Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/959a22b2-95d2-48c0-8feb-819d877ee1e3/8edd3ca6-6839-3602-82a0-a559bf5bbf9a.roa
File:                     8edd3ca6-6839-3602-82a0-a559bf5bbf9a.roa (raw, json)
Hash identifier:          2Vgk4eR9u3THmC0udAI9EEPG97z7yE3wMGuK9lZkoDo=
Subject key identifier:   56:30:53:FB:EB:9E:88:08:6D:46:AE:34:73:DA:3B:FA:20:7F:F0:C9
Certificate issuer:       /CN=959a22b2-95d2-48c0-8feb-819d877ee1e3
Certificate serial:       010D0C9F4328584CED27BC5AA366509D316E1500
Authority key identifier: 63:9E:16:CE:FE:54:7B:5B:F3:03:85:B9:B9:C5:F6:6A:34:06:3A:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/959a22b2-95d2-48c0-8feb-819d877ee1e3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/959a22b2-95d2-48c0-8feb-819d877ee1e3/8edd3ca6-6839-3602-82a0-a559bf5bbf9a.roa
Signing time:             Fri 20 Feb 2026 14:00:41 +0000
ROA not before:           Fri 20 Feb 2026 14:00:41 +0000
ROA not after:            Thu 21 May 2026 13:00:41 +0000
asID:                     803
IP address blocks:        2620:9e:a000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/959a22b2-95d2-48c0-8feb-819d877ee1e3/959a22b2-95d2-48c0-8feb-819d877ee1e3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/959a22b2-95d2-48c0-8feb-819d877ee1e3/959a22b2-95d2-48c0-8feb-819d877ee1e3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/959a22b2-95d2-48c0-8feb-819d877ee1e3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Feb 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ed:27:bc:5a:a3:66:50:9d:31:6e:15:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=959a22b2-95d2-48c0-8feb-819d877ee1e3
        Validity
            Not Before: Feb 20 14:00:41 2026 GMT
            Not After : May 21 13:00:41 2026 GMT
        Subject: CN=5bed4f9b-4c2d-43fd-a07b-3385c7437db0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:17:ca:f0:a4:a5:b3:ee:d5:d1:0f:59:c9:f1:
                    ab:0b:14:05:92:14:e1:d6:6b:24:30:e9:99:c1:c7:
                    68:fb:b6:f2:a7:41:5c:64:38:39:f1:b7:2a:d3:9c:
                    9b:cd:d0:0b:62:19:6b:1c:20:ac:b4:46:6e:da:e6:
                    bb:2a:15:55:95:53:5e:59:bf:d8:c0:57:14:bc:9e:
                    12:50:5e:3f:7d:6b:67:eb:2c:d0:0c:f1:fb:b2:92:
                    3c:42:7c:eb:c4:88:e9:ca:95:87:3e:e1:22:e4:a5:
                    4b:8a:f9:5d:82:0e:91:00:75:04:7e:b2:69:dd:0b:
                    40:a5:24:7f:3f:a0:c6:f1:1b:3f:fd:57:2b:54:eb:
                    6a:34:72:b0:ed:0b:65:8e:8d:25:4f:50:d8:5a:29:
                    8f:72:27:f7:66:7f:10:f0:69:a0:85:1c:bd:26:cc:
                    64:c4:ad:7c:6a:05:df:f2:6e:c4:0e:04:51:37:87:
                    54:87:7d:11:de:3f:9e:d5:08:40:bc:c2:68:ca:6d:
                    42:f4:bd:c1:09:34:53:14:30:d5:aa:07:15:d2:86:
                    8a:f4:4f:c2:80:9d:d7:02:2c:2f:f7:8d:3f:6b:f5:
                    30:fa:30:a8:a9:d4:e0:68:bf:8a:a7:61:d9:2a:59:
                    91:1f:a9:55:5d:08:19:4d:70:c8:2e:48:56:21:cf:
                    c6:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:30:53:FB:EB:9E:88:08:6D:46:AE:34:73:DA:3B:FA:20:7F:F0:C9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/959a22b2-95d2-48c0-8feb-819d877ee1e3/8edd3ca6-6839-3602-82a0-a559bf5bbf9a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/959a22b2-95d2-48c0-8feb-819d877ee1e3/959a22b2-95d2-48c0-8feb-819d877ee1e3.crl

            X509v3 Authority Key Identifier:
                keyid:63:9E:16:CE:FE:54:7B:5B:F3:03:85:B9:B9:C5:F6:6A:34:06:3A:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/959a22b2-95d2-48c0-8feb-819d877ee1e3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:9e:a000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:ee:65:29:57:29:ee:07:1c:2a:c1:50:81:33:08:d0:b2:b0:
         1c:34:72:68:7b:14:13:ed:3e:cd:60:09:41:f6:7b:14:af:9b:
         a2:02:ec:e1:c9:e5:f7:4b:63:d2:1d:61:2e:83:bd:b8:30:24:
         28:89:a6:ef:7c:39:47:1f:c2:99:f5:d1:8b:1f:95:f4:0a:12:
         95:7f:d1:70:b4:39:e7:05:5e:17:78:7c:72:12:9c:75:e8:b5:
         be:f7:2c:2f:d0:20:5f:ac:ec:96:f0:0f:10:17:6d:84:8e:66:
         d5:62:d9:19:4f:a4:07:66:7e:55:94:62:0c:bf:00:b7:60:c2:
         b1:8e:ea:42:a4:8b:99:4e:69:45:fb:84:67:dc:13:3a:59:8d:
         8f:52:b5:04:15:b3:f6:5e:b9:db:70:5e:e6:15:31:75:e5:d6:
         35:93:e4:6c:f7:f9:fb:66:08:3f:1d:e9:48:68:27:4d:b7:97:
         1e:ef:3c:e6:29:db:a8:db:e3:02:36:78:6c:a4:b5:d0:ce:f6:
         9b:1c:88:48:2b:f6:80:49:ee:8c:0f:27:96:ad:2c:55:e9:3a:
         fe:97:3c:75:0c:00:bf:7a:df:b1:59:e8:6e:ec:0b:50:32:74:
         1f:1e:f5:06:32:ef:36:32:cb:c8:85:7a:3a:80:31:55:27:fe:
         45:3d:2e:25
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEztJ7xao2ZQnTFuFQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTU5YTIyYjItOTVkMi00OGMwLThmZWItODE5ZDg3N2Vl
MWUzMB4XDTI2MDIyMDE0MDA0MVoXDTI2MDUyMTEzMDA0MVowLzEtMCsGA1UEAxMk
NWJlZDRmOWItNGMyZC00M2ZkLWEwN2ItMzM4NWM3NDM3ZGIwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnxfK8KSls+7V0Q9ZyfGrCxQFkhTh1mskMOmZ
wcdo+7byp0FcZDg58bcq05ybzdALYhlrHCCstEZu2ua7KhVVlVNeWb/YwFcUvJ4S
UF4/fWtn6yzQDPH7spI8QnzrxIjpypWHPuEi5KVLivldgg6RAHUEfrJp3QtApSR/
P6DG8Rs//VcrVOtqNHKw7Qtljo0lT1DYWimPcif3Zn8Q8GmghRy9JsxkxK18agXf
8m7EDgRRN4dUh30R3j+e1QhAvMJoym1C9L3BCTRTFDDVqgcV0oaK9E/CgJ3XAiwv
940/a/Uw+jCoqdTgaL+Kp2HZKlmRH6lVXQgZTXDILkhWIc/G2QIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFFYwU/vrnogIbUauNHPaO/ogf/DJMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy85NTlh
MjJiMi05NWQyLTQ4YzAtOGZlYi04MTlkODc3ZWUxZTMvOGVkZDNjYTYtNjgzOS0z
NjAyLTgyYTAtYTU1OWJmNWJiZjlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvOTU5YTIyYjItOTVkMi00OGMwLThm
ZWItODE5ZDg3N2VlMWUzLzk1OWEyMmIyLTk1ZDItNDhjMC04ZmViLTgxOWQ4Nzdl
ZTFlMy5jcmwwHwYDVR0jBBgwFoAUY54Wzv5Ue1vzA4W5ucX2ajQGOngwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy85NTlhMjJiMi05NWQyLTQ4YzAtOGZlYi04MTlk
ODc3ZWUxZTMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAnqAA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBADnuZSlXKe4HHCrBUIEzCNCysBw0cmh7FBPtPs1gCUH2exSvm6IC
7OHJ5fdLY9IdYS6DvbgwJCiJpu98OUcfwpn10YsflfQKEpV/0XC0OecFXhd4fHIS
nHXotb73LC/QIF+s7JbwDxAXbYSOZtVi2RlPpAdmflWUYgy/ALdgwrGO6kKki5lO
aUX7hGfcEzpZjY9StQQVs/ZeudtwXuYVMXXl1jWT5Gz3+ftmCD8d6UhoJ023lx7v
POYp26jb4wI2eGyktdDO9psciEgr9oBJ7owPJ5atLFXpOv6XPHUMAL9637FZ6G7s
C1AydB8e9QYy7zYyy8iFejqAMVUn/kU9LiU=
-----END CERTIFICATE-----
Generated at Fri Feb 27 07:54:34 2026 by rpki-client