Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0cb0d156-0906-405d-9cea-d599952bae65/0da19735-40c4-31c3-a739-88e03152a67a.roa
File:                     0da19735-40c4-31c3-a739-88e03152a67a.roa (raw, json)
Hash identifier:          IfTN+v5nQCuEkXRKvxO9Wo/lWk7GywagcBJDN+THhPo=
Subject key identifier:   03:A7:7A:96:97:06:8D:41:B2:DB:24:FB:14:C6:01:B0:0D:01:B2:0E
Certificate issuer:       /CN=0cb0d156-0906-405d-9cea-d599952bae65
Certificate serial:       010D0C9F4328584CF2BCFA0441BA88F3437B5580
Authority key identifier: 61:75:AD:68:36:B0:9C:A3:C5:D3:D2:C7:09:97:B5:B6:3A:1E:AC:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0cb0d156-0906-405d-9cea-d599952bae65.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0cb0d156-0906-405d-9cea-d599952bae65/0da19735-40c4-31c3-a739-88e03152a67a.roa
Signing time:             Sun 22 Feb 2026 14:00:41 +0000
ROA not before:           Sun 22 Feb 2026 14:00:41 +0000
ROA not after:            Sat 23 May 2026 13:00:41 +0000
asID:                     20303
IP address blocks:        2605:ed80::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0cb0d156-0906-405d-9cea-d599952bae65/0cb0d156-0906-405d-9cea-d599952bae65.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0cb0d156-0906-405d-9cea-d599952bae65/0cb0d156-0906-405d-9cea-d599952bae65.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0cb0d156-0906-405d-9cea-d599952bae65.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:f2:bc:fa:04:41:ba:88:f3:43:7b:55:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0cb0d156-0906-405d-9cea-d599952bae65
        Validity
            Not Before: Feb 22 14:00:41 2026 GMT
            Not After : May 23 13:00:41 2026 GMT
        Subject: CN=ce221419-b5d3-4b10-8066-06b015d81659
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:1f:08:ce:94:d2:af:94:ed:19:3a:50:c9:49:
                    0b:19:f6:29:d1:9b:f4:8a:fb:59:cf:55:a4:6e:3a:
                    f1:0e:8e:d1:9e:a8:8e:cb:e9:93:a2:2f:f3:26:73:
                    22:d4:58:4f:06:e6:ee:6b:4d:79:14:1b:6e:17:d4:
                    96:bd:bd:5f:04:19:e8:7f:3b:54:ea:eb:7b:2f:b8:
                    54:0b:10:8f:2e:4d:64:22:db:4a:6f:9a:d7:ae:38:
                    d4:b1:4e:9e:e7:b2:5f:a6:4c:86:64:95:37:5a:18:
                    65:df:ac:48:65:a7:27:73:1c:f4:7d:67:1d:c4:b6:
                    f1:65:73:04:e9:1b:bc:94:8b:e2:11:e8:b0:9c:4f:
                    d9:d6:c5:22:be:d8:77:2d:0d:cb:b6:ee:7a:4e:af:
                    cf:a0:72:94:13:e2:e5:d2:da:42:fd:de:4a:0d:5d:
                    92:34:ac:71:67:c3:32:8b:88:c9:1c:89:3c:86:64:
                    81:4f:12:ed:67:c8:49:99:4f:37:63:14:d7:b7:3a:
                    b4:51:92:1b:bc:c4:09:76:ac:36:bf:7e:89:d3:d1:
                    5b:38:05:ed:de:55:07:3f:00:8e:0e:bb:a9:95:fe:
                    af:93:d4:ce:19:3d:c5:ab:e9:5a:1f:1b:98:f3:8b:
                    30:ab:4c:11:7f:dd:ab:bf:40:48:b1:41:13:79:17:
                    af:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:A7:7A:96:97:06:8D:41:B2:DB:24:FB:14:C6:01:B0:0D:01:B2:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0cb0d156-0906-405d-9cea-d599952bae65/0da19735-40c4-31c3-a739-88e03152a67a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0cb0d156-0906-405d-9cea-d599952bae65/0cb0d156-0906-405d-9cea-d599952bae65.crl

            X509v3 Authority Key Identifier:
                keyid:61:75:AD:68:36:B0:9C:A3:C5:D3:D2:C7:09:97:B5:B6:3A:1E:AC:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0cb0d156-0906-405d-9cea-d599952bae65.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:ed80::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:ff:42:8e:13:07:32:fa:84:f6:78:df:75:5c:ea:67:39:92:
         07:4f:63:ea:1e:17:84:5d:e8:bd:95:cc:a0:81:ab:21:7c:8c:
         99:dc:91:0d:34:13:98:72:3b:b2:a1:e7:c6:58:ec:07:90:41:
         6b:8d:be:b2:5d:ce:5e:c5:3e:cf:49:da:6c:d9:f7:60:78:80:
         c2:32:7e:ba:83:a0:bc:f2:6f:10:7e:7c:10:6f:45:86:7a:5f:
         1d:a1:c5:0e:cc:ee:99:5e:8d:ab:40:59:7f:b7:84:f8:b3:aa:
         32:ad:10:f9:73:01:3c:5a:dd:96:ca:d4:10:19:50:9e:ba:cb:
         7e:31:8c:39:17:a4:97:3d:de:b7:42:7f:68:97:8b:4f:c2:1d:
         50:f6:7b:12:8f:75:6d:38:0b:5d:51:89:10:e2:e4:23:5f:ed:
         d4:a1:c4:18:2a:2c:74:4c:07:b7:c1:7a:0c:43:5d:c0:55:59:
         46:89:0e:54:42:5e:16:82:07:11:90:97:f1:1d:67:3c:0c:9d:
         ea:77:22:e8:f4:62:cf:d4:00:15:4b:52:3d:71:28:c5:18:6a:
         50:b0:2b:b2:36:26:b5:42:08:51:ad:3c:44:7b:7b:55:83:1d:
         48:2e:6e:76:de:39:b1:46:0c:2c:4b:eb:3d:8d:55:cc:11:f6:
         dd:ad:fe:6f
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEzyvPoEQbqI80N7VYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGNiMGQxNTYtMDkwNi00MDVkLTljZWEtZDU5OTk1MmJh
ZTY1MB4XDTI2MDIyMjE0MDA0MVoXDTI2MDUyMzEzMDA0MVowLzEtMCsGA1UEAxMk
Y2UyMjE0MTktYjVkMy00YjEwLTgwNjYtMDZiMDE1ZDgxNjU5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjh8IzpTSr5TtGTpQyUkLGfYp0Zv0ivtZz1Wk
bjrxDo7RnqiOy+mToi/zJnMi1FhPBubua015FBtuF9SWvb1fBBnofztU6ut7L7hU
CxCPLk1kIttKb5rXrjjUsU6e57JfpkyGZJU3Whhl36xIZacncxz0fWcdxLbxZXME
6Ru8lIviEeiwnE/Z1sUivth3LQ3Ltu56Tq/PoHKUE+Ll0tpC/d5KDV2SNKxxZ8My
i4jJHIk8hmSBTxLtZ8hJmU83YxTXtzq0UZIbvMQJdqw2v36J09FbOAXt3lUHPwCO
Druplf6vk9TOGT3Fq+laHxuY84swq0wRf92rv0BIsUETeRevwwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFAOnepaXBo1Bstsk+xTGAbANAbIOMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8wY2Iw
ZDE1Ni0wOTA2LTQwNWQtOWNlYS1kNTk5OTUyYmFlNjUvMGRhMTk3MzUtNDBjNC0z
MWMzLWE3MzktODhlMDMxNTJhNjdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMGNiMGQxNTYtMDkwNi00MDVkLTlj
ZWEtZDU5OTk1MmJhZTY1LzBjYjBkMTU2LTA5MDYtNDA1ZC05Y2VhLWQ1OTk5NTJi
YWU2NS5jcmwwHwYDVR0jBBgwFoAUYXWtaDawnKPF09LHCZe1tjoerLIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi8wY2IwZDE1Ni0wOTA2LTQwNWQtOWNlYS1kNTk5
OTUyYmFlNjUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgXtgDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQAH/0KOEwcy+oT2eN91XOpnOZIHT2PqHheEXei9lcyggashfIyZ3JEN
NBOYcjuyoefGWOwHkEFrjb6yXc5exT7PSdps2fdgeIDCMn66g6C88m8QfnwQb0WG
el8docUOzO6ZXo2rQFl/t4T4s6oyrRD5cwE8Wt2WytQQGVCeust+MYw5F6SXPd63
Qn9ol4tPwh1Q9nsSj3VtOAtdUYkQ4uQjX+3UocQYKix0TAe3wXoMQ13AVVlGiQ5U
Ql4WggcRkJfxHWc8DJ3qdyLo9GLP1AAVS1I9cSjFGGpQsCuyNia1QghRrTxEe3tV
gx1ILm523jmxRgwsS+s9jVXMEfbdrf5v
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:55:05 2026 by rpki-client