Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0dc43efe-e9d9-42d7-9b51-d08600e413fa/730e6a0c-a4cc-3ed1-bfcb-eb43b653fd7c.roa
File:                     730e6a0c-a4cc-3ed1-bfcb-eb43b653fd7c.roa (raw, json)
Hash identifier:          Xjx6V3tkGgLsX1VMbM/ja0vTAv6GgEV4v7drcqHDLGQ=
Subject key identifier:   A9:EF:7C:F8:47:75:8D:A0:A0:8F:5F:09:E5:02:D2:9D:D1:62:DF:FD
Certificate issuer:       /CN=0dc43efe-e9d9-42d7-9b51-d08600e413fa
Certificate serial:       010D0C9F4328584CD4075F858963663C6CD5ECC0
Authority key identifier: 31:B3:44:BB:3A:5E:1E:07:49:A0:AC:60:18:D5:52:DF:81:D3:F6:BE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0dc43efe-e9d9-42d7-9b51-d08600e413fa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0dc43efe-e9d9-42d7-9b51-d08600e413fa/730e6a0c-a4cc-3ed1-bfcb-eb43b653fd7c.roa
Signing time:             Wed 11 Feb 2026 14:00:41 +0000
ROA not before:           Wed 11 Feb 2026 14:00:41 +0000
ROA not after:            Tue 12 May 2026 13:00:41 +0000
asID:                     396298
IP address blocks:        2604:3cc0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0dc43efe-e9d9-42d7-9b51-d08600e413fa/0dc43efe-e9d9-42d7-9b51-d08600e413fa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0dc43efe-e9d9-42d7-9b51-d08600e413fa/0dc43efe-e9d9-42d7-9b51-d08600e413fa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0dc43efe-e9d9-42d7-9b51-d08600e413fa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:d4:07:5f:85:89:63:66:3c:6c:d5:ec:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0dc43efe-e9d9-42d7-9b51-d08600e413fa
        Validity
            Not Before: Feb 11 14:00:41 2026 GMT
            Not After : May 12 13:00:41 2026 GMT
        Subject: CN=20b32cf0-64b0-47c9-9b60-3ee95cf1bc9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:d9:8b:f1:2e:20:32:66:ca:65:7a:bc:7f:5c:
                    77:86:5f:7a:86:cd:21:02:eb:a4:b3:92:1c:1b:0f:
                    9a:57:f1:85:4f:e5:b2:ec:a8:df:cf:d8:d6:b3:ba:
                    3a:d4:a1:12:69:53:00:3d:73:8d:30:74:36:c9:fb:
                    45:cc:a3:fc:bb:41:16:ed:0f:3e:23:30:5b:c1:fc:
                    58:e0:b1:a2:70:77:a4:1b:b3:d2:40:b4:91:b4:99:
                    f8:3c:9d:70:31:1b:bf:f8:5c:fd:23:3c:4b:3c:66:
                    ea:0b:30:67:da:a5:0d:9d:c2:49:80:3c:48:d8:3a:
                    8b:09:c7:31:0d:2f:36:1c:8c:00:8a:76:06:e0:a0:
                    dc:89:4e:6f:d5:26:39:d0:f1:49:9e:f8:64:ba:9d:
                    40:b8:ae:d2:7b:70:30:84:b1:94:dc:7e:75:7d:95:
                    0b:40:12:50:5a:fe:98:bb:ed:07:fc:79:20:b7:3a:
                    51:02:24:2c:36:1f:85:d5:59:0c:49:56:1b:72:04:
                    99:f0:00:f8:85:b9:a1:a9:a4:7f:0e:45:d6:79:b6:
                    15:88:01:40:c3:02:0b:a7:75:c2:fa:8c:46:92:9f:
                    55:ee:5b:f7:b5:e4:74:d7:19:fd:35:a1:06:03:9e:
                    41:96:94:cd:7e:4c:33:2b:6c:98:6f:70:95:3f:15:
                    44:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:EF:7C:F8:47:75:8D:A0:A0:8F:5F:09:E5:02:D2:9D:D1:62:DF:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0dc43efe-e9d9-42d7-9b51-d08600e413fa/730e6a0c-a4cc-3ed1-bfcb-eb43b653fd7c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0dc43efe-e9d9-42d7-9b51-d08600e413fa/0dc43efe-e9d9-42d7-9b51-d08600e413fa.crl

            X509v3 Authority Key Identifier:
                keyid:31:B3:44:BB:3A:5E:1E:07:49:A0:AC:60:18:D5:52:DF:81:D3:F6:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0dc43efe-e9d9-42d7-9b51-d08600e413fa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:3cc0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:17:7b:3f:d4:80:3a:f0:5d:11:00:cf:ce:6f:ba:01:e1:e7:
         73:f1:94:7e:d6:b1:dc:50:2b:3d:30:d3:42:fa:b1:6f:7e:60:
         ab:e1:c8:0c:d7:6a:01:ba:44:61:8f:57:8c:16:24:e1:e1:95:
         6f:0b:15:ad:3c:5f:72:ce:1c:e5:92:36:9a:82:38:31:cd:0c:
         1e:ad:d0:f8:db:f0:5d:a4:e9:a3:b8:02:ab:1a:a8:50:0a:0b:
         be:13:50:13:4e:69:d4:4c:66:32:d7:ef:27:3c:d3:69:91:29:
         55:5e:fa:31:62:2a:87:3a:7b:91:89:80:7d:da:cf:03:98:9a:
         d2:11:04:b1:6d:c7:fd:0b:66:88:62:74:83:3d:43:40:c8:74:
         80:d8:fe:d1:e5:7b:e2:4e:f3:32:01:ad:30:bb:cc:80:9d:60:
         14:87:12:b9:d3:4e:1a:43:61:a6:12:85:0f:bb:57:e9:9f:78:
         92:18:0a:cf:b3:3d:ef:8b:c7:a1:b5:f9:0b:f9:12:74:07:ec:
         e7:e5:08:f8:f9:7b:98:55:49:ca:df:ae:ce:0c:b5:00:e8:51:
         ea:c2:22:75:7b:42:ee:b2:a9:34:cc:a5:fb:13:15:f7:10:af:
         60:c8:19:ef:89:52:de:67:40:51:5d:45:16:44:1f:c6:9b:71:
         6a:04:93:86
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEzUB1+FiWNmPGzV7MAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGRjNDNlZmUtZTlkOS00MmQ3LTliNTEtZDA4NjAwZTQx
M2ZhMB4XDTI2MDIxMTE0MDA0MVoXDTI2MDUxMjEzMDA0MVowLzEtMCsGA1UEAxMk
MjBiMzJjZjAtNjRiMC00N2M5LTliNjAtM2VlOTVjZjFiYzllMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmtmL8S4gMmbKZXq8f1x3hl96hs0hAuuks5Ic
Gw+aV/GFT+Wy7Kjfz9jWs7o61KESaVMAPXONMHQ2yftFzKP8u0EW7Q8+IzBbwfxY
4LGicHekG7PSQLSRtJn4PJ1wMRu/+Fz9IzxLPGbqCzBn2qUNncJJgDxI2DqLCccx
DS82HIwAinYG4KDciU5v1SY50PFJnvhkup1AuK7Se3AwhLGU3H51fZULQBJQWv6Y
u+0H/HkgtzpRAiQsNh+F1VkMSVYbcgSZ8AD4hbmhqaR/DkXWebYViAFAwwILp3XC
+oxGkp9V7lv3teR01xn9NaEGA55BlpTNfkwzK2yYb3CVPxVEXwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFKnvfPhHdY2goI9fCeUC0p3RYt/9MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8wZGM0
M2VmZS1lOWQ5LTQyZDctOWI1MS1kMDg2MDBlNDEzZmEvNzMwZTZhMGMtYTRjYy0z
ZWQxLWJmY2ItZWI0M2I2NTNmZDdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMGRjNDNlZmUtZTlkOS00MmQ3LTli
NTEtZDA4NjAwZTQxM2ZhLzBkYzQzZWZlLWU5ZDktNDJkNy05YjUxLWQwODYwMGU0
MTNmYS5jcmwwHwYDVR0jBBgwFoAUMbNEuzpeHgdJoKxgGNVS34HT9r4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8wZGM0M2VmZS1lOWQ5LTQyZDctOWI1MS1kMDg2
MDBlNDEzZmEuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgQ8wDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQCNF3s/1IA68F0RAM/Ob7oB4edz8ZR+1rHcUCs9MNNC+rFvfmCr4cgM
12oBukRhj1eMFiTh4ZVvCxWtPF9yzhzlkjaagjgxzQwerdD42/BdpOmjuAKrGqhQ
Cgu+E1ATTmnUTGYy1+8nPNNpkSlVXvoxYiqHOnuRiYB92s8DmJrSEQSxbcf9C2aI
YnSDPUNAyHSA2P7R5XviTvMyAa0wu8yAnWAUhxK5004aQ2GmEoUPu1fpn3iSGArP
sz3vi8ehtfkL+RJ0B+zn5Qj4+XuYVUnK367ODLUA6FHqwiJ1e0Lusqk0zKX7ExX3
EK9gyBnviVLeZ0BRXUUWRB/Gm3FqBJOG
-----END CERTIFICATE-----
Generated at Sun Mar 1 22:52:06 2026 by rpki-client