Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/0817d47b-1b74-3eb9-8fe1-20dcb173d5b8.roa
File:                     0817d47b-1b74-3eb9-8fe1-20dcb173d5b8.roa (raw, json)
Hash identifier:          fP4Ph0kT+xJG0Na/qF98HEQuVpLM6NattoEC4XBCGkg=
Subject key identifier:   4E:0B:CB:C2:62:24:41:45:25:0B:12:24:14:7C:28:6B:98:46:8B:E7
Certificate issuer:       /CN=9c12cf4e-517b-405e-bbe4-0198086f3a07
Certificate serial:       010D0C9F4328584CDF3274978D471A2D25A61300
Authority key identifier: AD:B1:00:01:3E:A7:71:F4:6A:3D:65:46:F7:A0:D5:7B:E2:ED:23:08
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/0817d47b-1b74-3eb9-8fe1-20dcb173d5b8.roa
Signing time:             Sun 15 Feb 2026 14:00:41 +0000
ROA not before:           Sun 15 Feb 2026 14:00:41 +0000
ROA not after:            Sat 16 May 2026 13:00:41 +0000
asID:                     20253
IP address blocks:        2606:bc40:f000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:df:32:74:97:8d:47:1a:2d:25:a6:13:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c12cf4e-517b-405e-bbe4-0198086f3a07
        Validity
            Not Before: Feb 15 14:00:41 2026 GMT
            Not After : May 16 13:00:41 2026 GMT
        Subject: CN=6da8195b-c4d4-4000-96b4-53073a2be0ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:a7:f0:31:dd:25:a0:dd:a9:bf:fa:a6:5c:e6:
                    eb:ed:ea:02:6f:b2:dc:30:8a:c7:8f:23:10:0d:58:
                    ef:82:b0:5e:66:7f:c2:38:89:e6:b5:28:77:df:5c:
                    87:96:71:23:38:b3:16:ff:ae:e4:12:57:d0:e6:e4:
                    32:d3:a9:99:02:36:f0:b6:0f:29:ef:f4:ec:17:d6:
                    cf:ff:11:f4:32:0b:90:28:d4:ba:4d:55:ad:3c:f5:
                    26:74:e6:40:f2:5d:e4:40:6d:91:34:03:fe:c5:e7:
                    37:fe:b2:82:2a:45:11:6a:ae:ad:d9:b6:e2:4b:b8:
                    ed:43:49:29:a3:73:04:e8:43:25:f6:98:c7:f7:29:
                    cf:5b:c3:06:c2:8a:f8:07:aa:59:c0:c4:2f:de:e7:
                    11:8b:1b:7a:98:41:05:a3:1f:d3:4a:86:df:20:bc:
                    2c:3e:3f:d9:7b:0a:14:52:71:8e:dc:0c:e0:46:02:
                    b6:9d:ef:c7:ca:89:22:2e:6c:04:7d:d0:1c:2a:de:
                    3e:a4:27:75:c9:2a:15:03:6a:ee:f3:44:91:14:2d:
                    b1:45:95:51:57:53:1f:09:7d:53:8a:bc:c6:75:2e:
                    ff:2e:1d:ab:fd:b9:23:e7:fd:80:c4:ef:9a:9d:db:
                    82:f6:c9:4b:89:32:60:7a:8a:8f:01:e8:af:c8:55:
                    d2:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:0B:CB:C2:62:24:41:45:25:0B:12:24:14:7C:28:6B:98:46:8B:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/0817d47b-1b74-3eb9-8fe1-20dcb173d5b8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.crl

            X509v3 Authority Key Identifier:
                keyid:AD:B1:00:01:3E:A7:71:F4:6A:3D:65:46:F7:A0:D5:7B:E2:ED:23:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:bc40:f000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:e6:6d:5c:fc:3c:d6:76:51:77:a1:cf:63:19:6e:fc:a1:82:
         98:a1:31:5a:48:71:da:c7:3f:ea:15:f7:31:75:8e:71:1c:02:
         f8:3e:12:b7:8b:19:ca:41:eb:f0:80:d3:93:f6:ff:1c:97:97:
         05:46:a6:68:d4:ef:19:3a:c6:c6:f5:1a:45:a5:31:89:22:e5:
         32:66:ea:0c:be:b8:90:90:68:6c:12:7d:95:5e:be:05:62:50:
         19:f6:61:46:b6:9e:cc:ae:d4:b0:ce:f1:48:42:6a:d8:eb:41:
         bf:2c:be:b5:1b:11:87:a5:d0:51:84:5e:67:12:e5:b4:83:99:
         d1:ae:fe:26:28:5c:8f:45:e4:2a:a3:71:01:9f:53:ce:2c:2a:
         c8:b3:a5:4b:be:cc:7e:d9:9b:a3:bb:2d:ca:4b:12:a8:84:a0:
         50:7e:ac:76:c3:be:48:5d:5d:58:01:8a:2d:2d:c5:c1:b5:4c:
         bb:39:b4:2f:84:0e:7b:c7:b7:e1:1c:fb:d1:4c:b9:d9:d3:05:
         eb:3b:08:22:5e:95:05:39:37:54:22:2d:0d:3c:74:fb:64:7c:
         3a:64:dc:aa:7a:e3:56:cf:ea:89:97:83:20:cb:21:fb:bf:8d:
         1e:fd:be:d7:16:38:c1:5c:7a:71:d4:46:07:8b:9e:c9:32:ae:
         77:db:dc:1c
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEzfMnSXjUcaLSWmEwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOWMxMmNmNGUtNTE3Yi00MDVlLWJiZTQtMDE5ODA4NmYz
YTA3MB4XDTI2MDIxNTE0MDA0MVoXDTI2MDUxNjEzMDA0MVowLzEtMCsGA1UEAxMk
NmRhODE5NWItYzRkNC00MDAwLTk2YjQtNTMwNzNhMmJlMGJhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs6fwMd0loN2pv/qmXObr7eoCb7LcMIrHjyMQ
DVjvgrBeZn/COInmtSh331yHlnEjOLMW/67kElfQ5uQy06mZAjbwtg8p7/TsF9bP
/xH0MguQKNS6TVWtPPUmdOZA8l3kQG2RNAP+xec3/rKCKkURaq6t2bbiS7jtQ0kp
o3ME6EMl9pjH9ynPW8MGwor4B6pZwMQv3ucRixt6mEEFox/TSobfILwsPj/ZewoU
UnGO3AzgRgK2ne/HyokiLmwEfdAcKt4+pCd1ySoVA2ru80SRFC2xRZVRV1MfCX1T
irzGdS7/Lh2r/bkj5/2AxO+anduC9slLiTJgeoqPAeivyFXSQwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFE4Ly8JiJEFFJQsSJBR8KGuYRovnMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi85YzEy
Y2Y0ZS01MTdiLTQwNWUtYmJlNC0wMTk4MDg2ZjNhMDcvMDgxN2Q0N2ItMWI3NC0z
ZWI5LThmZTEtMjBkY2IxNzNkNWI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOWMxMmNmNGUtNTE3Yi00MDVlLWJi
ZTQtMDE5ODA4NmYzYTA3LzljMTJjZjRlLTUxN2ItNDA1ZS1iYmU0LTAxOTgwODZm
M2EwNy5jcmwwHwYDVR0jBBgwFoAUrbEAAT6ncfRqPWVG96DVe+LtIwgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi85YzEyY2Y0ZS01MTdiLTQwNWUtYmJlNC0wMTk4
MDg2ZjNhMDcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJga8QPAA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBADrmbVz8PNZ2UXehz2MZbvyhgpihMVpIcdrHP+oV9zF1jnEcAvg+
EreLGcpB6/CA05P2/xyXlwVGpmjU7xk6xsb1GkWlMYki5TJm6gy+uJCQaGwSfZVe
vgViUBn2YUa2nsyu1LDO8UhCatjrQb8svrUbEYel0FGEXmcS5bSDmdGu/iYoXI9F
5CqjcQGfU84sKsizpUu+zH7Zm6O7LcpLEqiEoFB+rHbDvkhdXVgBii0txcG1TLs5
tC+EDnvHt+Ec+9FMudnTBes7CCJelQU5N1QiLQ08dPtkfDpk3Kp641bP6omXgyDL
Ifu/jR79vtcWOMFcenHURgeLnskyrnfb3Bw=
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:07:41 2026 by rpki-client