Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4a40e9e6-357f-453d-b386-d71fd9d24cf8/a46157e0-a7ea-356d-a381-71067022a9b8.roa
File:                     a46157e0-a7ea-356d-a381-71067022a9b8.roa (raw, json)
Hash identifier:          eVi4dihFgNvdrxRc7uDzvlRB3TfYIK+eRZxvd3aBFaY=
Subject key identifier:   CC:1C:7F:8B:95:15:A2:BD:3D:B2:44:89:28:1A:D7:2F:A5:CE:71:7F
Certificate issuer:       /CN=4a40e9e6-357f-453d-b386-d71fd9d24cf8
Certificate serial:       010D0C9F4328584CCA41D4D009B1640F83420080
Authority key identifier: B2:4F:02:F4:AC:5C:BD:40:82:49:CE:9C:30:D0:73:26:8C:94:7F:CA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4a40e9e6-357f-453d-b386-d71fd9d24cf8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4a40e9e6-357f-453d-b386-d71fd9d24cf8/a46157e0-a7ea-356d-a381-71067022a9b8.roa
Signing time:             Sun 08 Feb 2026 02:00:32 +0000
ROA not before:           Sun 08 Feb 2026 02:00:32 +0000
ROA not after:            Sat 09 May 2026 01:00:32 +0000
asID:                     394457
IP address blocks:        2604:2960::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4a40e9e6-357f-453d-b386-d71fd9d24cf8/4a40e9e6-357f-453d-b386-d71fd9d24cf8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4a40e9e6-357f-453d-b386-d71fd9d24cf8/4a40e9e6-357f-453d-b386-d71fd9d24cf8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4a40e9e6-357f-453d-b386-d71fd9d24cf8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ca:41:d4:d0:09:b1:64:0f:83:42:00:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a40e9e6-357f-453d-b386-d71fd9d24cf8
        Validity
            Not Before: Feb  8 02:00:32 2026 GMT
            Not After : May  9 01:00:32 2026 GMT
        Subject: CN=fc659107-0ba0-4330-9c2a-2259846b2e91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:93:e4:42:42:b5:2b:f7:0c:e1:a2:d5:74:ff:
                    15:79:b5:1c:ac:12:86:b0:a3:a9:e9:b7:6f:c9:bc:
                    42:af:37:99:a7:3e:e4:39:a8:a6:33:d3:88:86:21:
                    37:c1:b0:bc:1d:76:6f:3a:8f:8d:2b:8d:84:95:78:
                    0b:33:8c:81:b4:96:cf:db:7e:c6:d4:82:ef:38:1d:
                    31:40:f3:f7:7b:ae:a4:60:3a:d8:ec:06:e6:7f:81:
                    7a:79:ec:53:32:5e:be:68:3b:87:03:7b:b4:d4:9d:
                    81:87:27:53:6f:11:39:fe:5b:ea:56:f1:6f:2b:b6:
                    10:25:a6:cf:4f:1d:8a:b2:67:df:a1:c3:26:89:87:
                    20:41:e4:d4:d0:5a:97:7c:80:36:5f:ec:9d:ba:1b:
                    9f:1c:35:44:34:24:4e:42:b1:8b:f2:fc:1d:b7:72:
                    98:7a:88:5b:a5:50:9a:ff:fe:47:c3:7b:e5:ef:57:
                    8f:3f:e0:b3:5b:91:a7:b2:d6:47:41:92:f8:a6:b8:
                    dc:5b:6a:22:fe:1c:93:43:a0:8d:af:ee:5c:19:4b:
                    f4:00:be:fb:64:51:c6:fd:5e:6b:21:72:30:9c:63:
                    08:4e:bb:8c:ec:64:e7:38:28:e3:ba:a2:b4:35:3a:
                    e5:22:f3:a4:52:17:dd:02:38:b5:04:0b:46:79:16:
                    54:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:1C:7F:8B:95:15:A2:BD:3D:B2:44:89:28:1A:D7:2F:A5:CE:71:7F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4a40e9e6-357f-453d-b386-d71fd9d24cf8/a46157e0-a7ea-356d-a381-71067022a9b8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4a40e9e6-357f-453d-b386-d71fd9d24cf8/4a40e9e6-357f-453d-b386-d71fd9d24cf8.crl

            X509v3 Authority Key Identifier:
                keyid:B2:4F:02:F4:AC:5C:BD:40:82:49:CE:9C:30:D0:73:26:8C:94:7F:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4a40e9e6-357f-453d-b386-d71fd9d24cf8.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2960::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:d8:84:6c:d1:b5:41:08:2f:7b:d1:d2:d6:20:80:c0:98:b8:
         a1:63:0b:9d:db:48:79:47:73:7a:34:ab:d9:c4:6a:3b:e4:cf:
         c7:e3:ff:80:49:c3:9e:64:06:c2:22:ae:cf:45:44:2c:67:9e:
         d5:3a:20:99:3c:de:45:91:f1:fe:0b:0c:9b:7b:95:df:22:fd:
         16:52:bb:d3:bf:ee:dd:9e:93:a7:45:a1:0f:9a:14:3b:27:21:
         c8:7f:e7:de:65:a2:30:b8:36:2b:48:ff:45:42:77:70:7e:d1:
         8a:0d:84:40:e2:cd:87:b1:2c:0f:0b:42:73:f4:83:c8:ae:9c:
         81:5b:91:e5:2f:fb:f8:1d:60:27:09:7e:55:96:bd:07:52:9d:
         ed:78:03:73:6a:9e:d2:10:5d:39:e9:bd:80:b0:bd:c7:12:64:
         85:78:b1:dd:fc:6d:57:be:0e:16:d8:9f:3e:c0:21:7a:1f:e6:
         b9:4e:14:44:ac:9c:d2:ec:30:66:7b:a9:6e:12:0f:46:71:6d:
         10:ae:78:fe:12:2b:96:6c:7a:51:ee:c6:f4:62:8e:d5:74:e3:
         e6:66:3a:c8:15:b9:ac:46:07:4b:22:d5:b3:64:cf:84:b9:21:
         e1:b9:4d:cf:39:41:ff:fd:a2:30:71:12:56:b3:bb:3e:a9:9c:
         36:d6:70:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:58:23 2026 by rpki-client