Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/19cb6623-eabf-410a-89de-eb6cae8e37a3/0169fe11-c32d-3023-933f-02e828e6ce1f.roa
File:                     0169fe11-c32d-3023-933f-02e828e6ce1f.roa (raw, json)
Hash identifier:          K1wDJN/WVwmMVONJs3vJBL77ApR1dmn0y1vRh4VsegI=
Subject key identifier:   C8:37:5E:50:20:E0:4D:8F:0C:F5:8B:30:B0:AA:EB:3B:D7:02:07:99
Certificate issuer:       /CN=19cb6623-eabf-410a-89de-eb6cae8e37a3
Certificate serial:       010D0C9F4328584CEBC224DEC312F8ABD81A3480
Authority key identifier: 0B:75:71:F1:83:8E:FF:8B:1D:3B:32:E9:5D:1F:70:DD:2E:82:B9:9A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/19cb6623-eabf-410a-89de-eb6cae8e37a3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/19cb6623-eabf-410a-89de-eb6cae8e37a3/0169fe11-c32d-3023-933f-02e828e6ce1f.roa
Signing time:             Fri 20 Feb 2026 02:00:32 +0000
ROA not before:           Fri 20 Feb 2026 02:00:32 +0000
ROA not after:            Thu 21 May 2026 01:00:32 +0000
asID:                     8987
IP address blocks:        2602:f73e:20::/43 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/19cb6623-eabf-410a-89de-eb6cae8e37a3/19cb6623-eabf-410a-89de-eb6cae8e37a3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/19cb6623-eabf-410a-89de-eb6cae8e37a3/19cb6623-eabf-410a-89de-eb6cae8e37a3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/19cb6623-eabf-410a-89de-eb6cae8e37a3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 02 Mar 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:eb:c2:24:de:c3:12:f8:ab:d8:1a:34:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19cb6623-eabf-410a-89de-eb6cae8e37a3
        Validity
            Not Before: Feb 20 02:00:32 2026 GMT
            Not After : May 21 01:00:32 2026 GMT
        Subject: CN=51d4a811-25ae-49ad-b4e4-f4b90b22051d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:8c:36:7e:8b:a5:8a:83:ac:29:ab:b5:32:d2:
                    6a:b9:45:28:d6:8f:f7:f9:e2:4b:26:d6:ac:f4:07:
                    36:1e:c8:3c:cd:39:35:61:6d:35:9a:dc:93:39:81:
                    29:af:94:4a:c7:19:30:ca:96:ec:9b:8c:ef:cc:21:
                    04:40:1a:19:04:ae:8a:39:fb:c7:e2:31:18:26:39:
                    6f:85:98:ae:d6:9a:7b:59:3e:b8:6f:c7:d7:1c:ed:
                    13:b6:7d:c5:7e:11:42:f4:3b:3d:df:f7:90:06:2f:
                    69:97:78:e1:1b:d7:25:38:c9:8b:bd:d3:c7:89:23:
                    7a:fd:1f:a8:bb:11:53:b4:cb:2a:02:d0:05:76:3b:
                    df:fc:5b:92:10:be:a1:97:d0:9d:5c:6d:b0:9b:8b:
                    8d:18:23:31:56:72:32:40:c0:d1:76:76:63:19:d0:
                    7d:6d:0b:64:13:04:62:83:75:d8:48:b9:34:fd:80:
                    d3:22:d8:c4:2a:6e:7b:d9:51:8b:58:bb:31:5d:ca:
                    66:f6:41:bc:fd:07:7a:38:31:70:18:73:1b:0b:0e:
                    14:fc:bd:04:da:1b:40:38:cd:5d:a6:c4:ba:a1:0e:
                    ab:62:89:82:ab:9f:ec:e1:4d:98:b3:f9:8a:94:48:
                    c6:fd:01:c6:6a:8d:d4:37:51:c5:27:76:02:20:a4:
                    f3:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:37:5E:50:20:E0:4D:8F:0C:F5:8B:30:B0:AA:EB:3B:D7:02:07:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/19cb6623-eabf-410a-89de-eb6cae8e37a3/0169fe11-c32d-3023-933f-02e828e6ce1f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/19cb6623-eabf-410a-89de-eb6cae8e37a3/19cb6623-eabf-410a-89de-eb6cae8e37a3.crl

            X509v3 Authority Key Identifier:
                keyid:0B:75:71:F1:83:8E:FF:8B:1D:3B:32:E9:5D:1F:70:DD:2E:82:B9:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/19cb6623-eabf-410a-89de-eb6cae8e37a3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f73e:20::/43

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:48:b8:15:21:bf:08:b7:58:7e:33:32:87:3b:5c:84:30:1e:
         df:87:ad:bf:a9:aa:19:63:be:c9:4c:b7:bf:ca:32:60:0a:ce:
         cc:6b:77:72:47:8a:e1:42:45:3b:df:58:ea:64:a2:ab:72:a3:
         52:32:05:a7:3d:d8:f7:7e:36:ec:85:e8:41:30:f5:5a:b5:e0:
         5f:4c:f0:77:24:4b:59:78:ad:63:58:28:3b:88:2c:0a:41:82:
         85:1d:08:80:28:27:9e:9c:e2:f1:e6:1d:ec:29:cf:61:81:94:
         a2:5a:02:f5:0f:59:b0:6c:cc:0b:4c:da:b7:1d:41:eb:97:7b:
         06:95:50:30:2c:e0:ff:37:1b:ab:c1:83:a2:47:a4:a6:d8:35:
         a0:20:22:dd:c1:40:6e:6d:45:cf:3d:fe:ca:f2:06:11:62:de:
         08:dc:47:1e:f9:64:d8:4e:00:ed:4a:1f:c8:75:7d:9e:b8:fa:
         01:d5:96:c6:37:ae:40:2e:78:a4:c0:db:d5:1c:85:cd:7e:63:
         83:d5:76:1b:d6:5c:e3:94:9f:4a:4a:b5:0b:d6:52:79:2b:01:
         f6:0f:3d:19:30:3d:8a:0f:2e:06:ac:18:2f:b1:bd:1f:38:c1:
         98:52:ff:81:91:69:88:cb:e2:a3:48:00:7e:14:5e:5b:bd:32:
         a8:e5:9f:1c
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEzrwiTewxL4q9gaNIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTljYjY2MjMtZWFiZi00MTBhLTg5ZGUtZWI2Y2FlOGUz
N2EzMB4XDTI2MDIyMDAyMDAzMloXDTI2MDUyMTAxMDAzMlowLzEtMCsGA1UEAxMk
NTFkNGE4MTEtMjVhZS00OWFkLWI0ZTQtZjRiOTBiMjIwNTFkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh4w2foulioOsKau1MtJquUUo1o/3+eJLJtas
9Ac2Hsg8zTk1YW01mtyTOYEpr5RKxxkwypbsm4zvzCEEQBoZBK6KOfvH4jEYJjlv
hZiu1pp7WT64b8fXHO0Ttn3FfhFC9Ds93/eQBi9pl3jhG9clOMmLvdPHiSN6/R+o
uxFTtMsqAtAFdjvf/FuSEL6hl9CdXG2wm4uNGCMxVnIyQMDRdnZjGdB9bQtkEwRi
g3XYSLk0/YDTItjEKm572VGLWLsxXcpm9kG8/Qd6ODFwGHMbCw4U/L0E2htAOM1d
psS6oQ6rYomCq5/s4U2Ys/mKlEjG/QHGao3UN1HFJ3YCIKTznQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFMg3XlAg4E2PDPWLMLCq6zvXAgeZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8xOWNi
NjYyMy1lYWJmLTQxMGEtODlkZS1lYjZjYWU4ZTM3YTMvMDE2OWZlMTEtYzMyZC0z
MDIzLTkzM2YtMDJlODI4ZTZjZTFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMTljYjY2MjMtZWFiZi00MTBhLTg5
ZGUtZWI2Y2FlOGUzN2EzLzE5Y2I2NjIzLWVhYmYtNDEwYS04OWRlLWViNmNhZThl
MzdhMy5jcmwwHwYDVR0jBBgwFoAUC3Vx8YOO/4sdOzLpXR9w3S6CuZowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi8xOWNiNjYyMy1lYWJmLTQxMGEtODlkZS1lYjZj
YWU4ZTM3YTMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcFJgL3PgAg
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBACJIuBUhvwi3WH4zMoc7XIQwHt+Hrb+pqhljvslMt7/KMmAKzsxr
d3JHiuFCRTvfWOpkoqtyo1IyBac92Pd+NuyF6EEw9Vq14F9M8HckS1l4rWNYKDuI
LApBgoUdCIAoJ56c4vHmHewpz2GBlKJaAvUPWbBszAtM2rcdQeuXewaVUDAs4P83
G6vBg6JHpKbYNaAgIt3BQG5tRc89/sryBhFi3gjcRx75ZNhOAO1KH8h1fZ64+gHV
lsY3rkAueKTA29Uchc1+Y4PVdhvWXOOUn0pKtQvWUnkrAfYPPRkwPYoPLgasGC+x
vR84wZhS/4GRaYjL4qNIAH4UXlu9Mqjlnxw=
-----END CERTIFICATE-----
Generated at Sun Mar 1 22:29:38 2026 by rpki-client