Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d50d9265-ed86-4e53-88b9-cd56c607704f/f1da8eef-2bc0-3710-a530-fd8280e346c5.roa
File:                     f1da8eef-2bc0-3710-a530-fd8280e346c5.roa (raw, json)
Hash identifier:          TKu6qJJKQzPuNtnSGtEr2nU++7dpVoNJRjsFbVs4PPA=
Subject key identifier:   74:5C:25:58:AA:3C:5B:AD:11:6E:32:3D:E7:4C:E2:08:EA:25:07:C9
Certificate issuer:       /CN=d50d9265-ed86-4e53-88b9-cd56c607704f
Certificate serial:       010D0C9F4328584CFC82337028DC76B73D309B00
Authority key identifier: 00:3E:48:1C:9F:3C:E7:78:9A:9E:67:A1:A2:9D:92:EC:17:A5:52:35
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d50d9265-ed86-4e53-88b9-cd56c607704f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d50d9265-ed86-4e53-88b9-cd56c607704f/f1da8eef-2bc0-3710-a530-fd8280e346c5.roa
Signing time:             Thu 26 Feb 2026 02:00:32 +0000
ROA not before:           Thu 26 Feb 2026 02:00:32 +0000
ROA not after:            Wed 27 May 2026 01:00:32 +0000
asID:                     400438
IP address blocks:        2606:afc0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d50d9265-ed86-4e53-88b9-cd56c607704f/d50d9265-ed86-4e53-88b9-cd56c607704f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d50d9265-ed86-4e53-88b9-cd56c607704f/d50d9265-ed86-4e53-88b9-cd56c607704f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d50d9265-ed86-4e53-88b9-cd56c607704f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:fc:82:33:70:28:dc:76:b7:3d:30:9b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d50d9265-ed86-4e53-88b9-cd56c607704f
        Validity
            Not Before: Feb 26 02:00:32 2026 GMT
            Not After : May 27 01:00:32 2026 GMT
        Subject: CN=0025eb31-87d9-42bf-a038-08318012cf38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:08:00:47:39:29:18:74:2e:dc:83:96:8a:f1:
                    02:29:3d:2d:d9:06:54:a4:22:c2:bf:f7:d6:11:a5:
                    fa:81:6a:bc:cf:67:e4:9a:95:b1:94:13:6c:d7:90:
                    36:a0:28:c6:2f:2d:8f:a0:09:33:7d:4f:5a:60:c1:
                    a9:aa:c8:1e:b7:f4:01:1e:b2:17:6f:9b:0a:4e:c0:
                    53:15:9c:ce:f0:f8:c5:ff:f2:43:16:8a:b5:60:5d:
                    ac:99:18:97:11:05:46:0c:8d:35:10:f1:25:27:9e:
                    e8:70:81:3f:d7:cc:29:49:bb:a5:c5:78:d5:73:62:
                    09:68:35:20:d9:f2:0a:c4:9e:77:bf:ce:23:b0:7a:
                    f3:6d:a6:63:ba:cf:76:00:9a:66:61:33:f5:c6:72:
                    b1:de:80:14:4a:ea:42:4d:8a:93:d6:ab:d8:e3:97:
                    f6:76:76:32:d4:6d:ce:6d:0e:47:8b:24:bb:f8:fb:
                    92:5f:59:19:cb:15:68:ae:e0:52:23:f1:f5:20:26:
                    30:fa:df:0e:dd:e5:4e:10:60:6a:81:49:2f:04:6d:
                    5f:77:7b:5b:4c:b5:61:3f:98:9b:7c:80:0b:43:59:
                    4b:09:76:48:cf:6a:9d:6f:b9:34:3f:55:d8:d4:3c:
                    9a:99:72:10:de:fd:c0:9d:65:7a:55:12:66:08:74:
                    2a:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:5C:25:58:AA:3C:5B:AD:11:6E:32:3D:E7:4C:E2:08:EA:25:07:C9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d50d9265-ed86-4e53-88b9-cd56c607704f/f1da8eef-2bc0-3710-a530-fd8280e346c5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d50d9265-ed86-4e53-88b9-cd56c607704f/d50d9265-ed86-4e53-88b9-cd56c607704f.crl

            X509v3 Authority Key Identifier:
                keyid:00:3E:48:1C:9F:3C:E7:78:9A:9E:67:A1:A2:9D:92:EC:17:A5:52:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d50d9265-ed86-4e53-88b9-cd56c607704f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:afc0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:5d:93:ee:46:0f:1d:9c:08:c0:97:20:9c:7a:75:1f:2e:b8:
         68:38:72:c4:48:d6:23:2d:79:4c:ad:3f:05:de:c9:a6:65:8b:
         16:40:71:1f:ad:5c:e0:6e:ff:65:92:54:f1:bd:38:64:b2:f4:
         32:95:d8:59:31:21:37:91:7a:90:e2:63:8e:02:fe:2b:d4:35:
         0f:e4:fa:48:7c:e0:c2:96:a7:f8:a8:79:a6:e2:0e:ce:b5:ee:
         34:25:02:0d:7d:67:6c:41:98:db:7a:ed:67:a8:c2:52:0c:29:
         c6:92:b0:49:66:71:6b:ef:b0:9e:aa:fa:89:8f:4e:19:58:5c:
         8a:44:ab:7e:3b:13:d0:b9:df:e9:3a:4d:20:99:0f:6c:60:fe:
         9e:27:79:67:08:dc:bd:83:15:98:e4:4a:05:ca:50:e9:7e:37:
         24:a6:1b:16:0d:4c:a2:55:87:90:57:a6:1d:ed:fc:ce:76:e7:
         8d:bd:63:d3:2f:3f:90:50:52:a7:04:68:6c:ce:fb:d1:86:f0:
         c0:fa:cc:5c:5e:72:6a:17:6b:c6:fc:79:34:bd:db:1d:3e:f1:
         30:75:e0:63:11:77:b3:f3:c1:66:02:36:68:fc:6b:ec:2d:e3:
         fc:94:0b:0c:a0:8f:11:a0:1f:cd:0d:1a:aa:a5:2e:f5:b6:16:
         bf:a3:b2:df
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEz8gjNwKNx2tz0wmwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDUwZDkyNjUtZWQ4Ni00ZTUzLTg4YjktY2Q1NmM2MDc3
MDRmMB4XDTI2MDIyNjAyMDAzMloXDTI2MDUyNzAxMDAzMlowLzEtMCsGA1UEAxMk
MDAyNWViMzEtODdkOS00MmJmLWEwMzgtMDgzMTgwMTJjZjM4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2ggARzkpGHQu3IOWivECKT0t2QZUpCLCv/fW
EaX6gWq8z2fkmpWxlBNs15A2oCjGLy2PoAkzfU9aYMGpqsget/QBHrIXb5sKTsBT
FZzO8PjF//JDFoq1YF2smRiXEQVGDI01EPElJ57ocIE/18wpSbulxXjVc2IJaDUg
2fIKxJ53v84jsHrzbaZjus92AJpmYTP1xnKx3oAUSupCTYqT1qvY45f2dnYy1G3O
bQ5HiyS7+PuSX1kZyxVoruBSI/H1ICYw+t8O3eVOEGBqgUkvBG1fd3tbTLVhP5ib
fIALQ1lLCXZIz2qdb7k0P1XY1DyamXIQ3v3AnWV6VRJmCHQqZQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFHRcJViqPFutEW4yPedM4gjqJQfJMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9kNTBk
OTI2NS1lZDg2LTRlNTMtODhiOS1jZDU2YzYwNzcwNGYvZjFkYThlZWYtMmJjMC0z
NzEwLWE1MzAtZmQ4MjgwZTM0NmM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZDUwZDkyNjUtZWQ4Ni00ZTUzLTg4
YjktY2Q1NmM2MDc3MDRmL2Q1MGQ5MjY1LWVkODYtNGU1My04OGI5LWNkNTZjNjA3
NzA0Zi5jcmwwHwYDVR0jBBgwFoAUAD5IHJ8853ianmehop2S7BelUjUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9kNTBkOTI2NS1lZDg2LTRlNTMtODhiOS1jZDU2
YzYwNzcwNGYuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgavwDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQCAXZPuRg8dnAjAlyCcenUfLrhoOHLESNYjLXlMrT8F3smmZYsWQHEf
rVzgbv9lklTxvThksvQyldhZMSE3kXqQ4mOOAv4r1DUP5PpIfODClqf4qHmm4g7O
te40JQINfWdsQZjbeu1nqMJSDCnGkrBJZnFr77CeqvqJj04ZWFyKRKt+OxPQud/p
Ok0gmQ9sYP6eJ3lnCNy9gxWY5EoFylDpfjckphsWDUyiVYeQV6Yd7fzOdueNvWPT
Lz+QUFKnBGhszvvRhvDA+sxcXnJqF2vG/Hk0vdsdPvEwdeBjEXez88FmAjZo/Gvs
LeP8lAsMoI8RoB/NDRqqpS71tha/o7Lf
-----END CERTIFICATE-----
Generated at Mon Mar 2 04:36:20 2026 by rpki-client