Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8ed618f9-7e9e-436c-80d0-d87dd1c0b2b0/ba02b064-978c-3a0b-a9a0-ffdbf7603852.roa
File:                     ba02b064-978c-3a0b-a9a0-ffdbf7603852.roa (raw, json)
Hash identifier:          K5nqj/My/EKjEuzV70YcYNmB0TVgRThiQ3ilydc5v/8=
Subject key identifier:   BD:DA:6E:B2:A4:82:11:46:B6:D7:BA:38:68:8C:94:A8:E4:56:A1:ED
Certificate issuer:       /CN=8ed618f9-7e9e-436c-80d0-d87dd1c0b2b0
Certificate serial:       010D0C9F4328584CB981C9735696BA8E66EA39C0
Authority key identifier: 2C:66:3B:20:EF:D2:60:11:39:8D:9E:E6:C0:01:2B:3A:0B:A6:CD:5F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8ed618f9-7e9e-436c-80d0-d87dd1c0b2b0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8ed618f9-7e9e-436c-80d0-d87dd1c0b2b0/ba02b064-978c-3a0b-a9a0-ffdbf7603852.roa
Signing time:             Mon 02 Feb 2026 02:00:32 +0000
ROA not before:           Mon 02 Feb 2026 02:00:32 +0000
ROA not after:            Sun 03 May 2026 01:00:32 +0000
asID:                     25875
IP address blocks:        2607:9f00::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8ed618f9-7e9e-436c-80d0-d87dd1c0b2b0/8ed618f9-7e9e-436c-80d0-d87dd1c0b2b0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8ed618f9-7e9e-436c-80d0-d87dd1c0b2b0/8ed618f9-7e9e-436c-80d0-d87dd1c0b2b0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8ed618f9-7e9e-436c-80d0-d87dd1c0b2b0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:b9:81:c9:73:56:96:ba:8e:66:ea:39:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ed618f9-7e9e-436c-80d0-d87dd1c0b2b0
        Validity
            Not Before: Feb  2 02:00:32 2026 GMT
            Not After : May  3 01:00:32 2026 GMT
        Subject: CN=070117fa-86cc-4adb-b363-1e5c3779f8fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:9f:6e:66:02:17:85:7e:e2:0f:8c:c5:91:95:
                    c1:87:55:46:b1:ba:df:79:1c:80:4e:c7:31:79:75:
                    a5:de:0f:b8:4a:04:65:31:08:ee:36:44:c5:96:43:
                    c8:91:6f:85:aa:c8:a9:ae:e5:df:63:30:2b:04:0c:
                    39:d6:a7:2d:bc:11:e4:0a:17:ac:51:34:00:db:36:
                    e3:51:c2:b8:1f:42:b8:8c:52:07:92:b2:d9:24:b9:
                    cc:81:78:c2:62:f9:26:72:b5:56:c2:df:49:02:0a:
                    06:b4:5a:62:fd:e3:b9:c0:e1:01:38:58:db:b5:8f:
                    8a:1c:f1:5e:f7:46:07:3f:a7:70:90:9b:2d:f1:e2:
                    c3:00:44:c2:d9:83:8b:3c:f6:b6:14:da:66:67:df:
                    fa:ff:e3:d4:a3:dc:ae:35:d8:6f:3b:18:24:d7:91:
                    2d:92:30:b7:4b:3e:16:83:47:67:c4:8d:0b:ab:38:
                    7c:0c:74:cf:bd:b9:1f:bc:1d:36:0a:b3:18:a3:ff:
                    2a:44:3d:2d:d2:43:55:9e:d9:36:47:f4:9d:0b:c8:
                    89:9c:ea:3b:c8:59:c1:f6:c0:58:a7:b2:37:46:c3:
                    fb:cb:32:ce:24:ee:1a:bb:75:08:da:95:12:d8:0a:
                    a6:9e:fd:8a:c6:e4:3f:ac:1a:81:ea:5c:90:fb:9e:
                    3f:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:DA:6E:B2:A4:82:11:46:B6:D7:BA:38:68:8C:94:A8:E4:56:A1:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8ed618f9-7e9e-436c-80d0-d87dd1c0b2b0/ba02b064-978c-3a0b-a9a0-ffdbf7603852.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8ed618f9-7e9e-436c-80d0-d87dd1c0b2b0/8ed618f9-7e9e-436c-80d0-d87dd1c0b2b0.crl

            X509v3 Authority Key Identifier:
                keyid:2C:66:3B:20:EF:D2:60:11:39:8D:9E:E6:C0:01:2B:3A:0B:A6:CD:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8ed618f9-7e9e-436c-80d0-d87dd1c0b2b0.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:9f00::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:fe:59:be:4f:af:93:fd:c2:27:ad:16:56:d7:cb:9b:d3:48:
         0c:9c:fc:63:86:2e:4c:1a:3a:02:16:2f:6d:42:93:71:03:a1:
         3d:61:2e:b2:20:ec:c2:83:f7:f7:ce:4f:ae:1a:aa:71:a2:69:
         71:d4:67:48:40:27:47:e0:15:98:cb:70:67:b4:52:14:c1:3c:
         3e:01:20:3c:98:c6:29:4c:75:12:1e:e3:6e:78:3b:11:13:bd:
         5e:2d:cf:a1:fa:e5:c0:d3:ab:ed:47:4c:88:61:e4:f7:3b:30:
         79:69:2c:52:9d:86:11:64:10:f9:2a:8b:81:4a:51:26:bb:47:
         cc:6f:83:26:85:05:52:70:72:ed:4a:ee:19:01:3e:d4:14:4e:
         8a:1c:cf:d8:44:74:bd:1d:42:9d:3d:36:3d:8a:26:de:29:fb:
         72:3f:0b:93:f6:c2:84:30:18:74:6e:e3:fa:f5:b6:44:15:02:
         1b:1c:6a:88:d4:7f:ba:22:71:3b:18:2e:38:2f:4b:cc:bf:88:
         7c:44:e7:f7:1e:fa:87:d4:82:8b:4f:c8:50:71:d8:24:92:98:
         1c:fe:7c:db:90:78:da:e8:b9:b6:b1:05:e5:eb:4f:70:0c:19:
         16:a3:8c:44:ed:05:22:6c:ee:58:38:1e:b1:3b:a9:89:c5:ca:
         80:7f:67:03
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEy5gclzVpa6jmbqOcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGVkNjE4ZjktN2U5ZS00MzZjLTgwZDAtZDg3ZGQxYzBi
MmIwMB4XDTI2MDIwMjAyMDAzMloXDTI2MDUwMzAxMDAzMlowLzEtMCsGA1UEAxMk
MDcwMTE3ZmEtODZjYy00YWRiLWIzNjMtMWU1YzM3NzlmOGZjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwJ9uZgIXhX7iD4zFkZXBh1VGsbrfeRyATscx
eXWl3g+4SgRlMQjuNkTFlkPIkW+FqsipruXfYzArBAw51qctvBHkChesUTQA2zbj
UcK4H0K4jFIHkrLZJLnMgXjCYvkmcrVWwt9JAgoGtFpi/eO5wOEBOFjbtY+KHPFe
90YHP6dwkJst8eLDAETC2YOLPPa2FNpmZ9/6/+PUo9yuNdhvOxgk15EtkjC3Sz4W
g0dnxI0Lqzh8DHTPvbkfvB02CrMYo/8qRD0t0kNVntk2R/SdC8iJnOo7yFnB9sBY
p7I3RsP7yzLOJO4au3UI2pUS2Aqmnv2KxuQ/rBqB6lyQ+54/hwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFL3abrKkghFGtte6OGiMlKjkVqHtMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84ZWQ2
MThmOS03ZTllLTQzNmMtODBkMC1kODdkZDFjMGIyYjAvYmEwMmIwNjQtOTc4Yy0z
YTBiLWE5YTAtZmZkYmY3NjAzODUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOGVkNjE4ZjktN2U5ZS00MzZjLTgw
ZDAtZDg3ZGQxYzBiMmIwLzhlZDYxOGY5LTdlOWUtNDM2Yy04MGQwLWQ4N2RkMWMw
YjJiMC5jcmwwHwYDVR0jBBgwFoAULGY7IO/SYBE5jZ7mwAErOgumzV8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS84ZWQ2MThmOS03ZTllLTQzNmMtODBkMC1kODdk
ZDFjMGIyYjAuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgefADBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQBj/lm+T6+T/cInrRZW18ub00gMnPxjhi5MGjoCFi9tQpNxA6E9YS6y
IOzCg/f3zk+uGqpxomlx1GdIQCdH4BWYy3BntFIUwTw+ASA8mMYpTHUSHuNueDsR
E71eLc+h+uXA06vtR0yIYeT3OzB5aSxSnYYRZBD5KouBSlEmu0fMb4MmhQVScHLt
Su4ZAT7UFE6KHM/YRHS9HUKdPTY9iibeKftyPwuT9sKEMBh0buP69bZEFQIbHGqI
1H+6InE7GC44L0vMv4h8ROf3HvqH1IKLT8hQcdgkkpgc/nzbkHja6Lm2sQXl609w
DBkWo4xE7QUibO5YOB6xO6mJxcqAf2cD
-----END CERTIFICATE-----
Generated at Mon Mar 2 04:44:19 2026 by rpki-client