Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/98cce9a6-cadc-36fd-9326-cc765ef424a0.roa
File:                     98cce9a6-cadc-36fd-9326-cc765ef424a0.roa (raw, json)
Hash identifier:          kFQmvJ/BqQ8BAuxGQPFosnrNZyefLokXWklj/rr9o18=
Subject key identifier:   F2:93:E3:A5:4D:A9:ED:91:25:71:9C:CB:72:23:2A:AD:48:DF:86:79
Certificate issuer:       /CN=208edf3a-73a5-4614-9c76-5702d5c88977
Certificate serial:       010D0C9F4328584CD13CB22BD01109CDB18BD100
Authority key identifier: 8E:21:B9:9B:FC:3F:2A:52:82:94:D4:B0:85:BD:F7:BC:CF:3B:55:47
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/98cce9a6-cadc-36fd-9326-cc765ef424a0.roa
Signing time:             Tue 10 Feb 2026 14:00:41 +0000
ROA not before:           Tue 10 Feb 2026 14:00:41 +0000
ROA not after:            Mon 11 May 2026 13:00:41 +0000
asID:                     398549
IP address blocks:        2605:dd40:2000::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/208edf3a-73a5-4614-9c76-5702d5c88977.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/208edf3a-73a5-4614-9c76-5702d5c88977.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:d1:3c:b2:2b:d0:11:09:cd:b1:8b:d1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=208edf3a-73a5-4614-9c76-5702d5c88977
        Validity
            Not Before: Feb 10 14:00:41 2026 GMT
            Not After : May 11 13:00:41 2026 GMT
        Subject: CN=3b9b02fd-5f1c-4ab1-9c5f-8e135306299a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:68:ca:b0:96:82:a8:c1:ba:d8:0c:f0:2f:fa:
                    cb:cb:72:1c:61:9d:0e:37:58:41:f6:75:22:92:e6:
                    63:86:0b:d3:02:bf:8e:8c:bd:60:9d:c5:97:95:9f:
                    bb:0b:46:59:48:c4:29:8b:a0:7d:ff:25:1a:0f:3b:
                    69:ac:ef:f4:27:d8:e4:9d:e2:1b:8a:58:3e:11:52:
                    72:84:7e:19:1b:2f:b2:4a:d6:d4:fd:0d:cd:2f:a3:
                    97:92:05:ce:23:58:12:b7:f2:fe:e3:94:da:70:ce:
                    a8:b9:14:6b:06:1b:9b:26:bb:57:f9:06:fc:68:56:
                    ca:9e:ae:90:fd:6f:a9:51:e1:b4:76:f0:00:a3:e6:
                    2a:26:88:14:ba:d3:62:b7:22:37:81:2a:d5:41:f1:
                    19:dd:1f:94:08:93:fd:70:3f:c7:f8:1f:8e:2c:c0:
                    19:a7:24:ea:77:7e:0c:8a:64:ff:40:36:a0:63:fc:
                    58:4c:a6:b2:c0:9b:85:25:d4:8d:cb:bd:26:73:8d:
                    07:06:55:ef:04:5b:51:f5:4b:f5:a9:6c:82:d9:00:
                    ad:3a:94:3a:83:6b:5e:9f:9d:be:d6:a1:19:88:56:
                    30:e5:51:fe:19:6b:a2:e0:21:e3:3e:0a:55:61:35:
                    de:c9:88:b3:0e:97:bd:4f:8f:c2:2e:e1:75:d2:19:
                    fe:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:93:E3:A5:4D:A9:ED:91:25:71:9C:CB:72:23:2A:AD:48:DF:86:79
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/98cce9a6-cadc-36fd-9326-cc765ef424a0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/208edf3a-73a5-4614-9c76-5702d5c88977.crl

            X509v3 Authority Key Identifier:
                keyid:8E:21:B9:9B:FC:3F:2A:52:82:94:D4:B0:85:BD:F7:BC:CF:3B:55:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:dd40:2000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:c9:9e:31:45:78:f7:d8:8e:60:8c:fa:2f:e4:ec:46:e5:d3:
         7d:87:9f:fa:52:f7:04:64:d7:2a:ba:aa:e1:a8:05:7b:87:a8:
         cd:f3:51:9a:66:38:c6:4f:05:db:c4:92:db:4c:a4:4a:69:9b:
         1f:ed:f6:d6:ca:0c:07:ea:7d:0f:9e:97:dd:36:1b:5b:db:37:
         c1:66:b9:6b:e2:61:c0:7e:28:ed:b5:db:b0:c2:7b:f6:c8:05:
         8a:e2:73:6b:6e:df:93:50:22:eb:bc:d9:d3:5d:fe:7c:51:87:
         b1:cc:ef:e6:45:19:7d:f6:e1:b8:43:ef:40:94:86:4d:50:b3:
         a6:90:4c:b3:44:40:f8:cc:a7:db:b3:d3:2c:4c:ab:b7:5c:dc:
         7d:67:37:bb:f4:e9:83:18:aa:e8:58:05:97:f7:05:cf:bd:37:
         cf:15:84:ef:6b:a7:1f:6e:42:e2:87:1c:4e:fd:83:46:9e:3c:
         a3:0f:00:ed:4d:6c:df:cf:fb:4e:cd:b3:e0:5b:18:cf:58:b5:
         30:7a:25:ba:33:e3:ef:ea:57:5a:90:e3:6e:49:6c:8b:c4:26:
         ca:2d:a1:e0:e3:61:1d:ae:75:57:53:9c:03:b6:ee:7a:4f:0b:
         2b:2a:ab:f6:5f:bf:9f:fc:ef:f6:43:ac:44:27:1b:19:21:93:
         97:50:75:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:31:44 2026 by rpki-client