Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/d9222cc2-0fe0-3a54-b411-068142531332.roa
File:                     d9222cc2-0fe0-3a54-b411-068142531332.roa (raw, json)
Hash identifier:          107qOw+tg93mcl8icFJuoVlruxFFXxzUhD8Zlf2FyW0=
Subject key identifier:   DC:15:0C:80:BA:D2:B4:6F:20:0C:F9:D5:7B:74:21:02:6B:A2:E5:4C
Certificate issuer:       /CN=601de417-7cdc-45d3-8d80-7279489a39e0
Certificate serial:       010D0C9F4328584CD41732F92BB064BED199E2E0
Authority key identifier: BD:6E:8D:C2:3E:B9:DA:1D:07:C2:5B:76:67:C5:CC:10:35:41:EE:89
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/d9222cc2-0fe0-3a54-b411-068142531332.roa
Signing time:             Wed 11 Feb 2026 14:32:45 +0000
ROA not before:           Wed 11 Feb 2026 14:32:45 +0000
ROA not after:            Tue 12 May 2026 13:32:45 +0000
asID:                     63023
IP address blocks:        2604:86c0:f100::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:d4:17:32:f9:2b:b0:64:be:d1:99:e2:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=601de417-7cdc-45d3-8d80-7279489a39e0
        Validity
            Not Before: Feb 11 14:32:45 2026 GMT
            Not After : May 12 13:32:45 2026 GMT
        Subject: CN=aaa1035b-b91a-495d-83b9-848950566797
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:f5:95:7c:18:ce:5c:79:cb:6a:18:1f:96:1a:
                    1e:eb:02:72:38:32:17:c8:2f:d3:3f:e2:9d:b3:0b:
                    8c:32:54:91:6a:b0:20:cf:0c:2a:c6:23:0e:c5:e1:
                    d3:53:12:94:61:c6:49:f9:a1:98:0d:02:f1:7e:68:
                    ff:99:83:fc:25:aa:ce:b5:f1:30:6b:f5:95:24:6b:
                    27:1d:c4:a3:7e:4d:b8:b8:81:8b:83:9f:ef:21:b0:
                    75:42:cf:de:6f:c8:81:04:88:fe:d5:15:b4:a5:1e:
                    1c:b2:23:69:7d:8c:60:65:23:33:3d:da:05:30:2c:
                    63:35:19:02:27:ee:a2:c1:78:c3:ca:af:3c:e0:b3:
                    60:2a:e9:17:63:0f:ca:18:ac:f3:ae:a4:58:60:08:
                    90:91:a3:98:2f:12:c4:14:be:ac:20:31:3a:47:0f:
                    45:b5:a9:f6:80:0f:dc:44:d7:7f:5f:33:84:f6:4a:
                    78:36:dd:6e:73:1d:a2:b0:8b:70:7f:83:b6:3b:af:
                    d8:5e:ba:b6:82:1e:23:ee:e8:3b:f3:7b:e4:50:02:
                    29:01:6c:dd:bf:6b:ba:c2:c0:29:d1:3b:1e:1c:44:
                    4d:07:be:96:a0:3e:ed:f3:c6:73:b0:38:8b:f8:f1:
                    ae:92:79:d5:bc:ab:04:cb:43:c6:23:dc:23:8d:09:
                    47:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:15:0C:80:BA:D2:B4:6F:20:0C:F9:D5:7B:74:21:02:6B:A2:E5:4C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/d9222cc2-0fe0-3a54-b411-068142531332.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.crl

            X509v3 Authority Key Identifier:
                keyid:BD:6E:8D:C2:3E:B9:DA:1D:07:C2:5B:76:67:C5:CC:10:35:41:EE:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:86c0:f100::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:6c:f1:e2:ee:ee:72:e7:b1:1e:e1:d8:c5:c4:6d:63:14:dd:
         ac:85:c6:74:04:74:d7:bc:03:21:66:1d:74:b3:c9:38:3c:29:
         68:60:7a:d8:67:61:4c:39:d6:5c:87:2d:93:10:e3:69:52:f1:
         5c:aa:30:55:30:2c:aa:65:2e:a8:cc:96:da:70:ed:db:31:2d:
         3b:dc:4d:e3:7c:c2:7e:88:ff:09:c6:e0:b4:be:fb:ab:f6:29:
         9b:89:4c:22:a1:33:87:b4:c5:fd:19:10:0a:13:ac:ce:7b:f8:
         21:10:2a:a9:38:0e:e4:94:d9:68:39:b2:7e:c3:fb:f9:33:7f:
         ec:30:d3:1a:8e:a5:5c:7a:c0:d0:22:cb:99:77:09:cb:23:60:
         2e:01:da:e4:8e:53:81:4b:b3:b3:45:b8:54:b1:43:6d:54:14:
         c0:a3:a6:42:40:f6:be:05:87:2a:95:61:8a:73:0e:72:85:0e:
         ae:c9:69:bc:4e:d0:e0:fd:83:f1:7b:50:fb:2b:a4:7d:f7:ba:
         41:0e:29:28:86:36:39:74:09:61:19:cc:ff:23:bc:c9:ab:7e:
         c6:4e:ed:e2:47:5a:12:60:49:af:b8:58:2e:3f:e6:bd:b6:4f:
         a9:5c:fa:a1:a2:18:94:52:cf:c2:27:af:90:7f:c7:0f:83:05:
         89:c4:7e:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:28:39 2026 by rpki-client