Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/e2d7c243-cefe-3545-86f3-de8081a2ab55.roa
File:                     e2d7c243-cefe-3545-86f3-de8081a2ab55.roa (raw, json)
Hash identifier:          hcZB6DADIqoGhOSK5OWIpC736sn7x/Do7o7/pvDQjDE=
Subject key identifier:   B8:9C:EE:8A:D6:2E:AF:91:9C:54:C8:B6:C5:ED:F5:D8:55:04:2E:19
Certificate issuer:       /CN=d1f886df-6c58-4ea7-9d1f-0659e2324460
Certificate serial:       010D0C9F4328584CD6D2254C6B21EA79C0218B80
Authority key identifier: DE:16:51:20:56:83:D6:08:13:E6:42:45:8E:FD:16:70:EE:87:6F:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/e2d7c243-cefe-3545-86f3-de8081a2ab55.roa
Signing time:             Thu 12 Feb 2026 14:00:40 +0000
ROA not before:           Thu 12 Feb 2026 14:00:40 +0000
ROA not after:            Wed 13 May 2026 13:00:40 +0000
asID:                     6621
IP address blocks:        2001:5b0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/d1f886df-6c58-4ea7-9d1f-0659e2324460.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/d1f886df-6c58-4ea7-9d1f-0659e2324460.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 26 Feb 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:d6:d2:25:4c:6b:21:ea:79:c0:21:8b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d1f886df-6c58-4ea7-9d1f-0659e2324460
        Validity
            Not Before: Feb 12 14:00:40 2026 GMT
            Not After : May 13 13:00:40 2026 GMT
        Subject: CN=b32fbff8-9e14-49af-a2d3-45a898db814e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:5d:7f:2e:4b:3a:fb:a3:df:fb:24:fe:d0:0f:
                    de:9f:a1:f8:d1:0d:21:34:01:b4:9b:a2:90:96:cb:
                    06:73:a4:8c:de:40:64:26:b1:b3:64:b5:5b:85:c4:
                    7c:71:e1:39:ea:a1:26:d3:d1:16:36:20:2b:1f:7a:
                    b4:24:15:b7:3e:83:b5:76:01:7b:e3:11:e7:53:3e:
                    f4:f4:f6:5c:e4:fb:00:fe:55:17:55:4e:a2:28:f9:
                    4c:d1:82:42:6e:33:f0:5e:19:41:dd:44:0f:b5:2f:
                    d7:82:b9:75:b8:3b:8f:d0:00:e8:62:a4:92:3b:d6:
                    c3:7e:8c:6b:93:9e:30:c1:6a:c5:c9:a4:f4:98:a0:
                    94:07:60:08:44:e8:03:88:db:7a:ae:a8:b2:f6:ed:
                    62:fb:20:45:5b:a4:c8:f4:03:a6:85:e6:31:bf:1c:
                    02:71:06:98:b6:fd:53:02:4c:8e:7e:20:06:d5:c2:
                    b0:89:a7:ca:4c:65:db:17:43:bb:11:c4:0b:84:03:
                    0e:28:ea:63:0d:2f:00:a6:1f:47:49:eb:5d:7c:ca:
                    36:c7:e8:80:c5:50:52:aa:b5:0f:c3:f8:07:b7:c3:
                    51:3b:71:8b:83:6f:e9:55:1b:db:6f:76:35:a3:93:
                    1e:09:de:d5:a5:a5:1a:7a:18:cf:7d:de:e6:4e:15:
                    e3:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:9C:EE:8A:D6:2E:AF:91:9C:54:C8:B6:C5:ED:F5:D8:55:04:2E:19
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/e2d7c243-cefe-3545-86f3-de8081a2ab55.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/d1f886df-6c58-4ea7-9d1f-0659e2324460.crl

            X509v3 Authority Key Identifier:
                keyid:DE:16:51:20:56:83:D6:08:13:E6:42:45:8E:FD:16:70:EE:87:6F:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:5b0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:4b:a7:e2:5b:db:44:0d:e4:ee:56:da:b1:89:5d:b0:38:44:
         be:d7:29:04:37:4d:d8:80:88:07:8d:9c:4d:a4:aa:23:5f:67:
         14:72:fc:82:17:27:ee:ba:10:50:5c:93:9b:37:a2:c0:57:7b:
         d6:fe:4c:fb:7e:f4:d8:35:f7:1b:50:3c:bf:b1:81:4a:fb:44:
         09:f6:1a:9a:41:77:3d:c8:e9:c7:bc:c4:b5:91:f8:73:84:cb:
         aa:e8:c6:22:de:df:71:6f:bd:27:d5:e9:02:2d:80:37:63:6a:
         5b:b6:39:e8:fd:9c:12:1a:02:fe:ba:94:e7:48:e7:a5:e0:1f:
         00:a3:db:78:d3:d3:5f:a8:37:de:eb:9a:6f:38:51:33:68:93:
         0f:da:1b:fb:40:b4:3a:a3:80:72:7d:ec:00:a4:6e:ab:fd:5c:
         74:af:50:af:97:60:07:f9:62:aa:10:c4:10:cd:f6:7f:b2:d8:
         92:3b:a8:b9:ac:b2:a8:40:b2:1d:b0:f4:78:bd:52:cd:8b:6c:
         b9:25:9d:8d:7f:10:62:db:4a:d9:f9:d8:fb:bb:2a:a0:2e:c2:
         7a:7b:39:fa:c3:4a:b9:5b:2a:27:f2:e3:5e:bf:e3:e9:32:7a:
         06:7d:41:23:3a:9d:ba:5b:f9:1c:ff:de:1c:bb:a6:b3:6e:1d:
         84:c7:ce:c4
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEzW0iVMayHqecAhi4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDFmODg2ZGYtNmM1OC00ZWE3LTlkMWYtMDY1OWUyMzI0
NDYwMB4XDTI2MDIxMjE0MDA0MFoXDTI2MDUxMzEzMDA0MFowLzEtMCsGA1UEAxMk
YjMyZmJmZjgtOWUxNC00OWFmLWEyZDMtNDVhODk4ZGI4MTRlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv11/Lks6+6Pf+yT+0A/en6H40Q0hNAG0m6KQ
lssGc6SM3kBkJrGzZLVbhcR8ceE56qEm09EWNiArH3q0JBW3PoO1dgF74xHnUz70
9PZc5PsA/lUXVU6iKPlM0YJCbjPwXhlB3UQPtS/Xgrl1uDuP0ADoYqSSO9bDfoxr
k54wwWrFyaT0mKCUB2AIROgDiNt6rqiy9u1i+yBFW6TI9AOmheYxvxwCcQaYtv1T
AkyOfiAG1cKwiafKTGXbF0O7EcQLhAMOKOpjDS8Aph9HSetdfMo2x+iAxVBSqrUP
w/gHt8NRO3GLg2/pVRvbb3Y1o5MeCd7VpaUaehjPfd7mThXj1wIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFLic7orWLq+RnFTItsXt9dhVBC4ZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kMWY4
ODZkZi02YzU4LTRlYTctOWQxZi0wNjU5ZTIzMjQ0NjAvZTJkN2MyNDMtY2VmZS0z
NTQ1LTg2ZjMtZGU4MDgxYTJhYjU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZDFmODg2ZGYtNmM1OC00ZWE3LTlk
MWYtMDY1OWUyMzI0NDYwL2QxZjg4NmRmLTZjNTgtNGVhNy05ZDFmLTA2NTllMjMy
NDQ2MC5jcmwwHwYDVR0jBBgwFoAU3hZRIFaD1ggT5kJFjv0WcO6Hb7swDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9kMWY4ODZkZi02YzU4LTRlYTctOWQxZi0wNjU5
ZTIzMjQ0NjAuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAIAEFsDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQABS6fiW9tEDeTuVtqxiV2wOES+1ykEN03YgIgHjZxNpKojX2cUcvyC
FyfuuhBQXJObN6LAV3vW/kz7fvTYNfcbUDy/sYFK+0QJ9hqaQXc9yOnHvMS1kfhz
hMuq6MYi3t9xb70n1ekCLYA3Y2pbtjno/ZwSGgL+upTnSOel4B8Ao9t409NfqDfe
65pvOFEzaJMP2hv7QLQ6o4ByfewApG6r/Vx0r1Cvl2AH+WKqEMQQzfZ/stiSO6i5
rLKoQLIdsPR4vVLNi2y5JZ2NfxBi20rZ+dj7uyqgLsJ6ezn6w0q5Wyon8uNev+Pp
MnoGfUEjOp26W/kc/94cu6azbh2Ex87E
-----END CERTIFICATE-----
Generated at Mon Feb 23 18:41:33 2026 by rpki-client