Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a9d8715f-6d4a-4b9f-93ff-8eb251588f61/f40a319f-feb8-33ea-8a99-b02869d401c2.roa
File:                     f40a319f-feb8-33ea-8a99-b02869d401c2.roa (raw, json)
Hash identifier:          1Bes4gu/u5nsgUgrUM+iULBrC1CqErdGVCzNkjyBA+4=
Subject key identifier:   BA:61:1A:93:7E:CC:DE:08:17:4D:F3:D2:5B:30:B9:40:F3:93:E1:DA
Certificate issuer:       /CN=a9d8715f-6d4a-4b9f-93ff-8eb251588f61
Certificate serial:       010D0C9F4328584C69F16565CE52E83A0FF5BEE0
Authority key identifier: A6:25:D6:7E:3C:AB:C9:7A:58:9A:30:A3:BB:F5:E1:BC:A6:5B:0F:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a9d8715f-6d4a-4b9f-93ff-8eb251588f61.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a9d8715f-6d4a-4b9f-93ff-8eb251588f61/f40a319f-feb8-33ea-8a99-b02869d401c2.roa
Signing time:             Sun 04 Jan 2026 14:00:38 +0000
ROA not before:           Sun 04 Jan 2026 14:00:38 +0000
ROA not after:            Sat 04 Apr 2026 13:00:38 +0000
asID:                     39937
IP address blocks:        2607:5240:2::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a9d8715f-6d4a-4b9f-93ff-8eb251588f61/a9d8715f-6d4a-4b9f-93ff-8eb251588f61.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a9d8715f-6d4a-4b9f-93ff-8eb251588f61/a9d8715f-6d4a-4b9f-93ff-8eb251588f61.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a9d8715f-6d4a-4b9f-93ff-8eb251588f61.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:69:f1:65:65:ce:52:e8:3a:0f:f5:be:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a9d8715f-6d4a-4b9f-93ff-8eb251588f61
        Validity
            Not Before: Jan  4 14:00:38 2026 GMT
            Not After : Apr  4 13:00:38 2026 GMT
        Subject: CN=da170896-e69f-4aea-a170-dc331b9a18b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:16:56:64:17:83:f7:66:24:98:5f:aa:98:96:
                    6e:52:90:cc:7e:40:7d:58:2c:64:61:d3:f8:59:0c:
                    08:76:e4:19:2b:9d:c0:e9:48:5d:38:32:eb:2b:f3:
                    13:06:32:43:54:e0:db:57:84:95:a5:36:b7:bc:52:
                    54:49:b2:21:89:71:80:57:28:35:99:21:d7:58:2d:
                    66:3c:ea:2e:57:0b:7e:52:07:24:0c:52:e5:2d:d3:
                    20:a7:48:32:47:fb:1d:46:ba:a5:26:bb:a4:32:dd:
                    67:d5:a3:6f:00:b8:1a:bc:30:c1:d6:db:60:e7:8c:
                    e1:37:c5:c2:af:c5:9f:9c:ac:55:58:2e:25:50:1e:
                    41:94:2f:88:ec:29:96:59:8e:4c:e2:31:d8:e9:d6:
                    60:fb:a7:7d:df:ab:c3:4c:a9:28:ff:07:41:f1:f4:
                    c7:52:95:89:8f:22:f1:6e:56:87:df:09:19:21:f8:
                    4b:da:26:92:6b:f0:07:a1:d1:16:42:a8:e4:9d:48:
                    d7:0f:4b:c9:87:17:8c:3b:95:46:75:28:e1:0f:37:
                    de:2d:c8:01:c9:c3:7d:b5:45:2b:a5:03:e3:56:b4:
                    0c:02:ba:72:bf:8e:32:ea:46:e2:c9:f7:09:d9:31:
                    5c:3d:81:34:eb:0b:df:32:9a:18:92:b5:fd:13:13:
                    01:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:61:1A:93:7E:CC:DE:08:17:4D:F3:D2:5B:30:B9:40:F3:93:E1:DA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a9d8715f-6d4a-4b9f-93ff-8eb251588f61/f40a319f-feb8-33ea-8a99-b02869d401c2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a9d8715f-6d4a-4b9f-93ff-8eb251588f61/a9d8715f-6d4a-4b9f-93ff-8eb251588f61.crl

            X509v3 Authority Key Identifier:
                keyid:A6:25:D6:7E:3C:AB:C9:7A:58:9A:30:A3:BB:F5:E1:BC:A6:5B:0F:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a9d8715f-6d4a-4b9f-93ff-8eb251588f61.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:5240:2::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:82:a4:ba:fd:c3:54:63:b6:2f:e5:c9:8d:90:ce:63:f6:4f:
         0e:8c:5d:48:8b:9d:bc:6c:0f:f6:54:e6:1e:68:14:52:71:1f:
         ec:ad:d0:64:a4:f1:a1:6c:4a:6e:de:6d:bf:4d:0a:1d:9e:7f:
         f7:80:2e:29:1d:36:76:a1:02:8c:74:2d:73:01:48:a6:77:73:
         42:53:eb:8c:c5:ef:74:b0:fa:34:6c:2d:07:0a:55:ff:d8:72:
         d6:25:e2:1d:8e:d6:b1:62:04:be:f9:a7:90:61:7c:66:16:cd:
         b3:b9:bc:a9:4c:d1:7f:42:7a:97:54:29:e1:a2:7c:3a:2b:4d:
         c3:59:d5:13:9d:bf:ea:8f:d6:7b:aa:84:1a:bf:6e:dc:b8:b1:
         62:7c:5e:f2:03:a5:f7:e8:f3:83:5c:17:46:4f:9d:9d:af:a6:
         56:46:55:95:1b:a8:36:3c:8a:ab:19:f3:03:e2:2e:b8:05:d4:
         3c:3a:ad:27:f2:3a:16:8f:c0:1c:0d:90:20:5e:ad:57:c9:21:
         04:8e:36:52:3d:fd:77:5d:41:23:14:48:34:22:76:e3:73:09:
         83:6a:90:c7:1c:3c:e3:90:60:e3:54:31:eb:0f:c9:d7:83:55:
         07:6f:70:66:2c:13:c0:90:c4:c2:00:eb:82:f0:54:86:2c:71:
         98:fb:17:33
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWExp8WVlzlLoOg/1vuAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTlkODcxNWYtNmQ0YS00YjlmLTkzZmYtOGViMjUxNTg4
ZjYxMB4XDTI2MDEwNDE0MDAzOFoXDTI2MDQwNDEzMDAzOFowLzEtMCsGA1UEAxMk
ZGExNzA4OTYtZTY5Zi00YWVhLWExNzAtZGMzMzFiOWExOGIxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgRZWZBeD92YkmF+qmJZuUpDMfkB9WCxkYdP4
WQwIduQZK53A6UhdODLrK/MTBjJDVODbV4SVpTa3vFJUSbIhiXGAVyg1mSHXWC1m
POouVwt+UgckDFLlLdMgp0gyR/sdRrqlJrukMt1n1aNvALgavDDB1ttg54zhN8XC
r8WfnKxVWC4lUB5BlC+I7CmWWY5M4jHY6dZg+6d936vDTKko/wdB8fTHUpWJjyLx
blaH3wkZIfhL2iaSa/AHodEWQqjknUjXD0vJhxeMO5VGdSjhDzfeLcgBycN9tUUr
pQPjVrQMArpyv44y6kbiyfcJ2TFcPYE06wvfMpoYkrX9ExMBuwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFLphGpN+zN4IF03z0lswuUDzk+HaMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hOWQ4
NzE1Zi02ZDRhLTRiOWYtOTNmZi04ZWIyNTE1ODhmNjEvZjQwYTMxOWYtZmViOC0z
M2VhLThhOTktYjAyODY5ZDQwMWMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYTlkODcxNWYtNmQ0YS00YjlmLTkz
ZmYtOGViMjUxNTg4ZjYxL2E5ZDg3MTVmLTZkNGEtNGI5Zi05M2ZmLThlYjI1MTU4
OGY2MS5jcmwwHwYDVR0jBBgwFoAUpiXWfjyryXpYmjCju/XhvKZbD3owDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9hOWQ4NzE1Zi02ZDRhLTRiOWYtOTNmZi04ZWIy
NTE1ODhmNjEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgdSQAAC
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAGCCpLr9w1Rjti/lyY2QzmP2Tw6MXUiLnbxsD/ZU5h5oFFJxH+yt
0GSk8aFsSm7ebb9NCh2ef/eALikdNnahAox0LXMBSKZ3c0JT64zF73Sw+jRsLQcK
Vf/YctYl4h2O1rFiBL75p5BhfGYWzbO5vKlM0X9CepdUKeGifDorTcNZ1ROdv+qP
1nuqhBq/bty4sWJ8XvIDpffo84NcF0ZPnZ2vplZGVZUbqDY8iqsZ8wPiLrgF1Dw6
rSfyOhaPwBwNkCBerVfJIQSONlI9/XddQSMUSDQiduNzCYNqkMccPOOQYONUMesP
ydeDVQdvcGYsE8CQxMIA64LwVIYscZj7FzM=
-----END CERTIFICATE-----
Generated at Mon Mar 2 04:15:37 2026 by rpki-client