Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/41c69ce0-9bcb-49ce-8582-dc6ce7fdf1de/422c4c6c-86c9-3e50-b42b-db3e335b7048.roa
File:                     422c4c6c-86c9-3e50-b42b-db3e335b7048.roa (raw, json)
Hash identifier:          dyT9bdOvZ7CFkZVqRJzdPSzcvJx0Y5eQexzl5X/1l8U=
Subject key identifier:   70:CA:4B:DF:07:88:73:BC:19:CE:6B:05:DB:5A:9C:2F:68:0B:C1:FF
Certificate issuer:       /CN=41c69ce0-9bcb-49ce-8582-dc6ce7fdf1de
Certificate serial:       010D0C9F4328584CF2BCEF8B97746A8932ECE080
Authority key identifier: A6:A6:0C:CE:DC:3F:02:49:BC:02:AC:F3:6C:C5:D3:09:E6:26:8B:D2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/41c69ce0-9bcb-49ce-8582-dc6ce7fdf1de.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/41c69ce0-9bcb-49ce-8582-dc6ce7fdf1de/422c4c6c-86c9-3e50-b42b-db3e335b7048.roa
Signing time:             Sun 22 Feb 2026 14:00:41 +0000
ROA not before:           Sun 22 Feb 2026 14:00:41 +0000
ROA not after:            Sat 23 May 2026 13:00:41 +0000
asID:                     16509
IP address blocks:        2606:6ac0:c000::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/41c69ce0-9bcb-49ce-8582-dc6ce7fdf1de/41c69ce0-9bcb-49ce-8582-dc6ce7fdf1de.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/41c69ce0-9bcb-49ce-8582-dc6ce7fdf1de/41c69ce0-9bcb-49ce-8582-dc6ce7fdf1de.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/41c69ce0-9bcb-49ce-8582-dc6ce7fdf1de.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 01 Mar 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:f2:bc:ef:8b:97:74:6a:89:32:ec:e0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41c69ce0-9bcb-49ce-8582-dc6ce7fdf1de
        Validity
            Not Before: Feb 22 14:00:41 2026 GMT
            Not After : May 23 13:00:41 2026 GMT
        Subject: CN=f827af3c-f98f-40cd-9f56-a5106746f5df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:99:cb:62:a0:73:88:f9:ea:0a:a5:8e:d0:e6:
                    fd:0f:09:3f:57:86:6c:a2:4e:6e:1a:73:7e:55:f3:
                    dd:65:37:c9:21:fc:7b:98:13:04:c0:20:73:4f:37:
                    dd:6a:51:f7:74:08:37:89:6b:0a:58:58:de:35:11:
                    c1:30:16:f4:92:7f:32:19:85:42:67:b2:3e:28:8d:
                    68:9e:c9:2d:88:ca:91:e2:21:04:3a:a8:5a:be:3d:
                    19:1f:7f:99:b7:77:b6:11:27:8f:04:93:3b:07:b4:
                    47:e6:2a:16:09:83:c4:64:5f:13:67:ba:51:74:5b:
                    f1:25:3d:67:25:fd:d9:f6:11:fc:27:15:8e:6a:a9:
                    de:39:d7:74:89:99:ae:47:16:17:31:04:05:36:da:
                    69:53:35:88:6b:9e:0c:e3:28:74:69:fb:8f:1d:9b:
                    58:b8:ed:6d:87:fc:11:fa:59:bd:b8:10:2d:28:7d:
                    f0:ec:be:7f:f8:04:e0:a2:d9:a2:72:b1:20:44:28:
                    a4:eb:47:2d:af:99:10:27:56:1b:0c:b0:5d:60:92:
                    3f:74:97:87:88:11:a4:25:e0:83:56:d4:61:64:e2:
                    72:bf:96:30:79:66:a4:79:d6:53:13:6d:ee:03:de:
                    93:4f:57:4a:10:e9:3b:08:c4:64:b0:f6:6d:ae:67:
                    99:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:CA:4B:DF:07:88:73:BC:19:CE:6B:05:DB:5A:9C:2F:68:0B:C1:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/41c69ce0-9bcb-49ce-8582-dc6ce7fdf1de/422c4c6c-86c9-3e50-b42b-db3e335b7048.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/41c69ce0-9bcb-49ce-8582-dc6ce7fdf1de/41c69ce0-9bcb-49ce-8582-dc6ce7fdf1de.crl

            X509v3 Authority Key Identifier:
                keyid:A6:A6:0C:CE:DC:3F:02:49:BC:02:AC:F3:6C:C5:D3:09:E6:26:8B:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/41c69ce0-9bcb-49ce-8582-dc6ce7fdf1de.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:6ac0:c000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:88:aa:34:81:82:42:97:59:f1:41:62:f7:dd:9d:08:da:d1:
         76:58:0a:d4:ec:0e:e2:3b:76:f4:86:2d:f5:a8:a1:51:0c:54:
         cf:b4:ad:9a:c7:92:3d:f0:ca:de:14:d4:7a:fd:90:22:7d:25:
         e0:7c:b2:5e:5a:92:15:81:40:e4:5a:86:4b:d3:e4:f3:bf:7f:
         f5:bd:99:4e:c9:b2:c9:1f:d2:77:5a:c9:17:6b:af:37:2d:2e:
         d8:a4:5c:5a:31:11:6c:29:1a:5d:62:96:23:33:88:82:42:64:
         68:b8:e4:e1:98:fe:df:00:51:38:a1:20:ad:0c:cf:29:5c:84:
         a9:77:5b:9a:50:08:82:5b:63:b9:a6:42:08:e7:d6:59:8b:57:
         f7:ef:16:a4:f1:ba:25:3e:ec:f1:3c:26:42:88:e1:79:8d:a5:
         c8:30:8d:6e:0a:b6:49:da:aa:91:bf:51:61:93:7a:fe:87:18:
         fa:b6:8f:8a:b0:ce:83:07:cc:78:59:ce:57:bc:b1:d3:79:0a:
         b7:d5:c4:dd:af:4b:0c:13:bc:38:d7:78:6f:83:07:ac:71:29:
         66:0d:8a:e6:f3:e8:0d:8f:dc:1a:bf:07:4c:2e:3a:b3:fa:a9:
         d6:76:56:56:b0:0b:d6:65:8c:a4:23:1b:e0:a3:6d:22:2e:41:
         23:99:72:f4
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEzyvO+Ll3RqiTLs4IAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDFjNjljZTAtOWJjYi00OWNlLTg1ODItZGM2Y2U3ZmRm
MWRlMB4XDTI2MDIyMjE0MDA0MVoXDTI2MDUyMzEzMDA0MVowLzEtMCsGA1UEAxMk
ZjgyN2FmM2MtZjk4Zi00MGNkLTlmNTYtYTUxMDY3NDZmNWRmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArJnLYqBziPnqCqWO0Ob9Dwk/V4Zsok5uGnN+
VfPdZTfJIfx7mBMEwCBzTzfdalH3dAg3iWsKWFjeNRHBMBb0kn8yGYVCZ7I+KI1o
nsktiMqR4iEEOqhavj0ZH3+Zt3e2ESePBJM7B7RH5ioWCYPEZF8TZ7pRdFvxJT1n
Jf3Z9hH8JxWOaqneOdd0iZmuRxYXMQQFNtppUzWIa54M4yh0afuPHZtYuO1th/wR
+lm9uBAtKH3w7L5/+ATgotmicrEgRCik60ctr5kQJ1YbDLBdYJI/dJeHiBGkJeCD
VtRhZOJyv5YweWakedZTE23uA96TT1dKEOk7CMRksPZtrmeZhwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFHDKS98HiHO8Gc5rBdtanC9oC8H/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy80MWM2
OWNlMC05YmNiLTQ5Y2UtODU4Mi1kYzZjZTdmZGYxZGUvNDIyYzRjNmMtODZjOS0z
ZTUwLWI0MmItZGIzZTMzNWI3MDQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvNDFjNjljZTAtOWJjYi00OWNlLTg1
ODItZGM2Y2U3ZmRmMWRlLzQxYzY5Y2UwLTliY2ItNDljZS04NTgyLWRjNmNlN2Zk
ZjFkZS5jcmwwHwYDVR0jBBgwFoAUpqYMztw/Akm8AqzzbMXTCeYmi9IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy80MWM2OWNlMC05YmNiLTQ5Y2UtODU4Mi1kYzZj
ZTdmZGYxZGUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgZqwMAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEASoiqNIGCQpdZ8UFi992dCNrRdlgK1OwO4jt29IYt9aihUQxUz7St
mseSPfDK3hTUev2QIn0l4HyyXlqSFYFA5FqGS9Pk879/9b2ZTsmyyR/Sd1rJF2uv
Ny0u2KRcWjERbCkaXWKWIzOIgkJkaLjk4Zj+3wBROKEgrQzPKVyEqXdbmlAIgltj
uaZCCOfWWYtX9+8WpPG6JT7s8TwmQojheY2lyDCNbgq2Sdqqkb9RYZN6/ocY+raP
irDOgwfMeFnOV7yx03kKt9XE3a9LDBO8ONd4b4MHrHEpZg2K5vPoDY/cGr8HTC46
s/qp1nZWVrAL1mWMpCMb4KNtIi5BI5ly9A==
-----END CERTIFICATE-----
Generated at Fri Feb 27 23:51:58 2026 by rpki-client