Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9be8f23f-3a8c-4822-8996-e4131d203c13/9800fcd3-2dc0-3e84-afb8-6f4f44fd1f58.roa
File:                     9800fcd3-2dc0-3e84-afb8-6f4f44fd1f58.roa (raw, json)
Hash identifier:          FqtUrczYt6fk+5MUAsKOG8sEdX5sBpqCMbjyZtVCwww=
Subject key identifier:   B1:ED:16:11:53:AB:5D:0E:6F:0B:EE:55:D1:99:51:BC:64:47:9A:39
Certificate issuer:       /CN=9be8f23f-3a8c-4822-8996-e4131d203c13
Certificate serial:       010D0C9F4328584CF587938938253D5BA7D9CCC0
Authority key identifier: 80:AD:19:B2:F1:CB:42:EA:DC:B3:3D:6C:5D:DE:3C:68:47:48:15:90
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9be8f23f-3a8c-4822-8996-e4131d203c13.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9be8f23f-3a8c-4822-8996-e4131d203c13/9800fcd3-2dc0-3e84-afb8-6f4f44fd1f58.roa
Signing time:             Mon 23 Feb 2026 14:00:41 +0000
ROA not before:           Mon 23 Feb 2026 14:00:41 +0000
ROA not after:            Sun 24 May 2026 13:00:41 +0000
asID:                     14618
IP address blocks:        2606:cd40::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9be8f23f-3a8c-4822-8996-e4131d203c13/9be8f23f-3a8c-4822-8996-e4131d203c13.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9be8f23f-3a8c-4822-8996-e4131d203c13/9be8f23f-3a8c-4822-8996-e4131d203c13.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9be8f23f-3a8c-4822-8996-e4131d203c13.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:f5:87:93:89:38:25:3d:5b:a7:d9:cc:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9be8f23f-3a8c-4822-8996-e4131d203c13
        Validity
            Not Before: Feb 23 14:00:41 2026 GMT
            Not After : May 24 13:00:41 2026 GMT
        Subject: CN=6dfcb473-de66-45c5-8a52-7b233853c865
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:30:85:f7:3a:be:ac:2e:67:71:dd:cb:f3:00:
                    47:f3:76:f3:70:fa:13:a8:05:2a:35:cb:47:3e:9e:
                    b9:a7:04:dd:c4:ea:47:dd:df:94:8a:37:37:d1:15:
                    4e:4a:ed:53:65:90:50:1a:88:a9:63:0e:d1:3b:d5:
                    70:c4:5e:9c:eb:47:15:79:de:1b:f6:ee:8a:84:ca:
                    e4:7f:f9:75:07:55:2b:56:e4:93:1c:34:89:91:7a:
                    e8:99:40:c8:ec:e0:f1:39:b4:1d:95:e2:fa:fe:b0:
                    14:dc:54:92:5e:46:8d:86:78:e9:62:f2:df:3d:1a:
                    aa:4d:48:20:d2:b3:3f:1f:28:a9:87:be:1e:15:40:
                    46:12:f7:3c:4a:4c:fa:8b:f6:f1:22:5c:7e:78:7d:
                    c3:88:9c:8d:e6:2c:72:a8:b5:5b:ba:6a:0c:bf:18:
                    05:b9:f2:ba:2c:aa:07:76:86:69:5b:1b:d1:2b:d1:
                    85:e9:35:b8:09:84:4b:c0:e5:ef:02:80:28:a6:cb:
                    fa:eb:18:c3:29:55:8e:b3:47:8b:41:56:05:33:09:
                    f5:80:da:6b:86:83:e8:d4:fe:d4:a5:8e:ff:48:22:
                    8b:64:4f:39:33:66:0b:ef:53:fd:61:24:13:8d:6d:
                    1e:58:41:fb:b9:44:a9:62:6f:be:d4:f7:cc:ec:94:
                    bb:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:ED:16:11:53:AB:5D:0E:6F:0B:EE:55:D1:99:51:BC:64:47:9A:39
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9be8f23f-3a8c-4822-8996-e4131d203c13/9800fcd3-2dc0-3e84-afb8-6f4f44fd1f58.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9be8f23f-3a8c-4822-8996-e4131d203c13/9be8f23f-3a8c-4822-8996-e4131d203c13.crl

            X509v3 Authority Key Identifier:
                keyid:80:AD:19:B2:F1:CB:42:EA:DC:B3:3D:6C:5D:DE:3C:68:47:48:15:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9be8f23f-3a8c-4822-8996-e4131d203c13.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:cd40::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ac:d5:ae:1f:bb:c3:82:9f:ec:5c:cf:93:6e:f5:1c:91:be:25:
         1d:00:d6:2d:4e:02:1c:dc:9b:b5:bb:65:8a:e8:dd:d8:42:7a:
         fd:06:43:be:e5:e1:62:f5:b8:18:e2:d9:32:d2:1a:39:b8:9d:
         d0:70:17:cf:aa:0e:1b:c7:0c:0e:02:88:21:d9:86:5d:87:6e:
         54:a2:c2:75:7d:90:18:5c:3e:4c:86:02:42:b8:b9:6a:fe:10:
         f8:47:a9:09:72:93:7a:08:24:73:ff:66:cc:86:cf:ea:e5:02:
         a4:8d:77:39:35:a1:64:e3:af:30:d6:3e:ce:7b:18:23:79:2e:
         2e:cc:4e:76:a8:51:c6:08:9e:a0:b2:be:94:db:68:2b:a4:8f:
         12:57:f2:30:10:24:df:24:8d:c3:dc:08:ff:48:c6:ff:3a:cc:
         16:cf:3b:2b:89:20:5a:88:2e:23:17:69:50:7a:db:f0:8e:f3:
         b1:5a:d3:6c:01:d1:ac:3e:22:d6:e1:4b:68:41:d1:ea:03:26:
         40:20:16:c6:14:ba:64:c4:85:c0:1f:46:1c:84:39:05:f8:ad:
         51:f8:b5:58:a4:05:1f:d6:63:d3:16:74:24:3d:1e:97:3d:f6:
         a0:18:85:a9:ba:04:5c:55:82:59:e1:49:af:9f:30:ad:7a:ba:
         9d:9c:e3:04
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEz1h5OJOCU9W6fZzMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOWJlOGYyM2YtM2E4Yy00ODIyLTg5OTYtZTQxMzFkMjAz
YzEzMB4XDTI2MDIyMzE0MDA0MVoXDTI2MDUyNDEzMDA0MVowLzEtMCsGA1UEAxMk
NmRmY2I0NzMtZGU2Ni00NWM1LThhNTItN2IyMzM4NTNjODY1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqTCF9zq+rC5ncd3L8wBH83bzcPoTqAUqNctH
Pp65pwTdxOpH3d+Uijc30RVOSu1TZZBQGoipYw7RO9VwxF6c60cVed4b9u6KhMrk
f/l1B1UrVuSTHDSJkXromUDI7ODxObQdleL6/rAU3FSSXkaNhnjpYvLfPRqqTUgg
0rM/Hyiph74eFUBGEvc8Skz6i/bxIlx+eH3DiJyN5ixyqLVbumoMvxgFufK6LKoH
doZpWxvRK9GF6TW4CYRLwOXvAoAopsv66xjDKVWOs0eLQVYFMwn1gNprhoPo1P7U
pY7/SCKLZE85M2YL71P9YSQTjW0eWEH7uUSpYm++1PfM7JS7DwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFLHtFhFTq10ObwvuVdGZUbxkR5o5MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS85YmU4
ZjIzZi0zYThjLTQ4MjItODk5Ni1lNDEzMWQyMDNjMTMvOTgwMGZjZDMtMmRjMC0z
ZTg0LWFmYjgtNmY0ZjQ0ZmQxZjU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOWJlOGYyM2YtM2E4Yy00ODIyLTg5
OTYtZTQxMzFkMjAzYzEzLzliZThmMjNmLTNhOGMtNDgyMi04OTk2LWU0MTMxZDIw
M2MxMy5jcmwwHwYDVR0jBBgwFoAUgK0ZsvHLQurcsz1sXd48aEdIFZAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS85YmU4ZjIzZi0zYThjLTQ4MjItODk5Ni1lNDEz
MWQyMDNjMTMuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgbNQDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQCs1a4fu8OCn+xcz5Nu9RyRviUdANYtTgIc3Ju1u2WK6N3YQnr9BkO+
5eFi9bgY4tky0ho5uJ3QcBfPqg4bxwwOAogh2YZdh25UosJ1fZAYXD5MhgJCuLlq
/hD4R6kJcpN6CCRz/2bMhs/q5QKkjXc5NaFk468w1j7OexgjeS4uzE52qFHGCJ6g
sr6U22grpI8SV/IwECTfJI3D3Aj/SMb/OswWzzsriSBaiC4jF2lQetvwjvOxWtNs
AdGsPiLW4UtoQdHqAyZAIBbGFLpkxIXAH0YchDkF+K1R+LVYpAUf1mPTFnQkPR6X
PfagGIWpugRcVYJZ4UmvnzCterqdnOME
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:24:18 2026 by rpki-client