Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a53cd081-f6e5-4e71-868d-a1c11921321d/47d03f04-4fc2-3a97-baf2-0020fbbff431.roa
File:                     47d03f04-4fc2-3a97-baf2-0020fbbff431.roa (raw, json)
Hash identifier:          2v04u8eDo2i2Rgykxdp8ecA9seviBIjJPcm738amuYA=
Subject key identifier:   9A:09:E8:00:84:AD:2E:FE:76:E8:8E:5B:9A:5B:C5:F3:15:CD:E8:91
Certificate issuer:       /CN=a53cd081-f6e5-4e71-868d-a1c11921321d
Certificate serial:       010D0C9F4328584CD99CC1ADBA40228C4BC8476C
Authority key identifier: F9:CE:3B:42:82:77:4F:AB:8D:5E:A3:E8:8D:49:4F:29:81:87:7B:F0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a53cd081-f6e5-4e71-868d-a1c11921321d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a53cd081-f6e5-4e71-868d-a1c11921321d/47d03f04-4fc2-3a97-baf2-0020fbbff431.roa
Signing time:             Fri 13 Feb 2026 14:00:41 +0000
ROA not before:           Fri 13 Feb 2026 14:00:41 +0000
ROA not after:            Thu 14 May 2026 13:00:41 +0000
asID:                     16509
IP address blocks:        2620:122:f000::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a53cd081-f6e5-4e71-868d-a1c11921321d/a53cd081-f6e5-4e71-868d-a1c11921321d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a53cd081-f6e5-4e71-868d-a1c11921321d/a53cd081-f6e5-4e71-868d-a1c11921321d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a53cd081-f6e5-4e71-868d-a1c11921321d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:d9:9c:c1:ad:ba:40:22:8c:4b:c8:47:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a53cd081-f6e5-4e71-868d-a1c11921321d
        Validity
            Not Before: Feb 13 14:00:41 2026 GMT
            Not After : May 14 13:00:41 2026 GMT
        Subject: CN=c2a876b7-fc48-43b3-b1c4-32251a9d26a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:9a:77:c4:09:59:5b:67:98:4a:83:cc:18:ec:
                    11:fa:47:26:e3:77:94:04:26:63:c6:d0:53:5b:14:
                    02:a4:89:c1:b5:20:33:37:52:85:66:19:c9:d6:64:
                    58:c2:2b:3c:00:3e:9f:b5:ba:15:e8:42:a8:75:c2:
                    fa:c1:4c:33:b0:96:78:c0:44:aa:bf:a1:d9:a3:a9:
                    2f:a3:1b:26:02:9a:0c:bf:7c:13:ec:ad:af:4d:30:
                    1b:38:84:87:3a:27:2e:bc:13:9b:3f:9e:9a:fc:41:
                    b2:bd:b6:77:52:16:94:88:ec:7e:b9:2b:c2:72:23:
                    a5:f8:a3:05:16:9d:0a:ad:ba:e4:44:03:ac:14:f6:
                    6f:67:22:e5:88:48:c0:42:e5:50:05:5d:10:02:48:
                    2a:b4:30:3d:5a:c2:8b:cc:39:a9:6f:60:95:2c:39:
                    5a:a5:21:0a:29:40:40:ae:c3:d9:6e:f8:78:01:14:
                    39:81:7e:12:59:46:3e:68:00:76:21:4b:40:f1:d7:
                    3e:9e:5e:76:7e:8d:37:47:d0:b6:6d:69:bd:63:6e:
                    da:28:44:30:86:9f:3a:63:2f:5c:e7:fd:4a:c8:d4:
                    3c:15:37:82:dd:db:f9:03:23:46:58:7a:a8:c4:8c:
                    d0:84:b9:51:24:fb:2d:2b:ca:bd:94:36:c7:b1:97:
                    74:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:09:E8:00:84:AD:2E:FE:76:E8:8E:5B:9A:5B:C5:F3:15:CD:E8:91
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a53cd081-f6e5-4e71-868d-a1c11921321d/47d03f04-4fc2-3a97-baf2-0020fbbff431.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a53cd081-f6e5-4e71-868d-a1c11921321d/a53cd081-f6e5-4e71-868d-a1c11921321d.crl

            X509v3 Authority Key Identifier:
                keyid:F9:CE:3B:42:82:77:4F:AB:8D:5E:A3:E8:8D:49:4F:29:81:87:7B:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a53cd081-f6e5-4e71-868d-a1c11921321d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:122:f000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:1e:50:8d:79:02:c6:1d:5a:dd:0b:15:8c:74:33:ca:f9:d4:
         c5:c0:67:6d:18:fb:5d:74:51:47:c2:ec:77:eb:ce:62:85:ee:
         09:01:51:b6:c7:1d:28:dd:03:c4:fd:b8:50:5c:b1:17:a3:28:
         5d:e0:fa:b9:92:f7:a8:df:9c:4a:82:08:61:80:e5:a1:af:e5:
         33:f1:f9:90:50:b1:ac:21:81:3a:e8:50:91:4f:2b:95:b4:4d:
         50:52:ea:67:35:19:3c:af:58:d6:87:0d:d4:81:be:44:93:ea:
         7a:60:36:4a:97:ce:da:ff:ef:4e:79:47:76:b0:a4:dd:7e:01:
         22:b5:14:3d:1d:e4:64:5a:bf:61:7c:b6:be:32:77:61:a6:b7:
         89:83:85:22:81:18:03:f7:24:0b:98:78:43:30:81:5c:4a:14:
         65:0d:a5:4c:5e:8d:1f:77:7e:5e:e9:1f:46:f4:fe:45:74:ae:
         4b:24:e5:2e:1b:67:90:05:4f:68:0c:99:2d:80:6d:0c:6b:f0:
         f6:b7:ec:a1:7b:fc:b5:d6:7f:c2:67:b3:ae:d5:76:e3:d5:cf:
         64:24:60:19:29:41:2e:6e:16:b8:92:e3:51:71:49:44:c7:bf:
         66:21:56:18:bb:fe:17:b7:40:f1:2f:97:bc:8c:30:ae:e2:94:
         98:9d:53:c8
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEzZnMGtukAijEvIR2wwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTUzY2QwODEtZjZlNS00ZTcxLTg2OGQtYTFjMTE5MjEz
MjFkMB4XDTI2MDIxMzE0MDA0MVoXDTI2MDUxNDEzMDA0MVowLzEtMCsGA1UEAxMk
YzJhODc2YjctZmM0OC00M2IzLWIxYzQtMzIyNTFhOWQyNmE5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkZp3xAlZW2eYSoPMGOwR+kcm43eUBCZjxtBT
WxQCpInBtSAzN1KFZhnJ1mRYwis8AD6ftboV6EKodcL6wUwzsJZ4wESqv6HZo6kv
oxsmApoMv3wT7K2vTTAbOISHOicuvBObP56a/EGyvbZ3UhaUiOx+uSvCciOl+KMF
Fp0KrbrkRAOsFPZvZyLliEjAQuVQBV0QAkgqtDA9WsKLzDmpb2CVLDlapSEKKUBA
rsPZbvh4ARQ5gX4SWUY+aAB2IUtA8dc+nl52fo03R9C2bWm9Y27aKEQwhp86Yy9c
5/1KyNQ8FTeC3dv5AyNGWHqoxIzQhLlRJPstK8q9lDbHsZd09QIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFJoJ6ACErS7+duiOW5pbxfMVzeiRMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9hNTNj
ZDA4MS1mNmU1LTRlNzEtODY4ZC1hMWMxMTkyMTMyMWQvNDdkMDNmMDQtNGZjMi0z
YTk3LWJhZjItMDAyMGZiYmZmNDMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYTUzY2QwODEtZjZlNS00ZTcxLTg2
OGQtYTFjMTE5MjEzMjFkL2E1M2NkMDgxLWY2ZTUtNGU3MS04NjhkLWExYzExOTIx
MzIxZC5jcmwwHwYDVR0jBBgwFoAU+c47QoJ3T6uNXqPojUlPKYGHe/AwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9hNTNjZDA4MS1mNmU1LTRlNzEtODY4ZC1hMWMx
MTkyMTMyMWQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJiABIvAA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBACYeUI15AsYdWt0LFYx0M8r51MXAZ20Y+110UUfC7HfrzmKF7gkB
UbbHHSjdA8T9uFBcsRejKF3g+rmS96jfnEqCCGGA5aGv5TPx+ZBQsawhgTroUJFP
K5W0TVBS6mc1GTyvWNaHDdSBvkST6npgNkqXztr/7055R3awpN1+ASK1FD0d5GRa
v2F8tr4yd2Gmt4mDhSKBGAP3JAuYeEMwgVxKFGUNpUxejR93fl7pH0b0/kV0rksk
5S4bZ5AFT2gMmS2AbQxr8Pa37KF7/LXWf8Jns67VduPVz2QkYBkpQS5uFriS41Fx
SUTHv2YhVhi7/he3QPEvl7yMMK7ilJidU8g=
-----END CERTIFICATE-----
Generated at Mon Mar 2 17:10:46 2026 by rpki-client