaf-ca46323c5e8b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c3821293-eea8-46fe-8eaf-ca46323c5e8b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ed:27:86:5f:5d:75:42:9d:2f:e8:20:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3821293-eea8-46fe-8eaf-ca46323c5e8b
        Validity
            Not Before: Feb 20 14:00:41 2026 GMT
            Not After : May 21 13:00:41 2026 GMT
        Subject: CN=62f1cab5-2668-4a86-bac3-02fa01704610
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:12:03:ee:61:22:49:78:36:a3:1e:d0:ae:3f:
                    3d:6a:a1:cc:27:4f:39:2a:a9:ed:4d:27:44:18:0c:
                    da:9e:75:66:68:6b:5a:1c:a0:d3:ee:11:cf:b6:e2:
                    d1:4a:83:a1:39:10:f8:83:26:e0:51:d6:0f:75:ea:
                    bf:58:ee:b6:fd:33:c0:5b:0f:6a:fb:16:9a:03:f6:
                    15:c5:72:05:64:16:7e:6a:80:8d:3c:52:f1:0e:d0:
                    f5:2a:7a:db:b2:a6:79:bd:99:fe:7b:c7:b9:92:03:
                    0b:c8:52:32:b7:3c:39:f7:b1:98:47:6b:7c:72:89:
                    3f:9f:38:ea:1c:e0:cc:8c:cf:a1:7d:73:6b:72:6c:
                    bf:b3:7f:59:e0:04:11:d4:9f:09:8e:e4:fd:8e:f8:
                    dc:50:0a:6f:32:37:63:a6:30:89:e3:99:60:e7:a8:
                    4d:31:64:3f:fa:73:13:9d:0b:a7:80:5c:97:b7:07:
                    1c:bd:4c:78:e8:fb:06:bc:69:43:23:40:3f:ea:5c:
                    b6:35:fd:4d:6b:16:9b:1c:61:d5:a3:97:f3:4c:fe:
                    ce:30:df:56:19:74:70:f9:12:36:24:b7:67:87:aa:
                    6e:20:40:80:cf:d7:46:88:12:30:94:6a:c9:7d:16:
                    ac:16:85:e6:8c:4e:25:38:29:df:28:8f:b9:97:2d:
                    71:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:14:BD:D5:38:93:2A:E5:59:D0:82:15:E4:BF:B5:B8:F7:1C:BD:21
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c3821293-eea8-46fe-8eaf-ca46323c5e8b/8b1938a2-c955-3378-b400-ac21f2c42f3a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c3821293-eea8-46fe-8eaf-ca46323c5e8b/c3821293-eea8-46fe-8eaf-ca46323c5e8b.crl

            X509v3 Authority Key Identifier:
                keyid:BD:B9:87:F5:10:82:35:D2:BC:A9:95:94:6A:29:F2:F1:DE:1D:46:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c3821293-eea8-46fe-8eaf-ca46323c5e8b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:faf6::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:cc:0d:b3:f5:99:c1:18:c8:96:f7:ed:f5:2a:ff:9d:31:c2:
         2c:d5:34:a0:f6:87:fa:0a:ed:97:a4:82:2c:dd:52:61:dd:c2:
         dd:2f:3b:33:86:63:c1:45:9b:8d:87:36:33:cd:1f:42:9a:98:
         db:91:f7:fa:04:f4:36:d1:df:c3:0b:41:3f:0f:1c:6c:4a:38:
         95:71:b8:9c:2e:b1:1f:d6:a1:dd:40:a8:15:3b:ec:80:ab:cf:
         78:cb:a2:11:4b:6c:43:75:a0:b5:17:76:d0:35:d4:2b:25:b7:
         a9:93:ac:76:54:6a:b3:57:16:e5:e3:04:c5:16:46:8c:b8:27:
         e2:86:1c:42:a6:c9:d2:8e:56:0d:a3:bb:87:c9:aa:99:7b:8b:
         b9:d4:79:37:16:5c:87:75:b4:1d:91:a2:d8:27:7a:81:6b:c1:
         66:c8:2c:b0:32:38:88:22:89:3b:bd:29:14:2e:02:c9:89:21:
         13:80:d2:ef:e1:ec:09:45:4e:6c:5f:80:cf:e3:bb:a3:38:88:
         c8:4c:1a:0c:f4:60:e9:e8:94:f5:fa:03:ab:6e:bd:34:dd:d6:
         e5:be:1d:2a:82:5c:de:61:b0:30:db:5f:71:8d:8e:a6:8a:4d:
         11:94:4b:47:54:0f:db:5c:ab:71:bb:54:24:1f:d2:62:17:69:
         c6:8e:2b:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 21:09:36 2026 by rpki-client