Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/6d180ec4-2df6-3be3-8f13-e4cfa0295268.roa
File:                     6d180ec4-2df6-3be3-8f13-e4cfa0295268.roa (raw, json)
Hash identifier:          dqYxwbxP0t56hgEuRtRl/zBy9nFx9SkwQ2x+79fwCKI=
Subject key identifier:   20:83:86:8F:AE:99:A6:E3:08:37:F3:75:78:B3:AF:44:DC:D4:3F:D4
Certificate issuer:       /CN=601de417-7cdc-45d3-8d80-7279489a39e0
Certificate serial:       010D0C9F4328584CD415FE19C8FB79D620A1A800
Authority key identifier: BD:6E:8D:C2:3E:B9:DA:1D:07:C2:5B:76:67:C5:CC:10:35:41:EE:89
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/6d180ec4-2df6-3be3-8f13-e4cfa0295268.roa
Signing time:             Wed 11 Feb 2026 14:30:19 +0000
ROA not before:           Wed 11 Feb 2026 14:30:19 +0000
ROA not after:            Tue 12 May 2026 13:30:19 +0000
asID:                     63023
IP address blocks:        2604:86c0:5000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:d4:15:fe:19:c8:fb:79:d6:20:a1:a8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=601de417-7cdc-45d3-8d80-7279489a39e0
        Validity
            Not Before: Feb 11 14:30:19 2026 GMT
            Not After : May 12 13:30:19 2026 GMT
        Subject: CN=45ef5072-8140-48ca-9e5f-b91c6220c5bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:22:ea:0a:79:9c:c1:68:d4:2f:2a:88:cb:bb:
                    15:56:9a:74:ad:ba:55:0b:cf:3c:10:67:07:39:c7:
                    f1:ea:83:ef:22:4d:3d:14:e2:12:cb:fe:a8:e8:2e:
                    9d:b1:f1:58:86:53:63:45:8d:ec:74:a5:7c:8a:83:
                    b6:12:b7:25:b9:d4:b3:6c:69:3b:52:8c:a2:c3:10:
                    45:67:76:91:8b:e9:cc:18:b6:30:1f:5a:10:36:50:
                    d3:6c:6c:5d:ee:d6:97:85:8b:f9:b8:ac:27:9a:c2:
                    06:28:af:79:19:db:5a:89:90:ca:ca:0b:3d:84:21:
                    b7:bb:34:8b:2a:7b:9b:18:0a:5e:93:95:90:0e:c2:
                    21:8a:e8:e0:8c:59:c8:d3:49:55:ad:74:c1:21:2e:
                    18:49:0c:96:dd:c7:74:1c:ee:ca:28:ba:11:7d:6b:
                    d9:5b:9c:71:79:e9:bb:22:7f:68:de:33:67:b4:e0:
                    9c:d5:ba:df:a0:06:e0:29:65:e9:ff:86:8d:c4:34:
                    93:9b:db:2f:35:a7:28:a8:9c:a1:18:29:ba:6a:80:
                    bb:f9:fc:78:77:31:e8:e9:38:0c:16:49:3b:d5:36:
                    d3:3b:6b:f8:b3:31:96:f2:d1:84:09:1b:0d:01:9d:
                    13:e2:a3:76:21:9a:b9:6a:46:62:13:55:a9:9a:3d:
                    fd:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:83:86:8F:AE:99:A6:E3:08:37:F3:75:78:B3:AF:44:DC:D4:3F:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/6d180ec4-2df6-3be3-8f13-e4cfa0295268.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.crl

            X509v3 Authority Key Identifier:
                keyid:BD:6E:8D:C2:3E:B9:DA:1D:07:C2:5B:76:67:C5:CC:10:35:41:EE:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:86c0:5000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:30:30:f6:d1:a7:7a:cb:55:7b:8c:1d:86:26:12:6b:5b:ee:
         7f:14:8c:f1:28:d1:77:8b:02:2a:97:e8:4d:df:a2:de:c1:41:
         30:69:bc:6f:f4:bd:18:aa:7c:a4:8a:f1:0f:55:8a:ae:2d:50:
         cf:f7:a0:d1:90:a5:ca:a7:cb:2e:1d:9f:0e:9c:c4:3d:63:1c:
         41:8e:d8:49:df:cc:ed:bd:d3:bf:7d:b7:49:fb:df:98:da:85:
         70:0f:87:3e:1c:c3:1c:17:b2:b8:30:08:c1:5d:56:5a:40:2f:
         e0:43:85:eb:8a:73:2e:dd:4a:fe:39:10:dc:e7:67:73:a8:12:
         db:dc:1c:1a:77:ad:21:e7:f4:40:e6:c7:58:d1:9e:87:17:1c:
         a9:86:77:05:83:43:5a:6b:2e:fb:52:1b:eb:83:a4:48:04:7e:
         8d:e3:e0:ce:67:b0:d8:4c:fe:da:db:13:fa:30:e8:22:37:e5:
         d8:5e:ad:68:a9:0b:16:1d:7b:a9:63:9a:10:75:1e:00:46:3f:
         47:a3:f9:07:03:0c:3c:87:af:36:ce:42:59:7c:2b:f0:0e:cc:
         62:32:be:87:b1:ff:a7:9d:23:95:76:96:c5:cf:c1:82:56:b0:
         c7:b4:d0:1c:85:3c:ba:d3:5c:57:ef:ce:a2:56:74:d1:66:8d:
         e5:49:0d:78
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEzUFf4ZyPt51iChqAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjAxZGU0MTctN2NkYy00NWQzLThkODAtNzI3OTQ4OWEz
OWUwMB4XDTI2MDIxMTE0MzAxOVoXDTI2MDUxMjEzMzAxOVowLzEtMCsGA1UEAxMk
NDVlZjUwNzItODE0MC00OGNhLTllNWYtYjkxYzYyMjBjNWJiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7CLqCnmcwWjULyqIy7sVVpp0rbpVC888EGcH
Ocfx6oPvIk09FOISy/6o6C6dsfFYhlNjRY3sdKV8ioO2ErcludSzbGk7UoyiwxBF
Z3aRi+nMGLYwH1oQNlDTbGxd7taXhYv5uKwnmsIGKK95GdtaiZDKygs9hCG3uzSL
KnubGApek5WQDsIhiujgjFnI00lVrXTBIS4YSQyW3cd0HO7KKLoRfWvZW5xxeem7
In9o3jNntOCc1brfoAbgKWXp/4aNxDSTm9svNacoqJyhGCm6aoC7+fx4dzHo6TgM
Fkk71TbTO2v4szGW8tGECRsNAZ0T4qN2IZq5akZiE1Wpmj39yQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFCCDho+umabjCDfzdXizr0Tc1D/UMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82MDFk
ZTQxNy03Y2RjLTQ1ZDMtOGQ4MC03Mjc5NDg5YTM5ZTAvNmQxODBlYzQtMmRmNi0z
YmUzLThmMTMtZTRjZmEwMjk1MjY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNjAxZGU0MTctN2NkYy00NWQzLThk
ODAtNzI3OTQ4OWEzOWUwLzYwMWRlNDE3LTdjZGMtNDVkMy04ZDgwLTcyNzk0ODlh
MzllMC5jcmwwHwYDVR0jBBgwFoAUvW6Nwj652h0Hwlt2Z8XMEDVB7okwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS82MDFkZTQxNy03Y2RjLTQ1ZDMtOGQ4MC03Mjc5
NDg5YTM5ZTAuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgSGwFAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAOTAw9tGnestVe4wdhiYSa1vufxSM8SjRd4sCKpfoTd+i3sFBMGm8
b/S9GKp8pIrxD1WKri1Qz/eg0ZClyqfLLh2fDpzEPWMcQY7YSd/M7b3Tv323Sfvf
mNqFcA+HPhzDHBeyuDAIwV1WWkAv4EOF64pzLt1K/jkQ3Odnc6gS29wcGnetIef0
QObHWNGehxccqYZ3BYNDWmsu+1Ib64OkSAR+jePgzmew2Ez+2tsT+jDoIjfl2F6t
aKkLFh17qWOaEHUeAEY/R6P5BwMMPIevNs5CWXwr8A7MYjK+h7H/p50jlXaWxc/B
glawx7TQHIU8utNcV+/OolZ00WaN5UkNeA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 00:05:22 2026 by rpki-client