Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/1a1b9af9-1bfe-34db-a910-734009fbf7f9.roa
File:                     1a1b9af9-1bfe-34db-a910-734009fbf7f9.roa (raw, json)
Hash identifier:          KCDa20cXqWiD2RyDzIzmC4OZMr2+svKd7F0/MgXl42Q=
Subject key identifier:   D0:1B:82:57:F6:62:15:05:0E:B9:BE:62:B0:A3:41:79:47:11:51:2B
Certificate issuer:       /CN=65dae2a0-0cb7-46e8-ae17-abeb06007e1a
Certificate serial:       010D0C9F4328584CEA5CDC1EB2F474DC310BC958
Authority key identifier: 1A:49:9D:8B:77:A3:3A:DF:1F:CD:4E:BA:51:CC:1A:A3:FA:A3:F6:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/1a1b9af9-1bfe-34db-a910-734009fbf7f9.roa
Signing time:             Thu 19 Feb 2026 14:00:40 +0000
ROA not before:           Thu 19 Feb 2026 14:00:40 +0000
ROA not after:            Wed 20 May 2026 13:00:40 +0000
asID:                     9009
IP address blocks:        2607:6b80:5a::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ea:5c:dc:1e:b2:f4:74:dc:31:0b:c9:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65dae2a0-0cb7-46e8-ae17-abeb06007e1a
        Validity
            Not Before: Feb 19 14:00:40 2026 GMT
            Not After : May 20 13:00:40 2026 GMT
        Subject: CN=e2ea78b1-5a94-4a30-9c63-59ab56bc4dd9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:e7:0a:63:8d:ab:e3:d4:dd:05:9a:3f:41:3e:
                    8f:d4:f0:f9:a9:46:ad:3f:7e:92:de:80:fb:25:2b:
                    f9:37:45:2f:10:19:a9:61:43:42:65:11:9b:9f:23:
                    52:76:d8:38:37:1a:d5:bd:58:ce:c2:3a:63:df:25:
                    dc:36:57:26:a8:f6:a6:27:3d:09:a6:68:da:5e:79:
                    a5:e0:4d:08:d8:d8:34:ae:f6:a9:d4:3e:a3:e3:97:
                    94:5a:f9:04:fd:60:c2:92:d5:c2:a4:9c:14:fe:dc:
                    61:09:26:98:76:95:73:c2:dc:ef:e8:0f:8f:70:d5:
                    69:20:73:25:6c:18:24:d0:09:7c:d1:f6:d2:95:3d:
                    44:84:14:2a:a3:b8:54:d2:30:05:39:b7:25:97:ad:
                    46:7b:76:49:07:3b:0d:cf:21:7f:23:e5:a5:f7:f2:
                    31:8b:ff:b0:53:95:21:0c:b7:01:e2:86:b1:a7:e3:
                    58:76:02:7e:5e:ec:f5:5c:b1:15:4f:33:3f:a7:d7:
                    71:d0:73:16:aa:12:cf:d0:dc:bc:35:9e:26:4a:3e:
                    33:8c:d8:80:ab:e3:27:26:44:18:6d:20:76:51:7c:
                    36:2b:5b:e2:18:42:80:a2:b6:25:74:9e:13:36:c6:
                    f8:ea:8b:36:f1:b1:9e:14:4d:aa:d7:43:41:e1:b0:
                    5f:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:1B:82:57:F6:62:15:05:0E:B9:BE:62:B0:A3:41:79:47:11:51:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/1a1b9af9-1bfe-34db-a910-734009fbf7f9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.crl

            X509v3 Authority Key Identifier:
                keyid:1A:49:9D:8B:77:A3:3A:DF:1F:CD:4E:BA:51:CC:1A:A3:FA:A3:F6:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:6b80:5a::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:d5:5b:3d:b9:a0:28:18:ee:bc:92:81:d6:bc:82:c3:1c:75:
         e8:7c:94:c2:be:eb:31:a7:b4:7b:08:8f:e1:c6:20:24:60:9b:
         80:bd:40:fa:bc:24:02:f9:e4:ea:28:a0:7d:fa:79:50:09:53:
         df:bc:a4:49:5a:25:0d:aa:87:90:80:e5:33:ec:38:c0:cd:98:
         a9:fb:f6:9b:d7:81:e6:6a:25:c5:7e:af:0b:f1:e6:98:74:7c:
         91:f7:2c:32:9f:79:5c:6a:17:6d:d5:64:ad:c2:f2:3a:8e:72:
         dc:4b:9c:ca:74:f0:fa:b0:d6:bd:2b:46:69:0e:24:4b:a7:d4:
         39:b1:cc:05:15:f7:9e:4a:5f:6c:e4:52:19:a7:04:fd:56:7a:
         d8:8e:47:ba:27:2e:78:0a:cc:e4:ed:18:39:bf:7f:43:ca:cf:
         e0:2a:60:6f:5b:db:42:70:e9:34:24:35:34:89:d9:bf:db:37:
         b8:e0:b2:c3:03:90:46:5d:98:fb:35:6e:f6:98:64:ad:f2:9e:
         5b:74:1b:16:a3:e4:4d:a4:eb:cc:36:76:b2:f8:6c:ff:be:bc:
         d7:ee:38:62:3d:ec:81:e4:00:97:ae:ce:81:db:d1:c8:b1:e7:
         f2:c1:18:ab:f5:ad:3c:6e:c1:7f:f5:95:b1:37:21:5b:49:f1:
         c7:8c:59:33
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEzqXNwesvR03DELyVgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjVkYWUyYTAtMGNiNy00NmU4LWFlMTctYWJlYjA2MDA3
ZTFhMB4XDTI2MDIxOTE0MDA0MFoXDTI2MDUyMDEzMDA0MFowLzEtMCsGA1UEAxMk
ZTJlYTc4YjEtNWE5NC00YTMwLTljNjMtNTlhYjU2YmM0ZGQ5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxucKY42r49TdBZo/QT6P1PD5qUatP36S3oD7
JSv5N0UvEBmpYUNCZRGbnyNSdtg4NxrVvVjOwjpj3yXcNlcmqPamJz0JpmjaXnml
4E0I2Ng0rvap1D6j45eUWvkE/WDCktXCpJwU/txhCSaYdpVzwtzv6A+PcNVpIHMl
bBgk0Al80fbSlT1EhBQqo7hU0jAFObcll61Ge3ZJBzsNzyF/I+Wl9/Ixi/+wU5Uh
DLcB4oaxp+NYdgJ+Xuz1XLEVTzM/p9dx0HMWqhLP0Ny8NZ4mSj4zjNiAq+MnJkQY
bSB2UXw2K1viGEKAorYldJ4TNsb46os28bGeFE2q10NB4bBfowIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFNAbglf2YhUFDrm+YrCjQXlHEVErMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82NWRh
ZTJhMC0wY2I3LTQ2ZTgtYWUxNy1hYmViMDYwMDdlMWEvMWExYjlhZjktMWJmZS0z
NGRiLWE5MTAtNzM0MDA5ZmJmN2Y5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjVkYWUyYTAtMGNiNy00NmU4LWFl
MTctYWJlYjA2MDA3ZTFhLzY1ZGFlMmEwLTBjYjctNDZlOC1hZTE3LWFiZWIwNjAw
N2UxYS5jcmwwHwYDVR0jBBgwFoAUGkmdi3ejOt8fzU66Ucwao/qj9iUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS82NWRhZTJhMC0wY2I3LTQ2ZTgtYWUxNy1hYmVi
MDYwMDdlMWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgdrgABa
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAADVWz25oCgY7rySgda8gsMcdeh8lMK+6zGntHsIj+HGICRgm4C9
QPq8JAL55OoooH36eVAJU9+8pElaJQ2qh5CA5TPsOMDNmKn79pvXgeZqJcV+rwvx
5ph0fJH3LDKfeVxqF23VZK3C8jqOctxLnMp08Pqw1r0rRmkOJEun1DmxzAUV955K
X2zkUhmnBP1WetiOR7onLngKzOTtGDm/f0PKz+AqYG9b20Jw6TQkNTSJ2b/bN7jg
ssMDkEZdmPs1bvaYZK3ynlt0Gxaj5E2k68w2drL4bP++vNfuOGI97IHkAJeuzoHb
0cix5/LBGKv1rTxuwX/1lbE3IVtJ8ceMWTM=
-----END CERTIFICATE-----
Generated at Mon Mar 2 00:32:27 2026 by rpki-client