Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0845ba3b-9fc2-40fb-b74c-445ace8b4182/17c97364-2d34-322a-90a6-f80a73c7f5ac.roa
File:                     17c97364-2d34-322a-90a6-f80a73c7f5ac.roa (raw, json)
Hash identifier:          w3VMIKAk7f8A4GJTmF/dk+1npsf9nHHihFeLdWN5RL8=
Subject key identifier:   9F:6D:7F:22:D7:5C:8B:F0:28:1B:02:84:40:4B:A5:4B:8B:9C:8A:6E
Certificate issuer:       /CN=0845ba3b-9fc2-40fb-b74c-445ace8b4182
Certificate serial:       010D0C9F4328584CDF327670CEE4404B94113B00
Authority key identifier: 6B:84:42:69:D7:70:DD:26:8A:F7:B3:53:16:F4:AE:16:1C:63:F0:BD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0845ba3b-9fc2-40fb-b74c-445ace8b4182.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0845ba3b-9fc2-40fb-b74c-445ace8b4182/17c97364-2d34-322a-90a6-f80a73c7f5ac.roa
Signing time:             Sun 15 Feb 2026 14:00:41 +0000
ROA not before:           Sun 15 Feb 2026 14:00:41 +0000
ROA not after:            Sat 16 May 2026 13:00:41 +0000
asID:                     397423
IP address blocks:        2602:f94c::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0845ba3b-9fc2-40fb-b74c-445ace8b4182/0845ba3b-9fc2-40fb-b74c-445ace8b4182.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0845ba3b-9fc2-40fb-b74c-445ace8b4182/0845ba3b-9fc2-40fb-b74c-445ace8b4182.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0845ba3b-9fc2-40fb-b74c-445ace8b4182.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:df:32:76:70:ce:e4:40:4b:94:11:3b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0845ba3b-9fc2-40fb-b74c-445ace8b4182
        Validity
            Not Before: Feb 15 14:00:41 2026 GMT
            Not After : May 16 13:00:41 2026 GMT
        Subject: CN=91b599e4-9540-4fa9-8f99-1dd99e661af6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:2e:74:95:69:27:4c:b7:45:12:05:55:42:2a:
                    cc:ce:3d:d4:8e:29:31:5b:d6:b3:c3:73:c8:65:71:
                    69:59:58:51:23:1a:8e:2a:b7:8c:3d:99:d5:ed:81:
                    2b:ce:4e:89:2c:06:5b:d2:29:a2:a4:c2:ef:75:42:
                    08:84:ac:86:d7:ff:01:28:70:66:c1:4d:87:83:37:
                    8e:9c:c4:d4:3c:f9:c1:80:5d:34:2f:fb:6c:9a:88:
                    ed:13:52:c2:69:ef:b5:79:23:2a:62:44:3c:03:f4:
                    3c:9b:6b:7d:73:da:9c:20:55:78:bf:ba:35:97:6c:
                    e5:8a:6d:2b:a3:89:49:e0:25:ff:c8:ad:73:5f:d0:
                    19:cf:1a:1b:61:bb:d7:94:3b:af:47:45:1d:a5:98:
                    78:1c:03:6b:e7:a5:b5:f0:13:c6:a4:fd:a4:bb:c1:
                    64:18:97:85:4f:95:b7:c7:70:04:0d:b1:ff:7e:c5:
                    1c:25:2c:f9:d3:cf:9a:8d:75:dc:76:3d:dc:11:c1:
                    5d:7f:b2:2e:ef:72:df:c3:90:22:53:d2:3a:48:a4:
                    85:fd:e4:75:40:2f:c9:c1:61:2d:35:fa:da:b2:50:
                    67:ed:43:7c:3d:10:1e:31:e6:ac:ce:08:95:df:01:
                    90:89:1c:aa:0e:0e:67:05:92:83:18:64:9c:f7:94:
                    b4:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:6D:7F:22:D7:5C:8B:F0:28:1B:02:84:40:4B:A5:4B:8B:9C:8A:6E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0845ba3b-9fc2-40fb-b74c-445ace8b4182/17c97364-2d34-322a-90a6-f80a73c7f5ac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0845ba3b-9fc2-40fb-b74c-445ace8b4182/0845ba3b-9fc2-40fb-b74c-445ace8b4182.crl

            X509v3 Authority Key Identifier:
                keyid:6B:84:42:69:D7:70:DD:26:8A:F7:B3:53:16:F4:AE:16:1C:63:F0:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0845ba3b-9fc2-40fb-b74c-445ace8b4182.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f94c::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:67:15:9a:74:e7:8a:2f:6a:1b:56:d1:46:17:93:5a:99:1b:
         a5:3a:fc:a5:86:5b:d4:7e:14:82:95:32:c1:ea:1d:fc:d1:f9:
         2b:e9:8c:71:19:d9:10:74:0f:16:2c:7a:77:3e:75:9c:47:1d:
         4e:30:31:56:73:3c:da:3c:8c:b9:12:c1:27:7e:6e:c0:dd:21:
         49:b7:fa:54:ba:a1:4e:ec:58:2d:68:c2:ec:30:7c:52:0a:fb:
         72:41:fe:82:e4:48:73:bb:8a:52:e1:89:72:11:da:1d:a3:df:
         d9:f0:a0:56:98:e5:8a:e2:5f:62:3d:a0:f5:29:10:19:7b:3b:
         7a:23:45:bf:52:a5:95:1f:44:88:40:d6:be:01:23:5e:1c:3e:
         5e:a0:52:1b:28:96:0a:df:96:c8:94:51:ec:c1:94:6d:38:4c:
         19:ee:21:59:80:76:b0:a9:d5:e8:09:1d:4f:a6:68:ca:4f:95:
         c2:5c:f1:3b:89:ee:03:74:3d:6b:44:d0:ad:22:82:eb:8f:f3:
         db:8f:fd:d6:3a:9e:c9:c9:c8:1c:a3:30:8d:5a:58:8e:6b:fc:
         15:46:d5:7f:9a:ac:44:b1:fa:40:58:36:a2:d8:7d:5c:fd:a4:
         ac:98:df:a9:cb:b0:03:a3:36:48:0a:9a:f5:e3:cf:80:79:c3:
         8b:dd:75:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:29:16 2026 by rpki-client