Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1fec04c2-2b6c-4e9a-8062-e420ac1a257a/a112b872-73e9-3567-a214-5f4f49960fc2.roa
File:                     a112b872-73e9-3567-a214-5f4f49960fc2.roa (raw, json)
Hash identifier:          iZHEQ1NoCELLPLI+ajUyYGCmFiWzE4rA/2srE52ROmE=
Subject key identifier:   E5:34:02:12:6D:DC:53:A8:4C:33:9C:5B:57:15:BC:C8:26:80:CA:3D
Certificate issuer:       /CN=1fec04c2-2b6c-4e9a-8062-e420ac1a257a
Certificate serial:       010D0C9F4328584CE362064B2D68FD34080912E0
Authority key identifier: DA:A6:FB:CD:8D:FF:22:68:C4:1E:BA:AC:CE:80:24:86:BD:CD:D3:44
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1fec04c2-2b6c-4e9a-8062-e420ac1a257a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1fec04c2-2b6c-4e9a-8062-e420ac1a257a/a112b872-73e9-3567-a214-5f4f49960fc2.roa
Signing time:             Tue 17 Feb 2026 02:00:31 +0000
ROA not before:           Tue 17 Feb 2026 02:00:31 +0000
ROA not after:            Mon 18 May 2026 01:00:31 +0000
asID:                     25996
IP address blocks:        2607:f330:9400::/40 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1fec04c2-2b6c-4e9a-8062-e420ac1a257a/1fec04c2-2b6c-4e9a-8062-e420ac1a257a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1fec04c2-2b6c-4e9a-8062-e420ac1a257a/1fec04c2-2b6c-4e9a-8062-e420ac1a257a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1fec04c2-2b6c-4e9a-8062-e420ac1a257a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:e3:62:06:4b:2d:68:fd:34:08:09:12:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1fec04c2-2b6c-4e9a-8062-e420ac1a257a
        Validity
            Not Before: Feb 17 02:00:31 2026 GMT
            Not After : May 18 01:00:31 2026 GMT
        Subject: CN=09583d69-35b0-4ba7-9717-40c5d2ffae7e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:a6:2c:e9:16:24:f5:cc:21:51:32:b1:ce:8d:
                    e1:b2:39:c4:af:ef:90:78:f5:e7:82:83:cf:59:b1:
                    8c:56:d3:1c:db:24:5e:d7:16:40:55:f9:26:55:71:
                    5d:ab:bc:6e:10:b0:d6:8d:c2:bc:ea:ed:5c:33:2b:
                    3d:c7:12:63:16:6d:47:99:a1:76:a1:40:23:f0:4c:
                    21:17:e5:b8:b9:b5:a8:40:94:ff:ec:2a:ff:f5:22:
                    eb:89:ec:e9:20:c0:b8:99:81:89:19:8b:25:36:4b:
                    1b:e3:2a:40:92:42:08:2d:4a:bb:60:cf:7f:91:a0:
                    3d:ad:11:e2:8c:f6:3c:79:dc:fc:0c:c3:c8:c5:91:
                    7d:3c:86:99:cc:d5:46:0c:04:bf:c7:4c:97:94:ca:
                    81:a5:1b:3a:7d:05:67:d6:5b:f6:6f:31:0c:b0:25:
                    76:7e:98:a9:20:81:72:65:17:40:c8:8d:86:c9:7c:
                    14:ac:00:1f:3c:35:c0:bb:93:d8:78:97:f1:73:13:
                    ac:c9:b5:84:b7:ab:24:d8:e5:ff:75:4c:0f:2f:11:
                    9d:df:94:b7:78:3f:e3:8a:d5:9f:cd:d0:e1:46:d4:
                    a9:55:92:4a:5e:67:24:fc:e6:35:85:f3:26:53:93:
                    b5:83:73:da:28:4f:dc:cb:4d:39:78:18:d5:cb:14:
                    21:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:34:02:12:6D:DC:53:A8:4C:33:9C:5B:57:15:BC:C8:26:80:CA:3D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1fec04c2-2b6c-4e9a-8062-e420ac1a257a/a112b872-73e9-3567-a214-5f4f49960fc2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1fec04c2-2b6c-4e9a-8062-e420ac1a257a/1fec04c2-2b6c-4e9a-8062-e420ac1a257a.crl

            X509v3 Authority Key Identifier:
                keyid:DA:A6:FB:CD:8D:FF:22:68:C4:1E:BA:AC:CE:80:24:86:BD:CD:D3:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1fec04c2-2b6c-4e9a-8062-e420ac1a257a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f330:9400::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:62:c5:7e:b3:2a:24:9e:75:92:a8:4e:c7:e8:61:f2:01:e5:
         91:e7:5a:66:01:07:13:c0:48:e2:c2:60:d1:b2:af:9f:e0:bd:
         86:8b:d2:9e:8b:94:4a:4a:f1:07:81:da:dd:97:de:5f:22:1e:
         b5:b3:d5:24:f5:17:37:84:19:63:b7:68:25:3b:ed:e9:cd:6e:
         01:2c:1f:65:36:fd:12:2d:10:95:d0:ae:be:38:e2:ad:cc:bb:
         e4:e2:99:bd:c9:28:91:8d:55:a5:97:7b:99:63:f8:c3:c8:23:
         04:c6:72:4d:e3:96:4b:a6:8b:e9:21:d1:eb:7d:92:58:ac:e5:
         30:0f:69:8a:6b:0a:95:91:98:40:07:59:aa:8c:29:8d:e7:9f:
         24:84:3e:a9:e6:18:77:a1:da:06:26:5c:45:71:a2:8b:12:61:
         ee:b2:84:49:29:89:5a:c8:24:d1:66:4a:4a:ab:f3:e0:ad:9f:
         a2:7c:69:a3:18:9f:f7:ee:d6:cf:cd:8e:3c:ef:d1:85:b9:4a:
         c9:49:b9:d0:d9:9d:18:5c:c7:f7:85:b0:85:4b:15:0e:85:45:
         61:5d:4a:cc:79:d4:ae:55:c0:ea:81:45:39:f4:0c:94:28:1e:
         b1:22:ba:58:a5:49:a1:29:65:c6:a4:72:e0:5a:a0:8a:bd:0b:
         fe:d9:ba:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:51:07 2026 by rpki-client