Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bf475464-21e0-35f2-aed7-5740ae7474ea.roa
File:                     bf475464-21e0-35f2-aed7-5740ae7474ea.roa (raw, json)
Hash identifier:          oWMvfLEBcR6nnUllPqvEWRFM5x/zv100+FR8vPYT8Jk=
Subject key identifier:   E4:6B:A2:FF:1A:03:C5:4F:94:12:52:B3:C7:DA:D6:05:30:A2:98:A6
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584D091273A33F7F77244F0E3FC0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bf475464-21e0-35f2-aed7-5740ae7474ea.roa
Signing time:             Mon 02 Mar 2026 14:00:41 +0000
ROA not before:           Mon 02 Mar 2026 14:00:41 +0000
ROA not after:            Sun 31 May 2026 13:00:41 +0000
asID:                     20940
IP address blocks:        2600:1488:c001::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 08 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:09:12:73:a3:3f:7f:77:24:4f:0e:3f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Mar  2 14:00:41 2026 GMT
            Not After : May 31 13:00:41 2026 GMT
        Subject: CN=aeed2bf9-a526-484c-82e1-563951a6425f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:29:67:8c:2a:56:24:3a:27:fa:cf:87:d7:7e:
                    51:78:81:ea:5c:48:a3:df:a4:1e:00:8e:97:49:3d:
                    62:64:d5:f9:55:fc:65:cc:f4:36:5c:8f:38:bc:3e:
                    73:33:ec:22:f8:1a:80:d0:50:10:ba:8e:ef:ba:17:
                    8b:2d:4e:ff:c5:f4:80:37:27:0a:a6:b1:f7:0c:e5:
                    6b:9b:68:02:2e:06:5c:83:82:4e:3b:6d:3f:e2:bc:
                    5d:b2:6c:97:fe:b5:a7:a9:61:23:90:b8:84:b1:e6:
                    d9:c4:05:d9:53:6f:f8:fb:be:4c:d8:3c:d9:fd:cd:
                    47:43:b2:5b:1d:9a:17:a5:f1:b6:62:cd:dc:20:c8:
                    d4:0b:3c:4f:e3:2f:0d:41:82:73:80:22:cb:da:b9:
                    93:02:d3:f9:0b:48:17:e8:ba:38:d1:57:79:a2:ed:
                    86:05:04:e5:f6:be:08:e5:38:d7:6f:06:c8:b7:f7:
                    9e:a4:39:67:44:1b:d6:ab:7f:ec:6c:1a:6d:dc:3a:
                    77:cb:13:3a:b8:61:c5:71:9f:bd:84:fc:1b:64:6c:
                    18:7d:e1:f0:55:1f:fd:a9:8c:49:97:db:7e:96:89:
                    b5:3f:f4:9d:21:c4:b0:3f:d4:d2:8d:c2:f5:0d:55:
                    84:5e:4a:ae:7d:34:7d:a5:10:27:0b:87:02:2e:6e:
                    a9:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:6B:A2:FF:1A:03:C5:4F:94:12:52:B3:C7:DA:D6:05:30:A2:98:A6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bf475464-21e0-35f2-aed7-5740ae7474ea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1488:c001::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:dd:6e:83:3a:f3:e1:2e:93:bf:4e:34:39:8c:fd:e8:77:7a:
         37:61:13:7e:e9:b7:36:08:c7:cd:78:c1:eb:d8:31:30:01:a7:
         ee:5b:02:33:87:cd:51:e6:c9:ed:38:bb:d4:74:63:8d:4e:be:
         cd:54:02:c9:64:ad:94:70:ce:4e:2e:50:50:db:9a:43:62:fa:
         d4:af:5a:87:8b:59:28:50:dd:10:59:8d:19:e0:fd:9d:4d:fa:
         2e:11:61:30:b0:c3:e4:d6:cb:76:cf:0f:64:82:74:5e:20:e3:
         92:c3:68:ff:59:e6:ae:7d:67:ab:75:21:e5:da:5b:73:2b:88:
         57:55:40:0d:cd:fe:82:83:8a:05:0f:c5:89:4e:0f:97:56:f2:
         15:ce:fe:df:7c:a3:11:3e:2e:9f:2d:d4:e5:31:fe:b2:2c:74:
         05:e5:d2:02:29:2f:b9:69:8e:fa:46:3b:6c:b9:c5:1e:56:e7:
         25:c7:f8:b4:3d:13:f5:ff:7a:ca:e0:b9:4a:df:0f:d9:d8:b8:
         a2:0f:4c:db:07:fa:76:0d:1c:02:1c:0c:b3:ba:19:ff:34:0d:
         3e:43:89:79:86:9d:c0:e1:86:95:7c:0e:9d:72:24:42:ac:31:
         99:b9:e1:e7:62:de:b7:aa:33:de:33:c6:f3:23:83:3c:83:73:
         09:9b:ad:db
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0JEnOjP393JE8OP8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI2MDMwMjE0MDA0MVoXDTI2MDUzMTEzMDA0MVowLzEtMCsGA1UEAxMk
YWVlZDJiZjktYTUyNi00ODRjLTgyZTEtNTYzOTUxYTY0MjVmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+SlnjCpWJDon+s+H135ReIHqXEij36QeAI6X
ST1iZNX5VfxlzPQ2XI84vD5zM+wi+BqA0FAQuo7vuheLLU7/xfSANycKprH3DOVr
m2gCLgZcg4JOO20/4rxdsmyX/rWnqWEjkLiEsebZxAXZU2/4+75M2DzZ/c1HQ7Jb
HZoXpfG2Ys3cIMjUCzxP4y8NQYJzgCLL2rmTAtP5C0gX6Lo40Vd5ou2GBQTl9r4I
5TjXbwbIt/eepDlnRBvWq3/sbBpt3Dp3yxM6uGHFcZ+9hPwbZGwYfeHwVR/9qYxJ
l9t+lom1P/SdIcSwP9TSjcL1DVWEXkqufTR9pRAnC4cCLm6pgwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFORrov8aA8VPlBJSs8fa1gUwopimMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYmY0NzU0NjQtMjFlMC0z
NWYyLWFlZDctNTc0MGFlNzQ3NGVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAUiMAB
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAHrdboM68+Euk79ONDmM/eh3ejdhE37ptzYIx814wevYMTABp+5b
AjOHzVHmye04u9R0Y41Ovs1UAslkrZRwzk4uUFDbmkNi+tSvWoeLWShQ3RBZjRng
/Z1N+i4RYTCww+TWy3bPD2SCdF4g45LDaP9Z5q59Z6t1IeXaW3MriFdVQA3N/oKD
igUPxYlOD5dW8hXO/t98oxE+Lp8t1OUx/rIsdAXl0gIpL7lpjvpGO2y5xR5W5yXH
+LQ9E/X/esrguUrfD9nYuKIPTNsH+nYNHAIcDLO6Gf80DT5DiXmGncDhhpV8Dp1y
JEKsMZm54edi3reqM94zxvMjgzyDcwmbrds=
-----END CERTIFICATE-----
Generated at Sat Mar 7 08:42:30 2026 by rpki-client