Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a7583c67-a540-3753-8904-4ed94057611f.roa
File:                     a7583c67-a540-3753-8904-4ed94057611f.roa (raw, json)
Hash identifier:          IwhIQwM530fMjrnSu/fkn/nnDglgyW5eVO4Q+KRbs+w=
Subject key identifier:   CD:DF:24:AF:4A:06:BE:70:8A:26:EC:AF:D1:13:E9:12:68:F1:97:FA
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584D00B28D73DD4A32A77F210900
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a7583c67-a540-3753-8904-4ed94057611f.roa
Signing time:             Fri 27 Feb 2026 14:00:40 +0000
ROA not before:           Fri 27 Feb 2026 14:00:40 +0000
ROA not after:            Thu 28 May 2026 13:00:40 +0000
asID:                     20940
IP address blocks:        2600:1404:1400::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:00:b2:8d:73:dd:4a:32:a7:7f:21:09:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Feb 27 14:00:40 2026 GMT
            Not After : May 28 13:00:40 2026 GMT
        Subject: CN=4e330346-a58c-43f2-90cc-d61c08e8938a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:86:80:f3:ce:a2:ba:43:fe:7b:b2:ff:df:0b:
                    78:89:ca:b8:5d:18:c7:f4:70:2a:98:08:58:f4:4a:
                    dc:31:76:05:9a:59:02:ce:7e:57:ac:20:c3:e6:2b:
                    0f:dc:25:dc:8a:a2:42:52:ca:7a:6b:bd:e1:f4:4b:
                    21:8f:1e:0a:16:ec:55:a6:72:26:23:4e:07:77:3a:
                    54:34:90:d8:33:d1:5e:a9:63:84:58:db:e3:80:de:
                    6e:a0:06:26:8d:e0:a4:c3:e9:34:00:39:dd:fc:6c:
                    3a:2a:f9:5a:bf:e7:ec:2a:b7:e2:1b:50:d1:11:bb:
                    69:ad:a1:4a:51:cd:98:cf:21:56:75:73:70:23:3a:
                    d5:33:41:6c:1f:0a:e3:8d:b5:60:97:f9:52:b4:3f:
                    c1:39:0f:2f:b5:16:df:11:46:57:9e:52:53:d0:57:
                    5c:92:ad:e9:57:83:60:da:0d:38:e1:99:9e:d0:c3:
                    c0:f2:59:c5:bd:0d:3d:d2:13:09:c2:8f:52:de:ab:
                    6e:6b:7a:f6:4e:1f:f6:cf:c4:cd:35:21:6b:65:3c:
                    63:d8:81:ab:72:7a:f2:a8:1f:28:02:ad:c7:cc:f6:
                    3b:3e:a0:c2:10:0f:44:42:a6:2d:37:6e:1a:8f:f3:
                    c7:90:51:75:0f:3c:24:07:05:ee:43:2a:2c:d5:47:
                    ed:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:DF:24:AF:4A:06:BE:70:8A:26:EC:AF:D1:13:E9:12:68:F1:97:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a7583c67-a540-3753-8904-4ed94057611f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1404:1400::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:f5:2a:48:ef:59:78:71:c8:50:d8:57:17:e6:9d:e6:79:ff:
         a9:3d:9d:de:c3:f6:93:ed:17:0d:e3:c0:37:9c:44:4d:68:1e:
         f2:98:f4:f8:62:2d:8c:7e:87:f9:72:8b:bb:0c:05:0e:23:66:
         6a:06:87:6f:5d:d8:26:21:5b:df:5c:6f:0d:b0:c9:20:48:f6:
         31:3c:e8:80:61:ce:94:3d:81:91:3f:f3:df:19:77:df:5e:1b:
         e8:9f:54:a6:8d:a6:98:89:02:45:2e:50:c7:f7:6f:79:85:5c:
         b7:cc:c8:2b:54:d7:b0:35:a6:44:a0:f0:e2:79:39:14:c6:14:
         d0:38:8e:18:7a:e7:4a:03:3e:64:1c:4c:1f:68:22:24:15:74:
         49:e4:98:bd:b8:59:38:aa:14:ad:a4:a3:88:0b:58:f1:c8:fa:
         81:b5:58:72:bf:66:30:0f:9c:88:e6:9a:13:c4:4a:2f:44:17:
         6e:bc:3a:ca:57:85:49:e1:0d:84:67:bc:ec:e3:df:ee:8f:92:
         e0:6a:09:09:ba:5d:76:2d:17:4c:41:ad:2c:63:3f:af:e8:b8:
         d3:cf:43:2e:e7:22:e6:b8:13:5a:34:ae:49:c8:bb:d8:d0:50:
         b6:86:bc:ad:53:37:d1:38:3c:56:1b:02:c1:a9:a8:39:82:01:
         1c:b2:4c:00
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0Aso1z3Uoyp38hCQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI2MDIyNzE0MDA0MFoXDTI2MDUyODEzMDA0MFowLzEtMCsGA1UEAxMk
NGUzMzAzNDYtYTU4Yy00M2YyLTkwY2MtZDYxYzA4ZTg5MzhhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1YaA886iukP+e7L/3wt4icq4XRjH9HAqmAhY
9ErcMXYFmlkCzn5XrCDD5isP3CXciqJCUsp6a73h9Eshjx4KFuxVpnImI04HdzpU
NJDYM9FeqWOEWNvjgN5uoAYmjeCkw+k0ADnd/Gw6Kvlav+fsKrfiG1DREbtpraFK
Uc2YzyFWdXNwIzrVM0FsHwrjjbVgl/lStD/BOQ8vtRbfEUZXnlJT0Fdckq3pV4Ng
2g044Zme0MPA8lnFvQ090hMJwo9S3qtua3r2Th/2z8TNNSFrZTxj2IGrcnryqB8o
Aq3HzPY7PqDCEA9EQqYtN24aj/PHkFF1DzwkBwXuQyos1UfthQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFM3fJK9KBr5wiibsr9ET6RJo8Zf6MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYTc1ODNjNjctYTU0MC0z
NzUzLTg5MDQtNGVkOTQwNTc2MTFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAUBBQA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBADT1KkjvWXhxyFDYVxfmneZ5/6k9nd7D9pPtFw3jwDecRE1oHvKY
9PhiLYx+h/lyi7sMBQ4jZmoGh29d2CYhW99cbw2wySBI9jE86IBhzpQ9gZE/898Z
d99eG+ifVKaNppiJAkUuUMf3b3mFXLfMyCtU17A1pkSg8OJ5ORTGFNA4jhh650oD
PmQcTB9oIiQVdEnkmL24WTiqFK2ko4gLWPHI+oG1WHK/ZjAPnIjmmhPESi9EF268
OspXhUnhDYRnvOzj3+6PkuBqCQm6XXYtF0xBrSxjP6/ouNPPQy7nIua4E1o0rknI
u9jQULaGvK1TN9E4PFYbAsGpqDmCARyyTAA=
-----END CERTIFICATE-----
Generated at Mon Mar 2 15:01:39 2026 by rpki-client