Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/d330a491-d9bc-3e5f-bd51-5cf733eced0f.roa
File:                     d330a491-d9bc-3e5f-bd51-5cf733eced0f.roa (raw, json)
Hash identifier:          PdZETlFjAOLuCNK4xezsM7aPjKNZmwuhzOxcxtXSGu0=
Subject key identifier:   46:A2:12:DA:97:CE:D5:71:66:BA:EF:77:C5:80:8C:94:E6:2C:ED:FA
Certificate issuer:       /CN=f375140c-52cc-401f-b3a0-476ffa367076
Certificate serial:       010D0C9F4328584CB551E3167F452F12F6CF1580
Authority key identifier: 44:EA:00:A7:AC:0D:83:8E:EC:A5:10:EE:B1:42:FF:0B:98:5E:06:F3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/d330a491-d9bc-3e5f-bd51-5cf733eced0f.roa
Signing time:             Sat 31 Jan 2026 14:00:39 +0000
ROA not before:           Sat 31 Jan 2026 14:00:39 +0000
ROA not after:            Fri 01 May 2026 13:00:39 +0000
asID:                     399976
IP address blocks:        2602:80c:20a0::/48 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:b5:51:e3:16:7f:45:2f:12:f6:cf:15:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f375140c-52cc-401f-b3a0-476ffa367076
        Validity
            Not Before: Jan 31 14:00:39 2026 GMT
            Not After : May  1 13:00:39 2026 GMT
        Subject: CN=42181eaa-1f70-4982-8603-702609e88622
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:5c:2d:fc:f1:4e:35:af:41:5e:40:02:6b:eb:
                    a9:f4:83:1b:7e:8e:19:cc:30:8f:31:cd:3d:87:a5:
                    88:44:61:0d:60:8f:b9:1e:90:94:34:d2:2f:e4:a0:
                    54:4d:23:3a:a7:f0:ae:7b:7c:f6:c6:42:49:10:02:
                    c7:d8:44:43:21:8e:f4:f4:a0:26:c2:cf:72:45:02:
                    69:75:ed:a8:1a:3c:20:cb:12:f6:35:0c:11:41:ff:
                    ea:be:af:c5:f4:bb:e7:19:93:55:e9:d7:1e:fe:da:
                    22:c2:fe:1d:50:15:3e:3f:22:ff:52:46:11:31:a0:
                    ed:c7:28:bf:08:14:4f:fb:e7:d2:4b:84:b5:4c:04:
                    05:2a:a6:7b:6e:1a:20:e6:59:3f:4d:0b:40:11:40:
                    79:84:9e:01:c6:29:ca:23:7a:6d:30:cb:7e:0b:cd:
                    96:4d:49:52:64:74:25:7c:df:3d:b9:25:8f:32:31:
                    0b:e3:79:db:32:eb:39:ff:91:94:d8:04:ab:ea:ec:
                    d9:f1:71:ce:43:f8:19:2f:7c:bb:a0:75:fa:73:53:
                    d6:c0:fe:75:2b:54:a4:83:32:a3:20:d9:0b:9e:35:
                    70:19:1c:ee:e0:a1:30:d7:81:84:8e:47:e1:7e:6a:
                    d6:5c:61:91:4b:a7:93:17:07:8e:77:d7:e9:1e:3f:
                    25:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:A2:12:DA:97:CE:D5:71:66:BA:EF:77:C5:80:8C:94:E6:2C:ED:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/d330a491-d9bc-3e5f-bd51-5cf733eced0f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.crl

            X509v3 Authority Key Identifier:
                keyid:44:EA:00:A7:AC:0D:83:8E:EC:A5:10:EE:B1:42:FF:0B:98:5E:06:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:80c:20a0::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:7a:13:66:bf:72:5e:ed:78:94:84:e8:04:63:47:82:e3:5e:
         7d:89:89:f1:b8:31:38:90:90:aa:90:39:be:65:ec:61:3e:4f:
         c2:8e:03:46:33:bf:0e:ed:07:3e:74:86:1e:e9:d6:39:51:c4:
         41:37:64:ee:1f:05:c9:9b:36:d2:e2:c5:1b:fe:b7:f5:e9:1c:
         ab:15:96:63:0b:75:5f:4f:10:e0:d9:d2:ce:9b:67:04:20:31:
         18:99:21:84:d2:c2:dd:1d:55:32:f0:71:b8:bc:eb:6e:88:c1:
         d9:d0:b3:ae:5c:3b:cd:17:c1:de:6f:8b:80:eb:e6:84:79:dd:
         bc:c0:93:de:87:7c:1c:fd:13:42:67:35:2f:6a:a2:eb:e9:81:
         e2:b0:94:81:6e:a9:22:6b:95:b9:f0:a1:d7:e7:9d:a8:2b:f4:
         1d:be:66:65:9a:65:70:83:ec:50:91:5a:c6:2e:98:05:ec:b6:
         db:d9:3c:18:65:2f:d9:0a:9c:30:21:4e:b2:36:e6:03:f9:d6:
         fa:5f:be:c3:98:1a:7a:29:d7:0c:e1:ec:ca:9e:c8:5e:eb:2a:
         44:40:2d:f0:83:19:34:50:06:02:44:2b:43:33:4c:36:c7:01:
         5c:6d:af:41:05:0b:2b:98:57:13:4b:27:c7:07:1b:9a:3d:0e:
         d2:19:c2:27
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEy1UeMWf0UvEvbPFYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjM3NTE0MGMtNTJjYy00MDFmLWIzYTAtNDc2ZmZhMzY3
MDc2MB4XDTI2MDEzMTE0MDAzOVoXDTI2MDUwMTEzMDAzOVowLzEtMCsGA1UEAxMk
NDIxODFlYWEtMWY3MC00OTgyLTg2MDMtNzAyNjA5ZTg4NjIyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq1wt/PFONa9BXkACa+up9IMbfo4ZzDCPMc09
h6WIRGENYI+5HpCUNNIv5KBUTSM6p/Cue3z2xkJJEALH2ERDIY709KAmws9yRQJp
de2oGjwgyxL2NQwRQf/qvq/F9LvnGZNV6dce/toiwv4dUBU+PyL/UkYRMaDtxyi/
CBRP++fSS4S1TAQFKqZ7bhog5lk/TQtAEUB5hJ4BxinKI3ptMMt+C82WTUlSZHQl
fN89uSWPMjEL43nbMus5/5GU2ASr6uzZ8XHOQ/gZL3y7oHX6c1PWwP51K1SkgzKj
INkLnjVwGRzu4KEw14GEjkfhfmrWXGGRS6eTFweOd9fpHj8lLwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFEaiEtqXztVxZrrvd8WAjJTmLO36MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9mMzc1
MTQwYy01MmNjLTQwMWYtYjNhMC00NzZmZmEzNjcwNzYvZDMzMGE0OTEtZDliYy0z
ZTVmLWJkNTEtNWNmNzMzZWNlZDBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZjM3NTE0MGMtNTJjYy00MDFmLWIz
YTAtNDc2ZmZhMzY3MDc2L2YzNzUxNDBjLTUyY2MtNDAxZi1iM2EwLTQ3NmZmYTM2
NzA3Ni5jcmwwHwYDVR0jBBgwFoAUROoAp6wNg47spRDusUL/C5heBvMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9mMzc1MTQwYy01MmNjLTQwMWYtYjNhMC00NzZm
ZmEzNjcwNzYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgIIDCCg
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAIp6E2a/cl7teJSE6ARjR4LjXn2JifG4MTiQkKqQOb5l7GE+T8KO
A0Yzvw7tBz50hh7p1jlRxEE3ZO4fBcmbNtLixRv+t/XpHKsVlmMLdV9PEODZ0s6b
ZwQgMRiZIYTSwt0dVTLwcbi8626IwdnQs65cO80Xwd5vi4Dr5oR53bzAk96HfBz9
E0JnNS9qouvpgeKwlIFuqSJrlbnwodfnnagr9B2+ZmWaZXCD7FCRWsYumAXsttvZ
PBhlL9kKnDAhTrI25gP51vpfvsOYGnop1wzh7MqeyF7rKkRALfCDGTRQBgJEK0Mz
TDbHAVxtr0EFCyuYVxNLJ8cHG5o9DtIZwic=
-----END CERTIFICATE-----
Generated at Mon Mar 2 15:00:28 2026 by rpki-client