Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a49381a3-9c6f-47d6-9c52-9fa07d2bf188/0ebc0ba8-d251-3f18-a70e-1b6a0d6df8ec.roa
File:                     0ebc0ba8-d251-3f18-a70e-1b6a0d6df8ec.roa (raw, json)
Hash identifier:          0Z6Vn6HQ2eo1vMkRAVNDtjliel7Qny+XMdcaz3kzTqQ=
Subject key identifier:   52:AE:7E:E2:2F:D2:85:FD:A6:E0:73:05:B4:10:DF:9A:E2:70:87:BF
Certificate issuer:       /CN=a49381a3-9c6f-47d6-9c52-9fa07d2bf188
Certificate serial:       010D0C9F4328584CF58794480E50281CAF1E5400
Authority key identifier: 62:52:61:E7:73:FA:00:DB:15:7A:A8:D5:BC:7A:72:B2:D4:80:7C:CB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a49381a3-9c6f-47d6-9c52-9fa07d2bf188.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a49381a3-9c6f-47d6-9c52-9fa07d2bf188/0ebc0ba8-d251-3f18-a70e-1b6a0d6df8ec.roa
Signing time:             Mon 23 Feb 2026 14:00:41 +0000
ROA not before:           Mon 23 Feb 2026 14:00:41 +0000
ROA not after:            Sun 24 May 2026 13:00:41 +0000
asID:                     32604
IP address blocks:        2602:fa9c:1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a49381a3-9c6f-47d6-9c52-9fa07d2bf188/a49381a3-9c6f-47d6-9c52-9fa07d2bf188.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a49381a3-9c6f-47d6-9c52-9fa07d2bf188/a49381a3-9c6f-47d6-9c52-9fa07d2bf188.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a49381a3-9c6f-47d6-9c52-9fa07d2bf188.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:f5:87:94:48:0e:50:28:1c:af:1e:54:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a49381a3-9c6f-47d6-9c52-9fa07d2bf188
        Validity
            Not Before: Feb 23 14:00:41 2026 GMT
            Not After : May 24 13:00:41 2026 GMT
        Subject: CN=fa523446-2710-4e83-b419-7507b77ad897
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:22:e8:14:f7:f9:42:b8:c9:ae:d2:9e:5c:49:
                    30:55:b1:44:4f:41:7f:08:a2:76:af:7f:46:cd:d1:
                    d6:bb:41:c2:45:ad:a0:65:dd:90:92:ab:a7:16:7c:
                    d5:72:5a:c4:6a:70:1d:d5:29:4c:34:42:af:0b:6c:
                    28:91:5f:4f:e4:ce:88:8b:d2:76:6a:f7:4d:77:b3:
                    ca:ca:61:30:b2:a2:47:bb:af:6f:80:52:30:61:cd:
                    f5:b3:38:f0:f7:b1:cd:aa:75:e8:5e:84:37:f5:7a:
                    94:b7:30:ce:e7:50:d4:bb:47:58:f7:6a:c5:c5:5a:
                    16:1e:6b:af:4f:47:a6:31:a0:7b:ae:b1:c8:0f:d0:
                    c0:ed:86:3e:9b:e2:e1:23:33:32:bf:22:9a:9c:58:
                    28:c8:c9:c6:e1:53:fa:96:40:6c:40:bb:ed:d9:18:
                    06:32:ea:18:2b:be:b3:1e:18:42:23:0b:30:f7:bc:
                    1c:0d:eb:06:55:56:e8:95:21:7c:ac:ad:52:7a:99:
                    f8:a2:ae:ea:14:50:ec:30:a2:d1:be:4e:da:61:94:
                    91:2b:d7:2b:0b:0d:19:b1:4a:0c:1b:c0:40:b7:fb:
                    b7:1c:51:d9:3d:41:9f:d8:d9:bc:f0:1c:c7:4a:fc:
                    70:71:71:5c:e6:91:5f:5e:71:f8:2f:01:8a:40:c8:
                    46:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:AE:7E:E2:2F:D2:85:FD:A6:E0:73:05:B4:10:DF:9A:E2:70:87:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a49381a3-9c6f-47d6-9c52-9fa07d2bf188/0ebc0ba8-d251-3f18-a70e-1b6a0d6df8ec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a49381a3-9c6f-47d6-9c52-9fa07d2bf188/a49381a3-9c6f-47d6-9c52-9fa07d2bf188.crl

            X509v3 Authority Key Identifier:
                keyid:62:52:61:E7:73:FA:00:DB:15:7A:A8:D5:BC:7A:72:B2:D4:80:7C:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a49381a3-9c6f-47d6-9c52-9fa07d2bf188.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa9c:1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:28:e4:c4:59:d7:a4:62:38:be:1f:12:a9:b4:81:fe:ed:93:
         48:97:b0:7f:fc:4a:df:5f:03:9c:32:af:77:25:61:00:83:07:
         e5:a7:00:7c:7b:0a:43:70:d1:e2:15:0b:1f:78:d0:21:9a:7e:
         8b:6a:8c:22:b8:af:1c:d3:2a:f7:23:9d:66:23:8a:22:6d:18:
         67:50:42:f1:26:78:b3:36:40:78:f9:31:d3:54:70:f5:2b:49:
         ad:0d:6f:70:6e:e9:2d:f1:c8:e8:36:fd:d7:ef:1a:fe:c6:de:
         db:c6:71:ed:6c:10:95:63:41:61:04:49:b9:1f:26:4f:38:1d:
         b5:a4:6e:9c:b1:b4:38:6b:b5:d9:09:b8:ca:98:0e:14:05:c0:
         41:2d:ef:95:97:17:ac:bf:10:5e:db:1b:00:54:7f:fd:80:af:
         d1:1b:82:0e:05:98:a7:54:80:33:65:ef:3a:af:9a:a9:53:2d:
         9d:d9:c7:e6:16:82:b5:5e:31:b6:58:b6:c8:9c:40:8e:17:98:
         b2:ed:60:9d:0c:f3:80:9e:67:73:2e:38:db:85:80:67:94:f9:
         d7:21:87:77:99:c8:ac:f9:95:7e:dd:7b:f1:5e:05:ca:23:ec:
         fd:50:dc:41:7c:77:bd:e5:43:33:7d:b0:ea:25:f4:21:b8:2d:
         6b:ae:d8:4d
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEz1h5RIDlAoHK8eVAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTQ5MzgxYTMtOWM2Zi00N2Q2LTljNTItOWZhMDdkMmJm
MTg4MB4XDTI2MDIyMzE0MDA0MVoXDTI2MDUyNDEzMDA0MVowLzEtMCsGA1UEAxMk
ZmE1MjM0NDYtMjcxMC00ZTgzLWI0MTktNzUwN2I3N2FkODk3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4yLoFPf5QrjJrtKeXEkwVbFET0F/CKJ2r39G
zdHWu0HCRa2gZd2QkqunFnzVclrEanAd1SlMNEKvC2wokV9P5M6Ii9J2avdNd7PK
ymEwsqJHu69vgFIwYc31szjw97HNqnXoXoQ39XqUtzDO51DUu0dY92rFxVoWHmuv
T0emMaB7rrHID9DA7YY+m+LhIzMyvyKanFgoyMnG4VP6lkBsQLvt2RgGMuoYK76z
HhhCIwsw97wcDesGVVbolSF8rK1Sepn4oq7qFFDsMKLRvk7aYZSRK9crCw0ZsUoM
G8BAt/u3HFHZPUGf2Nm88BzHSvxwcXFc5pFfXnH4LwGKQMhGjwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFFKufuIv0oX9puBzBbQQ35ricIe/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9hNDkz
ODFhMy05YzZmLTQ3ZDYtOWM1Mi05ZmEwN2QyYmYxODgvMGViYzBiYTgtZDI1MS0z
ZjE4LWE3MGUtMWI2YTBkNmRmOGVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYTQ5MzgxYTMtOWM2Zi00N2Q2LTlj
NTItOWZhMDdkMmJmMTg4L2E0OTM4MWEzLTljNmYtNDdkNi05YzUyLTlmYTA3ZDJi
ZjE4OC5jcmwwHwYDVR0jBBgwFoAUYlJh53P6ANsVeqjVvHpystSAfMswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9hNDkzODFhMy05YzZmLTQ3ZDYtOWM1Mi05ZmEw
N2QyYmYxODguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL6nAAB
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAD0o5MRZ16RiOL4fEqm0gf7tk0iXsH/8St9fA5wyr3clYQCDB+Wn
AHx7CkNw0eIVCx940CGafotqjCK4rxzTKvcjnWYjiiJtGGdQQvEmeLM2QHj5MdNU
cPUrSa0Nb3Bu6S3xyOg2/dfvGv7G3tvGce1sEJVjQWEESbkfJk84HbWkbpyxtDhr
tdkJuMqYDhQFwEEt75WXF6y/EF7bGwBUf/2Ar9Ebgg4FmKdUgDNl7zqvmqlTLZ3Z
x+YWgrVeMbZYtsicQI4XmLLtYJ0M84CeZ3MuONuFgGeU+dchh3eZyKz5lX7de/Fe
Bcoj7P1Q3EF8d73lQzN9sOol9CG4LWuu2E0=
-----END CERTIFICATE-----
Generated at Mon Mar 2 06:33:14 2026 by rpki-client