Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1a059caa-dd4f-4480-a089-c3da1959a314/e4d0207a-085a-31a1-871e-eafcc1a16dab.roa
File:                     e4d0207a-085a-31a1-871e-eafcc1a16dab.roa (raw, json)
Hash identifier:          8s+K38A/en1sNOEmq/GCYxecek2YFIlQAbjmn2o/l2I=
Subject key identifier:   41:2A:80:54:76:F4:7E:1E:63:B7:91:AF:BB:AA:EA:F2:69:55:76:4E
Certificate issuer:       /CN=1a059caa-dd4f-4480-a089-c3da1959a314
Certificate serial:       010D0C9F4328584CE3621278CEDB3136DFE94E40
Authority key identifier: F4:5A:93:65:33:74:A3:67:AB:AA:8E:F7:17:B4:4D:40:ED:E2:B7:42
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1a059caa-dd4f-4480-a089-c3da1959a314.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1a059caa-dd4f-4480-a089-c3da1959a314/e4d0207a-085a-31a1-871e-eafcc1a16dab.roa
Signing time:             Tue 17 Feb 2026 02:00:31 +0000
ROA not before:           Tue 17 Feb 2026 02:00:31 +0000
ROA not after:            Mon 18 May 2026 01:00:31 +0000
asID:                     40880
IP address blocks:        2602:fe09:f00::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1a059caa-dd4f-4480-a089-c3da1959a314/1a059caa-dd4f-4480-a089-c3da1959a314.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1a059caa-dd4f-4480-a089-c3da1959a314/1a059caa-dd4f-4480-a089-c3da1959a314.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1a059caa-dd4f-4480-a089-c3da1959a314.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:e3:62:12:78:ce:db:31:36:df:e9:4e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a059caa-dd4f-4480-a089-c3da1959a314
        Validity
            Not Before: Feb 17 02:00:31 2026 GMT
            Not After : May 18 01:00:31 2026 GMT
        Subject: CN=fb1f8f8f-cf1a-4596-9b34-b7da365d215d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:01:15:b4:01:86:8d:23:71:33:ac:b8:9f:84:
                    40:8d:a6:28:93:8f:27:72:10:da:fe:4e:ce:dd:1a:
                    98:17:c6:37:b9:e6:66:cd:bd:7d:65:ef:7b:1b:bd:
                    0d:5d:26:fc:1e:18:2f:d2:7b:d6:14:5c:bb:2b:94:
                    c7:3b:78:26:15:31:a1:95:ac:1d:6c:17:9e:01:53:
                    3d:db:62:b9:01:2f:f3:90:3d:61:1b:c6:c4:b0:16:
                    e5:9f:c5:10:1a:21:b8:d1:fa:01:f0:27:4d:77:6e:
                    01:87:1a:a5:3f:ea:b8:80:4a:dc:ef:da:f4:dc:d9:
                    31:23:ec:09:f2:ea:0f:8a:1e:23:a5:af:5c:ee:50:
                    a2:4e:69:4b:0b:fc:69:11:42:b0:7a:f8:b8:33:26:
                    37:68:87:64:3d:b7:6c:be:01:4d:89:9b:9e:14:05:
                    92:9b:40:1c:a2:58:d6:db:67:7c:82:0d:a0:96:d6:
                    90:76:d9:db:29:6f:a5:48:b4:e8:e3:ec:3c:9b:da:
                    47:be:91:8f:ff:46:e9:4f:f0:ab:64:44:bc:a0:4d:
                    8e:97:09:9d:d4:84:a7:74:2c:84:f5:95:0c:c5:1c:
                    7c:85:3a:ce:c2:e0:15:d9:99:86:c7:51:52:74:7f:
                    c9:73:2d:ec:26:6d:ff:21:c4:2c:8a:64:1b:0f:e4:
                    c0:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:2A:80:54:76:F4:7E:1E:63:B7:91:AF:BB:AA:EA:F2:69:55:76:4E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1a059caa-dd4f-4480-a089-c3da1959a314/e4d0207a-085a-31a1-871e-eafcc1a16dab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1a059caa-dd4f-4480-a089-c3da1959a314/1a059caa-dd4f-4480-a089-c3da1959a314.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5A:93:65:33:74:A3:67:AB:AA:8E:F7:17:B4:4D:40:ED:E2:B7:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1a059caa-dd4f-4480-a089-c3da1959a314.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fe09:f00::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:f1:d9:22:42:99:1a:e1:34:7c:51:62:8c:cf:87:64:84:4e:
         c9:c9:a5:22:4e:7e:7b:b8:70:b0:c7:9d:a6:bf:c3:c8:e0:39:
         a4:c8:af:fe:fe:52:a5:7a:bc:3e:44:0e:af:28:89:74:83:06:
         d6:83:e6:bf:43:20:ed:0f:87:95:a2:15:31:b8:db:eb:3c:b6:
         bc:5a:61:2c:68:a7:29:21:17:85:30:39:48:bd:2f:f9:f9:06:
         94:c4:17:d0:56:86:29:f2:ad:8a:1f:f1:01:df:26:eb:c6:15:
         b5:90:4c:5d:c5:dc:1f:0a:66:5e:ae:85:c3:92:db:10:16:d9:
         d2:dc:62:55:6d:97:88:fc:c0:c3:d4:55:16:ac:ed:3a:f5:b4:
         35:8a:d4:48:50:e7:17:94:e8:8d:33:03:07:38:af:64:2e:42:
         70:12:e5:9d:4a:e6:23:47:d1:01:20:5f:ad:7f:d9:3e:8a:11:
         45:5f:43:ae:81:b3:2b:96:d3:64:45:95:ed:82:3e:25:4f:85:
         a2:83:01:7f:c1:e5:36:ba:e9:f0:01:44:06:b6:78:25:c7:73:
         3d:d1:36:44:7c:83:61:9b:be:d3:51:34:9b:2a:da:ce:66:ba:
         02:55:c4:f3:62:9b:5f:3e:26:1a:3d:0d:11:08:37:c1:87:7a:
         dd:a5:73:e1
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEzjYhJ4ztsxNt/pTkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMWEwNTljYWEtZGQ0Zi00NDgwLWEwODktYzNkYTE5NTlh
MzE0MB4XDTI2MDIxNzAyMDAzMVoXDTI2MDUxODAxMDAzMVowLzEtMCsGA1UEAxMk
ZmIxZjhmOGYtY2YxYS00NTk2LTliMzQtYjdkYTM2NWQyMTVkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2AEVtAGGjSNxM6y4n4RAjaYok48nchDa/k7O
3RqYF8Y3ueZmzb19Ze97G70NXSb8Hhgv0nvWFFy7K5THO3gmFTGhlawdbBeeAVM9
22K5AS/zkD1hG8bEsBbln8UQGiG40foB8CdNd24BhxqlP+q4gErc79r03NkxI+wJ
8uoPih4jpa9c7lCiTmlLC/xpEUKwevi4MyY3aIdkPbdsvgFNiZueFAWSm0AcoljW
22d8gg2gltaQdtnbKW+lSLTo4+w8m9pHvpGP/0bpT/CrZES8oE2Olwmd1ISndCyE
9ZUMxRx8hTrOwuAV2ZmGx1FSdH/Jcy3sJm3/IcQsimQbD+TAvQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFEEqgFR29H4eY7eRr7uq6vJpVXZOMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8xYTA1
OWNhYS1kZDRmLTQ0ODAtYTA4OS1jM2RhMTk1OWEzMTQvZTRkMDIwN2EtMDg1YS0z
MWExLTg3MWUtZWFmY2MxYTE2ZGFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvMWEwNTljYWEtZGQ0Zi00NDgwLWEw
ODktYzNkYTE5NTlhMzE0LzFhMDU5Y2FhLWRkNGYtNDQ4MC1hMDg5LWMzZGExOTU5
YTMxNC5jcmwwHwYDVR0jBBgwFoAU9FqTZTN0o2erqo73F7RNQO3it0IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS8xYTA1OWNhYS1kZDRmLTQ0ODAtYTA4OS1jM2Rh
MTk1OWEzMTQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL+CQ8w
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAFPHZIkKZGuE0fFFijM+HZIROycmlIk5+e7hwsMedpr/DyOA5pMiv
/v5SpXq8PkQOryiJdIMG1oPmv0Mg7Q+HlaIVMbjb6zy2vFphLGinKSEXhTA5SL0v
+fkGlMQX0FaGKfKtih/xAd8m68YVtZBMXcXcHwpmXq6Fw5LbEBbZ0txiVW2XiPzA
w9RVFqztOvW0NYrUSFDnF5TojTMDBzivZC5CcBLlnUrmI0fRASBfrX/ZPooRRV9D
roGzK5bTZEWV7YI+JU+FooMBf8HlNrrp8AFEBrZ4JcdzPdE2RHyDYZu+01E0myra
zma6AlXE82KbXz4mGj0NEQg3wYd63aVz4Q==
-----END CERTIFICATE-----
Generated at Mon Mar 2 07:38:46 2026 by rpki-client