Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/edca2973-b815-4276-ae56-405cc9e280b5/2190bd3a-2a25-3c47-bb12-b5c7711c4722.roa
File:                     2190bd3a-2a25-3c47-bb12-b5c7711c4722.roa (raw, json)
Hash identifier:          0ccUZHeRZotfcK5nzsVpH9lNfxJwJnJX0S/K/6vEpAE=
Subject key identifier:   13:1E:6C:68:FB:F1:6B:BA:35:FF:32:A7:8F:8F:95:E1:58:E1:9A:99
Certificate issuer:       /CN=edca2973-b815-4276-ae56-405cc9e280b5
Certificate serial:       010D0C9F4328584CAA271C5C929D971215058D21
Authority key identifier: F0:81:36:B0:D5:E5:62:6E:3C:57:D3:5B:4F:FB:39:6D:25:0D:23:1A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/edca2973-b815-4276-ae56-405cc9e280b5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/edca2973-b815-4276-ae56-405cc9e280b5/2190bd3a-2a25-3c47-bb12-b5c7711c4722.roa
Signing time:             Tue 27 Jan 2026 14:00:36 +0000
ROA not before:           Tue 27 Jan 2026 14:00:36 +0000
ROA not after:            Mon 27 Apr 2026 13:00:36 +0000
asID:                     13727
IP address blocks:        2606:7080::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/edca2973-b815-4276-ae56-405cc9e280b5/edca2973-b815-4276-ae56-405cc9e280b5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/edca2973-b815-4276-ae56-405cc9e280b5/edca2973-b815-4276-ae56-405cc9e280b5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/edca2973-b815-4276-ae56-405cc9e280b5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Feb 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:aa:27:1c:5c:92:9d:97:12:15:05:8d:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=edca2973-b815-4276-ae56-405cc9e280b5
        Validity
            Not Before: Jan 27 14:00:36 2026 GMT
            Not After : Apr 27 13:00:36 2026 GMT
        Subject: CN=f0ba1114-173d-4479-861a-5d571c850884
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:2a:4f:cc:36:0d:90:a4:4b:96:1e:07:20:bb:
                    40:93:b0:af:8b:31:b1:8e:dc:5e:98:5a:0c:04:53:
                    47:76:ce:76:bf:d9:57:19:53:ea:b2:85:c1:7d:27:
                    ae:66:e1:e2:67:cf:7e:87:d3:97:5a:88:70:7d:6e:
                    6b:2d:aa:d5:15:96:73:f8:3c:11:35:ab:b7:59:7c:
                    70:7f:71:83:dc:67:01:c0:db:41:80:ae:e4:b8:de:
                    f7:8c:7a:e5:39:50:25:31:82:ea:f1:f1:ee:47:31:
                    ee:15:f3:0e:5d:c4:56:f3:a3:9e:fb:1e:c0:ab:f7:
                    a5:45:e5:5c:f0:12:ff:76:c3:cd:f1:2d:3b:28:55:
                    fb:fc:77:04:a0:a5:b5:10:94:82:90:47:6c:5f:f1:
                    5f:69:30:87:ff:8a:78:86:b8:ec:ce:88:fd:3c:ee:
                    18:2e:f3:ac:40:7a:d8:b6:f9:d1:5d:d4:88:40:c9:
                    27:52:8e:3e:ac:64:a5:8e:8c:6c:ca:e6:b1:98:a5:
                    54:bc:e3:34:e0:54:e2:3c:a0:47:97:d0:b4:fe:e8:
                    2e:44:14:4b:fb:57:00:23:d9:f7:cc:55:7a:85:96:
                    a4:4e:ff:8b:c0:0e:1f:75:b7:f5:d1:41:e0:ed:76:
                    12:7f:d0:e6:f1:b7:c8:4a:eb:f0:33:11:10:6f:0d:
                    4b:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:1E:6C:68:FB:F1:6B:BA:35:FF:32:A7:8F:8F:95:E1:58:E1:9A:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/edca2973-b815-4276-ae56-405cc9e280b5/2190bd3a-2a25-3c47-bb12-b5c7711c4722.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/edca2973-b815-4276-ae56-405cc9e280b5/edca2973-b815-4276-ae56-405cc9e280b5.crl

            X509v3 Authority Key Identifier:
                keyid:F0:81:36:B0:D5:E5:62:6E:3C:57:D3:5B:4F:FB:39:6D:25:0D:23:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/edca2973-b815-4276-ae56-405cc9e280b5.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:7080::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:7a:96:52:f1:2b:55:7c:28:83:f2:2e:e6:1b:94:83:85:25:
         79:c3:01:e8:b7:d9:98:74:3e:41:4f:31:ea:08:32:83:e4:43:
         f1:0f:2c:a4:87:cc:5d:08:4f:48:75:21:b4:f0:0f:79:7b:90:
         c6:d3:72:29:03:d2:87:08:d2:0c:ad:60:40:bf:4c:62:df:70:
         d4:15:62:57:8d:6d:f3:09:ef:6e:bb:5b:11:4c:ce:ed:9d:24:
         c2:72:bd:37:78:9c:85:08:06:66:6e:81:77:64:50:5b:76:b1:
         37:3f:66:3b:fa:45:71:d4:eb:9b:1b:25:bd:37:0d:48:d7:8a:
         9e:44:b6:fe:97:c9:98:e9:94:65:7f:e7:5b:68:51:bd:82:8f:
         80:0c:b2:83:66:5e:d3:ba:52:00:f2:d7:43:2e:b5:ed:41:81:
         0e:88:b2:54:92:51:51:1d:2b:98:7a:1b:1c:a6:ee:bf:f4:99:
         d6:a7:91:ca:7f:b2:35:ae:67:40:c9:be:5a:06:40:64:98:ca:
         c4:96:01:d3:28:ba:a5:2e:0f:55:6d:e1:0d:88:7f:d2:82:cf:
         37:c2:b7:12:9a:cb:85:7e:19:37:55:0c:89:b2:2c:2d:2a:69:
         3c:02:5f:13:69:5b:e5:d7:b9:b3:03:e3:c8:f9:23:eb:9d:07:
         27:78:91:bc
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEyqJxxckp2XEhUFjSEwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZWRjYTI5NzMtYjgxNS00Mjc2LWFlNTYtNDA1Y2M5ZTI4
MGI1MB4XDTI2MDEyNzE0MDAzNloXDTI2MDQyNzEzMDAzNlowLzEtMCsGA1UEAxMk
ZjBiYTExMTQtMTczZC00NDc5LTg2MWEtNWQ1NzFjODUwODg0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnipPzDYNkKRLlh4HILtAk7CvizGxjtxemFoM
BFNHds52v9lXGVPqsoXBfSeuZuHiZ89+h9OXWohwfW5rLarVFZZz+DwRNau3WXxw
f3GD3GcBwNtBgK7kuN73jHrlOVAlMYLq8fHuRzHuFfMOXcRW86Oe+x7Aq/elReVc
8BL/dsPN8S07KFX7/HcEoKW1EJSCkEdsX/FfaTCH/4p4hrjszoj9PO4YLvOsQHrY
tvnRXdSIQMknUo4+rGSljoxsyuaxmKVUvOM04FTiPKBHl9C0/uguRBRL+1cAI9n3
zFV6hZakTv+LwA4fdbf10UHg7XYSf9Dm8bfISuvwMxEQbw1LyQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFBMebGj78Wu6Nf8yp4+PleFY4ZqZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9lZGNh
Mjk3My1iODE1LTQyNzYtYWU1Ni00MDVjYzllMjgwYjUvMjE5MGJkM2EtMmEyNS0z
YzQ3LWJiMTItYjVjNzcxMWM0NzIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZWRjYTI5NzMtYjgxNS00Mjc2LWFl
NTYtNDA1Y2M5ZTI4MGI1L2VkY2EyOTczLWI4MTUtNDI3Ni1hZTU2LTQwNWNjOWUy
ODBiNS5jcmwwHwYDVR0jBBgwFoAU8IE2sNXlYm48V9NbT/s5bSUNIxowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy9lZGNhMjk3My1iODE1LTQyNzYtYWU1Ni00MDVj
YzllMjgwYjUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgZwgDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQCCepZS8StVfCiD8i7mG5SDhSV5wwHot9mYdD5BTzHqCDKD5EPxDyyk
h8xdCE9IdSG08A95e5DG03IpA9KHCNIMrWBAv0xi33DUFWJXjW3zCe9uu1sRTM7t
nSTCcr03eJyFCAZmboF3ZFBbdrE3P2Y7+kVx1OubGyW9Nw1I14qeRLb+l8mY6ZRl
f+dbaFG9go+ADLKDZl7TulIA8tdDLrXtQYEOiLJUklFRHSuYehscpu6/9JnWp5HK
f7I1rmdAyb5aBkBkmMrElgHTKLqlLg9VbeENiH/Sgs83wrcSmsuFfhk3VQyJsiwt
Kmk8Al8TaVvl17mzA+PI+SPrnQcneJG8
-----END CERTIFICATE-----
Generated at Fri Feb 27 07:34:33 2026 by rpki-client