Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/73fd2f51-88e9-3103-aac8-ce62c7e475ba.roa
File:                     73fd2f51-88e9-3103-aac8-ce62c7e475ba.roa (raw, json)
Hash identifier:          RzA+ZOaUrNUyFUfbqW6KL1MGhKZsb2qcgPKLZerEtBQ=
Subject key identifier:   BF:8F:81:80:B1:52:0D:41:BB:0D:3B:3A:D0:80:08:78:C6:8F:4E:EC
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584CEDCFD9BFA6445DFD986A4500
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/73fd2f51-88e9-3103-aac8-ce62c7e475ba.roa
Signing time:             Fri 20 Feb 2026 19:40:01 +0000
ROA not before:           Fri 20 Feb 2026 19:40:01 +0000
ROA not after:            Thu 21 May 2026 18:40:01 +0000
asID:                     19905
IP address blocks:        2604:2d80:6700::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ed:cf:d9:bf:a6:44:5d:fd:98:6a:45:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Feb 20 19:40:01 2026 GMT
            Not After : May 21 18:40:01 2026 GMT
        Subject: CN=78cbda34-108a-47ff-8586-5aedbebb0772
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:4c:cd:07:b0:c3:13:71:0a:01:ff:4d:1d:5c:
                    79:75:db:40:af:20:76:f5:10:fd:bd:8f:06:1c:2b:
                    01:30:54:db:c9:1a:54:bd:44:a6:17:45:a5:0d:61:
                    ae:54:1a:f8:cb:99:76:8c:fa:d4:57:ee:c1:b6:78:
                    7f:6c:b7:50:92:0a:0a:f6:84:e7:a5:60:b6:a5:94:
                    b2:0c:66:87:57:cc:4f:95:41:da:a1:3b:f1:ee:b8:
                    b6:e4:8b:8c:a4:e9:66:2b:2d:ca:bd:fa:b1:c2:52:
                    3f:f3:21:4b:4e:3b:f5:04:4f:c3:9f:89:2b:6f:d4:
                    58:2b:3b:46:6d:a7:31:04:7f:ab:bd:3d:ca:ff:f6:
                    a8:19:8c:49:b4:35:19:3c:82:3d:b3:ad:fd:bd:07:
                    93:73:1f:0f:d1:ed:76:5a:0c:62:91:41:91:04:d4:
                    1a:89:30:c2:4c:2e:f0:9a:cd:28:07:18:87:52:1b:
                    2f:e8:96:16:b2:c4:aa:89:51:e3:b3:d5:04:e5:88:
                    2d:fa:23:36:7c:70:5f:10:a7:f8:92:82:ed:5f:35:
                    6a:ab:d0:58:34:83:70:1d:3d:0b:aa:b0:c0:f4:93:
                    4e:d6:fc:77:7a:ca:18:a3:07:dc:96:13:c4:2a:09:
                    09:1d:bf:b6:b4:b2:ac:8d:69:57:07:11:cc:52:33:
                    49:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:8F:81:80:B1:52:0D:41:BB:0D:3B:3A:D0:80:08:78:C6:8F:4E:EC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/73fd2f51-88e9-3103-aac8-ce62c7e475ba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:6700::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:6f:a6:ff:8b:e5:3b:cb:20:8c:f2:fb:ac:dd:39:a3:79:d7:
         8f:a6:8d:af:04:a0:be:e0:73:44:d5:b4:6e:0b:f7:c1:6c:c6:
         cd:16:3a:0a:7e:63:3c:df:36:c7:06:6f:4a:c3:92:bc:82:1b:
         e0:05:39:b4:f6:62:4c:a0:29:9c:69:87:86:3b:b3:78:0f:f9:
         15:a0:92:00:bf:f2:a5:4e:ba:24:46:d4:85:5a:2f:72:11:28:
         15:18:c3:ea:52:4d:09:08:55:86:37:41:51:3b:eb:16:20:b2:
         6c:92:2f:df:33:91:ba:5e:16:fe:12:70:f6:93:87:19:0d:25:
         4d:1b:5d:43:a8:3f:92:34:09:a9:91:79:d7:d4:49:18:f0:95:
         d8:ad:b8:b1:a1:f3:03:4d:4d:96:a4:3b:bb:98:43:f3:50:13:
         23:99:51:fc:f4:56:de:22:f2:ee:2c:c8:1c:39:32:58:6a:74:
         42:48:cc:ae:46:61:08:33:bc:5e:27:bf:4f:1d:63:74:e8:fe:
         5b:ce:07:45:c9:8a:76:c4:42:f4:ae:96:dc:63:5c:71:02:f1:
         6d:55:c3:8c:27:40:32:c7:12:42:74:9e:5a:d9:42:63:40:48:
         1e:09:3a:54:d2:25:f4:72:d4:f3:6f:b9:aa:da:9f:df:74:01:
         00:e4:c8:6c
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEztz9m/pkRd/ZhqRQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI2MDIyMDE5NDAwMVoXDTI2MDUyMTE4NDAwMVowLzEtMCsGA1UEAxMk
NzhjYmRhMzQtMTA4YS00N2ZmLTg1ODYtNWFlZGJlYmIwNzcyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjkzNB7DDE3EKAf9NHVx5ddtAryB29RD9vY8G
HCsBMFTbyRpUvUSmF0WlDWGuVBr4y5l2jPrUV+7Btnh/bLdQkgoK9oTnpWC2pZSy
DGaHV8xPlUHaoTvx7ri25IuMpOlmKy3KvfqxwlI/8yFLTjv1BE/Dn4krb9RYKztG
bacxBH+rvT3K//aoGYxJtDUZPII9s639vQeTcx8P0e12WgxikUGRBNQaiTDCTC7w
ms0oBxiHUhsv6JYWssSqiVHjs9UE5Ygt+iM2fHBfEKf4koLtXzVqq9BYNINwHT0L
qrDA9JNO1vx3esoYowfclhPEKgkJHb+2tLKsjWlXBxHMUjNJ+wIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFL+PgYCxUg1Buw07OtCACHjGj07sMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNzNmZDJmNTEtODhlOS0z
MTAzLWFhYzgtY2U2MmM3ZTQ3NWJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgGcA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAARvpv+L5TvLIIzy+6zdOaN514+mja8EoL7gc0TVtG4L98Fsxs0W
Ogp+YzzfNscGb0rDkryCG+AFObT2YkygKZxph4Y7s3gP+RWgkgC/8qVOuiRG1IVa
L3IRKBUYw+pSTQkIVYY3QVE76xYgsmySL98zkbpeFv4ScPaThxkNJU0bXUOoP5I0
CamRedfUSRjwldituLGh8wNNTZakO7uYQ/NQEyOZUfz0Vt4i8u4syBw5MlhqdEJI
zK5GYQgzvF4nv08dY3To/lvOB0XJinbEQvSultxjXHEC8W1Vw4wnQDLHEkJ0nlrZ
QmNASB4JOlTSJfRy1PNvuaran990AQDkyGw=
-----END CERTIFICATE-----
Generated at Mon Mar 2 00:41:07 2026 by rpki-client