Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/aac5406d-4c20-4b08-83ac-a8eafc059fe0/ae3e4a96-006f-3dac-a4b3-65461b2a734e.roa
File:                     ae3e4a96-006f-3dac-a4b3-65461b2a734e.roa (raw, json)
Hash identifier:          r4mleCtPucuvBJY7TXU5HctuLVrVEekTsX3OlgrhCv4=
Subject key identifier:   88:80:42:1A:48:C0:24:95:F1:77:84:6F:29:CA:AF:BD:EC:22:37:A8
Certificate issuer:       /CN=aac5406d-4c20-4b08-83ac-a8eafc059fe0
Certificate serial:       010D0C9F4328584D037D17DCF3B2FBC1478E2680
Authority key identifier: 15:A8:78:40:92:99:20:F4:26:07:A5:49:A9:3B:17:59:FE:D3:4A:C7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/aac5406d-4c20-4b08-83ac-a8eafc059fe0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/aac5406d-4c20-4b08-83ac-a8eafc059fe0/ae3e4a96-006f-3dac-a4b3-65461b2a734e.roa
Signing time:             Sat 28 Feb 2026 14:00:40 +0000
ROA not before:           Sat 28 Feb 2026 14:00:40 +0000
ROA not after:            Fri 29 May 2026 13:00:40 +0000
asID:                     40916
IP address blocks:        2602:fcff::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/aac5406d-4c20-4b08-83ac-a8eafc059fe0/aac5406d-4c20-4b08-83ac-a8eafc059fe0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/aac5406d-4c20-4b08-83ac-a8eafc059fe0/aac5406d-4c20-4b08-83ac-a8eafc059fe0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/aac5406d-4c20-4b08-83ac-a8eafc059fe0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:03:7d:17:dc:f3:b2:fb:c1:47:8e:26:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aac5406d-4c20-4b08-83ac-a8eafc059fe0
        Validity
            Not Before: Feb 28 14:00:40 2026 GMT
            Not After : May 29 13:00:40 2026 GMT
        Subject: CN=14ec623c-d979-4faa-a186-97d0f6b01902
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:74:80:6a:cc:ef:4f:c6:9a:d7:ad:e2:79:55:
                    73:52:81:4f:90:7d:38:d1:a4:df:f5:41:9e:f3:3a:
                    ee:b7:ac:78:26:55:db:a9:9a:87:cb:e3:bd:97:4a:
                    1b:a2:55:2b:3c:fa:27:7c:28:bf:57:2a:aa:59:b2:
                    6a:80:4c:53:83:c9:c4:35:6b:71:7e:e5:de:d6:a4:
                    3c:0a:39:b7:8c:0a:25:37:ca:9f:0e:8e:dd:ec:ea:
                    1c:42:b0:04:45:22:03:ad:c6:b4:79:91:04:19:04:
                    05:97:30:ca:89:85:f4:57:61:54:6a:99:5e:6b:3a:
                    f6:55:78:7c:03:35:11:98:98:9a:36:29:c2:c7:0d:
                    12:b3:ea:fe:f0:c1:19:08:e3:a7:d7:97:bf:c3:67:
                    49:e7:65:21:6b:51:68:82:78:74:7a:e4:f1:20:d2:
                    a1:b4:3a:cf:4e:5a:f2:ab:13:b8:af:ce:f1:a2:66:
                    ff:a1:75:f9:1e:b0:04:40:79:0c:8f:d3:de:86:83:
                    e5:0a:3f:4f:c0:1d:d3:3f:95:ac:73:5f:26:62:16:
                    b3:34:59:6f:68:3f:1e:4e:fd:53:5e:30:3c:7a:b5:
                    f2:cf:44:02:fc:95:35:89:46:a3:7a:2c:7b:d6:27:
                    97:a9:32:e0:48:e6:85:76:71:74:bf:c6:8f:17:a6:
                    6b:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:80:42:1A:48:C0:24:95:F1:77:84:6F:29:CA:AF:BD:EC:22:37:A8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/aac5406d-4c20-4b08-83ac-a8eafc059fe0/ae3e4a96-006f-3dac-a4b3-65461b2a734e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/aac5406d-4c20-4b08-83ac-a8eafc059fe0/aac5406d-4c20-4b08-83ac-a8eafc059fe0.crl

            X509v3 Authority Key Identifier:
                keyid:15:A8:78:40:92:99:20:F4:26:07:A5:49:A9:3B:17:59:FE:D3:4A:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/aac5406d-4c20-4b08-83ac-a8eafc059fe0.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fcff::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a4:6c:7e:a0:e6:f2:fd:dd:83:b9:4d:20:49:de:1b:60:39:89:
         05:31:cc:95:0c:d2:21:b8:7c:bd:50:8e:c0:b6:e8:08:35:f2:
         f1:90:6f:11:35:5f:90:8c:42:3c:67:a6:80:77:6a:2e:00:ef:
         66:86:ff:2a:57:75:d9:dd:0d:75:04:05:35:72:5a:7e:9e:87:
         ee:da:77:b0:68:94:76:11:aa:fc:48:6b:04:bf:87:1b:d8:d1:
         00:57:9e:4e:4c:be:6c:9b:4e:67:e2:ac:6f:5e:5f:89:65:c9:
         11:f2:52:2b:39:53:dd:32:3b:cc:62:42:de:b9:18:57:a0:9e:
         d9:03:59:b6:87:64:2a:f7:24:49:3e:91:25:49:ce:9b:9a:45:
         64:2e:f6:76:ec:83:fc:6c:e8:f4:b3:fc:91:f6:5f:27:8d:b8:
         65:97:c5:b7:5c:81:8a:53:dc:e8:32:06:ff:df:b5:b8:77:4c:
         88:98:cf:a8:2c:fe:3a:f2:35:94:67:31:41:5a:03:46:44:b5:
         be:04:f3:e4:fb:94:d9:1d:6c:65:45:ae:8d:04:02:e6:ea:11:
         aa:1d:f0:f9:dd:e0:08:32:b3:dc:09:10:fb:13:de:26:e4:21:
         13:35:f6:d4:11:f1:8f:36:a3:c0:b3:03:bd:5b:84:8a:51:c4:
         83:22:43:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:01:39 2026 by rpki-client