Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/722d690d-f201-3c0d-af29-be2f8ac6b5f7.roa
File:                     722d690d-f201-3c0d-af29-be2f8ac6b5f7.roa (raw, json)
Hash identifier:          TKJp9yRbEzC+algOvc+Ina0qjbvrVU+JssCBKenlR/k=
Subject key identifier:   B0:43:58:B6:F0:06:F3:35:87:16:36:D2:FA:11:70:2C:FD:B5:E7:1D
Certificate issuer:       /CN=906cbc91-cfe9-4d15-8a13-e3d828c0469c
Certificate serial:       010D0C9F4328584CC77734B74C5750EA8443CB00
Authority key identifier: B4:CD:BA:12:A5:E6:57:6B:C1:2A:78:28:52:1E:B8:C5:C2:84:62:15
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/722d690d-f201-3c0d-af29-be2f8ac6b5f7.roa
Signing time:             Sat 07 Feb 2026 02:00:31 +0000
ROA not before:           Sat 07 Feb 2026 02:00:31 +0000
ROA not after:            Fri 08 May 2026 01:00:31 +0000
asID:                     32133
IP address blocks:        2606:8e80:7000::/37 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/906cbc91-cfe9-4d15-8a13-e3d828c0469c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/906cbc91-cfe9-4d15-8a13-e3d828c0469c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:c7:77:34:b7:4c:57:50:ea:84:43:cb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=906cbc91-cfe9-4d15-8a13-e3d828c0469c
        Validity
            Not Before: Feb  7 02:00:31 2026 GMT
            Not After : May  8 01:00:31 2026 GMT
        Subject: CN=3b15465d-f5a3-499a-89be-c67e6dc356a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:4e:f9:6c:03:3a:ae:c5:3a:2e:92:e8:a2:38:
                    2f:01:99:23:2c:44:8b:2c:1b:75:9a:01:8f:a9:6a:
                    b2:95:56:ac:b2:5e:57:47:09:8c:06:43:23:d8:83:
                    dd:1c:65:ea:db:21:f1:a5:6c:02:83:80:11:9d:6e:
                    5f:32:80:55:37:32:8b:2d:cc:98:4d:88:0f:ac:9d:
                    08:5e:01:d6:f2:a9:e5:92:bf:10:5c:b4:19:90:6a:
                    b8:79:19:76:37:91:59:9b:26:44:e9:c9:2e:9f:35:
                    5a:27:02:db:fa:e3:67:ea:d7:f3:8c:7a:a6:fc:9d:
                    c6:3f:7e:4e:aa:27:4e:e1:d3:24:b0:cf:5b:d5:cb:
                    f1:1f:8b:8c:68:44:68:0a:ba:11:83:6b:8f:7e:5a:
                    90:73:1d:45:c3:b2:e4:c3:14:73:6f:c8:b5:d9:97:
                    09:88:0e:ef:e7:1e:97:3f:59:3e:ed:73:6c:69:62:
                    75:98:cd:bc:86:d1:84:06:85:0d:ef:a2:55:4f:50:
                    bb:65:c6:e4:9c:33:f0:85:43:50:ac:c6:5f:c4:b4:
                    ae:bc:b2:88:4f:b4:b7:53:66:8c:45:ee:df:3d:63:
                    56:45:81:b3:fe:7a:94:0c:81:44:9a:87:89:a0:13:
                    e1:88:0f:e6:0a:4b:5b:3f:44:c3:bc:00:cb:71:f0:
                    f8:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:43:58:B6:F0:06:F3:35:87:16:36:D2:FA:11:70:2C:FD:B5:E7:1D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/722d690d-f201-3c0d-af29-be2f8ac6b5f7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/906cbc91-cfe9-4d15-8a13-e3d828c0469c.crl

            X509v3 Authority Key Identifier:
                keyid:B4:CD:BA:12:A5:E6:57:6B:C1:2A:78:28:52:1E:B8:C5:C2:84:62:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:8e80:7000::/37

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:8f:a3:b0:12:17:60:d2:fc:28:ab:4b:04:f0:1c:9c:ec:9c:
         e8:e9:4d:13:0b:d0:8d:df:f8:9e:5d:f2:e0:cd:38:2e:eb:8c:
         32:b6:d9:da:ef:fb:b0:69:e4:87:a4:fb:2f:98:f7:2f:28:ec:
         f9:5b:d3:14:63:1a:fe:55:f6:b8:e2:26:5d:eb:fb:43:64:b4:
         3c:2b:62:69:d8:91:2c:17:61:21:7a:30:44:11:92:d6:2d:4b:
         91:c8:be:92:90:20:9d:56:8a:bc:35:aa:6c:4c:c6:46:11:47:
         87:e3:e7:1d:f6:77:da:ae:cf:56:34:73:ae:e2:84:f0:aa:24:
         c8:97:cf:aa:e4:20:0f:46:0e:fa:da:46:93:9e:b3:e4:f2:e7:
         b1:09:9b:39:d2:be:04:29:65:9d:a9:4f:ff:5a:f4:44:43:86:
         d7:74:cc:21:4e:99:2a:4a:5b:8a:02:a2:7a:b0:3c:51:ff:08:
         e0:50:22:a2:78:01:cb:40:92:70:56:3d:57:d4:c8:f3:3a:5c:
         1b:d8:ca:88:53:9d:09:e4:59:75:a1:8d:ff:3f:82:9f:53:f8:
         4b:d3:bc:ae:cf:9c:01:2c:4a:b4:62:8a:3e:f5:ec:3b:c8:cc:
         d8:4c:6e:0e:43:8b:ad:22:6b:67:cb:73:64:51:57:96:61:a8:
         44:e5:16:f4
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEzHdzS3TFdQ6oRDywAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTA2Y2JjOTEtY2ZlOS00ZDE1LThhMTMtZTNkODI4YzA0
NjljMB4XDTI2MDIwNzAyMDAzMVoXDTI2MDUwODAxMDAzMVowLzEtMCsGA1UEAxMk
M2IxNTQ2NWQtZjVhMy00OTlhLTg5YmUtYzY3ZTZkYzM1NmE3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmk75bAM6rsU6LpLoojgvAZkjLESLLBt1mgGP
qWqylVassl5XRwmMBkMj2IPdHGXq2yHxpWwCg4ARnW5fMoBVNzKLLcyYTYgPrJ0I
XgHW8qnlkr8QXLQZkGq4eRl2N5FZmyZE6ckunzVaJwLb+uNn6tfzjHqm/J3GP35O
qidO4dMksM9b1cvxH4uMaERoCroRg2uPflqQcx1Fw7LkwxRzb8i12ZcJiA7v5x6X
P1k+7XNsaWJ1mM28htGEBoUN76JVT1C7ZcbknDPwhUNQrMZfxLSuvLKIT7S3U2aM
Re7fPWNWRYGz/nqUDIFEmoeJoBPhiA/mCktbP0TDvADLcfD45wIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFLBDWLbwBvM1hxY20voRcCz9tecdMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi85MDZj
YmM5MS1jZmU5LTRkMTUtOGExMy1lM2Q4MjhjMDQ2OWMvNzIyZDY5MGQtZjIwMS0z
YzBkLWFmMjktYmUyZjhhYzZiNWY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOTA2Y2JjOTEtY2ZlOS00ZDE1LThh
MTMtZTNkODI4YzA0NjljLzkwNmNiYzkxLWNmZTktNGQxNS04YTEzLWUzZDgyOGMw
NDY5Yy5jcmwwHwYDVR0jBBgwFoAUtM26EqXmV2vBKngoUh64xcKEYhUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi85MDZjYmM5MS1jZmU5LTRkMTUtOGExMy1lM2Q4
MjhjMDQ2OWMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYDJgaOgHAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAU4+jsBIXYNL8KKtLBPAcnOyc6OlNEwvQjd/4nl3y4M04LuuMMrbZ
2u/7sGnkh6T7L5j3Lyjs+VvTFGMa/lX2uOImXev7Q2S0PCtiadiRLBdhIXowRBGS
1i1Lkci+kpAgnVaKvDWqbEzGRhFHh+PnHfZ32q7PVjRzruKE8KokyJfPquQgD0YO
+tpGk56z5PLnsQmbOdK+BCllnalP/1r0REOG13TMIU6ZKkpbigKierA8Uf8I4FAi
ongBy0CScFY9V9TI8zpcG9jKiFOdCeRZdaGN/z+Cn1P4S9O8rs+cASxKtGKKPvXs
O8jM2ExuDkOLrSJrZ8tzZFFXlmGoROUW9A==
-----END CERTIFICATE-----
Generated at Mon Mar 2 07:53:05 2026 by rpki-client