Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/9794ff8d-1efa-3765-9d69-8c31ae6a2dd2.roa
File:                     9794ff8d-1efa-3765-9d69-8c31ae6a2dd2.roa (raw, json)
Hash identifier:          fouES8anxvZJTieMAiDbwgX+VkmJFqWwAPXYixW1Ujw=
Subject key identifier:   FD:DE:B1:C8:48:D6:8B:7F:CA:86:6F:83:40:12:39:BD:44:21:61:CD
Certificate issuer:       /CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f
Certificate serial:       010D0C9F4328584CD4076B2C27211DDC42D5A180
Authority key identifier: 1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/9794ff8d-1efa-3765-9d69-8c31ae6a2dd2.roa
Signing time:             Wed 11 Feb 2026 14:00:41 +0000
ROA not before:           Wed 11 Feb 2026 14:00:41 +0000
ROA not after:            Tue 12 May 2026 13:00:41 +0000
asID:                     11290
IP address blocks:        2604:4d80::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:d4:07:6b:2c:27:21:1d:dc:42:d5:a1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f
        Validity
            Not Before: Feb 11 14:00:41 2026 GMT
            Not After : May 12 13:00:41 2026 GMT
        Subject: CN=f91d2800-0863-43b8-831f-08de86cb3ad6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:74:7f:c3:4d:ca:67:ed:a7:14:bf:4c:87:2c:
                    f1:d6:c9:94:ea:36:5a:40:ff:61:40:e1:b8:e4:78:
                    bd:fa:9f:ef:18:a3:2a:f2:8c:0b:0b:be:c3:c1:c6:
                    67:89:1d:56:ed:cf:69:4d:24:80:3e:39:f0:63:87:
                    1d:09:8e:c8:7e:4f:50:a2:59:00:25:f0:42:53:89:
                    5e:b6:c9:6a:fc:f9:a1:6c:c6:38:14:83:97:85:f0:
                    6f:8a:c8:49:ed:2f:ac:5c:4e:3c:51:13:32:7b:1f:
                    68:2d:ed:3d:1f:e2:78:77:a7:f4:44:e8:fa:fd:79:
                    0c:53:c4:34:54:01:1e:b2:d4:91:b0:84:49:cd:88:
                    09:fa:19:8c:45:0b:00:5b:53:04:ba:db:f1:a5:ad:
                    34:bb:15:80:a3:89:d0:9a:f5:4c:f2:20:1a:4b:6f:
                    e0:da:ba:cb:5e:ca:58:60:2a:34:a6:7f:e7:08:50:
                    2c:20:da:ff:93:01:39:7f:bc:57:2d:84:ea:f3:cb:
                    bf:d2:a0:28:23:aa:ea:db:b7:85:0c:6a:42:55:11:
                    71:c3:51:49:8b:a5:45:6e:0a:cb:a6:7f:69:e7:4f:
                    d0:f1:aa:64:bc:12:5d:6b:0b:01:a6:2b:49:3b:c7:
                    78:6d:7f:6c:1e:5b:77:86:3c:bd:30:5c:07:dd:72:
                    5c:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:DE:B1:C8:48:D6:8B:7F:CA:86:6F:83:40:12:39:BD:44:21:61:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/9794ff8d-1efa-3765-9d69-8c31ae6a2dd2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl

            X509v3 Authority Key Identifier:
                keyid:1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:4d80::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:0a:83:b9:c7:63:60:30:b1:72:61:15:10:6e:29:32:57:fe:
         9c:f1:ba:c9:e4:a6:4b:da:37:ab:b7:13:47:78:68:4e:7d:25:
         98:62:d5:ac:1c:40:8d:9f:ac:ad:55:b4:1e:aa:d9:c7:ac:8f:
         8c:8d:18:23:a2:76:3f:c1:af:0b:24:89:00:13:2f:ff:8e:c7:
         a7:7a:6f:ce:e6:f1:59:df:34:64:d8:a3:5e:e2:18:c7:cb:d7:
         de:6a:3e:1d:ab:cb:a0:43:b9:27:d9:1b:14:c3:67:e1:12:77:
         2a:1b:08:ca:35:cb:ac:1c:81:a6:c4:3c:bf:9f:6a:e7:c3:1d:
         e3:ee:cf:c4:6d:1c:3d:d6:02:d0:4c:47:1f:9f:0f:e9:b7:2b:
         a0:0d:80:94:52:a5:69:ec:c1:35:9c:65:d5:9b:28:31:ed:a2:
         46:0b:90:eb:32:4e:63:f4:0c:38:07:d9:37:bd:ce:fd:6f:ab:
         69:e3:26:3d:9e:ec:9c:45:09:31:95:e2:df:09:79:f6:63:2e:
         6e:82:99:3e:b8:29:68:9a:66:72:76:e2:76:64:6e:e1:5f:63:
         ef:01:92:d6:07:17:64:ab:36:90:7d:4c:a8:1b:1e:8b:55:09:
         3b:7f:a0:e6:57:37:55:3d:69:6f:da:01:d4:22:44:63:d5:bd:
         fd:ba:21:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:22:21 2026 by rpki-client