Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/ee6ee44a-b201-3ca1-8e32-34f70da7754f.roa
File:                     ee6ee44a-b201-3ca1-8e32-34f70da7754f.roa (raw, json)
Hash identifier:          RHOd13ubPjsLKW0W7+DqPxHiatJdUZwjJ6YF3Bnt3b4=
Subject key identifier:   90:E0:58:2A:C1:AC:28:74:C4:83:22:A1:20:64:B9:E6:DD:6E:71:30
Certificate issuer:       /CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f
Certificate serial:       010D0C9F4328584CD13CADD61B3D9AEB6C9CE380
Authority key identifier: 1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/ee6ee44a-b201-3ca1-8e32-34f70da7754f.roa
Signing time:             Tue 10 Feb 2026 14:00:41 +0000
ROA not before:           Tue 10 Feb 2026 14:00:41 +0000
ROA not after:            Mon 11 May 2026 13:00:41 +0000
asID:                     11290
IP address blocks:        216.71.80.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:d1:3c:ad:d6:1b:3d:9a:eb:6c:9c:e3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f
        Validity
            Not Before: Feb 10 14:00:41 2026 GMT
            Not After : May 11 13:00:41 2026 GMT
        Subject: CN=57f5cca6-b207-49c1-a4c1-a3a737af23c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:d1:b5:a1:7a:c7:82:60:d9:98:8d:85:b8:98:
                    55:52:1c:54:81:ef:bf:49:30:74:56:f1:68:a9:96:
                    62:b8:09:af:9c:8b:09:b7:b9:2d:77:cd:53:c0:0b:
                    55:b9:52:39:7d:6f:85:0a:1a:6d:af:50:a3:3f:a2:
                    81:d6:92:5e:47:3c:92:76:e8:b9:58:8e:87:08:9a:
                    d7:86:a6:58:f9:69:05:12:4e:7c:5c:85:5c:b5:6a:
                    59:00:ee:5d:17:19:ec:c9:62:f8:08:6a:98:8a:33:
                    36:0c:ec:6d:27:58:a5:3f:51:60:cf:ae:98:98:0b:
                    63:5a:e6:0b:1e:ca:1f:61:41:84:fe:63:4f:34:ce:
                    47:5d:44:2d:61:22:7d:38:22:a0:d4:72:be:07:69:
                    18:41:58:53:02:c9:1e:bb:6c:e6:4b:bb:b2:e1:be:
                    23:c4:39:08:c1:9b:35:e1:bd:81:9e:e5:35:d0:86:
                    1e:9f:a8:7f:9e:41:2c:2a:35:ea:c0:6f:03:80:3f:
                    86:3e:50:d0:95:2c:32:67:81:e3:e1:29:ff:d6:4d:
                    87:4c:d4:d1:48:ad:3f:57:9e:6a:0e:d3:a3:41:e2:
                    8a:61:45:7f:13:a6:c4:7b:ba:01:42:63:68:97:06:
                    2e:98:e9:f2:bf:ca:07:dd:e5:1e:09:19:e7:4c:02:
                    d3:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:E0:58:2A:C1:AC:28:74:C4:83:22:A1:20:64:B9:E6:DD:6E:71:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/ee6ee44a-b201-3ca1-8e32-34f70da7754f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl

            X509v3 Authority Key Identifier:
                keyid:1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.71.80.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:94:ae:e1:5d:cd:88:b7:77:2e:dc:7c:52:6a:2c:d7:e3:44:
         05:c7:94:da:04:54:39:3c:62:ab:85:e3:1c:31:a4:00:e3:66:
         b3:8e:44:a0:ff:6b:d0:9b:c7:d8:e9:a9:f8:63:3a:84:b3:df:
         6e:e0:cf:5a:c1:f3:7e:ac:a5:b5:34:bf:8d:04:f4:e0:ea:d4:
         67:14:3e:1c:15:65:1f:a8:67:74:aa:5e:8a:24:99:d1:2b:62:
         9a:31:c3:06:d0:4c:c5:c8:91:98:28:17:97:d0:00:20:0c:01:
         fb:1e:be:da:ba:4c:22:74:4d:fd:cb:80:41:00:a1:06:82:98:
         9f:69:6e:52:9c:3c:37:c7:7c:02:ae:0c:2f:2b:44:d3:2c:e5:
         9b:8a:92:e4:b6:92:be:4e:b8:4a:6e:55:fa:f4:94:d2:07:e7:
         3b:1d:e5:27:9c:9e:39:2b:45:7f:91:5d:28:f1:3f:0e:34:f0:
         80:2d:32:1a:9d:a4:53:cb:9c:17:ad:d5:5f:62:85:2e:45:8e:
         b6:f2:37:ce:8e:79:c7:4f:7f:6d:e9:aa:92:82:7c:3c:45:68:
         18:d2:b3:6b:c8:aa:25:99:75:d7:cf:b8:10:35:9c:10:b7:0e:
         c9:78:6a:f2:ec:cf:d5:b4:60:51:f8:ba:3f:d5:85:5f:a0:47:
         d5:5d:0b:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:20:59 2026 by rpki-client