Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1/86436d71-b41d-34e1-8919-0c89ddd24b27.roa
File:                     86436d71-b41d-34e1-8919-0c89ddd24b27.roa (raw, json)
Hash identifier:          n7QmgQJCCvptuq1kUCdUPr0uVxuhoDB+yXwIR24ya2U=
Subject key identifier:   A5:BB:4B:E9:80:19:4B:16:14:E8:9F:E2:D3:E0:27:4B:04:20:C2:6D
Certificate issuer:       /CN=c7fd25a2-3041-431d-a6a9-c409b42835a1
Certificate serial:       010D0C9F4328584CCBA758E8F6E8E4AC5CB3C500
Authority key identifier: 35:71:0A:C3:D7:71:79:A1:73:83:DE:67:0A:48:A8:E0:20:EF:E8:85
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1/86436d71-b41d-34e1-8919-0c89ddd24b27.roa
Signing time:             Sun 08 Feb 2026 14:00:41 +0000
ROA not before:           Sun 08 Feb 2026 14:00:41 +0000
ROA not after:            Sat 09 May 2026 13:00:41 +0000
asID:                     14618
IP address blocks:        2631:2000::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1/c7fd25a2-3041-431d-a6a9-c409b42835a1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1/c7fd25a2-3041-431d-a6a9-c409b42835a1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:cb:a7:58:e8:f6:e8:e4:ac:5c:b3:c5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c7fd25a2-3041-431d-a6a9-c409b42835a1
        Validity
            Not Before: Feb  8 14:00:41 2026 GMT
            Not After : May  9 13:00:41 2026 GMT
        Subject: CN=af5c3dad-91b4-484b-a5f5-9af05e392b7e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:f9:b7:c7:ec:c6:58:fd:c5:e8:ae:b2:0b:cd:
                    08:7d:85:d3:10:77:0a:98:56:22:a5:16:56:ae:ac:
                    7f:5c:01:e7:39:9d:81:12:21:13:e5:77:f6:18:34:
                    d2:22:b8:d7:94:21:df:c0:ef:47:79:37:c1:fb:e6:
                    2f:58:47:4c:75:9b:c0:dd:db:2d:01:fa:18:87:7d:
                    e6:5e:f1:df:35:4c:d0:f6:b0:6c:a7:d6:0b:40:22:
                    08:a8:df:31:a1:24:f6:fe:5c:8e:1f:8e:f4:b1:de:
                    5d:cf:36:5a:0f:1c:60:ab:d0:97:25:9c:f6:b7:bf:
                    1f:c5:79:e5:91:f4:4f:59:b8:2b:19:7a:c7:dd:bd:
                    f6:4f:a1:f3:f7:42:0a:b7:76:ba:68:96:42:58:d1:
                    f1:29:63:9a:b4:46:b5:3b:9b:a5:54:4d:97:9c:af:
                    d5:ff:99:0a:0c:5f:9f:b0:2d:26:85:d8:c1:33:d2:
                    39:e8:c0:e3:c5:50:e9:5b:d6:04:2f:30:5d:db:0f:
                    be:a2:43:8b:e1:30:9e:bf:8b:7b:25:7f:35:45:c3:
                    be:bb:9c:fb:24:8e:a9:21:7d:2e:4d:c7:84:85:04:
                    2a:6e:8d:17:ad:84:1a:b6:f2:d1:41:62:5f:fe:2e:
                    16:30:2a:e3:ca:4c:9e:a4:f4:e1:7f:7b:13:41:4a:
                    3b:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:BB:4B:E9:80:19:4B:16:14:E8:9F:E2:D3:E0:27:4B:04:20:C2:6D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1/86436d71-b41d-34e1-8919-0c89ddd24b27.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1/c7fd25a2-3041-431d-a6a9-c409b42835a1.crl

            X509v3 Authority Key Identifier:
                keyid:35:71:0A:C3:D7:71:79:A1:73:83:DE:67:0A:48:A8:E0:20:EF:E8:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2631:2000::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:57:16:2f:f1:e0:40:27:07:7b:75:67:0a:7b:88:5d:83:3e:
         c8:3c:9d:f2:47:b9:14:99:e7:11:20:1e:9a:51:4a:3e:86:82:
         f7:64:19:8c:60:ba:85:4a:ef:9a:ea:f6:7e:2d:68:e6:a6:a0:
         92:8f:df:1a:aa:12:16:9c:95:fc:8b:db:51:90:91:45:a0:7d:
         20:d3:0e:a4:96:66:fa:87:97:27:b6:bc:ea:7b:3b:b8:e6:94:
         8c:52:eb:bc:88:1f:63:d5:3a:ae:66:54:53:53:aa:ac:12:86:
         56:1e:74:63:2d:a6:fb:d3:58:99:72:2b:de:ed:28:83:1d:bc:
         1f:95:b7:d9:94:b8:37:d7:36:93:7d:20:c2:40:d2:8b:b2:2a:
         6f:75:bf:1a:4e:b9:02:17:57:55:0f:d5:fe:07:de:96:c8:23:
         66:25:23:a3:4a:21:19:d5:95:dc:4d:ff:94:d4:d0:41:84:24:
         55:72:e8:6a:56:09:1e:2f:d4:0d:34:d0:9f:af:cd:28:2d:14:
         7e:df:b6:02:79:81:97:94:39:c2:d9:ba:34:79:db:cc:5b:7b:
         34:f9:cd:85:1b:ce:0e:2d:e8:83:5d:66:d4:08:3a:b9:57:1f:
         6b:8b:81:15:37:57:4c:84:81:60:23:62:b2:a9:86:7a:39:fe:
         47:16:40:ac
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEzLp1jo9ujkrFyzxQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzdmZDI1YTItMzA0MS00MzFkLWE2YTktYzQwOWI0Mjgz
NWExMB4XDTI2MDIwODE0MDA0MVoXDTI2MDUwOTEzMDA0MVowLzEtMCsGA1UEAxMk
YWY1YzNkYWQtOTFiNC00ODRiLWE1ZjUtOWFmMDVlMzkyYjdlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsfm3x+zGWP3F6K6yC80IfYXTEHcKmFYipRZW
rqx/XAHnOZ2BEiET5Xf2GDTSIrjXlCHfwO9HeTfB++YvWEdMdZvA3dstAfoYh33m
XvHfNUzQ9rBsp9YLQCIIqN8xoST2/lyOH470sd5dzzZaDxxgq9CXJZz2t78fxXnl
kfRPWbgrGXrH3b32T6Hz90IKt3a6aJZCWNHxKWOatEa1O5ulVE2XnK/V/5kKDF+f
sC0mhdjBM9I56MDjxVDpW9YELzBd2w++okOL4TCev4t7JX81RcO+u5z7JI6pIX0u
TceEhQQqbo0XrYQatvLRQWJf/i4WMCrjykyepPThf3sTQUo7ywIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFKW7S+mAGUsWFOif4tPgJ0sEIMJtMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9jN2Zk
MjVhMi0zMDQxLTQzMWQtYTZhOS1jNDA5YjQyODM1YTEvODY0MzZkNzEtYjQxZC0z
NGUxLTg5MTktMGM4OWRkZDI0YjI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYzdmZDI1YTItMzA0MS00MzFkLWE2
YTktYzQwOWI0MjgzNWExL2M3ZmQyNWEyLTMwNDEtNDMxZC1hNmE5LWM0MDliNDI4
MzVhMS5jcmwwHwYDVR0jBBgwFoAUNXEKw9dxeaFzg95nCkio4CDv6IUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi9jN2ZkMjVhMi0zMDQxLTQzMWQtYTZhOS1jNDA5
YjQyODM1YTEuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJjEgADBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQBYVxYv8eBAJwd7dWcKe4hdgz7IPJ3yR7kUmecRIB6aUUo+hoL3ZBmM
YLqFSu+a6vZ+LWjmpqCSj98aqhIWnJX8i9tRkJFFoH0g0w6klmb6h5cntrzqezu4
5pSMUuu8iB9j1TquZlRTU6qsEoZWHnRjLab701iZcive7SiDHbwflbfZlLg31zaT
fSDCQNKLsipvdb8aTrkCF1dVD9X+B96WyCNmJSOjSiEZ1ZXcTf+U1NBBhCRVcuhq
VgkeL9QNNNCfr80oLRR+37YCeYGXlDnC2bo0edvMW3s0+c2FG84OLeiDXWbUCDq5
Vx9ri4EVN1dMhIFgI2KyqYZ6Of5HFkCs
-----END CERTIFICATE-----
Generated at Sun Mar 1 23:09:19 2026 by rpki-client