Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9be8f23f-3a8c-4822-8996-e4131d203c13/aba7e906-6e7c-3ebe-bca7-ee0ba46a653a.roa
File:                     aba7e906-6e7c-3ebe-bca7-ee0ba46a653a.roa (raw, json)
Hash identifier:          lb8Yg/WRykay01MNYIgvlTRW+v+4fPtGW1ajCIdGQG4=
Subject key identifier:   6C:4E:B6:6F:07:DD:E2:14:D9:25:D2:2E:14:C2:C4:B3:95:B3:2E:4F
Certificate issuer:       /CN=9be8f23f-3a8c-4822-8996-e4131d203c13
Certificate serial:       010D0C9F4328584CF58793ACFE5877C7243783C0
Authority key identifier: 80:AD:19:B2:F1:CB:42:EA:DC:B3:3D:6C:5D:DE:3C:68:47:48:15:90
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9be8f23f-3a8c-4822-8996-e4131d203c13.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9be8f23f-3a8c-4822-8996-e4131d203c13/aba7e906-6e7c-3ebe-bca7-ee0ba46a653a.roa
Signing time:             Mon 23 Feb 2026 14:00:41 +0000
ROA not before:           Mon 23 Feb 2026 14:00:41 +0000
ROA not after:            Sun 24 May 2026 13:00:41 +0000
asID:                     16509
IP address blocks:        2606:cd40::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9be8f23f-3a8c-4822-8996-e4131d203c13/9be8f23f-3a8c-4822-8996-e4131d203c13.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9be8f23f-3a8c-4822-8996-e4131d203c13/9be8f23f-3a8c-4822-8996-e4131d203c13.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9be8f23f-3a8c-4822-8996-e4131d203c13.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:f5:87:93:ac:fe:58:77:c7:24:37:83:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9be8f23f-3a8c-4822-8996-e4131d203c13
        Validity
            Not Before: Feb 23 14:00:41 2026 GMT
            Not After : May 24 13:00:41 2026 GMT
        Subject: CN=210c5d40-da8c-4749-963b-40d273c5a3d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:02:e1:c5:44:cf:45:9b:bb:79:55:a4:c4:19:
                    6f:90:c5:b0:66:d1:92:57:f1:c6:f8:c5:3d:ad:7a:
                    65:b0:a2:a6:e1:35:a6:68:92:47:59:77:2c:5e:b0:
                    52:e3:2b:fc:86:1b:23:2a:93:8b:f7:f4:2b:bf:68:
                    46:d9:26:29:4a:e8:ea:71:2d:3f:65:e7:1f:86:4f:
                    71:c2:13:b7:fe:46:77:36:7d:ec:97:40:01:92:32:
                    8c:64:bd:11:43:2f:fa:04:40:52:2f:ab:d5:92:14:
                    ea:04:0d:88:f3:1f:cd:55:ea:a0:1b:ca:46:65:f1:
                    11:73:4d:d0:a7:ab:00:3f:5e:d6:2c:38:7b:0f:2e:
                    86:99:c5:5b:24:76:91:26:d4:ab:b2:34:17:5b:96:
                    93:09:4f:dd:33:fc:79:e3:44:91:09:bb:9e:0c:42:
                    52:d1:ad:f4:89:89:ae:a5:01:48:e4:e5:89:5a:28:
                    28:86:23:a0:ce:cb:94:f5:af:d3:6b:e6:59:b8:9e:
                    84:eb:b7:50:e3:a0:3f:75:93:3d:0f:1f:dd:ea:66:
                    45:93:73:e6:8f:dc:1f:34:0a:7e:43:92:91:68:9b:
                    f9:ef:4d:26:78:97:2b:20:d4:7c:42:44:7a:5b:24:
                    5a:0d:69:e1:d7:ba:09:0b:96:28:ae:70:ec:63:28:
                    fc:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:4E:B6:6F:07:DD:E2:14:D9:25:D2:2E:14:C2:C4:B3:95:B3:2E:4F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9be8f23f-3a8c-4822-8996-e4131d203c13/aba7e906-6e7c-3ebe-bca7-ee0ba46a653a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9be8f23f-3a8c-4822-8996-e4131d203c13/9be8f23f-3a8c-4822-8996-e4131d203c13.crl

            X509v3 Authority Key Identifier:
                keyid:80:AD:19:B2:F1:CB:42:EA:DC:B3:3D:6C:5D:DE:3C:68:47:48:15:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9be8f23f-3a8c-4822-8996-e4131d203c13.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:cd40::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:01:5c:91:be:96:05:f2:cc:84:c7:5a:37:58:cf:02:2b:90:
         b7:f5:ef:86:5d:bb:45:43:61:52:b2:5e:da:4f:a4:6e:70:c7:
         2b:65:94:d2:12:4b:14:33:c3:ad:39:9b:a6:97:cd:69:ea:94:
         2b:83:11:ba:51:df:b6:1d:1c:c3:78:4c:4f:41:8f:af:25:40:
         83:22:49:fe:c3:93:ab:6c:5f:8c:c0:ac:27:23:d9:82:f5:a7:
         a5:ef:74:10:0d:b9:8f:26:86:dc:71:14:54:a0:f3:72:21:45:
         bf:03:8a:89:2b:a4:88:6a:97:27:22:52:ec:ce:57:5a:20:13:
         35:00:0e:b1:1c:0e:7b:33:ad:fa:de:24:a3:7a:ea:62:06:26:
         48:92:03:56:66:07:28:38:bd:d9:18:81:3d:5b:5c:2a:12:94:
         7d:93:23:ce:f4:4d:6c:61:bb:7a:73:a1:8a:16:1b:eb:3a:a7:
         cb:f0:d8:81:b4:98:12:25:41:9d:41:8d:1a:38:f9:46:99:7d:
         91:df:4f:db:6d:89:85:83:e5:27:df:9e:99:a0:81:8e:23:5c:
         42:cd:44:c1:e9:11:54:a2:68:d5:3c:e1:47:0d:b0:c1:39:4f:
         4d:12:85:ba:4a:7e:f2:49:c5:2d:60:a6:54:07:40:20:e4:12:
         49:81:ec:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:42:37 2026 by rpki-client