Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/418536e3-a238-4d5c-85de-f77873e419af/b9e4c43a-48c4-3520-a6fc-b44f6a293beb.roa
File:                     b9e4c43a-48c4-3520-a6fc-b44f6a293beb.roa (raw, json)
Hash identifier:          JqWD8YB6/bvNUzWOojczWnbRmKPQCpQ54yZvcZzaBuE=
Subject key identifier:   98:FC:77:90:68:46:CB:C4:D2:B1:0C:AA:5D:EE:72:A5:2F:ED:8A:A5
Certificate issuer:       /CN=418536e3-a238-4d5c-85de-f77873e419af
Certificate serial:       010D0C9F4328584CFBBC32A8C8FA295D0A6B0B80
Authority key identifier: 86:30:08:47:96:08:91:BF:19:5C:82:DE:7F:52:59:C1:30:76:FE:2E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/418536e3-a238-4d5c-85de-f77873e419af.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/418536e3-a238-4d5c-85de-f77873e419af/b9e4c43a-48c4-3520-a6fc-b44f6a293beb.roa
Signing time:             Wed 25 Feb 2026 19:21:44 +0000
ROA not before:           Wed 25 Feb 2026 19:21:44 +0000
ROA not after:            Tue 26 May 2026 18:21:44 +0000
asID:                     21777
IP address blocks:        2602:ffc6::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/418536e3-a238-4d5c-85de-f77873e419af/418536e3-a238-4d5c-85de-f77873e419af.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/418536e3-a238-4d5c-85de-f77873e419af/418536e3-a238-4d5c-85de-f77873e419af.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/418536e3-a238-4d5c-85de-f77873e419af.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:fb:bc:32:a8:c8:fa:29:5d:0a:6b:0b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=418536e3-a238-4d5c-85de-f77873e419af
        Validity
            Not Before: Feb 25 19:21:44 2026 GMT
            Not After : May 26 18:21:44 2026 GMT
        Subject: CN=0e72f911-30d5-40c9-8e7a-ca1a66af5a64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:ce:37:9d:c8:2e:26:53:21:a6:1e:0c:e2:d7:
                    fb:61:aa:1c:15:5a:4a:4f:5f:03:7c:76:35:6c:ac:
                    86:f7:6f:76:71:4e:6c:68:d8:e3:1d:57:82:dc:e2:
                    b7:a3:46:b2:2a:25:11:af:1e:14:ff:fa:25:46:df:
                    c1:18:82:b0:3f:bb:05:b0:6c:b6:a0:db:34:08:cd:
                    1a:f4:c8:04:26:78:b9:4e:15:b1:25:20:6f:2c:dd:
                    94:f6:63:c7:48:3d:e0:d6:6e:16:27:fa:94:76:82:
                    81:5f:21:16:5a:66:ca:a4:0a:f7:2e:ca:6c:9c:fc:
                    dd:c0:47:94:a7:2a:24:09:19:06:1e:db:1d:64:23:
                    f5:82:24:a8:12:1d:51:c1:cb:09:e7:78:b8:7d:9a:
                    fd:09:93:03:40:91:d7:ba:a3:81:a7:76:85:da:76:
                    64:09:24:4c:05:d6:ee:86:58:60:60:43:f0:68:bb:
                    fa:e5:4b:ca:c0:33:5c:0b:30:e8:28:f7:e6:19:d6:
                    db:84:bd:1b:ce:df:9b:a0:8c:87:a5:2b:65:17:9e:
                    fc:85:d8:1b:c2:c6:02:f9:7b:e7:52:5d:31:4f:83:
                    2f:bb:c1:cd:51:28:40:ce:4d:17:0b:3f:30:cf:a8:
                    92:c6:23:4a:f6:2a:24:0a:5b:a0:53:35:70:38:66:
                    52:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:FC:77:90:68:46:CB:C4:D2:B1:0C:AA:5D:EE:72:A5:2F:ED:8A:A5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/418536e3-a238-4d5c-85de-f77873e419af/b9e4c43a-48c4-3520-a6fc-b44f6a293beb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/418536e3-a238-4d5c-85de-f77873e419af/418536e3-a238-4d5c-85de-f77873e419af.crl

            X509v3 Authority Key Identifier:
                keyid:86:30:08:47:96:08:91:BF:19:5C:82:DE:7F:52:59:C1:30:76:FE:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/418536e3-a238-4d5c-85de-f77873e419af.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:ffc6::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:a1:29:6a:53:23:fd:d6:3e:a2:13:5d:e1:33:c5:a7:14:74:
         f5:10:90:d4:b9:30:0d:a6:34:97:a8:e6:4b:f9:8c:99:38:05:
         47:c4:34:2c:f9:5d:bf:da:19:15:16:a8:ae:0a:0b:ea:7a:db:
         34:3a:3a:52:55:67:ba:6b:83:98:ca:2c:e4:6e:1b:ee:47:19:
         db:0d:d9:42:7c:33:72:74:58:29:89:94:f4:bb:e9:e2:c4:cc:
         1c:88:55:95:c6:f0:0c:f7:1b:f1:65:27:97:d5:18:48:24:77:
         d3:e1:a6:6a:df:38:e2:aa:da:d5:3a:1d:c3:da:5a:a3:fe:57:
         ce:f8:39:f6:48:13:fd:3b:c5:56:c7:3f:3d:4d:12:c4:7e:d1:
         1d:aa:37:90:47:47:28:0f:3b:40:67:f2:5a:f5:e8:b9:20:4a:
         ab:5c:8f:eb:e6:ce:32:47:cb:eb:ae:73:9d:9d:cc:03:06:c1:
         4d:87:3a:9b:3c:a5:fc:7e:77:f9:c2:8f:c0:12:20:c6:e7:9e:
         88:95:ed:9e:58:03:9c:51:92:ca:0d:72:e5:a9:34:f0:63:1a:
         f6:b0:02:87:c2:93:d2:97:87:f9:8a:aa:97:0d:8c:51:b8:e3:
         5f:2f:c1:06:0c:6d:65:2b:65:24:a1:bb:8c:15:dd:f5:8d:ee:
         57:2a:da:18
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEz7vDKoyPopXQprC4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDE4NTM2ZTMtYTIzOC00ZDVjLTg1ZGUtZjc3ODczZTQx
OWFmMB4XDTI2MDIyNTE5MjE0NFoXDTI2MDUyNjE4MjE0NFowLzEtMCsGA1UEAxMk
MGU3MmY5MTEtMzBkNS00MGM5LThlN2EtY2ExYTY2YWY1YTY0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAts43ncguJlMhph4M4tf7YaocFVpKT18DfHY1
bKyG9292cU5saNjjHVeC3OK3o0ayKiURrx4U//olRt/BGIKwP7sFsGy2oNs0CM0a
9MgEJni5ThWxJSBvLN2U9mPHSD3g1m4WJ/qUdoKBXyEWWmbKpAr3LspsnPzdwEeU
pyokCRkGHtsdZCP1giSoEh1RwcsJ53i4fZr9CZMDQJHXuqOBp3aF2nZkCSRMBdbu
hlhgYEPwaLv65UvKwDNcCzDoKPfmGdbbhL0bzt+boIyHpStlF578hdgbwsYC+Xvn
Ul0xT4Mvu8HNUShAzk0XCz8wz6iSxiNK9iokClugUzVwOGZSawIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFJj8d5BoRsvE0rEMql3ucqUv7YqlMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS80MTg1
MzZlMy1hMjM4LTRkNWMtODVkZS1mNzc4NzNlNDE5YWYvYjllNGM0M2EtNDhjNC0z
NTIwLWE2ZmMtYjQ0ZjZhMjkzYmViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y
Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvNDE4NTM2ZTMtYTIzOC00ZDVjLTg1
ZGUtZjc3ODczZTQxOWFmLzQxODUzNmUzLWEyMzgtNGQ1Yy04NWRlLWY3Nzg3M2U0
MTlhZi5jcmwwHwYDVR0jBBgwFoAUhjAIR5YIkb8ZXILef1JZwTB2/i4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw
ZS1hZTdkLWU2Y2IxMGFmYTEyNS80MTg1MzZlMy1hMjM4LTRkNWMtODVkZS1mNzc4
NzNlNDE5YWYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgL/xgAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEATaEpalMj/dY+ohNd4TPFpxR09RCQ1LkwDaY0l6jmS/mMmTgFR8Q0
LPldv9oZFRaorgoL6nrbNDo6UlVnumuDmMos5G4b7kcZ2w3ZQnwzcnRYKYmU9Lvp
4sTMHIhVlcbwDPcb8WUnl9UYSCR30+Gmat844qra1Todw9pao/5Xzvg59kgT/TvF
Vsc/PU0SxH7RHao3kEdHKA87QGfyWvXouSBKq1yP6+bOMkfL665znZ3MAwbBTYc6
mzyl/H53+cKPwBIgxueeiJXtnlgDnFGSyg1y5ak08GMa9rACh8KT0peH+Yqqlw2M
UbjjXy/BBgxtZStlJKG7jBXd9Y3uVyraGA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 20:33:09 2026 by rpki-client