Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/08d14a9b-0dce-4576-8d20-8da4bc15fb7a/e61638ac-0458-3073-b880-f5d7618f67a6.roa
File:                     e61638ac-0458-3073-b880-f5d7618f67a6.roa (raw, json)
Hash identifier:          NMHUZAJs44XaI8D8Gk8154pIOur91YwQM3aukyTmKZc=
Subject key identifier:   1E:27:1F:B7:27:D9:EE:14:B5:62:9C:2D:65:DD:DC:0B:FC:3F:BE:24
Certificate issuer:       /CN=08d14a9b-0dce-4576-8d20-8da4bc15fb7a
Certificate serial:       010D0C9F4328584CDA944163758ADCA21FF47DC0
Authority key identifier: E7:5F:01:26:E5:6F:7A:55:FE:4C:1A:B7:AB:E7:BB:EF:A3:CE:DE:33
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/08d14a9b-0dce-4576-8d20-8da4bc15fb7a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/08d14a9b-0dce-4576-8d20-8da4bc15fb7a/e61638ac-0458-3073-b880-f5d7618f67a6.roa
Signing time:             Fri 13 Feb 2026 21:46:46 +0000
ROA not before:           Fri 13 Feb 2026 21:46:46 +0000
ROA not after:            Thu 14 May 2026 20:46:46 +0000
asID:                     3599
IP address blocks:        2607:fee0:2000::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/08d14a9b-0dce-4576-8d20-8da4bc15fb7a/08d14a9b-0dce-4576-8d20-8da4bc15fb7a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/08d14a9b-0dce-4576-8d20-8da4bc15fb7a/08d14a9b-0dce-4576-8d20-8da4bc15fb7a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/08d14a9b-0dce-4576-8d20-8da4bc15fb7a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:da:94:41:63:75:8a:dc:a2:1f:f4:7d:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08d14a9b-0dce-4576-8d20-8da4bc15fb7a
        Validity
            Not Before: Feb 13 21:46:46 2026 GMT
            Not After : May 14 20:46:46 2026 GMT
        Subject: CN=c57497a0-48f4-4bfc-921a-c0dc1b2937ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:95:12:08:68:6c:7b:a5:0f:7e:a5:3b:be:41:
                    7d:db:ef:df:79:5d:fe:84:04:6b:c3:da:ba:04:4a:
                    0e:70:b4:7e:ce:1c:90:e6:48:35:46:be:f9:33:09:
                    d5:d7:16:ef:f9:6c:98:b0:f9:4b:ed:d0:3e:88:bf:
                    e3:4f:89:97:6a:ca:c5:e5:73:2f:9a:9b:ea:a7:cb:
                    8b:8a:19:e6:dd:eb:31:78:40:c3:1c:8e:51:25:4f:
                    6c:ff:ff:3f:43:d3:fd:78:a5:76:12:1c:c9:cd:be:
                    aa:ed:05:95:9c:6a:be:e7:f2:e6:fd:30:c4:55:7d:
                    4a:26:a8:17:36:63:a7:c5:d3:81:41:9a:da:2f:96:
                    59:c4:06:08:24:22:53:22:a4:b7:0b:e5:42:b2:d7:
                    0c:41:a4:ff:70:7d:06:3c:8c:41:a4:aa:63:7a:a3:
                    7a:92:8d:6a:47:d0:0d:41:d2:1e:9e:ac:17:42:d2:
                    c0:c3:90:4e:81:b6:18:4a:cb:e1:7b:31:81:0a:b2:
                    fb:68:4e:07:7c:f4:29:91:f9:72:73:88:b2:0d:d5:
                    25:ec:a9:57:86:0c:ca:b3:f3:ef:61:b4:94:21:31:
                    da:3d:35:77:92:d2:17:e3:9c:41:16:82:3b:45:e3:
                    0f:4a:ec:60:7b:c2:04:4a:f3:59:0e:fe:1d:d4:73:
                    68:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:27:1F:B7:27:D9:EE:14:B5:62:9C:2D:65:DD:DC:0B:FC:3F:BE:24
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/08d14a9b-0dce-4576-8d20-8da4bc15fb7a/e61638ac-0458-3073-b880-f5d7618f67a6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/08d14a9b-0dce-4576-8d20-8da4bc15fb7a/08d14a9b-0dce-4576-8d20-8da4bc15fb7a.crl

            X509v3 Authority Key Identifier:
                keyid:E7:5F:01:26:E5:6F:7A:55:FE:4C:1A:B7:AB:E7:BB:EF:A3:CE:DE:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/08d14a9b-0dce-4576-8d20-8da4bc15fb7a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:fee0:2000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ae:f8:e6:b9:95:83:01:b0:47:1f:dc:7b:7e:85:58:f3:2c:85:
         35:12:d1:82:df:f8:c7:53:bf:57:bc:2f:52:cf:35:81:58:a6:
         4d:90:7f:6c:46:b4:14:15:2a:5d:11:56:80:f2:bd:62:80:56:
         95:2b:c3:7b:86:fb:9d:7f:53:58:6b:c4:3c:fb:b1:6d:63:72:
         34:cb:00:20:df:94:9d:0f:6e:04:7c:2f:4b:6b:48:24:ec:28:
         27:a3:cc:48:20:fb:f1:fc:fa:54:08:47:01:41:31:af:e7:da:
         09:a2:43:a6:8e:85:60:e9:cc:21:0f:cd:01:77:e8:cd:31:a2:
         78:5a:47:19:d3:f8:4f:47:4e:22:37:34:eb:1b:1d:7a:d9:4b:
         99:d9:37:60:6c:7d:e1:2e:e5:88:4b:4a:3a:12:e4:37:c0:99:
         41:4e:af:27:04:d1:81:8c:61:51:3c:ab:5d:35:26:1d:0e:ae:
         fa:c9:cb:02:06:de:fa:d4:96:a7:8b:42:6d:bf:e3:8c:73:28:
         d9:3b:10:48:7e:39:57:63:4e:12:1a:cc:d0:df:7b:bd:9d:5a:
         a9:02:b7:9d:19:c7:e2:f6:24:ba:46:48:33:b9:e1:d1:43:cf:
         5b:f8:6e:b6:e8:83:71:48:38:1d:38:3a:61:64:07:1d:53:20:
         93:86:56:66
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEzalEFjdYrcoh/0fcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDhkMTRhOWItMGRjZS00NTc2LThkMjAtOGRhNGJjMTVm
YjdhMB4XDTI2MDIxMzIxNDY0NloXDTI2MDUxNDIwNDY0NlowLzEtMCsGA1UEAxMk
YzU3NDk3YTAtNDhmNC00YmZjLTkyMWEtYzBkYzFiMjkzN2ZmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjpUSCGhse6UPfqU7vkF92+/feV3+hARrw9q6
BEoOcLR+zhyQ5kg1Rr75MwnV1xbv+WyYsPlL7dA+iL/jT4mXasrF5XMvmpvqp8uL
ihnm3esxeEDDHI5RJU9s//8/Q9P9eKV2EhzJzb6q7QWVnGq+5/Lm/TDEVX1KJqgX
NmOnxdOBQZraL5ZZxAYIJCJTIqS3C+VCstcMQaT/cH0GPIxBpKpjeqN6ko1qR9AN
QdIenqwXQtLAw5BOgbYYSsvhezGBCrL7aE4HfPQpkflyc4iyDdUl7KlXhgzKs/Pv
YbSUITHaPTV3ktIX45xBFoI7ReMPSuxge8IESvNZDv4d1HNo9wIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFB4nH7cn2e4UtWKcLWXd3Av8P74kMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS8wOGQx
NGE5Yi0wZGNlLTQ1NzYtOGQyMC04ZGE0YmMxNWZiN2EvZTYxNjM4YWMtMDQ1OC0z
MDczLWI4ODAtZjVkNzYxOGY2N2E2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y
Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvMDhkMTRhOWItMGRjZS00NTc2LThk
MjAtOGRhNGJjMTVmYjdhLzA4ZDE0YTliLTBkY2UtNDU3Ni04ZDIwLThkYTRiYzE1
ZmI3YS5jcmwwHwYDVR0jBBgwFoAU518BJuVvelX+TBq3q+e776PO3jMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw
ZS1hZTdkLWU2Y2IxMGFmYTEyNS8wOGQxNGE5Yi0wZGNlLTQ1NzYtOGQyMC04ZGE0
YmMxNWZiN2EuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgf+4CAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEArvjmuZWDAbBHH9x7foVY8yyFNRLRgt/4x1O/V7wvUs81gVimTZB/
bEa0FBUqXRFWgPK9YoBWlSvDe4b7nX9TWGvEPPuxbWNyNMsAIN+UnQ9uBHwvS2tI
JOwoJ6PMSCD78fz6VAhHAUExr+faCaJDpo6FYOnMIQ/NAXfozTGieFpHGdP4T0dO
Ijc06xsdetlLmdk3YGx94S7liEtKOhLkN8CZQU6vJwTRgYxhUTyrXTUmHQ6u+snL
Agbe+tSWp4tCbb/jjHMo2TsQSH45V2NOEhrM0N97vZ1aqQK3nRnH4vYkukZIM7nh
0UPPW/hutuiDcUg4HTg6YWQHHVMgk4ZWZg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 00:59:25 2026 by rpki-client