Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/40bac1fd-3fa0-3674-97b7-0a851e8d2827.roa
File:                     40bac1fd-3fa0-3674-97b7-0a851e8d2827.roa (raw, json)
Hash identifier:          G8cCXpgHGXgDn7DHy+Dd3TsCo22ruKi09EEMdq+5ua4=
Subject key identifier:   C6:DC:F4:0B:2E:A7:22:9B:CD:E0:67:AC:2F:89:09:72:60:AB:D8:7E
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584CD99CB5191D694BA010FAD100
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/40bac1fd-3fa0-3674-97b7-0a851e8d2827.roa
Signing time:             Fri 13 Feb 2026 14:00:41 +0000
ROA not before:           Fri 13 Feb 2026 14:00:41 +0000
ROA not after:            Thu 14 May 2026 13:00:41 +0000
asID:                     396540
IP address blocks:        2001:501:b1f9::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:d9:9c:b5:19:1d:69:4b:a0:10:fa:d1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Feb 13 14:00:41 2026 GMT
            Not After : May 14 13:00:41 2026 GMT
        Subject: CN=37f25746-e34d-4beb-a32f-458710cb8e2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:8d:75:16:b6:e4:4b:2a:cb:62:94:ea:70:45:
                    f6:93:05:f8:13:4a:2c:08:80:41:e1:77:3b:e0:fc:
                    07:e5:6e:fa:fd:c3:55:0a:a5:c9:b4:15:3e:a3:01:
                    db:31:0e:71:c3:b4:02:eb:d0:e8:67:eb:ac:e8:90:
                    0e:a8:d8:ec:49:9a:80:bc:ab:ed:ea:82:a2:50:ba:
                    92:0c:a0:7a:a4:9f:c4:32:7f:df:d2:3b:4d:27:5f:
                    9e:46:34:11:ca:fa:7b:ed:05:b0:ee:a7:d7:01:c7:
                    5f:08:30:42:07:10:02:93:84:b2:a9:57:68:9d:29:
                    7f:26:be:5b:4f:4d:44:a8:84:08:32:0b:9b:02:33:
                    bf:0c:26:0e:d9:83:10:c3:72:f4:92:c6:a3:c9:6f:
                    cb:41:5f:c3:48:76:bb:44:38:4d:11:6b:e0:0a:75:
                    a7:95:e2:49:ad:77:bc:d9:3f:c2:95:41:60:56:29:
                    24:13:81:a5:7b:34:2c:25:30:67:83:75:f0:9f:2d:
                    f4:35:ef:11:46:27:2e:81:4d:19:f0:1e:a3:8c:7b:
                    42:4c:b4:c9:9b:b8:c2:8a:3c:0f:42:b2:34:f2:73:
                    cc:0b:75:94:82:26:f1:5a:ad:04:f7:cf:84:e9:85:
                    59:f5:96:5e:b2:8f:91:67:fa:03:de:9b:e8:6b:f6:
                    b3:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:DC:F4:0B:2E:A7:22:9B:CD:E0:67:AC:2F:89:09:72:60:AB:D8:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/40bac1fd-3fa0-3674-97b7-0a851e8d2827.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:501:b1f9::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:b8:6c:e8:b5:ae:ae:df:1f:fe:42:0d:d7:1c:4c:59:07:5a:
         4b:44:35:88:d5:c3:3a:d2:a8:1d:eb:72:8b:23:a1:41:57:f7:
         1b:9d:66:e7:c0:cf:95:92:e7:a9:b6:48:3a:e0:b9:2f:e9:74:
         87:77:3a:f3:12:6d:25:da:8d:91:9f:81:72:f4:55:f7:43:a4:
         4d:81:4c:28:d3:c1:63:43:5a:42:e7:0e:1e:99:95:ee:e1:a3:
         a7:68:37:77:6d:50:e3:78:5d:39:84:8c:2a:db:3d:ad:93:4b:
         a4:30:33:c0:8b:d3:02:08:c8:c7:18:d4:42:3d:21:89:08:82:
         62:b0:b3:71:b3:1b:47:b7:22:82:dd:3a:6a:eb:fc:05:e2:e0:
         67:28:19:a3:c5:ef:86:47:a0:9d:0c:36:0e:68:27:ca:8f:36:
         3a:08:6c:c6:75:97:09:63:c7:5b:98:7d:ac:41:a9:90:c6:ea:
         81:b5:11:41:ce:e6:da:14:8c:be:89:d3:ff:ff:16:db:0f:85:
         8f:81:1a:fb:fb:4d:09:1a:ce:d9:6e:ab:0e:75:8d:77:bd:32:
         02:7b:d6:12:32:b9:86:ef:69:9a:82:dc:83:4f:1e:48:9c:96:
         cb:6f:7b:a7:66:23:02:f8:89:14:10:98:3b:fc:1c:ac:aa:4f:
         9a:2e:63:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:14:17 2026 by rpki-client