Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3c258299-4dcd-3aa2-9878-cdae61e4da87.roa
File:                     3c258299-4dcd-3aa2-9878-cdae61e4da87.roa (raw, json)
Hash identifier:          LkvxkoUI05C+xyTu5bKjtASd/iltgeqiXxlgN0EnPtI=
Subject key identifier:   B4:E2:F1:0A:B2:91:78:1B:B6:1C:61:F1:6A:C7:EE:22:C0:DF:0F:4D
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584CDB15FD11DE2E657E81089680
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3c258299-4dcd-3aa2-9878-cdae61e4da87.roa
Signing time:             Sat 14 Feb 2026 02:40:58 +0000
ROA not before:           Sat 14 Feb 2026 02:40:58 +0000
ROA not after:            Fri 15 May 2026 01:40:58 +0000
asID:                     15169
IP address blocks:        2600:1902:490::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:db:15:fd:11:de:2e:65:7e:81:08:96:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Feb 14 02:40:58 2026 GMT
            Not After : May 15 01:40:58 2026 GMT
        Subject: CN=e8f0ea81-51e6-4f4a-83cb-d70e0206df6e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:f3:a0:d4:64:db:21:d2:61:c7:e4:fd:5b:8a:
                    07:c9:a3:10:33:1f:c2:53:49:5e:14:d7:4c:16:05:
                    5d:cc:4e:c9:4e:ec:3d:e8:4b:b3:16:cc:f9:a9:f6:
                    b1:92:e7:cf:4f:62:2c:37:00:89:a7:31:19:33:bf:
                    eb:10:a7:8b:71:6f:e1:53:0e:94:35:6a:a6:5d:b6:
                    79:b9:2a:86:da:2e:f3:d2:a7:0f:76:84:47:44:3e:
                    6d:11:bb:d2:54:58:bb:b0:13:5e:4b:f3:5f:48:03:
                    78:7a:42:12:ad:4d:e8:ed:2f:9c:f5:08:1f:cf:af:
                    33:10:bd:31:b9:da:75:31:da:b8:4d:cc:3d:5a:0a:
                    03:96:a4:af:d0:b7:58:54:b5:e4:e7:0e:4a:02:4f:
                    a0:cd:e9:2b:12:31:dc:40:dd:8d:33:06:60:c7:16:
                    ab:f1:bb:24:b6:8d:a0:f9:01:6c:d5:6c:26:4e:c7:
                    86:4b:39:c2:04:f1:7f:e5:13:cf:ad:9b:55:15:ad:
                    6e:26:11:f3:09:8d:89:8f:0e:52:bb:3e:e3:1e:32:
                    a2:cd:ad:71:f7:0f:f1:7e:d0:f8:3d:47:70:00:c2:
                    dc:34:af:42:09:73:63:ea:96:48:89:5e:60:30:23:
                    ff:02:2e:73:91:16:62:3b:70:f1:5a:2d:26:f1:5d:
                    a8:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:E2:F1:0A:B2:91:78:1B:B6:1C:61:F1:6A:C7:EE:22:C0:DF:0F:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3c258299-4dcd-3aa2-9878-cdae61e4da87.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1902:490::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:c0:a5:7a:8f:92:5c:89:0e:5b:71:da:50:60:19:ea:ec:12:
         16:b5:02:81:d9:b2:6c:6d:36:f7:19:90:5d:fc:51:49:84:1e:
         86:3c:b7:d1:fd:b9:04:5e:a6:1d:06:85:9c:22:6d:42:a5:f0:
         20:90:ec:11:cf:84:4c:cc:fe:72:9c:76:20:8e:42:7a:e6:b9:
         a8:7b:31:8f:9c:ab:83:bd:d4:0c:98:28:e1:d7:f9:23:87:9d:
         98:33:aa:7f:84:fe:e3:d5:59:15:ad:1c:07:42:86:22:8d:7d:
         a8:94:04:6d:13:40:0d:39:08:04:ea:39:54:7a:27:a0:94:b2:
         cc:44:c9:e3:03:b2:59:26:a1:af:90:76:0a:27:8f:fb:8d:2d:
         0f:72:55:4b:bb:21:6e:bf:03:e0:c3:d3:ed:5a:1e:31:14:42:
         9e:cc:c1:b0:f8:c5:18:2c:b4:fb:09:9a:d0:f5:d0:60:9b:36:
         65:17:3e:18:c7:15:90:e7:90:ad:f4:5f:4d:ca:d8:73:49:91:
         82:65:ab:ce:66:4e:59:ed:fc:8f:53:66:c8:5b:42:c8:04:2d:
         56:89:42:fb:17:fc:aa:3c:e2:e1:20:0f:0e:72:c2:64:fd:b7:
         1d:11:0b:1c:7d:8c:b1:8e:d6:d3:f7:68:dd:35:01:0a:91:c2:
         39:51:89:2f
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEzbFf0R3i5lfoEIloAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTI2MDIxNDAyNDA1OFoXDTI2MDUxNTAxNDA1OFowLzEtMCsGA1UEAxMk
ZThmMGVhODEtNTFlNi00ZjRhLTgzY2ItZDcwZTAyMDZkZjZlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt/Og1GTbIdJhx+T9W4oHyaMQMx/CU0leFNdM
FgVdzE7JTuw96EuzFsz5qfaxkufPT2IsNwCJpzEZM7/rEKeLcW/hUw6UNWqmXbZ5
uSqG2i7z0qcPdoRHRD5tEbvSVFi7sBNeS/NfSAN4ekISrU3o7S+c9Qgfz68zEL0x
udp1Mdq4Tcw9WgoDlqSv0LdYVLXk5w5KAk+gzekrEjHcQN2NMwZgxxar8bskto2g
+QFs1WwmTseGSznCBPF/5RPPrZtVFa1uJhHzCY2Jjw5Suz7jHjKiza1x9w/xftD4
PUdwAMLcNK9CCXNj6pZIiV5gMCP/Ai5zkRZiO3DxWi0m8V2oTQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFLTi8QqykXgbthxh8WrH7iLA3w9NMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvM2MyNTgyOTktNGRjZC0z
YWEyLTk4NzgtY2RhZTYxZTRkYTg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgAZAgSQ
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBACnApXqPklyJDltx2lBgGersEha1AoHZsmxtNvcZkF38UUmEHoY8
t9H9uQReph0GhZwibUKl8CCQ7BHPhEzM/nKcdiCOQnrmuah7MY+cq4O91AyYKOHX
+SOHnZgzqn+E/uPVWRWtHAdChiKNfaiUBG0TQA05CATqOVR6J6CUssxEyeMDslkm
oa+Qdgonj/uNLQ9yVUu7IW6/A+DD0+1aHjEUQp7MwbD4xRgstPsJmtD10GCbNmUX
PhjHFZDnkK30X03K2HNJkYJlq85mTlnt/I9TZshbQsgELVaJQvsX/Ko84uEgDw5y
wmT9tx0RCxx9jLGO1tP3aN01AQqRwjlRiS8=
-----END CERTIFICATE-----
Generated at Mon Mar 2 08:36:55 2026 by rpki-client