Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/ce9337a4-4e0a-3f9b-a703-32378c8b086f.roa
File:                     ce9337a4-4e0a-3f9b-a703-32378c8b086f.roa (raw, json)
Hash identifier:          mD3vRoxBxUUcdbNepGYq3sgCfJBHeYLtrYqSh7Y66JY=
Subject key identifier:   63:96:B0:B3:5E:55:81:14:15:39:69:0B:5B:F8:01:E1:2A:11:9C:A0
Certificate issuer:       /CN=aad22c3d-3c14-42b7-a324-b1bb21649378
Certificate serial:       010D0C9F4328584CD13CAA512204FCC252B6DBE0
Authority key identifier: 67:AE:97:3F:92:B0:66:C4:36:11:D4:7A:D2:24:7A:6F:AC:55:B1:43
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/ce9337a4-4e0a-3f9b-a703-32378c8b086f.roa
Signing time:             Tue 10 Feb 2026 14:00:41 +0000
ROA not before:           Tue 10 Feb 2026 14:00:41 +0000
ROA not after:            Mon 11 May 2026 13:00:41 +0000
asID:                     16509
IP address blocks:        2620:116:800d::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/aad22c3d-3c14-42b7-a324-b1bb21649378.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/aad22c3d-3c14-42b7-a324-b1bb21649378.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:d1:3c:aa:51:22:04:fc:c2:52:b6:db:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aad22c3d-3c14-42b7-a324-b1bb21649378
        Validity
            Not Before: Feb 10 14:00:41 2026 GMT
            Not After : May 11 13:00:41 2026 GMT
        Subject: CN=58477770-ce28-4066-ab71-930063a600ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:df:c3:a8:f0:69:41:63:96:cf:06:4f:b7:92:
                    c9:8c:ea:99:09:a0:d6:f0:c7:20:87:55:13:72:52:
                    e1:eb:18:f2:a4:26:0a:ec:0b:d4:85:e3:e1:c7:ba:
                    21:60:b9:25:29:0a:19:99:50:44:dd:3a:40:c8:0a:
                    98:55:6c:85:a1:74:14:b7:89:52:80:a6:77:56:5e:
                    b3:4b:d6:f5:07:aa:e2:c2:b0:3f:4d:69:26:70:84:
                    02:a0:3a:e2:68:e5:17:4e:a5:d2:a8:36:54:b2:f1:
                    50:ee:c0:f1:77:61:aa:c4:bf:58:89:b2:ea:47:7e:
                    3c:b0:c8:04:34:8d:b2:98:e9:ef:eb:54:f4:ed:43:
                    01:86:4e:a3:bf:cb:38:08:93:50:e8:e7:78:2a:32:
                    11:8e:bb:56:18:de:d4:03:b5:b0:ba:b7:16:e3:9c:
                    9b:01:b0:d3:17:ab:8a:0a:35:7c:42:d2:a1:d5:41:
                    be:02:74:44:c3:c3:c6:b2:15:71:8e:0b:6f:84:99:
                    cc:51:15:e9:f1:59:6c:68:ca:7d:9f:3c:cf:d9:e2:
                    c0:e3:c3:df:da:4b:5a:97:e6:6a:3b:94:32:b3:6a:
                    50:e1:52:41:20:61:dc:7b:66:23:87:28:0f:0b:8e:
                    61:4a:11:40:b0:9f:c4:03:8f:e5:63:24:e5:5f:40:
                    77:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:96:B0:B3:5E:55:81:14:15:39:69:0B:5B:F8:01:E1:2A:11:9C:A0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/ce9337a4-4e0a-3f9b-a703-32378c8b086f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/aad22c3d-3c14-42b7-a324-b1bb21649378.crl

            X509v3 Authority Key Identifier:
                keyid:67:AE:97:3F:92:B0:66:C4:36:11:D4:7A:D2:24:7A:6F:AC:55:B1:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:116:800d::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:27:55:e3:57:94:2e:f7:2e:5f:e9:fb:4a:2b:66:26:17:30:
         a8:11:af:41:d4:e2:20:5b:75:aa:66:eb:00:14:c3:57:fb:89:
         34:12:a0:0e:d9:88:10:57:86:c8:41:57:5d:f0:62:b8:2e:7d:
         7a:33:20:66:bc:bf:d7:4a:ba:98:cb:a9:c2:ef:1a:96:5d:f0:
         a3:7d:25:db:ce:74:35:9f:88:43:a8:e6:ec:bd:95:3e:49:e6:
         1a:57:70:5e:3c:63:3d:2e:a6:57:1b:c2:f2:f7:21:a5:d8:af:
         98:21:cf:76:35:06:52:b1:f0:2e:ab:f3:3d:9a:66:d1:32:b9:
         cb:61:e3:40:ac:30:d4:2f:6f:6b:cc:b2:4f:81:d8:2e:25:04:
         8b:42:26:34:bc:a1:68:94:47:36:d4:64:35:0a:b6:60:47:fb:
         b0:cb:00:31:c3:73:6a:dd:cf:93:2e:b4:2d:d5:7c:f1:e6:19:
         28:a4:96:58:73:ce:61:6f:2f:a7:67:7d:b5:33:c8:90:2e:cb:
         e7:1b:60:14:29:b9:ea:79:45:e3:16:f8:84:3f:ef:02:aa:91:
         35:dc:e5:b2:9a:1c:10:ac:e5:90:cc:73:ba:3c:ed:d3:bf:c6:
         dc:6b:4d:a7:1a:71:99:26:2b:51:60:95:d2:8b:e8:2e:58:c5:
         20:b6:65:84
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEzRPKpRIgT8wlK22+AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWFkMjJjM2QtM2MxNC00MmI3LWEzMjQtYjFiYjIxNjQ5
Mzc4MB4XDTI2MDIxMDE0MDA0MVoXDTI2MDUxMTEzMDA0MVowLzEtMCsGA1UEAxMk
NTg0Nzc3NzAtY2UyOC00MDY2LWFiNzEtOTMwMDYzYTYwMGNlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5d/DqPBpQWOWzwZPt5LJjOqZCaDW8Mcgh1UT
clLh6xjypCYK7AvUhePhx7ohYLklKQoZmVBE3TpAyAqYVWyFoXQUt4lSgKZ3Vl6z
S9b1B6riwrA/TWkmcIQCoDriaOUXTqXSqDZUsvFQ7sDxd2GqxL9YibLqR348sMgE
NI2ymOnv61T07UMBhk6jv8s4CJNQ6Od4KjIRjrtWGN7UA7WwurcW45ybAbDTF6uK
CjV8QtKh1UG+AnREw8PGshVxjgtvhJnMURXp8VlsaMp9nzzP2eLA48Pf2ktal+Zq
O5Qys2pQ4VJBIGHce2YjhygPC45hShFAsJ/EA4/lYyTlX0B3zwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFGOWsLNeVYEUFTlpC1v4AeEqEZygMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hYWQy
MmMzZC0zYzE0LTQyYjctYTMyNC1iMWJiMjE2NDkzNzgvY2U5MzM3YTQtNGUwYS0z
ZjliLWE3MDMtMzIzNzhjOGIwODZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYWFkMjJjM2QtM2MxNC00MmI3LWEz
MjQtYjFiYjIxNjQ5Mzc4L2FhZDIyYzNkLTNjMTQtNDJiNy1hMzI0LWIxYmIyMTY0
OTM3OC5jcmwwHwYDVR0jBBgwFoAUZ66XP5KwZsQ2EdR60iR6b6xVsUMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9hYWQyMmMzZC0zYzE0LTQyYjctYTMyNC1iMWJi
MjE2NDkzNzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiABFoAN
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAEMnVeNXlC73Ll/p+0orZiYXMKgRr0HU4iBbdapm6wAUw1f7iTQS
oA7ZiBBXhshBV13wYrgufXozIGa8v9dKupjLqcLvGpZd8KN9JdvOdDWfiEOo5uy9
lT5J5hpXcF48Yz0uplcbwvL3IaXYr5ghz3Y1BlKx8C6r8z2aZtEyucth40CsMNQv
b2vMsk+B2C4lBItCJjS8oWiURzbUZDUKtmBH+7DLADHDc2rdz5MutC3VfPHmGSik
llhzzmFvL6dnfbUzyJAuy+cbYBQpuep5ReMW+IQ/7wKqkTXc5bKaHBCs5ZDMc7o8
7dO/xtxrTacacZkmK1FgldKL6C5YxSC2ZYQ=
-----END CERTIFICATE-----
Generated at Sun Mar 1 23:17:40 2026 by rpki-client