Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1e780065-6b4a-42e5-ba6a-2cc340001aa7/fe8a86c7-fcf2-3d23-9999-54a57a7229b2.roa
File:                     fe8a86c7-fcf2-3d23-9999-54a57a7229b2.roa (raw, json)
Hash identifier:          4BuW5tJj0Ki/UMbU3GgcwfybstTTRW8ZwYPlHB+9fQc=
Subject key identifier:   1A:2D:8D:4D:E6:DF:B1:AE:DF:98:94:4B:09:53:D6:6D:2E:1F:E6:4B
Certificate issuer:       /CN=1e780065-6b4a-42e5-ba6a-2cc340001aa7
Certificate serial:       010D0C9F4328584CCA41E690758EE23D51A58800
Authority key identifier: EA:AC:32:BC:04:72:09:79:83:73:10:B1:70:78:31:B0:9D:CF:46:43
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1e780065-6b4a-42e5-ba6a-2cc340001aa7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1e780065-6b4a-42e5-ba6a-2cc340001aa7/fe8a86c7-fcf2-3d23-9999-54a57a7229b2.roa
Signing time:             Sun 08 Feb 2026 02:00:32 +0000
ROA not before:           Sun 08 Feb 2026 02:00:32 +0000
ROA not after:            Sat 09 May 2026 01:00:32 +0000
asID:                     11736
IP address blocks:        2607:f558:1c00::/40 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1e780065-6b4a-42e5-ba6a-2cc340001aa7/1e780065-6b4a-42e5-ba6a-2cc340001aa7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1e780065-6b4a-42e5-ba6a-2cc340001aa7/1e780065-6b4a-42e5-ba6a-2cc340001aa7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1e780065-6b4a-42e5-ba6a-2cc340001aa7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 03:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ca:41:e6:90:75:8e:e2:3d:51:a5:88:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e780065-6b4a-42e5-ba6a-2cc340001aa7
        Validity
            Not Before: Feb  8 02:00:32 2026 GMT
            Not After : May  9 01:00:32 2026 GMT
        Subject: CN=a09dab39-fe38-46cf-8f64-04c2a7cee423
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:43:bc:16:b9:c3:d8:a0:d1:05:e2:38:da:d4:
                    23:73:5b:12:11:bc:98:a2:ad:5a:39:10:96:83:1a:
                    81:bb:31:b2:ee:e2:bf:65:06:a6:35:ac:08:20:a2:
                    99:b0:bf:9d:df:77:41:0f:62:15:39:d8:56:fb:6d:
                    b2:af:8e:85:39:eb:26:3d:e7:19:77:f2:d6:a1:dd:
                    57:eb:d5:ab:53:1f:c9:24:7d:ef:fc:4a:c6:e8:d3:
                    73:2f:ee:d6:5c:f5:f3:34:7b:82:30:94:97:40:e7:
                    f8:0a:82:a8:27:89:1d:07:2b:14:26:f6:7e:ac:6e:
                    87:db:51:39:b1:8a:90:73:b7:15:4e:0a:0f:50:e3:
                    1f:e0:c8:8c:1b:09:1e:06:de:5c:82:ae:33:23:43:
                    02:c9:98:6e:29:40:b0:ac:cd:de:02:ad:28:9b:86:
                    0d:13:8c:25:d5:76:a3:3d:33:3e:32:22:3f:9a:5a:
                    8b:ef:05:ce:7b:a2:cc:8d:03:a9:f5:d1:50:16:07:
                    1c:da:24:0e:ba:db:10:e8:1f:10:01:61:74:c6:f2:
                    2a:66:9e:38:bf:c0:7f:44:ae:a9:ef:aa:58:ae:7c:
                    70:66:98:68:ae:8b:49:e0:06:a9:e7:f4:af:1a:15:
                    c2:c7:f2:f5:f7:e7:e8:f7:6d:7d:f1:fb:79:72:21:
                    2d:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:2D:8D:4D:E6:DF:B1:AE:DF:98:94:4B:09:53:D6:6D:2E:1F:E6:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1e780065-6b4a-42e5-ba6a-2cc340001aa7/fe8a86c7-fcf2-3d23-9999-54a57a7229b2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1e780065-6b4a-42e5-ba6a-2cc340001aa7/1e780065-6b4a-42e5-ba6a-2cc340001aa7.crl

            X509v3 Authority Key Identifier:
                keyid:EA:AC:32:BC:04:72:09:79:83:73:10:B1:70:78:31:B0:9D:CF:46:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1e780065-6b4a-42e5-ba6a-2cc340001aa7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f558:1c00::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:b3:ab:2c:e8:c1:66:a3:7d:a2:97:4a:4f:cd:99:50:db:85:
         d7:66:27:de:11:6a:b9:e9:70:97:af:a8:1a:9c:4e:50:8f:18:
         52:a2:87:f1:e2:78:3d:ba:87:c1:c9:45:4b:5d:87:66:cc:29:
         60:82:d8:1c:ad:39:10:18:dd:0f:b4:74:70:92:cc:1b:95:20:
         63:02:4a:ac:3b:30:81:5e:92:0e:49:30:f5:a3:3a:83:9d:a3:
         ef:b8:cf:70:0e:4b:c6:29:e0:eb:aa:57:40:47:8a:56:48:fa:
         ca:c4:e1:92:96:ab:2b:66:f0:f2:50:ef:e2:a9:89:15:8d:14:
         7b:08:9a:83:77:a2:04:d6:56:14:33:bd:5f:33:15:ad:1d:4e:
         bd:6a:a8:88:d6:e8:52:86:e4:ee:54:c6:47:78:ff:49:5f:4f:
         1a:ba:23:c8:b0:59:2f:5c:5a:f7:67:15:fd:d3:f8:7c:c3:df:
         69:82:de:e7:50:e2:73:d1:83:01:4e:9c:ac:14:be:fd:2f:78:
         f1:c0:78:78:f8:05:cf:04:6e:5f:4e:1e:4a:a1:5d:72:2b:e5:
         e4:f5:a8:07:b1:31:0e:09:02:0b:51:d0:5a:fc:19:26:08:d5:
         7a:38:90:a3:db:3d:75:34:01:d3:b2:1a:83:92:62:1f:28:f3:
         f8:31:02:4f
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEzKQeaQdY7iPVGliAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMWU3ODAwNjUtNmI0YS00MmU1LWJhNmEtMmNjMzQwMDAx
YWE3MB4XDTI2MDIwODAyMDAzMloXDTI2MDUwOTAxMDAzMlowLzEtMCsGA1UEAxMk
YTA5ZGFiMzktZmUzOC00NmNmLThmNjQtMDRjMmE3Y2VlNDIzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoEO8FrnD2KDRBeI42tQjc1sSEbyYoq1aORCW
gxqBuzGy7uK/ZQamNawIIKKZsL+d33dBD2IVOdhW+22yr46FOesmPecZd/LWod1X
69WrUx/JJH3v/ErG6NNzL+7WXPXzNHuCMJSXQOf4CoKoJ4kdBysUJvZ+rG6H21E5
sYqQc7cVTgoPUOMf4MiMGwkeBt5cgq4zI0MCyZhuKUCwrM3eAq0om4YNE4wl1Xaj
PTM+MiI/mlqL7wXOe6LMjQOp9dFQFgcc2iQOutsQ6B8QAWF0xvIqZp44v8B/RK6p
76pYrnxwZphorotJ4Aap5/SvGhXCx/L19+fo92198ft5ciEtHwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFBotjU3m37Gu35iUSwlT1m0uH+ZLMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8xZTc4
MDA2NS02YjRhLTQyZTUtYmE2YS0yY2MzNDAwMDFhYTcvZmU4YTg2YzctZmNmMi0z
ZDIzLTk5OTktNTRhNTdhNzIyOWIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMWU3ODAwNjUtNmI0YS00MmU1LWJh
NmEtMmNjMzQwMDAxYWE3LzFlNzgwMDY1LTZiNGEtNDJlNS1iYTZhLTJjYzM0MDAw
MWFhNy5jcmwwHwYDVR0jBBgwFoAU6qwyvARyCXmDcxCxcHgxsJ3PRkMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy8xZTc4MDA2NS02YjRhLTQyZTUtYmE2YS0yY2Mz
NDAwMDFhYTcuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgf1WBww
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAGbOrLOjBZqN9opdKT82ZUNuF12Yn3hFquelwl6+oGpxOUI8YUqKH
8eJ4PbqHwclFS12HZswpYILYHK05EBjdD7R0cJLMG5UgYwJKrDswgV6SDkkw9aM6
g52j77jPcA5Lxing66pXQEeKVkj6ysThkparK2bw8lDv4qmJFY0Uewiag3eiBNZW
FDO9XzMVrR1OvWqoiNboUobk7lTGR3j/SV9PGrojyLBZL1xa92cV/dP4fMPfaYLe
51Dic9GDAU6crBS+/S948cB4ePgFzwRuX04eSqFdcivl5PWoB7ExDgkCC1HQWvwZ
JgjVejiQo9s9dTQB07Iag5JiHyjz+DECTw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 04:42:32 2026 by rpki-client