Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/89dfa952-929a-4c50-a372-96882b2b33e2/b27b5fc5-f00a-34aa-bb4a-7a248aa6e187.roa
File:                     b27b5fc5-f00a-34aa-bb4a-7a248aa6e187.roa (raw, json)
Hash identifier:          3dfIxBJfZc+RlqpzW1ZSpaH0j23GWTAKL4ywWMljlcE=
Subject key identifier:   33:01:9F:6A:11:78:71:5A:9E:F7:4A:A8:C1:6C:6A:B7:EA:BF:B0:3F
Certificate issuer:       /CN=89dfa952-929a-4c50-a372-96882b2b33e2
Certificate serial:       010D0C9F4328584CCBA760A6E41C5E5B25B7B680
Authority key identifier: 39:AB:0C:9E:E4:5D:F8:25:0A:DF:8C:85:5D:D8:EC:B1:27:27:62:93
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/89dfa952-929a-4c50-a372-96882b2b33e2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/89dfa952-929a-4c50-a372-96882b2b33e2/b27b5fc5-f00a-34aa-bb4a-7a248aa6e187.roa
Signing time:             Sun 08 Feb 2026 14:00:41 +0000
ROA not before:           Sun 08 Feb 2026 14:00:41 +0000
ROA not after:            Sat 09 May 2026 13:00:41 +0000
asID:                     397501
IP address blocks:        2607:ac80::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/89dfa952-929a-4c50-a372-96882b2b33e2/89dfa952-929a-4c50-a372-96882b2b33e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/89dfa952-929a-4c50-a372-96882b2b33e2/89dfa952-929a-4c50-a372-96882b2b33e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/89dfa952-929a-4c50-a372-96882b2b33e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:cb:a7:60:a6:e4:1c:5e:5b:25:b7:b6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89dfa952-929a-4c50-a372-96882b2b33e2
        Validity
            Not Before: Feb  8 14:00:41 2026 GMT
            Not After : May  9 13:00:41 2026 GMT
        Subject: CN=a1261369-65f6-4fa1-a04f-1ff5b29bc018
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:7b:b3:d9:03:5a:9f:f0:1f:4e:ad:bd:78:7c:
                    3e:7f:c5:8c:c2:84:cf:ed:4b:ee:2f:d6:17:f6:cd:
                    58:75:e4:bc:b5:b4:71:a4:0c:5b:59:6a:84:3e:3b:
                    dc:e7:02:ea:46:22:7e:80:3c:ea:87:af:0a:73:34:
                    9b:d7:59:02:6f:50:29:78:03:d5:a6:09:3e:57:71:
                    26:50:d5:43:ad:27:29:78:78:05:d6:6b:f5:ad:b8:
                    0c:1b:3e:14:e1:ba:4a:9b:b1:4e:6c:94:d4:b9:0e:
                    bb:10:f7:e4:6c:bb:c7:e0:38:5f:e0:56:c4:a0:ea:
                    c1:98:83:a6:7c:9b:7a:c4:b1:5a:2e:ee:a1:cf:ee:
                    f0:12:06:8a:6b:61:4a:86:06:b7:88:60:27:a3:76:
                    56:bf:ff:e2:9f:e0:b4:18:ad:32:19:f1:08:76:23:
                    3a:b9:d1:84:6e:9f:24:f7:a6:d1:b7:16:c6:b9:d1:
                    25:0c:e3:a3:ae:8f:a6:d4:c1:30:9a:d8:92:0d:ff:
                    de:e6:0b:3b:3f:c3:ba:06:b9:60:54:61:92:71:cf:
                    3b:d9:f7:be:4d:58:df:f3:45:73:a4:65:d6:f9:f0:
                    bd:d1:28:62:80:79:66:75:c8:78:5f:a5:6f:44:f7:
                    98:29:2c:00:38:48:4f:b9:b6:35:a4:de:de:4e:eb:
                    21:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:01:9F:6A:11:78:71:5A:9E:F7:4A:A8:C1:6C:6A:B7:EA:BF:B0:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/89dfa952-929a-4c50-a372-96882b2b33e2/b27b5fc5-f00a-34aa-bb4a-7a248aa6e187.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/89dfa952-929a-4c50-a372-96882b2b33e2/89dfa952-929a-4c50-a372-96882b2b33e2.crl

            X509v3 Authority Key Identifier:
                keyid:39:AB:0C:9E:E4:5D:F8:25:0A:DF:8C:85:5D:D8:EC:B1:27:27:62:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/89dfa952-929a-4c50-a372-96882b2b33e2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:ac80::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:6c:df:b9:65:b5:0d:c9:7b:10:35:58:c8:03:67:62:81:bf:
         d1:bb:4a:ae:90:be:ae:c0:4c:02:af:a2:a9:d5:26:26:70:c5:
         83:2e:8a:ec:79:bd:10:d1:ea:60:93:c5:6d:4a:e1:5e:de:fe:
         94:f4:57:c0:10:ec:15:8c:fc:58:7f:b9:69:8f:66:f1:fc:6d:
         df:01:04:b0:1c:0d:8e:2f:aa:a8:97:d1:d2:50:fd:3c:cc:a2:
         f9:7f:f2:76:b2:0e:a5:50:cd:b1:da:cb:97:93:96:8d:72:28:
         34:5b:58:74:17:7d:58:80:a4:bb:4c:6d:b7:07:c5:68:9e:46:
         11:c8:73:7d:18:f1:90:9f:32:ee:b1:35:2f:0d:ec:5c:b0:aa:
         b1:bd:72:0a:95:bb:f5:10:f9:d5:7b:d9:a8:94:5e:2d:f0:d3:
         70:12:b8:be:7e:6b:9d:38:59:ed:68:cf:35:dd:40:22:ef:fc:
         01:8e:a3:37:62:55:e0:83:3c:58:45:e7:09:4b:3b:a2:e4:e4:
         b4:40:43:a6:9f:d4:b3:18:87:0c:75:80:13:a8:2a:10:f7:1a:
         45:f3:fd:61:78:fd:c0:b1:b4:da:74:8f:3e:53:02:d1:dd:0a:
         96:6c:75:ee:21:2b:97:a9:78:3e:1c:57:23:dc:77:ce:a4:5b:
         66:71:1b:9f
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEzLp2Cm5BxeWyW3toAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODlkZmE5NTItOTI5YS00YzUwLWEzNzItOTY4ODJiMmIz
M2UyMB4XDTI2MDIwODE0MDA0MVoXDTI2MDUwOTEzMDA0MVowLzEtMCsGA1UEAxMk
YTEyNjEzNjktNjVmNi00ZmExLWEwNGYtMWZmNWIyOWJjMDE4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlHuz2QNan/AfTq29eHw+f8WMwoTP7UvuL9YX
9s1YdeS8tbRxpAxbWWqEPjvc5wLqRiJ+gDzqh68KczSb11kCb1ApeAPVpgk+V3Em
UNVDrScpeHgF1mv1rbgMGz4U4bpKm7FObJTUuQ67EPfkbLvH4Dhf4FbEoOrBmIOm
fJt6xLFaLu6hz+7wEgaKa2FKhga3iGAno3ZWv//in+C0GK0yGfEIdiM6udGEbp8k
96bRtxbGudElDOOjro+m1MEwmtiSDf/e5gs7P8O6BrlgVGGScc872fe+TVjf80Vz
pGXW+fC90ShigHlmdch4X6VvRPeYKSwAOEhPubY1pN7eTushfwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFDMBn2oReHFanvdKqMFsarfqv7A/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84OWRm
YTk1Mi05MjlhLTRjNTAtYTM3Mi05Njg4MmIyYjMzZTIvYjI3YjVmYzUtZjAwYS0z
NGFhLWJiNGEtN2EyNDhhYTZlMTg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvODlkZmE5NTItOTI5YS00YzUwLWEz
NzItOTY4ODJiMmIzM2UyLzg5ZGZhOTUyLTkyOWEtNGM1MC1hMzcyLTk2ODgyYjJi
MzNlMi5jcmwwHwYDVR0jBBgwFoAUOasMnuRd+CUK34yFXdjssScnYpMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS84OWRmYTk1Mi05MjlhLTRjNTAtYTM3Mi05Njg4
MmIyYjMzZTIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgesgDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQAcbN+5ZbUNyXsQNVjIA2digb/Ru0qukL6uwEwCr6Kp1SYmcMWDLors
eb0Q0epgk8VtSuFe3v6U9FfAEOwVjPxYf7lpj2bx/G3fAQSwHA2OL6qol9HSUP08
zKL5f/J2sg6lUM2x2suXk5aNcig0W1h0F31YgKS7TG23B8VonkYRyHN9GPGQnzLu
sTUvDexcsKqxvXIKlbv1EPnVe9molF4t8NNwEri+fmudOFntaM813UAi7/wBjqM3
YlXggzxYRecJSzui5OS0QEOmn9SzGIcMdYATqCoQ9xpF8/1heP3AsbTadI8+UwLR
3QqWbHXuISuXqXg+HFcj3HfOpFtmcRuf
-----END CERTIFICATE-----
Generated at Mon Mar 2 07:39:01 2026 by rpki-client