Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/39993af2-98b1-47da-a218-47109f41cb97/fd4deffe-6f36-3083-b387-f5ec48e98c94.roa
File:                     fd4deffe-6f36-3083-b387-f5ec48e98c94.roa (raw, json)
Hash identifier:          /ln4WO+2h27CKsKLPxhqd5zEYwBbA5VaiiKWj6vvpKc=
Subject key identifier:   56:A0:C4:BF:DB:E3:81:EB:31:7E:ED:80:47:FF:BF:34:B9:E9:72:CF
Certificate issuer:       /CN=39993af2-98b1-47da-a218-47109f41cb97
Certificate serial:       010D0C9F4328584CC8DC9D122D7A22B3F37B3680
Authority key identifier: 12:D9:FD:69:DE:67:DD:AB:84:4D:8C:72:61:39:2F:F6:D2:4F:76:D6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/39993af2-98b1-47da-a218-47109f41cb97.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/39993af2-98b1-47da-a218-47109f41cb97/fd4deffe-6f36-3083-b387-f5ec48e98c94.roa
Signing time:             Sat 07 Feb 2026 14:00:41 +0000
ROA not before:           Sat 07 Feb 2026 14:00:41 +0000
ROA not after:            Fri 08 May 2026 13:00:41 +0000
asID:                     4150
IP address blocks:        2605:2580::/32 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/39993af2-98b1-47da-a218-47109f41cb97/39993af2-98b1-47da-a218-47109f41cb97.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/39993af2-98b1-47da-a218-47109f41cb97/39993af2-98b1-47da-a218-47109f41cb97.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/39993af2-98b1-47da-a218-47109f41cb97.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:c8:dc:9d:12:2d:7a:22:b3:f3:7b:36:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39993af2-98b1-47da-a218-47109f41cb97
        Validity
            Not Before: Feb  7 14:00:41 2026 GMT
            Not After : May  8 13:00:41 2026 GMT
        Subject: CN=5b15ff0a-affb-409b-980f-c9f438025578
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:36:dc:68:dd:f7:1e:6a:1c:99:70:03:3a:7c:
                    5d:12:f7:de:bc:be:6d:d6:f3:2b:c7:b6:cd:4f:3f:
                    8e:0e:87:6a:fd:29:18:5c:4c:05:86:dc:44:f6:07:
                    ba:e2:46:64:d6:42:75:b0:24:f1:8d:70:ba:02:ff:
                    bf:c8:cd:78:7b:be:f6:16:df:a9:2c:82:93:a1:da:
                    50:e2:7f:a6:36:00:ae:ae:b9:64:d3:d6:0e:59:76:
                    50:70:73:8c:89:f3:6f:6f:7b:d2:ee:19:87:4c:1b:
                    bc:6b:6e:24:34:fb:8a:3c:be:df:f8:aa:85:d5:74:
                    bd:53:49:ed:36:a4:da:76:de:64:5b:bd:62:35:43:
                    ba:c8:f3:b2:b3:01:d6:91:9a:53:cc:1a:62:b4:8c:
                    5a:29:51:02:e2:cb:02:14:d4:ad:c1:42:8c:cd:ed:
                    e7:58:1a:84:b6:b2:d4:99:1d:92:27:a4:53:05:a6:
                    e0:6e:92:b9:1a:51:d9:dd:4b:7a:89:be:30:2e:8c:
                    67:72:f3:d7:f2:08:99:32:93:c2:80:0e:ba:b7:46:
                    72:14:c8:1f:98:d3:f6:34:be:a0:e2:4b:8c:6b:72:
                    ba:3a:6c:c0:dd:41:24:f0:98:51:74:d4:79:df:c5:
                    45:74:4d:25:3d:8a:5a:3d:d2:16:a6:49:0f:a2:35:
                    80:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:A0:C4:BF:DB:E3:81:EB:31:7E:ED:80:47:FF:BF:34:B9:E9:72:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/39993af2-98b1-47da-a218-47109f41cb97/fd4deffe-6f36-3083-b387-f5ec48e98c94.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/39993af2-98b1-47da-a218-47109f41cb97/39993af2-98b1-47da-a218-47109f41cb97.crl

            X509v3 Authority Key Identifier:
                keyid:12:D9:FD:69:DE:67:DD:AB:84:4D:8C:72:61:39:2F:F6:D2:4F:76:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/39993af2-98b1-47da-a218-47109f41cb97.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:2580::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:3f:33:04:0d:0d:d9:b3:43:6e:09:cd:72:91:89:78:bd:32:
         a7:99:4f:46:26:53:6f:69:d5:af:67:bc:5c:e9:c5:38:2b:7b:
         a2:64:cd:db:13:b3:00:0e:82:ba:5e:15:d9:3b:bf:15:8f:22:
         8d:8d:2f:e5:7f:4f:26:5c:aa:93:cb:7c:78:ef:c7:6c:b1:52:
         b4:5a:82:79:f3:35:09:c3:b6:b2:7c:87:ef:98:8e:8c:e3:e2:
         54:dd:c6:ad:49:8e:f6:21:4b:06:8a:e2:08:a0:65:e4:88:19:
         93:83:1e:77:b2:85:78:2d:b5:9e:67:7b:3c:19:92:36:5a:c7:
         96:23:ce:77:86:1b:ab:2d:62:b3:bd:fb:8b:f7:0e:bd:26:1c:
         75:66:26:18:4d:75:e4:7a:93:d1:6c:12:81:c1:28:46:5b:7f:
         58:c8:db:64:a6:c3:11:d0:74:e5:59:1c:8a:cb:a2:2c:94:44:
         ff:44:8b:e9:01:51:55:f8:0a:fc:ab:1d:48:46:3b:9e:85:c1:
         41:f0:de:67:61:09:31:e7:ab:16:cc:d9:34:93:80:6b:fb:d9:
         8d:5e:9a:db:73:8d:39:d5:d3:d0:68:ac:0f:8d:76:e3:cb:b6:
         3c:7d:23:34:c5:f5:70:06:8a:c1:bd:44:fa:9d:b7:f3:bf:c3:
         eb:b4:ae:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 23:41:11 2026 by rpki-client