Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb2c27ca-fb7c-4cad-9f9b-4f754f864263/4a620ec8-b400-32c5-a29e-91f309601139.roa
File:                     4a620ec8-b400-32c5-a29e-91f309601139.roa (raw, json)
Hash identifier:          1mDzDRRHsC6SMhtB86vZ855GiOGxx7cYSmbr8vGRPdg=
Subject key identifier:   B5:4D:89:7C:F4:14:0C:FF:76:38:B1:87:82:D6:6B:EF:7F:0E:4F:44
Certificate issuer:       /CN=eb2c27ca-fb7c-4cad-9f9b-4f754f864263
Certificate serial:       010D0C9F4328584CAA27046ED6A0A69E79EAE4E0
Authority key identifier: CF:B9:5A:A2:3C:1B:20:FF:10:CA:74:8F:25:5C:F5:09:89:A2:BE:51
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb2c27ca-fb7c-4cad-9f9b-4f754f864263.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb2c27ca-fb7c-4cad-9f9b-4f754f864263/4a620ec8-b400-32c5-a29e-91f309601139.roa
Signing time:             Tue 27 Jan 2026 14:00:36 +0000
ROA not before:           Tue 27 Jan 2026 14:00:36 +0000
ROA not after:            Mon 27 Apr 2026 13:00:36 +0000
asID:                     396908
IP address blocks:        2602:f956:c0::/43 maxlen: 43
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb2c27ca-fb7c-4cad-9f9b-4f754f864263/eb2c27ca-fb7c-4cad-9f9b-4f754f864263.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb2c27ca-fb7c-4cad-9f9b-4f754f864263/eb2c27ca-fb7c-4cad-9f9b-4f754f864263.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb2c27ca-fb7c-4cad-9f9b-4f754f864263.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 21 Feb 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:aa:27:04:6e:d6:a0:a6:9e:79:ea:e4:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb2c27ca-fb7c-4cad-9f9b-4f754f864263
        Validity
            Not Before: Jan 27 14:00:36 2026 GMT
            Not After : Apr 27 13:00:36 2026 GMT
        Subject: CN=74be721f-6ac3-4190-9160-9d1a17f9990f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:e5:94:fd:ee:93:fc:f5:da:1e:30:ea:84:8c:
                    ed:ca:9b:96:c3:b0:df:28:a1:a6:4c:51:88:bf:dd:
                    cb:31:74:0a:2d:51:89:54:06:b9:d9:77:cc:f5:9c:
                    83:33:86:3b:d9:c9:a0:57:77:0e:90:c5:45:2d:26:
                    de:ce:29:1c:62:96:77:fe:88:c6:27:0f:33:4a:69:
                    58:e4:a5:99:1a:7d:42:e5:22:06:a7:ed:24:b5:c2:
                    29:88:5b:1c:ad:98:54:38:58:01:cd:30:ca:5f:21:
                    38:c1:d3:64:79:bf:40:45:02:fc:3c:d9:21:b1:89:
                    b2:fe:a1:0a:fd:44:db:91:c4:89:70:b5:c9:dd:a8:
                    d4:73:49:33:ab:11:92:0f:bd:16:00:24:7a:66:4d:
                    81:a7:d7:20:b1:1d:43:e5:f1:68:05:d1:79:1a:ff:
                    c8:8a:a3:13:d5:ce:a0:40:57:30:ab:c9:7c:f6:79:
                    b0:9c:b1:68:da:02:57:fa:a2:f7:2d:ce:5c:bd:d8:
                    1f:bc:fd:24:e7:47:55:6b:1c:8c:bb:44:d6:60:5a:
                    fc:b8:8f:69:c4:ce:35:92:1d:9f:58:7c:32:20:3c:
                    1e:17:4e:64:e0:65:3a:a3:18:1b:80:64:8d:ed:1b:
                    ec:86:39:f3:48:15:e1:88:77:5d:92:a3:46:23:6d:
                    24:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:4D:89:7C:F4:14:0C:FF:76:38:B1:87:82:D6:6B:EF:7F:0E:4F:44
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb2c27ca-fb7c-4cad-9f9b-4f754f864263/4a620ec8-b400-32c5-a29e-91f309601139.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb2c27ca-fb7c-4cad-9f9b-4f754f864263/eb2c27ca-fb7c-4cad-9f9b-4f754f864263.crl

            X509v3 Authority Key Identifier:
                keyid:CF:B9:5A:A2:3C:1B:20:FF:10:CA:74:8F:25:5C:F5:09:89:A2:BE:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb2c27ca-fb7c-4cad-9f9b-4f754f864263.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f956:c0::/43

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:0b:41:41:70:9c:c0:59:b3:bb:df:a3:d3:52:52:16:b8:1b:
         b1:b1:aa:6a:87:65:71:28:1a:68:df:a6:28:6f:00:e7:53:94:
         d4:dc:b9:f5:3b:f4:3c:bb:39:59:15:d8:c6:ae:91:30:d1:29:
         73:a1:5a:e3:fc:5b:b3:81:ef:89:ef:3c:70:a0:f8:8e:30:4f:
         27:90:b7:03:ff:5a:7b:56:87:26:16:35:de:fd:77:ea:5b:79:
         88:50:30:75:b9:02:51:2e:67:43:17:7d:05:46:11:52:e0:3f:
         6b:4f:33:a0:33:e1:a0:4c:71:e7:9b:db:5f:b5:f5:76:8c:96:
         3f:c1:2a:86:8e:9a:0e:34:95:c3:8f:28:ad:81:f2:4d:89:5d:
         44:28:1b:47:7b:e7:17:51:f0:f4:ed:15:ab:bb:60:05:a8:00:
         b4:2b:57:15:ec:c5:85:14:13:53:20:fd:13:e7:08:15:ae:10:
         a9:03:4f:32:78:1b:9a:68:c2:12:e7:63:ee:04:66:bb:89:90:
         74:09:ea:9f:05:f5:94:68:e7:6d:7a:a1:9b:b8:b1:87:00:24:
         42:2a:59:2c:5a:de:c0:76:5f:f2:7d:ce:62:ab:cf:b7:12:07:
         f5:ad:9f:8c:33:d3:61:f1:db:80:39:83:05:ee:ca:56:88:2e:
         dc:c8:dc:aa
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEyqJwRu1qCmnnnq5OAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZWIyYzI3Y2EtZmI3Yy00Y2FkLTlmOWItNGY3NTRmODY0
MjYzMB4XDTI2MDEyNzE0MDAzNloXDTI2MDQyNzEzMDAzNlowLzEtMCsGA1UEAxMk
NzRiZTcyMWYtNmFjMy00MTkwLTkxNjAtOWQxYTE3Zjk5OTBmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAluWU/e6T/PXaHjDqhIztypuWw7DfKKGmTFGI
v93LMXQKLVGJVAa52XfM9ZyDM4Y72cmgV3cOkMVFLSbezikcYpZ3/ojGJw8zSmlY
5KWZGn1C5SIGp+0ktcIpiFscrZhUOFgBzTDKXyE4wdNkeb9ARQL8PNkhsYmy/qEK
/UTbkcSJcLXJ3ajUc0kzqxGSD70WACR6Zk2Bp9cgsR1D5fFoBdF5Gv/IiqMT1c6g
QFcwq8l89nmwnLFo2gJX+qL3Lc5cvdgfvP0k50dVaxyMu0TWYFr8uI9pxM41kh2f
WHwyIDweF05k4GU6oxgbgGSN7RvshjnzSBXhiHddkqNGI20k6QIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFLVNiXz0FAz/djixh4LWa+9/Dk9EMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lYjJj
MjdjYS1mYjdjLTRjYWQtOWY5Yi00Zjc1NGY4NjQyNjMvNGE2MjBlYzgtYjQwMC0z
MmM1LWEyOWUtOTFmMzA5NjAxMTM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZWIyYzI3Y2EtZmI3Yy00Y2FkLTlm
OWItNGY3NTRmODY0MjYzL2ViMmMyN2NhLWZiN2MtNGNhZC05ZjliLTRmNzU0Zjg2
NDI2My5jcmwwHwYDVR0jBBgwFoAUz7laojwbIP8QynSPJVz1CYmivlEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy9lYjJjMjdjYS1mYjdjLTRjYWQtOWY5Yi00Zjc1
NGY4NjQyNjMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcFJgL5VgDA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAHILQUFwnMBZs7vfo9NSUha4G7GxqmqHZXEoGmjfpihvAOdTlNTc
ufU79Dy7OVkV2MaukTDRKXOhWuP8W7OB74nvPHCg+I4wTyeQtwP/WntWhyYWNd79
d+pbeYhQMHW5AlEuZ0MXfQVGEVLgP2tPM6Az4aBMceeb21+19XaMlj/BKoaOmg40
lcOPKK2B8k2JXUQoG0d75xdR8PTtFau7YAWoALQrVxXsxYUUE1Mg/RPnCBWuEKkD
TzJ4G5powhLnY+4EZruJkHQJ6p8F9ZRo5216oZu4sYcAJEIqWSxa3sB2X/J9zmKr
z7cSB/Wtn4wz02Hx24A5gwXuylaILtzI3Ko=
-----END CERTIFICATE-----
Generated at Thu Feb 19 21:14:32 2026 by rpki-client