Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7245cdbf-97d7-4376-9d8d-298cda5d3854/b9fed38b-7833-339a-a34b-0e0e40f943aa.roa
File:                     b9fed38b-7833-339a-a34b-0e0e40f943aa.roa (raw, json)
Hash identifier:          pBz8dXWwgWB4/kpU1I5qB2ZlsBeMBaqwjxyKugn7Oco=
Subject key identifier:   3A:AF:09:1B:F3:14:ED:4E:31:90:DD:F6:93:B0:CB:67:37:D6:45:F9
Certificate issuer:       /CN=7245cdbf-97d7-4376-9d8d-298cda5d3854
Certificate serial:       010D0C9F4328584CE4C771087E5E1C649F6C6300
Authority key identifier: 16:E1:82:B0:4E:45:0C:2A:9E:DD:0D:F0:AA:AC:06:28:3E:D9:97:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7245cdbf-97d7-4376-9d8d-298cda5d3854.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7245cdbf-97d7-4376-9d8d-298cda5d3854/b9fed38b-7833-339a-a34b-0e0e40f943aa.roa
Signing time:             Tue 17 Feb 2026 14:00:41 +0000
ROA not before:           Tue 17 Feb 2026 14:00:41 +0000
ROA not after:            Mon 18 May 2026 13:00:41 +0000
asID:                     32726
IP address blocks:        2620:12f:2000::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7245cdbf-97d7-4376-9d8d-298cda5d3854/7245cdbf-97d7-4376-9d8d-298cda5d3854.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7245cdbf-97d7-4376-9d8d-298cda5d3854/7245cdbf-97d7-4376-9d8d-298cda5d3854.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7245cdbf-97d7-4376-9d8d-298cda5d3854.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:e4:c7:71:08:7e:5e:1c:64:9f:6c:63:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7245cdbf-97d7-4376-9d8d-298cda5d3854
        Validity
            Not Before: Feb 17 14:00:41 2026 GMT
            Not After : May 18 13:00:41 2026 GMT
        Subject: CN=6c4337d8-e6b3-4993-b8f5-b1db48633e95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:75:21:c5:a0:3d:7a:cd:c2:bf:f8:dd:ad:15:
                    75:a2:aa:62:56:bc:87:a3:a4:42:4e:87:ee:92:65:
                    96:19:08:31:fa:33:7c:ad:d6:fe:46:44:ba:fd:eb:
                    47:55:0e:55:2f:14:75:cb:18:d7:58:b0:2a:66:76:
                    85:40:42:9e:18:84:8d:d6:25:04:07:ac:94:31:94:
                    d1:8b:d3:4e:9c:a7:95:e7:45:1c:ad:25:43:e9:8b:
                    4a:a6:9a:e7:bb:c3:58:c5:78:3d:34:63:40:eb:ac:
                    51:8b:d8:18:35:dd:97:69:53:c4:05:37:f1:5e:a7:
                    eb:c0:94:17:d4:e5:7f:56:ed:1d:eb:2a:f0:03:42:
                    8c:0a:55:67:8c:69:48:96:ed:c5:25:e5:af:34:a3:
                    7e:db:a7:29:40:26:61:15:d8:48:23:fb:19:d2:b2:
                    c4:f2:b0:cc:de:a2:b4:a3:2e:be:a6:65:3d:c7:bd:
                    e5:b7:c8:1b:c6:2e:44:af:15:bb:52:83:0a:1f:2f:
                    49:6d:aa:f6:61:f8:a9:31:36:7e:03:93:0a:33:ab:
                    31:d3:f9:23:1e:c3:6d:3b:39:b6:d1:2a:c0:2f:ce:
                    32:72:f8:ee:32:71:b5:25:6e:b9:e9:38:3b:92:45:
                    6a:4f:1a:61:b7:6a:83:63:43:a5:6e:08:91:87:ca:
                    dc:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:AF:09:1B:F3:14:ED:4E:31:90:DD:F6:93:B0:CB:67:37:D6:45:F9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7245cdbf-97d7-4376-9d8d-298cda5d3854/b9fed38b-7833-339a-a34b-0e0e40f943aa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7245cdbf-97d7-4376-9d8d-298cda5d3854/7245cdbf-97d7-4376-9d8d-298cda5d3854.crl

            X509v3 Authority Key Identifier:
                keyid:16:E1:82:B0:4E:45:0C:2A:9E:DD:0D:F0:AA:AC:06:28:3E:D9:97:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7245cdbf-97d7-4376-9d8d-298cda5d3854.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:12f:2000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a7:14:7a:af:aa:2c:2a:b8:a2:8f:cc:36:b7:4d:c3:64:56:6e:
         53:39:c9:5c:1b:d6:ab:d2:b3:7c:7b:43:21:1f:b9:28:2f:01:
         5a:d9:95:76:95:34:84:91:e3:e4:bd:fc:8b:60:55:2d:90:f5:
         e1:c2:67:a0:8b:97:5c:98:5e:8e:e2:82:a1:ab:be:e6:5c:c5:
         3c:08:a4:75:c4:37:81:31:ea:5c:d9:63:15:48:f1:f3:48:78:
         60:b5:01:83:44:3c:97:76:47:3e:ca:1a:20:da:2a:00:12:9c:
         d1:39:69:5b:93:43:5d:40:bc:47:dc:ba:10:88:21:0f:09:89:
         53:ba:aa:b0:99:c5:5c:bb:8e:ca:a8:3e:51:67:f4:e7:e8:bc:
         ac:94:81:43:71:ce:7f:41:7f:77:6d:81:9c:82:dd:74:06:2d:
         df:62:31:67:82:7e:a4:a0:4d:5b:4a:33:ae:5f:ef:b5:a8:e7:
         59:47:a3:37:d1:a2:93:a0:92:f1:c5:e6:0e:de:9c:fe:c5:12:
         28:a3:67:5c:09:26:18:bd:71:44:a0:18:c8:14:57:77:9d:a9:
         36:17:0d:1e:cb:bc:06:74:30:18:00:49:61:d7:6b:5e:27:fa:
         f7:80:68:59:32:f8:dd:65:75:59:3a:00:ee:f6:95:e8:e0:2d:
         2f:bd:36:a8
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEzkx3EIfl4cZJ9sYwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzI0NWNkYmYtOTdkNy00Mzc2LTlkOGQtMjk4Y2RhNWQz
ODU0MB4XDTI2MDIxNzE0MDA0MVoXDTI2MDUxODEzMDA0MVowLzEtMCsGA1UEAxMk
NmM0MzM3ZDgtZTZiMy00OTkzLWI4ZjUtYjFkYjQ4NjMzZTk1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjXUhxaA9es3Cv/jdrRV1oqpiVryHo6RCTofu
kmWWGQgx+jN8rdb+RkS6/etHVQ5VLxR1yxjXWLAqZnaFQEKeGISN1iUEB6yUMZTR
i9NOnKeV50UcrSVD6YtKpprnu8NYxXg9NGNA66xRi9gYNd2XaVPEBTfxXqfrwJQX
1OV/Vu0d6yrwA0KMClVnjGlIlu3FJeWvNKN+26cpQCZhFdhII/sZ0rLE8rDM3qK0
oy6+pmU9x73lt8gbxi5ErxW7UoMKHy9Jbar2YfipMTZ+A5MKM6sx0/kjHsNtOzm2
0SrAL84ycvjuMnG1JW656Tg7kkVqTxpht2qDY0OlbgiRh8rcTQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFDqvCRvzFO1OMZDd9pOwy2c31kX5MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83MjQ1
Y2RiZi05N2Q3LTQzNzYtOWQ4ZC0yOThjZGE1ZDM4NTQvYjlmZWQzOGItNzgzMy0z
MzlhLWEzNGItMGUwZTQwZjk0M2FhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNzI0NWNkYmYtOTdkNy00Mzc2LTlk
OGQtMjk4Y2RhNWQzODU0LzcyNDVjZGJmLTk3ZDctNDM3Ni05ZDhkLTI5OGNkYTVk
Mzg1NC5jcmwwHwYDVR0jBBgwFoAUFuGCsE5FDCqe3Q3wqqwGKD7Zlz8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC83MjQ1Y2RiZi05N2Q3LTQzNzYtOWQ4ZC0yOThj
ZGE1ZDM4NTQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJiABLyAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEApxR6r6osKriij8w2t03DZFZuUznJXBvWq9KzfHtDIR+5KC8BWtmV
dpU0hJHj5L38i2BVLZD14cJnoIuXXJhejuKCoau+5lzFPAikdcQ3gTHqXNljFUjx
80h4YLUBg0Q8l3ZHPsoaINoqABKc0TlpW5NDXUC8R9y6EIghDwmJU7qqsJnFXLuO
yqg+UWf05+i8rJSBQ3HOf0F/d22BnILddAYt32IxZ4J+pKBNW0ozrl/vtajnWUej
N9Gik6CS8cXmDt6c/sUSKKNnXAkmGL1xRKAYyBRXd52pNhcNHsu8BnQwGABJYddr
Xif694BoWTL43WV1WToA7vaV6OAtL702qA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 13:03:48 2026 by rpki-client