Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2252436a-e1f2-3265-b0bc-149a54f073a9.roa
File:                     2252436a-e1f2-3265-b0bc-149a54f073a9.roa (raw, json)
Hash identifier:          Eh0luytE8NVyfPVjaGgG0UUkIaZtvoqskACu9wD6ZI0=
Subject key identifier:   89:AD:FC:21:6E:07:BD:D8:46:E3:E5:7C:9B:C2:3F:03:C8:81:99:5B
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584CEA5CF5A16C8AD35E2B541080
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2252436a-e1f2-3265-b0bc-149a54f073a9.roa
Signing time:             Thu 19 Feb 2026 14:00:40 +0000
ROA not before:           Thu 19 Feb 2026 14:00:40 +0000
ROA not after:            Wed 20 May 2026 13:00:40 +0000
asID:                     20940
IP address blocks:        2600:1400:d::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ea:5c:f5:a1:6c:8a:d3:5e:2b:54:10:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Feb 19 14:00:40 2026 GMT
            Not After : May 20 13:00:40 2026 GMT
        Subject: CN=8cc49522-f0bb-4efa-a87f-0635638881c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:25:a4:66:f1:87:01:9c:b3:2e:a6:66:b0:54:
                    17:69:81:9b:ba:85:da:98:84:c1:18:6d:07:e1:f8:
                    d1:19:ab:a1:0f:eb:04:00:af:80:b5:35:12:34:ee:
                    9b:e8:35:a1:ee:06:40:0d:50:60:63:2d:24:02:24:
                    57:ea:6f:0d:ff:ab:1e:e1:f4:b5:79:98:fc:a6:30:
                    ce:88:8b:9f:ba:ce:88:e1:a7:15:e5:36:a1:c6:b7:
                    05:eb:e9:1e:f8:eb:eb:82:50:e3:48:f8:99:77:15:
                    5e:b6:b2:21:44:13:b0:0f:d7:46:f9:7b:1c:7f:59:
                    e6:ef:95:c5:ec:f6:46:ab:42:61:b1:07:ac:9f:b4:
                    ad:f2:2b:d1:3c:bd:6e:b6:ce:78:fb:ca:e7:21:f1:
                    4a:cc:5d:bb:e4:b8:82:4c:92:17:12:75:44:62:99:
                    b3:ce:22:52:d9:01:33:4a:aa:91:a4:41:7a:5f:fa:
                    4f:08:71:5e:6f:dd:bb:72:bf:7b:f2:f3:4b:ba:29:
                    0b:8e:c2:3d:fd:dc:e2:ee:13:7c:51:9d:47:6f:80:
                    a4:73:2f:d0:a6:d7:51:1a:18:2e:23:a4:55:06:78:
                    d8:37:4b:80:5a:a8:c1:27:18:a8:0d:5a:90:28:6e:
                    95:f0:c4:46:4b:63:76:8f:b3:f6:b9:61:86:b1:a1:
                    9b:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:AD:FC:21:6E:07:BD:D8:46:E3:E5:7C:9B:C2:3F:03:C8:81:99:5B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2252436a-e1f2-3265-b0bc-149a54f073a9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1400:d::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:2d:b4:de:06:9a:50:ac:8e:74:f6:21:5b:e0:1b:54:42:74:
         44:a0:f6:18:ed:3f:56:a1:08:b7:f3:53:7a:7e:4e:4e:85:7d:
         d0:ea:fa:27:f3:e8:4d:84:66:e8:b0:40:dc:d7:92:6e:fb:1f:
         72:b5:96:f0:e8:69:06:ae:e4:a1:99:4b:42:6a:b2:b2:3e:18:
         0a:2b:5e:91:36:3d:ab:48:14:f3:82:81:7c:cc:ca:4b:46:68:
         46:3f:9f:2c:b4:b9:c5:80:f4:97:05:dc:29:b6:30:57:63:b7:
         ef:ac:7a:55:8f:32:80:ab:0b:c5:44:5f:e7:08:4e:7f:04:01:
         e9:5e:1f:45:24:9f:95:38:9d:cf:39:a9:14:fc:60:6b:41:50:
         15:ae:6d:43:ca:19:47:ab:ba:20:57:40:d2:20:26:f4:96:1d:
         f7:39:72:d8:14:be:f4:f1:53:d2:7f:d8:59:4f:54:be:c1:60:
         ac:3b:7a:3d:8b:cf:20:ae:e3:3b:35:da:61:cb:d3:ce:0a:e1:
         4c:c5:37:02:1b:c3:84:8a:50:fe:bd:8f:f2:d3:55:d7:65:f9:
         84:8f:e4:37:ec:ee:7b:6b:f7:05:c5:00:ca:ff:3c:6d:54:f8:
         4b:07:bf:6d:87:50:f5:0a:c3:0d:61:81:7b:43:c3:18:17:d3:
         ba:40:da:76
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEzqXPWhbIrTXitUEIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI2MDIxOTE0MDA0MFoXDTI2MDUyMDEzMDA0MFowLzEtMCsGA1UEAxMk
OGNjNDk1MjItZjBiYi00ZWZhLWE4N2YtMDYzNTYzODg4MWM1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxCWkZvGHAZyzLqZmsFQXaYGbuoXamITBGG0H
4fjRGauhD+sEAK+AtTUSNO6b6DWh7gZADVBgYy0kAiRX6m8N/6se4fS1eZj8pjDO
iIufus6I4acV5TahxrcF6+ke+OvrglDjSPiZdxVetrIhRBOwD9dG+Xscf1nm75XF
7PZGq0JhsQesn7St8ivRPL1uts54+8rnIfFKzF275LiCTJIXEnVEYpmzziJS2QEz
SqqRpEF6X/pPCHFeb927cr978vNLuikLjsI9/dzi7hN8UZ1Hb4Ckcy/QptdRGhgu
I6RVBnjYN0uAWqjBJxioDVqQKG6V8MRGS2N2j7P2uWGGsaGbiwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFImt/CFuB73YRuPlfJvCPwPIgZlbMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMjI1MjQzNmEtZTFmMi0z
MjY1LWIwYmMtMTQ5YTU0ZjA3M2E5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAUAAAN
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAIQttN4GmlCsjnT2IVvgG1RCdESg9hjtP1ahCLfzU3p+Tk6FfdDq
+ifz6E2EZuiwQNzXkm77H3K1lvDoaQau5KGZS0JqsrI+GAorXpE2PatIFPOCgXzM
yktGaEY/nyy0ucWA9JcF3Cm2MFdjt++selWPMoCrC8VEX+cITn8EAeleH0Ukn5U4
nc85qRT8YGtBUBWubUPKGUeruiBXQNIgJvSWHfc5ctgUvvTxU9J/2FlPVL7BYKw7
ej2LzyCu4zs12mHL084K4UzFNwIbw4SKUP69j/LTVddl+YSP5Dfs7ntr9wXFAMr/
PG1U+EsHv22HUPUKww1hgXtDwxgX07pA2nY=
-----END CERTIFICATE-----
Generated at Sun Mar 1 23:09:29 2026 by rpki-client