Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/acd38b39-740a-4881-b923-26d1a20ffbfe/885afd9a-8d88-38dc-b608-9f0392f4b9e0.roa
File:                     885afd9a-8d88-38dc-b608-9f0392f4b9e0.roa (raw, json)
Hash identifier:          wKACkOfzGP5LUBaLKxvmT8QNy6y42FaqTq8oDNosb/I=
Subject key identifier:   FB:40:37:A5:0A:2F:A9:3B:09:12:AF:23:19:CC:6A:A6:31:AC:17:B6
Certificate issuer:       /CN=acd38b39-740a-4881-b923-26d1a20ffbfe
Certificate serial:       010D0C9F4328584D00B26F2894BE227622005480
Authority key identifier: E9:0D:0F:ED:47:FD:7A:07:EE:45:AF:63:02:94:4A:39:11:B5:BB:62
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/acd38b39-740a-4881-b923-26d1a20ffbfe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/acd38b39-740a-4881-b923-26d1a20ffbfe/885afd9a-8d88-38dc-b608-9f0392f4b9e0.roa
Signing time:             Fri 27 Feb 2026 14:00:40 +0000
ROA not before:           Fri 27 Feb 2026 14:00:40 +0000
ROA not after:            Thu 28 May 2026 13:00:40 +0000
asID:                     33724
IP address blocks:        2604:240::/32 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/acd38b39-740a-4881-b923-26d1a20ffbfe/acd38b39-740a-4881-b923-26d1a20ffbfe.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/acd38b39-740a-4881-b923-26d1a20ffbfe/acd38b39-740a-4881-b923-26d1a20ffbfe.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/acd38b39-740a-4881-b923-26d1a20ffbfe.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:00:b2:6f:28:94:be:22:76:22:00:54:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=acd38b39-740a-4881-b923-26d1a20ffbfe
        Validity
            Not Before: Feb 27 14:00:40 2026 GMT
            Not After : May 28 13:00:40 2026 GMT
        Subject: CN=ca1aaf9c-9bba-416d-bbf4-4b983d590325
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:e6:44:0a:cb:6d:98:ce:a5:dc:88:23:c7:9e:
                    eb:fc:ff:88:f5:81:d2:ac:a3:ed:0f:a5:c7:d3:46:
                    20:44:49:b4:f5:f3:59:13:61:53:0f:6d:5b:29:54:
                    98:58:3d:64:f2:ee:b3:31:38:e9:a7:9a:5e:5b:d3:
                    4d:ed:54:07:00:6c:67:bc:9c:f4:d9:25:64:76:e8:
                    26:9c:07:d1:9f:a1:a8:b3:eb:b0:63:b0:40:04:07:
                    22:fa:9c:95:63:1f:78:db:50:1d:2e:91:18:99:aa:
                    93:5d:65:2e:80:f6:9c:f1:ea:cc:8a:c4:cc:6e:24:
                    ed:74:b0:59:21:4b:a3:52:41:b2:92:a4:37:90:0d:
                    46:29:80:c2:d8:98:0f:41:2c:50:8f:c2:f5:4f:62:
                    53:de:4e:01:f5:ad:23:a7:a9:1b:16:07:d5:a4:c1:
                    92:85:8e:3e:8b:cd:32:37:fa:e7:f2:49:23:bd:bc:
                    78:8a:8e:fa:81:e8:7a:be:db:1f:23:82:00:9a:7a:
                    a0:72:ce:4f:ca:46:1b:0c:4e:dd:6c:04:6c:e3:f0:
                    05:d0:58:b5:0b:17:f8:d2:52:ee:3e:f6:cb:1f:fb:
                    73:e9:c7:8d:54:2f:68:2d:aa:a9:56:5f:56:25:62:
                    47:52:dc:31:c6:0c:85:d0:da:ea:4c:0d:29:4c:b4:
                    3e:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:40:37:A5:0A:2F:A9:3B:09:12:AF:23:19:CC:6A:A6:31:AC:17:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/acd38b39-740a-4881-b923-26d1a20ffbfe/885afd9a-8d88-38dc-b608-9f0392f4b9e0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/acd38b39-740a-4881-b923-26d1a20ffbfe/acd38b39-740a-4881-b923-26d1a20ffbfe.crl

            X509v3 Authority Key Identifier:
                keyid:E9:0D:0F:ED:47:FD:7A:07:EE:45:AF:63:02:94:4A:39:11:B5:BB:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/acd38b39-740a-4881-b923-26d1a20ffbfe.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:240::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c8:89:3c:eb:9d:b0:92:7e:78:5e:39:75:1a:3b:09:d1:3e:5a:
         86:b1:89:f6:d0:32:31:c7:c0:be:75:69:0e:bb:28:de:99:ee:
         a0:00:84:d7:5e:04:13:34:13:4e:ee:cb:e0:f4:62:8e:a2:24:
         e0:69:0c:6e:24:dd:11:33:97:a5:c8:7c:4d:a4:3e:98:6f:b8:
         6b:68:5e:3b:70:d6:07:58:80:d6:27:0e:7f:4c:97:84:e7:13:
         38:5b:63:99:92:5a:d6:cc:54:e3:6d:2a:80:97:cf:e8:09:e3:
         84:97:f8:a2:33:da:a7:97:80:19:26:98:75:8b:b8:b4:96:ce:
         f4:b5:a8:6b:59:a9:46:2f:34:0c:c6:e3:a1:79:8f:0f:c2:d7:
         5f:9d:4e:ed:a1:44:19:0d:e8:cb:4e:b5:c0:5a:bb:48:72:f9:
         ec:f9:d9:0f:e9:c1:02:d4:40:ab:9e:a2:6f:fe:52:22:7c:8e:
         b4:a3:8d:8f:fd:28:52:db:c9:70:5c:cc:85:2d:16:e4:4b:15:
         3a:29:b9:ad:a7:90:94:38:1f:06:ff:ca:c4:47:87:ff:2a:35:
         d1:6a:9e:98:1a:05:15:d9:cd:fe:31:d6:81:eb:99:6f:34:97:
         48:bc:0f:4e:3d:c2:b2:21:74:f5:a4:4d:80:1d:ef:26:89:29:
         ee:55:b0:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:41:13 2026 by rpki-client