Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/a34bb302-49e0-3e41-8a06-b70ec4051c38.roa
File:                     a34bb302-49e0-3e41-8a06-b70ec4051c38.roa (raw, json)
Hash identifier:          UayySNEYAP00mP0G+HOIn4kGzjZPl967nMNtDti1GXU=
Subject key identifier:   F9:D1:60:1E:57:DE:AC:BB:8B:A0:59:E5:42:57:07:23:81:26:76:4F
Certificate issuer:       /CN=cf0f31b6-ef62-4dd5-879b-fe7aee0c0536
Certificate serial:       010D0C9F4328584CC611E992ADF3692059A14D00
Authority key identifier: B9:50:CD:94:62:A9:48:BB:D7:A2:B1:00:10:2E:4E:45:8B:6D:64:7B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/a34bb302-49e0-3e41-8a06-b70ec4051c38.roa
Signing time:             Fri 06 Feb 2026 14:00:40 +0000
ROA not before:           Fri 06 Feb 2026 14:00:40 +0000
ROA not after:            Thu 07 May 2026 13:00:40 +0000
asID:                     13807
IP address blocks:        2604:c80::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:c6:11:e9:92:ad:f3:69:20:59:a1:4d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf0f31b6-ef62-4dd5-879b-fe7aee0c0536
        Validity
            Not Before: Feb  6 14:00:40 2026 GMT
            Not After : May  7 13:00:40 2026 GMT
        Subject: CN=004a2089-aa20-4456-951d-e4e3a5d48bc9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:38:a5:55:d3:63:dc:53:97:3d:20:cf:29:62:
                    4f:ab:e0:e9:23:1a:c0:ba:3e:bd:dd:ea:68:d8:10:
                    d2:00:65:45:58:5b:eb:62:3b:1a:9c:af:5e:fb:ef:
                    b0:d8:23:0c:85:ed:dc:3b:09:3c:7d:ed:92:1c:a7:
                    9e:6a:79:c0:88:96:47:7c:6f:34:37:37:f5:19:ae:
                    bd:50:72:05:66:fd:85:65:3e:ed:81:e6:1d:5d:72:
                    5d:86:a1:c4:7e:f5:36:ea:9b:19:d2:16:f0:a6:e5:
                    6f:8f:4e:71:26:75:45:d7:dd:05:af:8f:ba:5c:6c:
                    40:b4:4c:0d:75:07:5d:15:43:38:e7:27:be:22:e4:
                    9b:af:4a:bb:ae:58:34:b2:9a:ea:9e:dd:67:3c:2e:
                    2f:b8:1a:93:75:9e:78:e9:9b:29:58:aa:87:58:50:
                    0c:2c:05:9f:95:f5:65:73:78:e1:f5:2c:34:ac:b2:
                    21:8e:87:fc:71:77:d1:bc:6a:48:20:87:e8:25:a2:
                    7d:f7:e6:a4:1b:c3:ed:df:0f:f2:82:8a:34:c3:89:
                    6c:dd:1e:6e:d4:e7:33:24:21:f7:08:ae:d5:b8:dd:
                    bc:3e:a1:ed:2d:36:11:14:a6:c5:6b:c7:0c:11:cf:
                    9b:d6:8b:6d:87:eb:83:a2:05:18:5c:6b:90:a6:d1:
                    7b:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:D1:60:1E:57:DE:AC:BB:8B:A0:59:E5:42:57:07:23:81:26:76:4F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/a34bb302-49e0-3e41-8a06-b70ec4051c38.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.crl

            X509v3 Authority Key Identifier:
                keyid:B9:50:CD:94:62:A9:48:BB:D7:A2:B1:00:10:2E:4E:45:8B:6D:64:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:c80::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:6b:44:ec:c8:2f:eb:6b:58:4f:a1:3e:49:d3:b2:1e:48:95:
         13:12:c4:d0:97:c1:5b:9e:a5:c3:6e:7d:57:aa:54:ce:6d:8f:
         3c:5e:b2:d2:a9:15:97:02:0c:2f:8f:d5:6f:9d:3e:47:0e:ec:
         f4:0a:a4:39:e5:09:4e:87:80:a2:3b:02:39:ef:be:65:fc:84:
         2e:2f:ab:bc:26:4d:68:81:06:33:d9:b0:e1:11:f9:36:11:52:
         0e:0f:f7:75:c1:53:fa:1e:cc:38:e5:36:8e:02:b4:f5:a2:67:
         83:c3:14:a3:f4:6d:40:75:ab:53:f3:ea:ed:eb:86:6b:a0:a1:
         4a:42:94:02:dc:4f:6e:68:44:2e:87:f9:ba:17:e2:f0:00:86:
         78:be:32:c4:88:1e:73:ac:7c:c5:c0:06:33:3b:dd:17:2b:d3:
         05:be:c7:49:1b:67:8b:95:c4:91:bf:74:32:a3:9c:7a:90:2d:
         1d:be:7d:9e:94:f3:07:26:76:5a:7b:cb:9c:09:c3:22:d2:bc:
         e1:40:fe:fa:82:9d:fb:1f:30:47:a8:8a:6a:de:ed:98:35:f2:
         e0:c1:53:ac:1d:12:61:65:83:ec:60:8e:f6:89:be:5f:82:3b:
         e0:08:32:c7:7e:2b:7a:7c:b1:81:f7:49:9b:24:12:d3:ad:89:
         2d:30:f9:27
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEzGEemSrfNpIFmhTQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2YwZjMxYjYtZWY2Mi00ZGQ1LTg3OWItZmU3YWVlMGMw
NTM2MB4XDTI2MDIwNjE0MDA0MFoXDTI2MDUwNzEzMDA0MFowLzEtMCsGA1UEAxMk
MDA0YTIwODktYWEyMC00NDU2LTk1MWQtZTRlM2E1ZDQ4YmM5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkDilVdNj3FOXPSDPKWJPq+DpIxrAuj693epo
2BDSAGVFWFvrYjsanK9e+++w2CMMhe3cOwk8fe2SHKeeannAiJZHfG80Nzf1Ga69
UHIFZv2FZT7tgeYdXXJdhqHEfvU26psZ0hbwpuVvj05xJnVF190Fr4+6XGxAtEwN
dQddFUM45ye+IuSbr0q7rlg0sprqnt1nPC4vuBqTdZ546ZspWKqHWFAMLAWflfVl
c3jh9Sw0rLIhjof8cXfRvGpIIIfoJaJ99+akG8Pt3w/ygoo0w4ls3R5u1OczJCH3
CK7VuN28PqHtLTYRFKbFa8cMEc+b1otth+uDogUYXGuQptF7BwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFPnRYB5X3qy7i6BZ5UJXByOBJnZPMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9jZjBm
MzFiNi1lZjYyLTRkZDUtODc5Yi1mZTdhZWUwYzA1MzYvYTM0YmIzMDItNDllMC0z
ZTQxLThhMDYtYjcwZWM0MDUxYzM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvY2YwZjMxYjYtZWY2Mi00ZGQ1LTg3
OWItZmU3YWVlMGMwNTM2L2NmMGYzMWI2LWVmNjItNGRkNS04NzliLWZlN2FlZTBj
MDUzNi5jcmwwHwYDVR0jBBgwFoAUuVDNlGKpSLvXorEAEC5ORYttZHswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9jZjBmMzFiNi1lZjYyLTRkZDUtODc5Yi1mZTdh
ZWUwYzA1MzYuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgQMgDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQBoa0TsyC/ra1hPoT5J07IeSJUTEsTQl8FbnqXDbn1XqlTObY88XrLS
qRWXAgwvj9VvnT5HDuz0CqQ55QlOh4CiOwI5775l/IQuL6u8Jk1ogQYz2bDhEfk2
EVIOD/d1wVP6Hsw45TaOArT1omeDwxSj9G1AdatT8+rt64ZroKFKQpQC3E9uaEQu
h/m6F+LwAIZ4vjLEiB5zrHzFwAYzO90XK9MFvsdJG2eLlcSRv3Qyo5x6kC0dvn2e
lPMHJnZae8ucCcMi0rzhQP76gp37HzBHqIpq3u2YNfLgwVOsHRJhZYPsYI72ib5f
gjvgCDLHfit6fLGB90mbJBLTrYktMPkn
-----END CERTIFICATE-----
Generated at Mon Mar 2 06:27:38 2026 by rpki-client