Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/915d2b16-93b7-330f-80a8-1331353b97c1.roa
File:                     915d2b16-93b7-330f-80a8-1331353b97c1.roa (raw, json)
Hash identifier:          /daYO3+eUSBakLKSsJlOiJ5tQPHvYLEBScZMrYmxzxM=
Subject key identifier:   CF:AF:9D:7B:32:2F:19:01:89:12:A3:67:93:26:C3:09:7D:7A:93:19
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584D00B2812EE7C39A367CF94400
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/915d2b16-93b7-330f-80a8-1331353b97c1.roa
Signing time:             Fri 27 Feb 2026 14:00:40 +0000
ROA not before:           Fri 27 Feb 2026 14:00:40 +0000
ROA not after:            Thu 28 May 2026 13:00:40 +0000
asID:                     20940
IP address blocks:        2600:1407:7400::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:00:b2:81:2e:e7:c3:9a:36:7c:f9:44:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Feb 27 14:00:40 2026 GMT
            Not After : May 28 13:00:40 2026 GMT
        Subject: CN=9a23f37d-e876-4a1c-adde-c35cbd8d5fbe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:23:3d:e2:41:49:25:9d:32:03:b1:c1:58:4e:
                    43:40:7f:31:c3:00:01:b4:7c:ec:25:7e:fd:8e:80:
                    cd:66:64:67:55:42:81:c6:00:84:35:5e:ed:6f:22:
                    aa:4b:c7:e2:a3:ef:1f:d9:b2:22:fa:e6:85:7f:85:
                    45:5e:b7:76:7b:fa:8d:aa:e1:d0:4d:17:67:22:98:
                    71:a9:b2:8f:00:9f:40:6c:a0:d5:4b:c4:35:e6:7b:
                    da:37:3d:f2:aa:9e:dc:71:ea:16:5d:4b:62:9a:72:
                    2e:22:db:05:9e:fe:77:9a:b0:bd:ac:41:fd:9b:3b:
                    05:47:2e:f7:2c:1a:6a:5a:33:ce:b3:c7:12:e6:04:
                    54:92:96:f0:95:72:d6:a3:f1:19:ce:88:2d:cd:0c:
                    12:ec:3c:ad:97:55:11:68:65:02:17:82:c1:09:20:
                    09:22:18:6c:fd:bc:78:d2:64:b2:87:4e:7d:11:ac:
                    1b:d5:f0:d2:ad:c8:09:1c:d3:2f:55:a7:80:3f:00:
                    28:72:bd:4e:2b:96:e5:f9:b4:40:36:2a:13:32:5f:
                    6a:04:ff:df:25:f0:b3:52:cb:d4:af:6a:12:6a:a1:
                    73:55:4f:d7:fe:fa:40:59:19:6c:3a:96:3c:ef:e0:
                    8d:90:48:c0:7d:4e:74:69:23:d4:ec:65:4c:98:72:
                    b2:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:AF:9D:7B:32:2F:19:01:89:12:A3:67:93:26:C3:09:7D:7A:93:19
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/915d2b16-93b7-330f-80a8-1331353b97c1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1407:7400::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:ee:1c:f9:81:a6:32:a9:16:bf:da:10:bd:44:b2:71:5a:bd:
         95:13:79:51:8e:d4:7b:97:fd:00:8c:44:a2:02:6a:46:b4:03:
         2c:45:8c:81:bb:91:86:aa:86:43:f6:63:ae:f7:2b:ef:18:dd:
         b1:c7:2b:91:9c:47:6b:39:25:f0:f6:45:3f:10:47:f5:40:b5:
         21:10:f9:ab:e8:67:b7:0e:51:15:0e:62:7a:88:17:14:58:6c:
         cb:2a:7c:91:b4:03:c9:f8:02:43:ac:5a:81:81:ad:70:fa:32:
         78:9f:dd:e4:c1:e2:a7:5a:67:8e:9c:2d:ed:13:f9:fa:53:76:
         a0:6d:59:db:8b:4a:ef:9f:fc:99:27:d5:41:1f:05:c6:3c:1a:
         b1:3d:ff:46:86:04:95:bf:56:b8:92:be:21:53:57:d7:38:2e:
         db:d1:bf:cf:04:82:ad:3a:cf:92:46:af:19:b0:ae:fb:a8:5b:
         b0:e0:2a:94:e0:36:02:d3:05:25:88:56:84:b3:12:f8:97:09:
         a0:64:b9:1e:24:24:b0:5f:fe:bc:75:2e:4a:cf:d8:9d:11:fc:
         e8:2c:a3:77:ed:d2:e1:fb:26:32:4c:a9:2b:f2:b0:09:15:60:
         c5:ec:e5:91:ff:97:eb:4d:6f:ba:13:6d:7b:63:42:d0:36:e4:
         f9:83:3f:2a
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0AsoEu58OaNnz5RAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI2MDIyNzE0MDA0MFoXDTI2MDUyODEzMDA0MFowLzEtMCsGA1UEAxMk
OWEyM2YzN2QtZTg3Ni00YTFjLWFkZGUtYzM1Y2JkOGQ1ZmJlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjyM94kFJJZ0yA7HBWE5DQH8xwwABtHzsJX79
joDNZmRnVUKBxgCENV7tbyKqS8fio+8f2bIi+uaFf4VFXrd2e/qNquHQTRdnIphx
qbKPAJ9AbKDVS8Q15nvaNz3yqp7cceoWXUtimnIuItsFnv53mrC9rEH9mzsFRy73
LBpqWjPOs8cS5gRUkpbwlXLWo/EZzogtzQwS7Dytl1URaGUCF4LBCSAJIhhs/bx4
0mSyh059Eawb1fDSrcgJHNMvVaeAPwAocr1OK5bl+bRANioTMl9qBP/fJfCzUsvU
r2oSaqFzVU/X/vpAWRlsOpY87+CNkEjAfU50aSPU7GVMmHKy/wIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFM+vnXsyLxkBiRKjZ5Mmwwl9epMZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOTE1ZDJiMTYtOTNiNy0z
MzBmLTgwYTgtMTMzMTM1M2I5N2MxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAUB3QA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBADfuHPmBpjKpFr/aEL1EsnFavZUTeVGO1HuX/QCMRKICaka0AyxF
jIG7kYaqhkP2Y673K+8Y3bHHK5GcR2s5JfD2RT8QR/VAtSEQ+avoZ7cOURUOYnqI
FxRYbMsqfJG0A8n4AkOsWoGBrXD6Mnif3eTB4qdaZ46cLe0T+fpTdqBtWduLSu+f
/Jkn1UEfBcY8GrE9/0aGBJW/VriSviFTV9c4LtvRv88Egq06z5JGrxmwrvuoW7Dg
KpTgNgLTBSWIVoSzEviXCaBkuR4kJLBf/rx1LkrP2J0R/Ogso3ft0uH7JjJMqSvy
sAkVYMXs5ZH/l+tNb7oTbXtjQtA25PmDPyo=
-----END CERTIFICATE-----
Generated at Mon Mar 2 10:44:18 2026 by rpki-client