Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8223fc13-ab78-3da1-9818-374abed945e3.roa
File:                     8223fc13-ab78-3da1-9818-374abed945e3.roa (raw, json)
Hash identifier:          Yrq+I3/VjI6b209WICB4mTmft1kMj9rG4KxAs8SDh8I=
Subject key identifier:   D7:62:20:D0:5C:36:A7:33:D5:5D:E6:CA:6B:32:49:1E:09:39:51:E2
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584CFDE8C0BC3A1B07F20DAC3280
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8223fc13-ab78-3da1-9818-374abed945e3.roa
Signing time:             Thu 26 Feb 2026 14:00:40 +0000
ROA not before:           Thu 26 Feb 2026 14:00:40 +0000
ROA not after:            Wed 27 May 2026 13:00:40 +0000
asID:                     13367
IP address blocks:        2601:442:4000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:fd:e8:c0:bc:3a:1b:07:f2:0d:ac:32:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Feb 26 14:00:40 2026 GMT
            Not After : May 27 13:00:40 2026 GMT
        Subject: CN=d1f4e124-331c-4377-9741-06829e245ef9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:1e:4a:9a:b9:6f:75:6c:03:05:ef:e1:6d:7d:
                    60:65:1d:21:90:da:a7:cf:e6:ac:67:73:6a:2c:8d:
                    13:a7:c4:d2:57:a4:99:77:fc:ca:78:b1:e4:44:43:
                    0c:92:f3:73:29:50:c3:87:b2:29:39:0a:eb:42:9c:
                    50:c7:9f:71:c4:dd:43:ba:33:7a:64:3c:6e:24:79:
                    d5:37:45:62:55:57:d9:fc:c5:b9:f2:b1:fc:8c:14:
                    e6:28:8a:72:c9:2a:4d:6a:c6:58:58:9f:b7:57:51:
                    db:8f:c7:bd:e3:de:37:d3:ea:93:2f:c1:8e:b0:aa:
                    aa:ad:ed:b3:45:30:29:7b:cd:d5:be:b2:f5:d9:ce:
                    df:b3:c8:b8:4a:c0:44:9a:f4:bd:51:04:f1:5d:58:
                    2a:3f:7f:ff:22:9d:45:42:3d:a4:99:49:97:b7:4a:
                    70:c0:8e:80:c8:d2:26:c5:27:04:48:4f:73:a0:c9:
                    76:b1:73:a5:e3:19:1d:b8:78:09:2f:cb:a7:14:b8:
                    a4:9c:e7:35:6f:b4:bc:c2:46:44:af:45:89:7f:76:
                    27:45:e0:14:88:e6:77:42:29:8e:19:6c:5c:f0:f5:
                    e3:f1:e7:30:1a:4a:8b:3d:4a:f3:7a:9b:d3:e0:25:
                    28:53:09:0b:e4:00:bc:66:8a:eb:c7:28:e9:a1:2e:
                    22:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:62:20:D0:5C:36:A7:33:D5:5D:E6:CA:6B:32:49:1E:09:39:51:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8223fc13-ab78-3da1-9818-374abed945e3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2601:442:4000::/34

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:9b:d8:d6:49:8e:76:8a:f6:87:a5:d2:3d:40:50:02:e4:0e:
         00:ca:63:7d:f5:fe:0e:27:91:ed:a8:1c:b4:2d:14:12:d3:4c:
         2b:e7:15:96:fe:fd:18:e0:60:0e:a2:da:e5:4d:26:c0:98:23:
         c8:27:8f:82:34:b4:95:1c:cf:f5:f1:70:f3:5a:cd:62:a4:a2:
         d2:88:6f:c6:63:03:4b:22:da:ad:c6:3c:31:d1:a6:48:e0:aa:
         70:8b:48:26:eb:8d:9b:d1:b8:86:15:c9:12:2b:b6:cb:cf:29:
         16:4b:b4:05:79:2b:05:86:8f:29:b2:cc:fd:05:ea:c1:5f:46:
         3f:d8:f8:b5:cb:d4:7a:c3:70:12:63:a3:4c:44:cd:9e:34:32:
         54:f0:95:f6:b4:8e:01:08:b9:41:ec:f2:b1:23:4d:db:89:4b:
         73:d4:ad:65:db:57:3e:d1:b9:e2:d8:ce:5b:63:53:19:fd:8a:
         1a:9c:89:84:3e:d1:2e:9e:75:81:a4:b3:83:e6:d6:24:00:b2:
         5c:09:59:77:6f:2a:a8:35:6f:21:5c:1f:cc:6c:2b:be:ca:a2:
         4b:05:13:ba:34:61:07:e6:23:23:e4:fe:cd:89:70:2b:ca:14:
         6e:4b:b6:c2:eb:fc:47:3c:dc:9b:c3:37:b6:a1:12:b6:d9:ab:
         02:d7:34:69
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEz96MC8OhsH8g2sMoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI2MDIyNjE0MDA0MFoXDTI2MDUyNzEzMDA0MFowLzEtMCsGA1UEAxMk
ZDFmNGUxMjQtMzMxYy00Mzc3LTk3NDEtMDY4MjllMjQ1ZWY5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApR5KmrlvdWwDBe/hbX1gZR0hkNqnz+asZ3Nq
LI0Tp8TSV6SZd/zKeLHkREMMkvNzKVDDh7IpOQrrQpxQx59xxN1DujN6ZDxuJHnV
N0ViVVfZ/MW58rH8jBTmKIpyySpNasZYWJ+3V1Hbj8e949430+qTL8GOsKqqre2z
RTApe83VvrL12c7fs8i4SsBEmvS9UQTxXVgqP3//Ip1FQj2kmUmXt0pwwI6AyNIm
xScESE9zoMl2sXOl4xkduHgJL8unFLiknOc1b7S8wkZEr0WJf3YnReAUiOZ3QimO
GWxc8PXj8ecwGkqLPUrzepvT4CUoUwkL5AC8ZorrxyjpoS4i0QIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFNdiINBcNqcz1V3mymsySR4JOVHiMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvODIyM2ZjMTMtYWI3OC0z
ZGExLTk4MTgtMzc0YWJlZDk0NWUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYGJgEEQkAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAA5vY1kmOdor2h6XSPUBQAuQOAMpjffX+DieR7agctC0UEtNMK+cV
lv79GOBgDqLa5U0mwJgjyCePgjS0lRzP9fFw81rNYqSi0ohvxmMDSyLarcY8MdGm
SOCqcItIJuuNm9G4hhXJEiu2y88pFku0BXkrBYaPKbLM/QXqwV9GP9j4tcvUesNw
EmOjTETNnjQyVPCV9rSOAQi5QezysSNN24lLc9StZdtXPtG54tjOW2NTGf2KGpyJ
hD7RLp51gaSzg+bWJACyXAlZd28qqDVvIVwfzGwrvsqiSwUTujRhB+YjI+T+zYlw
K8oUbku2wuv8Rzzcm8M3tqESttmrAtc0aQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 10:23:36 2026 by rpki-client