Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/8ace2fbd-6431-3552-83f5-fb8efc3db04e.roa
File:                     8ace2fbd-6431-3552-83f5-fb8efc3db04e.roa (raw, json)
Hash identifier:          eUgEtD9Zfpe0yg8UInI5BHMRLC5aZQasBJI3Vgm4p74=
Subject key identifier:   96:2F:18:4B:41:86:BF:6F:38:2E:C0:AF:57:15:F6:FF:DA:50:1F:B7
Certificate issuer:       /CN=9906748d-5823-4cd3-9a11-f3dc69a3e751
Certificate serial:       010D0C9F4328584CC6121289A5744B3591964F80
Authority key identifier: A7:31:13:DA:A8:C2:6D:D3:40:47:B6:C3:2B:BA:78:43:31:2F:01:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/8ace2fbd-6431-3552-83f5-fb8efc3db04e.roa
Signing time:             Fri 06 Feb 2026 14:00:40 +0000
ROA not before:           Fri 06 Feb 2026 14:00:40 +0000
ROA not after:            Thu 07 May 2026 13:00:40 +0000
asID:                     198949
IP address blocks:        2620:147:128::/45 maxlen: 45
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:c6:12:12:89:a5:74:4b:35:91:96:4f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9906748d-5823-4cd3-9a11-f3dc69a3e751
        Validity
            Not Before: Feb  6 14:00:40 2026 GMT
            Not After : May  7 13:00:40 2026 GMT
        Subject: CN=77f89a08-5f52-48ce-889a-af1ae6d736ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:c8:ea:ff:e4:20:1d:7f:c1:16:63:a4:93:6a:
                    e9:f7:b8:b8:43:1a:45:2a:01:49:5a:b5:8c:8b:14:
                    0b:23:92:7f:f9:65:39:4d:b1:3a:ec:55:87:27:fd:
                    ba:55:03:a5:8a:6d:f7:d2:7a:29:33:d7:c2:fc:fb:
                    6d:bc:8f:76:d8:b1:29:4b:7f:ff:4d:bd:37:0b:b3:
                    e5:a1:05:17:6e:a3:0a:ff:51:72:28:f2:4c:47:14:
                    74:eb:a9:b7:9a:58:3b:8b:72:68:0b:f7:67:ab:10:
                    dd:5e:94:71:02:35:ec:56:be:40:16:ba:91:52:c7:
                    11:a6:0c:dc:f6:da:6a:2f:c9:5e:26:55:8e:6c:69:
                    1b:a2:83:ba:cb:72:a1:21:9b:96:06:fa:de:a8:56:
                    6c:75:b0:37:5d:37:14:ee:28:df:0b:d6:1d:ea:45:
                    f8:cb:b1:b2:9d:92:dc:05:96:79:1c:b7:5b:1b:c4:
                    de:de:b8:84:a4:fe:06:a0:4c:c8:14:41:1b:f6:d5:
                    ed:c0:3d:c9:d1:f1:a9:b3:eb:49:21:ff:46:ea:92:
                    14:be:2e:57:6d:91:2c:0c:f6:6c:d3:be:4e:54:80:
                    4c:af:a2:c5:88:4c:de:7b:86:54:60:59:85:a1:6f:
                    66:a1:01:7a:0d:84:b5:b2:b6:e4:0f:6a:3e:b7:22:
                    5f:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:2F:18:4B:41:86:BF:6F:38:2E:C0:AF:57:15:F6:FF:DA:50:1F:B7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/8ace2fbd-6431-3552-83f5-fb8efc3db04e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.crl

            X509v3 Authority Key Identifier:
                keyid:A7:31:13:DA:A8:C2:6D:D3:40:47:B6:C3:2B:BA:78:43:31:2F:01:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:147:128::/45

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:82:06:3d:b4:3a:26:2a:04:36:a7:35:34:5f:57:68:58:63:
         8f:5e:49:8e:6c:74:b6:98:6b:b4:02:20:90:99:be:9c:db:34:
         f0:02:c2:2e:6b:e8:8a:f7:04:16:89:ee:a7:e7:5b:83:62:e3:
         01:9d:b4:34:ad:be:e6:b2:72:8b:4b:12:2b:73:75:50:be:01:
         86:ac:1b:90:18:47:9b:a3:3e:bd:24:d4:0e:ed:d3:26:5e:b6:
         39:ed:7f:58:50:f3:3c:72:15:41:40:6b:7d:fa:74:b2:2e:80:
         22:22:c8:ff:2f:29:2c:98:4c:96:7c:0b:29:4c:a8:6e:b9:98:
         8a:04:bb:94:c6:12:f5:0c:57:47:0e:42:26:56:b4:de:f3:a7:
         c6:05:47:30:77:d5:24:9a:92:0e:8f:61:24:46:37:88:16:21:
         9d:5b:d7:c2:1b:5a:2a:02:80:f7:0f:51:13:1f:9e:59:0a:1a:
         3d:61:c5:3c:e9:13:22:c6:25:3a:fa:52:df:06:35:b6:17:23:
         a1:36:0e:cb:6e:2b:f5:b6:5d:64:98:59:05:fc:c2:24:04:ed:
         a6:96:5a:57:63:2b:89:8a:86:40:a6:d7:e0:e6:8d:d0:e9:c9:
         93:4d:dd:62:bc:ae:6a:ef:31:6b:63:39:03:82:e7:26:c6:41:
         9d:94:d2:ac
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEzGEhKJpXRLNZGWT4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTkwNjc0OGQtNTgyMy00Y2QzLTlhMTEtZjNkYzY5YTNl
NzUxMB4XDTI2MDIwNjE0MDA0MFoXDTI2MDUwNzEzMDA0MFowLzEtMCsGA1UEAxMk
NzdmODlhMDgtNWY1Mi00OGNlLTg4OWEtYWYxYWU2ZDczNmFiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy8jq/+QgHX/BFmOkk2rp97i4QxpFKgFJWrWM
ixQLI5J/+WU5TbE67FWHJ/26VQOlim330nopM9fC/PttvI922LEpS3//Tb03C7Pl
oQUXbqMK/1FyKPJMRxR066m3mlg7i3JoC/dnqxDdXpRxAjXsVr5AFrqRUscRpgzc
9tpqL8leJlWObGkbooO6y3KhIZuWBvreqFZsdbA3XTcU7ijfC9Yd6kX4y7GynZLc
BZZ5HLdbG8Te3riEpP4GoEzIFEEb9tXtwD3J0fGps+tJIf9G6pIUvi5XbZEsDPZs
075OVIBMr6LFiEzee4ZUYFmFoW9moQF6DYS1srbkD2o+tyJfwQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFJYvGEtBhr9vOC7Ar1cV9v/aUB+3MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85OTA2
NzQ4ZC01ODIzLTRjZDMtOWExMS1mM2RjNjlhM2U3NTEvOGFjZTJmYmQtNjQzMS0z
NTUyLTgzZjUtZmI4ZWZjM2RiMDRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTkwNjc0OGQtNTgyMy00Y2QzLTlh
MTEtZjNkYzY5YTNlNzUxLzk5MDY3NDhkLTU4MjMtNGNkMy05YTExLWYzZGM2OWEz
ZTc1MS5jcmwwHwYDVR0jBBgwFoAUpzET2qjCbdNAR7bDK7p4QzEvAYAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85OTA2NzQ4ZC01ODIzLTRjZDMtOWExMS1mM2Rj
NjlhM2U3NTEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcDJiABRwEo
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAHqCBj20OiYqBDanNTRfV2hYY49eSY5sdLaYa7QCIJCZvpzbNPAC
wi5r6Ir3BBaJ7qfnW4Ni4wGdtDStvuaycotLEitzdVC+AYasG5AYR5ujPr0k1A7t
0yZetjntf1hQ8zxyFUFAa336dLIugCIiyP8vKSyYTJZ8CylMqG65mIoEu5TGEvUM
V0cOQiZWtN7zp8YFRzB31SSakg6PYSRGN4gWIZ1b18IbWioCgPcPURMfnlkKGj1h
xTzpEyLGJTr6Ut8GNbYXI6E2DstuK/W2XWSYWQX8wiQE7aaWWldjK4mKhkCm1+Dm
jdDpyZNN3WK8rmrvMWtjOQOC5ybGQZ2U0qw=
-----END CERTIFICATE-----
Generated at Mon Mar 2 17:29:26 2026 by rpki-client