Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a620d45-1f26-460c-9a3e-9bc0cc4a5d59/2e25d87f-051d-3d6e-a755-c03b6fb3f1d0.roa
File:                     2e25d87f-051d-3d6e-a755-c03b6fb3f1d0.roa (raw, json)
Hash identifier:          JhVmSivbKjXikQNzZXfYOt3SIeTnLVa5QQqB1Z6j5hA=
Subject key identifier:   AB:DF:90:35:1A:84:70:5E:B7:C1:15:17:7C:08:0F:28:99:AE:7F:D3
Certificate issuer:       /CN=7a620d45-1f26-460c-9a3e-9bc0cc4a5d59
Certificate serial:       010D0C9F4328584CE4C76C1730A3FC1953F500A0
Authority key identifier: 29:1C:70:C0:46:C9:AB:DC:28:EE:26:90:9A:DC:7D:D9:00:2B:F4:C2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a620d45-1f26-460c-9a3e-9bc0cc4a5d59.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a620d45-1f26-460c-9a3e-9bc0cc4a5d59/2e25d87f-051d-3d6e-a755-c03b6fb3f1d0.roa
Signing time:             Tue 17 Feb 2026 14:00:41 +0000
ROA not before:           Tue 17 Feb 2026 14:00:41 +0000
ROA not after:            Mon 18 May 2026 13:00:41 +0000
asID:                     36374
IP address blocks:        2604:4200::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a620d45-1f26-460c-9a3e-9bc0cc4a5d59/7a620d45-1f26-460c-9a3e-9bc0cc4a5d59.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a620d45-1f26-460c-9a3e-9bc0cc4a5d59/7a620d45-1f26-460c-9a3e-9bc0cc4a5d59.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a620d45-1f26-460c-9a3e-9bc0cc4a5d59.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:e4:c7:6c:17:30:a3:fc:19:53:f5:00:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a620d45-1f26-460c-9a3e-9bc0cc4a5d59
        Validity
            Not Before: Feb 17 14:00:41 2026 GMT
            Not After : May 18 13:00:41 2026 GMT
        Subject: CN=9318ee7d-63d3-4040-98ea-159887c293c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:d9:0c:87:69:a8:a9:56:09:5c:32:17:e1:23:
                    81:51:dd:0c:50:ba:0e:03:07:9c:c1:04:3a:de:ee:
                    96:59:2c:d8:6e:ec:05:32:cb:7b:49:c7:a8:7a:bc:
                    5f:c7:2e:93:aa:8d:ee:34:06:63:74:59:1e:fa:de:
                    f4:01:8e:86:bc:45:c6:51:9c:9b:b6:da:11:80:7f:
                    0f:81:43:36:af:b5:54:d1:36:b0:ce:60:6e:2d:91:
                    60:75:9b:b3:32:4a:d6:bc:13:2d:46:08:41:30:38:
                    e2:35:7f:b1:b4:ba:f5:0b:4c:64:6a:af:99:28:78:
                    b6:74:4e:a0:07:57:6a:1b:72:43:7b:9c:4a:13:47:
                    43:a7:e8:63:bc:0e:1b:3e:a4:85:e7:1d:be:33:d2:
                    63:5a:47:ae:04:bc:73:a3:d3:c1:5d:e6:56:53:fd:
                    45:b1:93:8e:d7:3f:a9:2b:6b:db:69:93:5f:45:d5:
                    a1:1c:9e:82:73:d4:82:c5:7a:5e:be:22:3e:55:77:
                    6b:9e:02:b5:69:e1:9f:01:ef:22:16:94:1d:19:ff:
                    18:0a:7c:a4:a4:45:0a:8d:ac:30:55:de:3d:66:80:
                    8f:ad:fa:75:b1:24:23:6a:aa:e7:62:4a:8c:3b:de:
                    50:4b:53:44:05:d7:2a:48:a8:32:bd:9f:6f:27:0b:
                    ae:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:DF:90:35:1A:84:70:5E:B7:C1:15:17:7C:08:0F:28:99:AE:7F:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a620d45-1f26-460c-9a3e-9bc0cc4a5d59/2e25d87f-051d-3d6e-a755-c03b6fb3f1d0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a620d45-1f26-460c-9a3e-9bc0cc4a5d59/7a620d45-1f26-460c-9a3e-9bc0cc4a5d59.crl

            X509v3 Authority Key Identifier:
                keyid:29:1C:70:C0:46:C9:AB:DC:28:EE:26:90:9A:DC:7D:D9:00:2B:F4:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a620d45-1f26-460c-9a3e-9bc0cc4a5d59.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:4200::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:cb:35:20:ac:ed:e4:f5:12:6f:63:bf:25:0e:5c:32:e2:e6:
         02:78:5d:bf:c3:97:75:77:cb:29:ff:e2:b5:34:06:d7:0e:51:
         d8:92:cc:9b:b2:01:22:0b:57:2a:a0:e1:f3:b8:45:78:a3:4c:
         3f:22:5c:fa:b5:db:7a:72:d5:34:62:fa:27:27:4a:fc:d6:33:
         3a:08:f7:21:c8:fb:51:51:ee:3b:42:68:12:a1:98:7b:7d:3c:
         ac:bf:d3:14:d2:a1:8b:e3:0a:7a:ca:11:2a:b4:ab:3a:8f:f4:
         19:a8:cc:37:c5:47:12:ce:8f:b1:c2:2c:cf:c8:36:db:87:75:
         a5:ae:8a:53:eb:a4:75:f0:27:27:a1:76:ff:a3:4e:48:c5:87:
         84:00:8e:99:75:e6:78:7e:cc:98:43:36:2c:e4:21:19:a3:e5:
         4b:9f:b0:ea:ba:6a:57:d2:aa:18:94:1b:a8:83:41:04:5c:91:
         6d:2f:44:36:4d:b4:e8:52:af:21:67:ae:94:0a:9f:bb:92:2a:
         0d:fa:d9:5a:b2:ca:80:5b:af:47:91:51:62:e9:8a:52:12:5e:
         0f:1b:99:16:24:10:88:6e:42:21:07:ec:9b:f6:8b:eb:e4:73:
         57:b8:93:68:71:37:9e:a6:02:6d:ab:74:0d:62:17:4d:76:7e:
         36:1a:e6:eb
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEzkx2wXMKP8GVP1AKAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkN2E2MjBkNDUtMWYyNi00NjBjLTlhM2UtOWJjMGNjNGE1
ZDU5MB4XDTI2MDIxNzE0MDA0MVoXDTI2MDUxODEzMDA0MVowLzEtMCsGA1UEAxMk
OTMxOGVlN2QtNjNkMy00MDQwLTk4ZWEtMTU5ODg3YzI5M2M3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjNkMh2moqVYJXDIX4SOBUd0MULoOAwecwQQ6
3u6WWSzYbuwFMst7Sceoerxfxy6Tqo3uNAZjdFke+t70AY6GvEXGUZybttoRgH8P
gUM2r7VU0TawzmBuLZFgdZuzMkrWvBMtRghBMDjiNX+xtLr1C0xkaq+ZKHi2dE6g
B1dqG3JDe5xKE0dDp+hjvA4bPqSF5x2+M9JjWkeuBLxzo9PBXeZWU/1FsZOO1z+p
K2vbaZNfRdWhHJ6Cc9SCxXpeviI+VXdrngK1aeGfAe8iFpQdGf8YCnykpEUKjaww
Vd49ZoCPrfp1sSQjaqrnYkqMO95QS1NEBdcqSKgyvZ9vJwuulwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFKvfkDUahHBet8EVF3wIDyiZrn/TMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83YTYy
MGQ0NS0xZjI2LTQ2MGMtOWEzZS05YmMwY2M0YTVkNTkvMmUyNWQ4N2YtMDUxZC0z
ZDZlLWE3NTUtYzAzYjZmYjNmMWQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvN2E2MjBkNDUtMWYyNi00NjBjLTlh
M2UtOWJjMGNjNGE1ZDU5LzdhNjIwZDQ1LTFmMjYtNDYwYy05YTNlLTliYzBjYzRh
NWQ1OS5jcmwwHwYDVR0jBBgwFoAUKRxwwEbJq9wo7iaQmtx92QAr9MIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83YTYyMGQ0NS0xZjI2LTQ2MGMtOWEzZS05YmMw
Y2M0YTVkNTkuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgRCADBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQAAyzUgrO3k9RJvY78lDlwy4uYCeF2/w5d1d8sp/+K1NAbXDlHYksyb
sgEiC1cqoOHzuEV4o0w/Ilz6tdt6ctU0YvonJ0r81jM6CPchyPtRUe47QmgSoZh7
fTysv9MU0qGL4wp6yhEqtKs6j/QZqMw3xUcSzo+xwizPyDbbh3WlropT66R18Ccn
oXb/o05IxYeEAI6ZdeZ4fsyYQzYs5CEZo+VLn7DqumpX0qoYlBuog0EEXJFtL0Q2
TbToUq8hZ66UCp+7kioN+tlassqAW69HkVFi6YpSEl4PG5kWJBCIbkIhB+yb9ovr
5HNXuJNocTeepgJtq3QNYhdNdn42Gubr
-----END CERTIFICATE-----
Generated at Mon Mar 2 00:34:44 2026 by rpki-client