Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b1339474-4147-4086-aac6-28afc5d6cca6/504b5c2e-ba9f-3aa4-8581-803b8ca8ab38.roa
File:                     504b5c2e-ba9f-3aa4-8581-803b8ca8ab38.roa (raw, json)
Hash identifier:          xnFQq61M8DJnfFXmAjvGfM/6n1Quj3Re3v53wo2HPPM=
Subject key identifier:   AA:CA:69:2B:7E:A9:BC:4C:2A:31:AA:F3:29:FF:3E:C1:F6:EE:69:48
Certificate issuer:       /CN=b1339474-4147-4086-aac6-28afc5d6cca6
Certificate serial:       010D0C9F4328584CCE71EA9E17F009073AE2B1C0
Authority key identifier: F0:55:82:FD:84:F1:80:36:15:41:33:3F:6D:11:FA:F6:AD:ED:79:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b1339474-4147-4086-aac6-28afc5d6cca6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b1339474-4147-4086-aac6-28afc5d6cca6/504b5c2e-ba9f-3aa4-8581-803b8ca8ab38.roa
Signing time:             Mon 09 Feb 2026 14:00:39 +0000
ROA not before:           Mon 09 Feb 2026 14:00:39 +0000
ROA not after:            Sun 10 May 2026 13:00:39 +0000
asID:                     22131
IP address blocks:        2607:9ac0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b1339474-4147-4086-aac6-28afc5d6cca6/b1339474-4147-4086-aac6-28afc5d6cca6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b1339474-4147-4086-aac6-28afc5d6cca6/b1339474-4147-4086-aac6-28afc5d6cca6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b1339474-4147-4086-aac6-28afc5d6cca6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Feb 2026 03:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ce:71:ea:9e:17:f0:09:07:3a:e2:b1:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1339474-4147-4086-aac6-28afc5d6cca6
        Validity
            Not Before: Feb  9 14:00:39 2026 GMT
            Not After : May 10 13:00:39 2026 GMT
        Subject: CN=020dcd71-168b-45e4-b89c-a979c567aadf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:bd:37:24:ba:c9:f6:25:d9:96:2c:dc:02:40:
                    b4:ca:c2:85:d2:c3:c6:01:83:78:b2:17:07:c9:38:
                    20:fc:46:b9:ac:39:07:a0:b2:41:69:81:23:10:24:
                    e5:74:ad:47:23:f1:92:55:5d:1a:a2:39:5d:89:c7:
                    29:44:fa:a6:29:a3:7f:fd:9d:99:ef:00:0f:e1:9a:
                    69:da:45:88:aa:83:fb:cb:97:85:e2:d6:d8:37:18:
                    c7:ea:7a:d7:47:a2:25:64:49:6f:02:0f:78:e1:be:
                    3c:2c:be:ba:1f:32:ec:ad:d6:d5:a9:3a:37:b3:0f:
                    f6:81:4d:aa:7e:19:9b:49:6f:58:ca:dc:53:94:9d:
                    94:a0:32:49:c7:54:d8:a8:47:52:6b:6f:21:93:46:
                    f2:33:5b:f3:4f:82:17:01:de:08:28:83:59:34:05:
                    08:a9:16:0a:55:99:5f:27:37:86:57:1c:dd:4f:4c:
                    cb:4f:72:ee:bd:9f:0d:94:58:d6:c2:bd:44:f1:08:
                    83:fc:38:64:28:ad:4c:15:7b:31:39:4d:f0:1c:96:
                    fc:5f:d2:32:40:91:cc:30:a2:a3:8d:55:f2:24:31:
                    35:0f:61:68:b2:91:cb:bc:b6:07:13:06:05:c4:1e:
                    51:b6:a7:f0:b8:9b:73:a7:3d:6a:dc:cd:e7:e7:e2:
                    74:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:CA:69:2B:7E:A9:BC:4C:2A:31:AA:F3:29:FF:3E:C1:F6:EE:69:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b1339474-4147-4086-aac6-28afc5d6cca6/504b5c2e-ba9f-3aa4-8581-803b8ca8ab38.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b1339474-4147-4086-aac6-28afc5d6cca6/b1339474-4147-4086-aac6-28afc5d6cca6.crl

            X509v3 Authority Key Identifier:
                keyid:F0:55:82:FD:84:F1:80:36:15:41:33:3F:6D:11:FA:F6:AD:ED:79:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b1339474-4147-4086-aac6-28afc5d6cca6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:9ac0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a6:10:9f:cd:b9:d8:ab:d6:30:80:af:42:d1:b3:9d:ee:2f:60:
         c3:2e:19:e6:75:28:08:8f:3f:5a:f4:f1:9a:42:fd:1b:32:27:
         87:f9:c1:32:14:f9:3f:2e:bf:78:2b:6e:9a:86:6a:2d:97:96:
         a7:39:e3:11:b0:4b:6d:ca:3e:8a:bc:cb:f6:9d:33:7b:6b:e9:
         f2:a2:9e:4a:e2:ae:46:fb:af:40:fc:19:27:3e:f4:4b:5a:f6:
         00:bc:93:ec:84:98:6d:d3:58:6d:b5:f5:d4:37:13:2f:10:24:
         c6:12:bd:65:f8:a5:e4:e6:0b:c5:ac:60:7f:6a:f4:a2:17:0b:
         43:37:65:5d:59:9d:19:90:39:4d:c1:6a:d5:ad:dd:5f:18:23:
         48:b0:80:40:36:f1:8f:b8:2c:a5:f0:57:2d:98:25:c2:2e:49:
         3d:ee:e0:df:d2:bf:95:88:7f:9b:f9:d9:d4:85:3b:c7:d9:3d:
         fa:52:da:86:8a:43:52:3b:46:98:21:da:d3:21:b9:60:4c:7f:
         6b:af:47:8b:c9:4b:e6:82:e1:23:49:c6:ca:22:a2:9f:12:2b:
         d1:31:8d:6a:dc:10:a4:7b:c9:54:0d:6d:29:c1:45:c6:73:7b:
         86:6a:8a:73:63:67:5a:19:70:95:ed:53:8c:e0:ef:06:69:e0:
         c4:fb:44:89
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEzOceqeF/AJBzriscAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjEzMzk0NzQtNDE0Ny00MDg2LWFhYzYtMjhhZmM1ZDZj
Y2E2MB4XDTI2MDIwOTE0MDAzOVoXDTI2MDUxMDEzMDAzOVowLzEtMCsGA1UEAxMk
MDIwZGNkNzEtMTY4Yi00NWU0LWI4OWMtYTk3OWM1NjdhYWRmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmr03JLrJ9iXZlizcAkC0ysKF0sPGAYN4shcH
yTgg/Ea5rDkHoLJBaYEjECTldK1HI/GSVV0aojldiccpRPqmKaN//Z2Z7wAP4Zpp
2kWIqoP7y5eF4tbYNxjH6nrXR6IlZElvAg944b48LL66HzLsrdbVqTo3sw/2gU2q
fhmbSW9YytxTlJ2UoDJJx1TYqEdSa28hk0byM1vzT4IXAd4IKINZNAUIqRYKVZlf
JzeGVxzdT0zLT3LuvZ8NlFjWwr1E8QiD/DhkKK1MFXsxOU3wHJb8X9IyQJHMMKKj
jVXyJDE1D2FospHLvLYHEwYFxB5RtqfwuJtzpz1q3M3n5+J0zwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFKrKaSt+qbxMKjGq8yn/PsH27mlIMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9iMTMz
OTQ3NC00MTQ3LTQwODYtYWFjNi0yOGFmYzVkNmNjYTYvNTA0YjVjMmUtYmE5Zi0z
YWE0LTg1ODEtODAzYjhjYThhYjM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z
N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvYjEzMzk0NzQtNDE0Ny00MDg2LWFh
YzYtMjhhZmM1ZDZjY2E2L2IxMzM5NDc0LTQxNDctNDA4Ni1hYWM2LTI4YWZjNWQ2
Y2NhNi5jcmwwHwYDVR0jBBgwFoAU8FWC/YTxgDYVQTM/bRH69q3teT8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4
OC1hYmVhLWU0OTA5ZWYxYjRlMi9iMTMzOTQ3NC00MTQ3LTQwODYtYWFjNi0yOGFm
YzVkNmNjYTYuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgeawDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQCmEJ/Nudir1jCAr0LRs53uL2DDLhnmdSgIjz9a9PGaQv0bMieH+cEy
FPk/Lr94K26ahmotl5anOeMRsEttyj6KvMv2nTN7a+nyop5K4q5G+69A/BknPvRL
WvYAvJPshJht01httfXUNxMvECTGEr1l+KXk5gvFrGB/avSiFwtDN2VdWZ0ZkDlN
wWrVrd1fGCNIsIBANvGPuCyl8FctmCXCLkk97uDf0r+ViH+b+dnUhTvH2T36UtqG
ikNSO0aYIdrTIblgTH9rr0eLyUvmguEjScbKIqKfEivRMY1q3BCke8lUDW0pwUXG
c3uGaopzY2daGXCV7VOM4O8GaeDE+0SJ
-----END CERTIFICATE-----
Generated at Fri Feb 27 03:39:41 2026 by rpki-client