Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ade2d5aa-5600-4e0c-9525-24187c0ea66b/c2470a94-38a7-371b-81ba-0b3bb349cbdf.roa
File:                     c2470a94-38a7-371b-81ba-0b3bb349cbdf.roa (raw, json)
Hash identifier:          Wgr+kc19Wj5ojhiIBzR6nLwwmD98wKk2vNbpnZjN4po=
Subject key identifier:   03:16:DF:51:B7:3C:65:5E:7F:92:65:A6:37:92:DA:E8:00:8A:55:62
Certificate issuer:       /CN=ade2d5aa-5600-4e0c-9525-24187c0ea66b
Certificate serial:       010D0C9F4328584CAE5E82D118916AE2EC645D00
Authority key identifier: FB:9F:65:66:68:E4:8D:1B:64:71:75:D7:3F:05:00:BB:3E:D4:1D:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ade2d5aa-5600-4e0c-9525-24187c0ea66b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ade2d5aa-5600-4e0c-9525-24187c0ea66b/c2470a94-38a7-371b-81ba-0b3bb349cbdf.roa
Signing time:             Thu 29 Jan 2026 02:00:32 +0000
ROA not before:           Thu 29 Jan 2026 02:00:32 +0000
ROA not after:            Wed 29 Apr 2026 01:00:32 +0000
asID:                     16509
IP address blocks:        2607:8d40:f20::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ade2d5aa-5600-4e0c-9525-24187c0ea66b/ade2d5aa-5600-4e0c-9525-24187c0ea66b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ade2d5aa-5600-4e0c-9525-24187c0ea66b/ade2d5aa-5600-4e0c-9525-24187c0ea66b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ade2d5aa-5600-4e0c-9525-24187c0ea66b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Feb 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ae:5e:82:d1:18:91:6a:e2:ec:64:5d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ade2d5aa-5600-4e0c-9525-24187c0ea66b
        Validity
            Not Before: Jan 29 02:00:32 2026 GMT
            Not After : Apr 29 01:00:32 2026 GMT
        Subject: CN=cced21cb-efe5-4511-8832-9b4c44538db0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:ab:33:4a:50:95:49:08:ee:20:fa:5a:14:f9:
                    00:72:23:81:72:03:47:27:c5:30:81:14:03:b5:42:
                    66:eb:aa:18:46:bc:43:5b:e1:50:18:30:57:67:bd:
                    f3:bb:a8:4b:29:79:8c:66:7e:1d:8b:02:6a:22:3a:
                    31:68:11:49:65:f8:3d:0c:e7:94:98:1a:7b:fc:2c:
                    23:69:05:f9:a8:04:3a:58:3e:2d:a7:ce:41:72:ae:
                    6e:02:a6:73:4d:76:57:41:02:29:f1:a0:ee:82:16:
                    82:bd:5f:31:5e:f3:85:ae:e3:4d:52:f3:47:66:e7:
                    ff:ac:b7:bf:5e:76:fc:cd:06:e1:59:73:fd:21:82:
                    40:87:0e:69:d3:fc:f4:63:d1:20:c0:68:84:98:cb:
                    30:f2:4b:34:f4:dc:13:16:6b:42:32:c6:a2:7d:4c:
                    20:60:c5:af:33:0f:42:02:91:7c:1a:ce:52:fe:b0:
                    96:72:32:d3:26:a3:73:e6:90:34:28:63:13:39:19:
                    33:05:ad:e1:66:de:3a:5a:d0:6e:30:c2:93:4b:aa:
                    6e:80:95:5f:31:2f:f6:2c:f4:8a:9b:c3:5f:97:c0:
                    dd:9f:f7:14:b3:53:a0:d0:25:d7:ba:b6:53:e9:91:
                    55:62:36:87:e4:b4:80:65:11:4c:03:bd:fc:6c:aa:
                    c3:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:16:DF:51:B7:3C:65:5E:7F:92:65:A6:37:92:DA:E8:00:8A:55:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ade2d5aa-5600-4e0c-9525-24187c0ea66b/c2470a94-38a7-371b-81ba-0b3bb349cbdf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ade2d5aa-5600-4e0c-9525-24187c0ea66b/ade2d5aa-5600-4e0c-9525-24187c0ea66b.crl

            X509v3 Authority Key Identifier:
                keyid:FB:9F:65:66:68:E4:8D:1B:64:71:75:D7:3F:05:00:BB:3E:D4:1D:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ade2d5aa-5600-4e0c-9525-24187c0ea66b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8d40:f20::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:e2:be:cb:da:90:61:2d:cb:bd:5b:9c:82:32:69:6a:a4:15:
         83:6e:ee:3c:8b:bb:5d:0f:0d:91:14:6c:8a:5f:b0:ff:db:7c:
         db:b3:63:54:ed:89:82:35:c9:47:d2:15:ff:bc:7c:fb:41:bc:
         81:44:46:f9:23:90:2e:f8:53:a8:3a:17:1b:f6:ea:0a:66:98:
         62:8a:f5:72:23:0a:ab:b5:85:97:65:09:4a:56:2b:69:0a:e1:
         4a:36:2a:69:74:1d:22:44:9f:37:8e:39:45:7b:69:c2:b7:6c:
         57:d1:0b:0a:a3:c5:52:bd:41:95:c3:fa:e9:5b:57:1d:07:ac:
         8a:40:59:0e:77:74:67:53:ce:32:d2:9d:80:aa:22:30:16:37:
         47:b7:c1:65:b3:47:40:e8:7b:74:6a:03:51:10:80:d9:0a:5d:
         e3:b3:63:cd:c6:a5:1c:8f:a8:6c:23:28:1c:b3:b3:66:ec:09:
         3e:60:44:1d:66:61:46:9f:5d:0c:b2:45:6b:7b:b4:27:dc:c6:
         81:10:61:49:20:a0:ba:70:a0:ab:13:bc:bb:4a:7c:45:75:b9:
         3e:bd:f8:17:82:cb:d2:71:fb:04:c7:2a:c6:86:e6:c1:03:22:
         ad:7b:64:f4:24:2a:09:fa:7e:fb:6f:4a:93:6d:b5:86:57:2a:
         58:be:6b:52
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEyuXoLRGJFq4uxkXQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWRlMmQ1YWEtNTYwMC00ZTBjLTk1MjUtMjQxODdjMGVh
NjZiMB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk
Y2NlZDIxY2ItZWZlNS00NTExLTg4MzItOWI0YzQ0NTM4ZGIwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw6szSlCVSQjuIPpaFPkAciOBcgNHJ8UwgRQD
tUJm66oYRrxDW+FQGDBXZ73zu6hLKXmMZn4diwJqIjoxaBFJZfg9DOeUmBp7/Cwj
aQX5qAQ6WD4tp85Bcq5uAqZzTXZXQQIp8aDughaCvV8xXvOFruNNUvNHZuf/rLe/
Xnb8zQbhWXP9IYJAhw5p0/z0Y9EgwGiEmMsw8ks09NwTFmtCMsaifUwgYMWvMw9C
ApF8Gs5S/rCWcjLTJqNz5pA0KGMTORkzBa3hZt46WtBuMMKTS6pugJVfMS/2LPSK
m8Nfl8Ddn/cUs1Og0CXXurZT6ZFVYjaH5LSAZRFMA738bKrDQwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFAMW31G3PGVef5JlpjeS2ugAilViMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9hZGUy
ZDVhYS01NjAwLTRlMGMtOTUyNS0yNDE4N2MwZWE2NmIvYzI0NzBhOTQtMzhhNy0z
NzFiLTgxYmEtMGIzYmIzNDljYmRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYWRlMmQ1YWEtNTYwMC00ZTBjLTk1
MjUtMjQxODdjMGVhNjZiL2FkZTJkNWFhLTU2MDAtNGUwYy05NTI1LTI0MTg3YzBl
YTY2Yi5jcmwwHwYDVR0jBBgwFoAU+59lZmjkjRtkcXXXPwUAuz7UHZcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi9hZGUyZDVhYS01NjAwLTRlMGMtOTUyNS0yNDE4
N2MwZWE2NmIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgeNQA8g
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAEfivsvakGEty71bnIIyaWqkFYNu7jyLu10PDZEUbIpfsP/bfNuz
Y1TtiYI1yUfSFf+8fPtBvIFERvkjkC74U6g6Fxv26gpmmGKK9XIjCqu1hZdlCUpW
K2kK4Uo2Kml0HSJEnzeOOUV7acK3bFfRCwqjxVK9QZXD+ulbVx0HrIpAWQ53dGdT
zjLSnYCqIjAWN0e3wWWzR0Doe3RqA1EQgNkKXeOzY83GpRyPqGwjKByzs2bsCT5g
RB1mYUafXQyyRWt7tCfcxoEQYUkgoLpwoKsTvLtKfEV1uT69+BeCy9Jx+wTHKsaG
5sEDIq17ZPQkKgn6fvtvSpNttYZXKli+a1I=
-----END CERTIFICATE-----
Generated at Thu Feb 26 17:48:43 2026 by rpki-client