Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/08d14a9b-0dce-4576-8d20-8da4bc15fb7a/2e4c998e-b89e-3db0-aa05-063991b17be7.roa
File:                     2e4c998e-b89e-3db0-aa05-063991b17be7.roa (raw, json)
Hash identifier:          2cxF5WAKpIkyGMqQyQe01gBwjK5KH2pbbNsgovr0EUM=
Subject key identifier:   07:96:05:5D:41:6F:C8:24:E6:98:0E:4D:CF:7B:04:EC:D2:63:4C:72
Certificate issuer:       /CN=08d14a9b-0dce-4576-8d20-8da4bc15fb7a
Certificate serial:       010D0C9F4328584CDA99BA6CE7E116C26ED424A0
Authority key identifier: E7:5F:01:26:E5:6F:7A:55:FE:4C:1A:B7:AB:E7:BB:EF:A3:CE:DE:33
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/08d14a9b-0dce-4576-8d20-8da4bc15fb7a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/08d14a9b-0dce-4576-8d20-8da4bc15fb7a/2e4c998e-b89e-3db0-aa05-063991b17be7.roa
Signing time:             Fri 13 Feb 2026 22:30:36 +0000
ROA not before:           Fri 13 Feb 2026 22:30:36 +0000
ROA not after:            Thu 14 May 2026 21:30:36 +0000
asID:                     3599
IP address blocks:        2607:fee0:4000::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/08d14a9b-0dce-4576-8d20-8da4bc15fb7a/08d14a9b-0dce-4576-8d20-8da4bc15fb7a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/08d14a9b-0dce-4576-8d20-8da4bc15fb7a/08d14a9b-0dce-4576-8d20-8da4bc15fb7a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/08d14a9b-0dce-4576-8d20-8da4bc15fb7a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 02 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:da:99:ba:6c:e7:e1:16:c2:6e:d4:24:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08d14a9b-0dce-4576-8d20-8da4bc15fb7a
        Validity
            Not Before: Feb 13 22:30:36 2026 GMT
            Not After : May 14 21:30:36 2026 GMT
        Subject: CN=3d3dc85c-75cb-400e-9f75-53c6abf8ecbe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:fa:a3:f0:47:75:ca:d4:24:d9:c8:75:f2:22:
                    38:92:bf:0d:da:c8:dc:d3:49:56:22:41:23:66:69:
                    09:33:72:9d:0e:f8:6c:b7:13:bc:f6:86:c2:b3:3b:
                    0b:4a:d0:71:98:fb:13:7d:81:03:63:90:59:a0:b0:
                    6e:ba:f0:28:23:84:6a:00:c3:a7:ef:cf:a6:ee:5b:
                    42:53:ac:68:d4:19:80:f4:e9:36:85:e3:e9:d4:d6:
                    8b:15:24:96:f5:79:3e:f9:3a:5c:18:02:54:ea:3c:
                    3d:64:5e:83:01:bd:08:7e:af:b2:2d:4c:13:5c:85:
                    ef:bc:43:16:7c:a4:02:37:e3:de:87:ba:0c:88:07:
                    ae:db:05:58:c5:97:41:88:d7:5a:26:13:9b:1f:3a:
                    f7:70:72:5d:42:b5:23:e6:09:33:83:8f:95:95:2a:
                    e7:c8:2a:30:2d:9b:6b:f5:97:7f:92:91:ef:1b:f7:
                    65:eb:3b:8a:e6:f5:7c:ce:d4:cb:7a:e5:b4:f0:27:
                    d8:8e:40:3e:6a:08:94:f4:9f:40:2b:c7:98:3b:1b:
                    06:09:c0:26:cc:6e:a2:d1:90:f8:8c:af:0e:84:e3:
                    e0:16:3c:bf:ce:2c:6f:8e:69:13:80:f5:96:73:e8:
                    7a:4f:2d:8f:10:3b:5f:4d:18:8d:b2:fd:bf:5a:67:
                    0c:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:96:05:5D:41:6F:C8:24:E6:98:0E:4D:CF:7B:04:EC:D2:63:4C:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/08d14a9b-0dce-4576-8d20-8da4bc15fb7a/2e4c998e-b89e-3db0-aa05-063991b17be7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/08d14a9b-0dce-4576-8d20-8da4bc15fb7a/08d14a9b-0dce-4576-8d20-8da4bc15fb7a.crl

            X509v3 Authority Key Identifier:
                keyid:E7:5F:01:26:E5:6F:7A:55:FE:4C:1A:B7:AB:E7:BB:EF:A3:CE:DE:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/08d14a9b-0dce-4576-8d20-8da4bc15fb7a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:fee0:4000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:77:f1:db:cc:53:30:7b:7e:56:5a:64:6e:24:fb:76:6f:90:
         99:81:9b:26:b0:17:8a:88:0f:ce:0b:f9:b4:0b:7d:99:ef:fb:
         7c:67:2c:e8:9f:d2:69:3d:79:53:a0:e5:cb:c8:8e:b9:6a:4b:
         2b:c6:07:eb:fd:02:85:da:a1:a3:17:5d:f4:0a:a1:28:22:c1:
         fe:5e:3d:3e:70:88:64:4b:1c:aa:5a:b6:7f:d2:2b:89:b3:f0:
         a9:c3:c0:69:67:0f:34:1c:51:d2:98:f0:b0:4a:c1:7f:d6:4c:
         94:75:f6:ba:95:7b:8f:48:6c:54:b5:41:1f:96:b2:1a:de:79:
         28:43:b6:5b:de:11:a8:b2:fb:de:ef:37:37:c5:be:c8:51:47:
         a0:a5:d9:25:47:7f:7c:5d:d5:e7:b1:80:34:56:0c:ac:8e:c0:
         ed:06:d0:60:2e:2e:dc:cd:96:f1:4f:04:9e:c3:99:13:32:1e:
         85:23:f2:f4:0f:29:25:fe:2e:fe:1c:94:da:51:27:8b:5e:c8:
         f3:c4:36:4a:04:e8:3b:6b:72:41:ff:35:3b:1a:67:02:49:45:
         09:9f:01:9a:87:0d:0c:26:51:2b:b3:d0:a3:9d:c7:50:c7:e3:
         71:9c:83:57:5a:63:73:5e:7f:eb:91:11:02:1a:14:e8:29:7e:
         a4:6c:6e:0e
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEzambps5+EWwm7UJKAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDhkMTRhOWItMGRjZS00NTc2LThkMjAtOGRhNGJjMTVm
YjdhMB4XDTI2MDIxMzIyMzAzNloXDTI2MDUxNDIxMzAzNlowLzEtMCsGA1UEAxMk
M2QzZGM4NWMtNzVjYi00MDBlLTlmNzUtNTNjNmFiZjhlY2JlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr/qj8Ed1ytQk2ch18iI4kr8N2sjc00lWIkEj
ZmkJM3KdDvhstxO89obCszsLStBxmPsTfYEDY5BZoLBuuvAoI4RqAMOn78+m7ltC
U6xo1BmA9Ok2hePp1NaLFSSW9Xk++TpcGAJU6jw9ZF6DAb0Ifq+yLUwTXIXvvEMW
fKQCN+Peh7oMiAeu2wVYxZdBiNdaJhObHzr3cHJdQrUj5gkzg4+VlSrnyCowLZtr
9Zd/kpHvG/dl6zuK5vV8ztTLeuW08CfYjkA+agiU9J9AK8eYOxsGCcAmzG6i0ZD4
jK8OhOPgFjy/zixvjmkTgPWWc+h6Ty2PEDtfTRiNsv2/WmcMrQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFAeWBV1Bb8gk5pgOTc97BOzSY0xyMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS8wOGQx
NGE5Yi0wZGNlLTQ1NzYtOGQyMC04ZGE0YmMxNWZiN2EvMmU0Yzk5OGUtYjg5ZS0z
ZGIwLWFhMDUtMDYzOTkxYjE3YmU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y
Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvMDhkMTRhOWItMGRjZS00NTc2LThk
MjAtOGRhNGJjMTVmYjdhLzA4ZDE0YTliLTBkY2UtNDU3Ni04ZDIwLThkYTRiYzE1
ZmI3YS5jcmwwHwYDVR0jBBgwFoAU518BJuVvelX+TBq3q+e776PO3jMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw
ZS1hZTdkLWU2Y2IxMGFmYTEyNS8wOGQxNGE5Yi0wZGNlLTQ1NzYtOGQyMC04ZGE0
YmMxNWZiN2EuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgf+4EAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAbnfx28xTMHt+VlpkbiT7dm+QmYGbJrAXiogPzgv5tAt9me/7fGcs
6J/SaT15U6Dly8iOuWpLK8YH6/0Chdqhoxdd9AqhKCLB/l49PnCIZEscqlq2f9Ir
ibPwqcPAaWcPNBxR0pjwsErBf9ZMlHX2upV7j0hsVLVBH5ayGt55KEO2W94RqLL7
3u83N8W+yFFHoKXZJUd/fF3V57GANFYMrI7A7QbQYC4u3M2W8U8EnsOZEzIehSPy
9A8pJf4u/hyU2lEni17I88Q2SgToO2tyQf81OxpnAklFCZ8BmocNDCZRK7PQo53H
UMfjcZyDV1pjc15/65ERAhoU6Cl+pGxuDg==
-----END CERTIFICATE-----
Generated at Sun Mar 1 20:06:18 2026 by rpki-client