Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/bd9c14b4-5a46-3e9b-ba20-d7dbd5543840.roa
File:                     bd9c14b4-5a46-3e9b-ba20-d7dbd5543840.roa (raw, json)
Hash identifier:          WIiff28dyg4tJ6+uNVUbZbukZZpaFUfih4a3HS059bc=
Subject key identifier:   F0:C3:6E:3C:21:E0:83:A1:B8:A9:F2:F9:AA:2A:64:1D:50:5A:A9:1E
Certificate issuer:       /CN=9906748d-5823-4cd3-9a11-f3dc69a3e751
Certificate serial:       010D0C9F4328584CC612162AD017CE0046B8B300
Authority key identifier: A7:31:13:DA:A8:C2:6D:D3:40:47:B6:C3:2B:BA:78:43:31:2F:01:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/bd9c14b4-5a46-3e9b-ba20-d7dbd5543840.roa
Signing time:             Fri 06 Feb 2026 14:00:40 +0000
ROA not before:           Fri 06 Feb 2026 14:00:40 +0000
ROA not after:            Thu 07 May 2026 13:00:40 +0000
asID:                     16509
IP address blocks:        2620:147:c13::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:c6:12:16:2a:d0:17:ce:00:46:b8:b3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9906748d-5823-4cd3-9a11-f3dc69a3e751
        Validity
            Not Before: Feb  6 14:00:40 2026 GMT
            Not After : May  7 13:00:40 2026 GMT
        Subject: CN=e5744955-9671-402a-aa5e-f46f3b782408
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:c3:11:05:73:06:f9:6e:76:31:f1:fb:71:03:
                    bd:0d:0d:ff:c7:7e:78:f6:dc:18:0d:21:54:6b:87:
                    97:17:0f:be:5b:04:b5:8e:55:7f:47:33:27:a1:36:
                    f4:2f:d5:a5:4d:2b:89:eb:19:eb:a6:05:e4:2a:8b:
                    f2:33:14:11:8b:68:1c:95:d1:04:21:c2:36:99:ec:
                    77:7e:ca:6c:7f:57:49:19:94:5c:3e:27:5f:9f:f2:
                    be:57:bf:b9:dc:81:62:1e:74:32:b6:5f:5e:1c:c8:
                    aa:25:da:c3:a0:c8:fd:79:68:94:14:70:71:ea:59:
                    ed:3d:66:1e:0f:87:63:ea:de:8b:c9:60:89:df:1d:
                    df:7b:aa:a1:e9:85:f9:ce:91:01:68:d7:67:9f:49:
                    b7:77:fd:0c:6a:ae:1f:0b:0d:36:92:b9:04:69:1f:
                    8b:51:28:7e:5a:fb:0d:fd:24:98:dd:e7:b4:65:28:
                    f9:4e:fb:d6:cc:ab:c8:f5:00:ed:1d:33:4e:f6:e7:
                    32:06:6d:f8:f1:bd:1f:2a:fc:a5:51:a8:b2:94:ec:
                    25:42:aa:2b:e3:5c:e0:79:d1:fb:17:7b:53:57:d2:
                    53:cd:58:9f:ee:af:68:02:51:15:27:ff:69:4e:9d:
                    19:e7:fe:6d:fe:d4:b7:52:52:f1:4f:97:e9:70:af:
                    16:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:C3:6E:3C:21:E0:83:A1:B8:A9:F2:F9:AA:2A:64:1D:50:5A:A9:1E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/bd9c14b4-5a46-3e9b-ba20-d7dbd5543840.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.crl

            X509v3 Authority Key Identifier:
                keyid:A7:31:13:DA:A8:C2:6D:D3:40:47:B6:C3:2B:BA:78:43:31:2F:01:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:147:c13::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:9d:9e:c0:10:38:77:b5:6b:bd:e7:96:49:b4:fc:89:36:e1:
         98:13:e9:0b:41:82:e8:d0:7e:83:da:0e:4c:d3:a8:71:31:c6:
         f7:61:c7:eb:bb:ed:85:dc:df:d2:08:ec:f2:40:48:83:a5:d5:
         6d:81:34:87:5f:d3:60:4f:e0:7f:88:c1:fa:d6:0e:fa:2a:2a:
         c8:66:ba:9c:0d:7f:75:15:dd:7f:62:27:67:09:cb:53:9d:a5:
         1a:c5:e6:dc:74:6a:ae:af:10:8f:a9:12:c2:d4:1c:6c:ee:b2:
         c9:a6:f6:7a:44:f0:4e:98:91:17:4d:69:21:b0:b1:18:8d:c7:
         d4:66:76:52:e6:53:eb:c5:88:fd:31:63:f7:ba:05:af:22:94:
         9c:50:38:c8:af:0b:7e:d9:49:a3:f8:c3:39:fc:06:a1:8a:61:
         cb:a1:4c:26:d4:6a:d1:b4:66:ca:4c:eb:d3:ab:b2:86:56:55:
         6c:9d:ec:3c:3b:93:b6:36:76:11:13:7e:39:02:5b:49:1f:93:
         60:f6:88:49:4c:15:db:6b:f2:65:49:d9:8b:2d:97:51:09:6a:
         43:9c:a5:16:9a:d7:9b:1f:1b:26:55:7d:14:82:0b:4d:4c:29:
         6b:ae:88:57:06:91:2e:49:a8:48:72:30:b4:0f:ee:1b:e7:cd:
         ad:d8:c8:85
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEzGEhYq0BfOAEa4swAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTkwNjc0OGQtNTgyMy00Y2QzLTlhMTEtZjNkYzY5YTNl
NzUxMB4XDTI2MDIwNjE0MDA0MFoXDTI2MDUwNzEzMDA0MFowLzEtMCsGA1UEAxMk
ZTU3NDQ5NTUtOTY3MS00MDJhLWFhNWUtZjQ2ZjNiNzgyNDA4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApsMRBXMG+W52MfH7cQO9DQ3/x3549twYDSFU
a4eXFw++WwS1jlV/RzMnoTb0L9WlTSuJ6xnrpgXkKovyMxQRi2gcldEEIcI2mex3
fspsf1dJGZRcPidfn/K+V7+53IFiHnQytl9eHMiqJdrDoMj9eWiUFHBx6lntPWYe
D4dj6t6LyWCJ3x3fe6qh6YX5zpEBaNdnn0m3d/0Maq4fCw02krkEaR+LUSh+WvsN
/SSY3ee0ZSj5TvvWzKvI9QDtHTNO9ucyBm348b0fKvylUaiylOwlQqor41zgedH7
F3tTV9JTzVif7q9oAlEVJ/9pTp0Z5/5t/tS3UlLxT5fpcK8WUQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFPDDbjwh4IOhuKny+aoqZB1QWqkeMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85OTA2
NzQ4ZC01ODIzLTRjZDMtOWExMS1mM2RjNjlhM2U3NTEvYmQ5YzE0YjQtNWE0Ni0z
ZTliLWJhMjAtZDdkYmQ1NTQzODQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTkwNjc0OGQtNTgyMy00Y2QzLTlh
MTEtZjNkYzY5YTNlNzUxLzk5MDY3NDhkLTU4MjMtNGNkMy05YTExLWYzZGM2OWEz
ZTc1MS5jcmwwHwYDVR0jBBgwFoAUpzET2qjCbdNAR7bDK7p4QzEvAYAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85OTA2NzQ4ZC01ODIzLTRjZDMtOWExMS1mM2Rj
NjlhM2U3NTEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiABRwwT
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAAidnsAQOHe1a73nlkm0/Ik24ZgT6QtBgujQfoPaDkzTqHExxvdh
x+u77YXc39II7PJASIOl1W2BNIdf02BP4H+IwfrWDvoqKshmupwNf3UV3X9iJ2cJ
y1OdpRrF5tx0aq6vEI+pEsLUHGzussmm9npE8E6YkRdNaSGwsRiNx9RmdlLmU+vF
iP0xY/e6Ba8ilJxQOMivC37ZSaP4wzn8BqGKYcuhTCbUatG0ZspM69OrsoZWVWyd
7Dw7k7Y2dhETfjkCW0kfk2D2iElMFdtr8mVJ2Ystl1EJakOcpRaa15sfGyZVfRSC
C01MKWuuiFcGkS5JqEhyMLQP7hvnza3YyIU=
-----END CERTIFICATE-----
Generated at Mon Mar 2 14:13:05 2026 by rpki-client