Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e8253a5c-5822-44df-8846-56b6c0450bbe/bd2f8980-4c4c-3136-a65b-5108f8aa4e1e.roa
File:                     bd2f8980-4c4c-3136-a65b-5108f8aa4e1e.roa (raw, json)
Hash identifier:          yioZ6yYRiEsmg/n4mzDLzJap4KxOTHClSHyeFEimrjw=
Subject key identifier:   34:FE:04:D9:E0:66:29:4A:A2:E2:9E:51:9C:36:E3:0B:4B:9C:9A:80
Certificate issuer:       /CN=e8253a5c-5822-44df-8846-56b6c0450bbe
Certificate serial:       010D0C9F4328584CF85240242778A90744B5B380
Authority key identifier: 8C:04:51:41:EF:65:44:0D:8D:BF:17:38:32:1A:7E:73:4A:4D:EA:0A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e8253a5c-5822-44df-8846-56b6c0450bbe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e8253a5c-5822-44df-8846-56b6c0450bbe/bd2f8980-4c4c-3136-a65b-5108f8aa4e1e.roa
Signing time:             Tue 24 Feb 2026 14:00:41 +0000
ROA not before:           Tue 24 Feb 2026 14:00:41 +0000
ROA not after:            Mon 25 May 2026 13:00:41 +0000
asID:                     23036
IP address blocks:        2606:d1c0:1000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e8253a5c-5822-44df-8846-56b6c0450bbe/e8253a5c-5822-44df-8846-56b6c0450bbe.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e8253a5c-5822-44df-8846-56b6c0450bbe/e8253a5c-5822-44df-8846-56b6c0450bbe.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e8253a5c-5822-44df-8846-56b6c0450bbe.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:f8:52:40:24:27:78:a9:07:44:b5:b3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8253a5c-5822-44df-8846-56b6c0450bbe
        Validity
            Not Before: Feb 24 14:00:41 2026 GMT
            Not After : May 25 13:00:41 2026 GMT
        Subject: CN=23055c18-6da5-432c-b90f-ccb3295bfb7e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:59:47:2a:76:d2:f9:07:0e:8a:02:27:b8:2f:
                    05:fc:e7:e3:02:6c:2b:20:15:4d:92:ac:b1:b8:f3:
                    21:18:0c:5a:f0:4b:1f:c3:12:52:b8:0d:4d:5e:4f:
                    b9:00:cb:66:c8:de:cb:54:93:d1:d9:98:70:c2:c9:
                    91:ed:f8:60:94:18:af:f7:36:71:7d:06:3f:18:0c:
                    0c:9c:07:41:b4:05:37:70:a2:59:f4:5d:b1:c9:86:
                    89:49:00:d4:75:b7:fe:fc:4e:1c:cf:9b:b2:59:c8:
                    6e:e5:a3:6a:15:27:2a:6d:c2:4f:63:3e:2a:86:e1:
                    72:09:6c:90:04:15:a2:ef:10:5e:7a:c0:18:16:f6:
                    67:ff:b9:5a:2c:13:4c:ab:b3:b1:9c:1e:51:80:e0:
                    9c:c0:a1:79:d8:b0:c9:3b:6f:f9:a5:8f:00:02:30:
                    5d:a4:6e:b6:d6:4e:c2:b7:bc:f2:db:e2:70:a5:b7:
                    81:76:e2:46:57:40:17:8c:df:c1:bf:f2:7b:86:77:
                    e4:6d:4e:74:26:1e:ee:33:ef:37:ab:c3:59:16:31:
                    94:3e:ce:ad:df:87:b5:cc:1a:fa:5a:d7:e2:8a:25:
                    7f:98:1a:ec:53:02:f2:a8:a7:e8:f1:a3:6f:6a:8d:
                    22:2c:d2:e5:af:4e:f6:03:de:d5:6a:3c:28:68:eb:
                    c7:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:FE:04:D9:E0:66:29:4A:A2:E2:9E:51:9C:36:E3:0B:4B:9C:9A:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e8253a5c-5822-44df-8846-56b6c0450bbe/bd2f8980-4c4c-3136-a65b-5108f8aa4e1e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e8253a5c-5822-44df-8846-56b6c0450bbe/e8253a5c-5822-44df-8846-56b6c0450bbe.crl

            X509v3 Authority Key Identifier:
                keyid:8C:04:51:41:EF:65:44:0D:8D:BF:17:38:32:1A:7E:73:4A:4D:EA:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e8253a5c-5822-44df-8846-56b6c0450bbe.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:d1c0:1000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:e3:25:03:62:2a:0a:29:a5:a0:ef:66:34:4b:24:8b:65:4d:
         fa:24:7c:f5:9f:e9:9a:5b:59:22:e4:df:aa:d8:89:46:53:fd:
         86:37:9d:80:1e:82:b4:a8:cf:94:95:ba:84:79:f2:1e:80:d5:
         27:57:31:2c:58:da:86:aa:d6:37:4b:5e:45:20:dd:ba:60:07:
         e5:2b:75:ee:55:89:f0:0b:a6:55:11:d5:c3:80:d4:c6:0d:27:
         bc:69:87:47:85:59:cc:8a:50:42:4e:63:89:b8:c3:56:1c:7c:
         06:cf:bf:91:62:8f:1c:de:f7:31:94:c0:13:23:06:36:9a:e1:
         09:09:a1:61:79:62:f7:d9:f9:5c:b3:43:e8:5d:ae:0e:b7:bc:
         ce:fb:eb:e1:5b:46:63:eb:6a:58:d0:ee:1a:75:ea:47:b8:54:
         fe:a3:a9:f3:56:e7:1b:2d:aa:52:ff:5a:e2:11:f9:d1:32:8e:
         29:8f:f2:08:fc:69:9b:c5:4c:42:56:b3:f7:31:b3:8c:62:7d:
         13:65:6e:e1:c2:28:be:8e:45:43:5c:58:5b:06:91:fd:84:60:
         78:93:40:82:d3:15:14:ca:b2:a7:9b:3e:23:33:1e:7b:41:de:
         d3:cf:79:b5:15:9e:c5:78:84:9d:c1:57:a3:0c:3e:b4:4c:78:
         e1:ce:a3:dc
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEz4UkAkJ3ipB0S1s4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTgyNTNhNWMtNTgyMi00NGRmLTg4NDYtNTZiNmMwNDUw
YmJlMB4XDTI2MDIyNDE0MDA0MVoXDTI2MDUyNTEzMDA0MVowLzEtMCsGA1UEAxMk
MjMwNTVjMTgtNmRhNS00MzJjLWI5MGYtY2NiMzI5NWJmYjdlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvllHKnbS+QcOigInuC8F/OfjAmwrIBVNkqyx
uPMhGAxa8EsfwxJSuA1NXk+5AMtmyN7LVJPR2ZhwwsmR7fhglBiv9zZxfQY/GAwM
nAdBtAU3cKJZ9F2xyYaJSQDUdbf+/E4cz5uyWchu5aNqFScqbcJPYz4qhuFyCWyQ
BBWi7xBeesAYFvZn/7laLBNMq7OxnB5RgOCcwKF52LDJO2/5pY8AAjBdpG621k7C
t7zy2+JwpbeBduJGV0AXjN/Bv/J7hnfkbU50Jh7uM+83q8NZFjGUPs6t34e1zBr6
WtfiiiV/mBrsUwLyqKfo8aNvao0iLNLlr072A97VajwoaOvHSwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFDT+BNngZilKouKeUZw24wtLnJqAMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9lODI1
M2E1Yy01ODIyLTQ0ZGYtODg0Ni01NmI2YzA0NTBiYmUvYmQyZjg5ODAtNGM0Yy0z
MTM2LWE2NWItNTEwOGY4YWE0ZTFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZTgyNTNhNWMtNTgyMi00NGRmLTg4
NDYtNTZiNmMwNDUwYmJlL2U4MjUzYTVjLTU4MjItNDRkZi04ODQ2LTU2YjZjMDQ1
MGJiZS5jcmwwHwYDVR0jBBgwFoAUjARRQe9lRA2Nvxc4Mhp+c0pN6gowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9lODI1M2E1Yy01ODIyLTQ0ZGYtODg0Ni01NmI2
YzA0NTBiYmUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgbRwBAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAfOMlA2IqCimloO9mNEski2VN+iR89Z/pmltZIuTfqtiJRlP9hjed
gB6CtKjPlJW6hHnyHoDVJ1cxLFjahqrWN0teRSDdumAH5St17lWJ8AumVRHVw4DU
xg0nvGmHR4VZzIpQQk5jibjDVhx8Bs+/kWKPHN73MZTAEyMGNprhCQmhYXli99n5
XLND6F2uDre8zvvr4VtGY+tqWNDuGnXqR7hU/qOp81bnGy2qUv9a4hH50TKOKY/y
CPxpm8VMQlaz9zGzjGJ9E2Vu4cIovo5FQ1xYWwaR/YRgeJNAgtMVFMqyp5s+IzMe
e0He0895tRWexXiEncFXoww+tEx44c6j3A==
-----END CERTIFICATE-----
Generated at Mon Mar 2 22:20:23 2026 by rpki-client