Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6d54b36a-c725-4c18-93e1-825afc645e2c/a520972b-7568-38cf-84a6-6fba0797c866.roa
File:                     a520972b-7568-38cf-84a6-6fba0797c866.roa (raw, json)
Hash identifier:          GmUjEl0mznuvi0r2HtEGLxrZbXM/BSOyVAh+oXb0wCk=
Subject key identifier:   D9:DC:1A:A9:59:C6:88:18:43:BE:0F:96:1F:DB:0C:B2:B9:95:A1:83
Certificate issuer:       /CN=6d54b36a-c725-4c18-93e1-825afc645e2c
Certificate serial:       010D0C9F4328584CE810AF333F6A2E767559AB80
Authority key identifier: 38:58:D5:25:95:18:10:7B:1A:52:96:71:BD:B8:82:7B:C1:86:7D:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6d54b36a-c725-4c18-93e1-825afc645e2c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6d54b36a-c725-4c18-93e1-825afc645e2c/a520972b-7568-38cf-84a6-6fba0797c866.roa
Signing time:             Wed 18 Feb 2026 18:15:47 +0000
ROA not before:           Wed 18 Feb 2026 18:15:47 +0000
ROA not after:            Tue 19 May 2026 17:15:47 +0000
asID:                     13335
IP address blocks:        2620:127:f00e::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6d54b36a-c725-4c18-93e1-825afc645e2c/6d54b36a-c725-4c18-93e1-825afc645e2c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6d54b36a-c725-4c18-93e1-825afc645e2c/6d54b36a-c725-4c18-93e1-825afc645e2c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6d54b36a-c725-4c18-93e1-825afc645e2c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 24 Feb 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:e8:10:af:33:3f:6a:2e:76:75:59:ab:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d54b36a-c725-4c18-93e1-825afc645e2c
        Validity
            Not Before: Feb 18 18:15:47 2026 GMT
            Not After : May 19 17:15:47 2026 GMT
        Subject: CN=a6f27e0e-69de-4971-8be3-8bb9268a9a8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:ef:0b:cf:f3:dc:4d:c6:ef:a5:af:8d:7f:ce:
                    9d:ac:06:51:d8:d9:48:eb:15:6f:50:7f:d3:f6:38:
                    5d:f4:06:5a:45:94:0b:9a:52:4f:1a:41:14:51:1c:
                    47:93:cf:b4:b6:90:51:af:89:04:fc:1f:a9:ea:88:
                    e6:30:2b:a0:34:f9:f4:ba:11:0b:f7:7a:1b:31:ee:
                    c2:e2:90:2a:a6:62:c0:9e:11:47:52:98:13:08:62:
                    78:5b:cb:35:ab:98:80:40:a1:af:5b:58:82:05:86:
                    3a:ee:e5:d9:85:16:a4:eb:d1:f4:2e:8d:c8:9a:af:
                    69:5d:f9:0d:e1:f2:22:e3:4a:43:63:00:91:49:ce:
                    0a:1c:be:6c:12:c9:f2:95:d6:a7:1f:80:d3:e0:cc:
                    01:26:09:d4:38:63:8c:5a:91:ff:12:4b:82:24:62:
                    ca:30:e6:bb:df:86:3d:17:d7:7d:dd:71:82:82:ca:
                    d5:e2:e2:35:bd:f5:a0:8a:d5:0c:e3:14:06:bf:c2:
                    3b:52:00:a4:59:c4:9e:c9:5d:b6:75:b9:93:73:96:
                    5c:a4:f1:f4:95:1a:2e:90:b7:f2:f0:f8:84:67:ae:
                    00:b1:a7:4f:b4:16:c0:ec:b4:a2:fa:b2:44:06:3b:
                    02:52:b5:1c:73:4f:9c:ac:e6:7d:e3:58:bd:ff:c1:
                    6e:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:DC:1A:A9:59:C6:88:18:43:BE:0F:96:1F:DB:0C:B2:B9:95:A1:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6d54b36a-c725-4c18-93e1-825afc645e2c/a520972b-7568-38cf-84a6-6fba0797c866.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6d54b36a-c725-4c18-93e1-825afc645e2c/6d54b36a-c725-4c18-93e1-825afc645e2c.crl

            X509v3 Authority Key Identifier:
                keyid:38:58:D5:25:95:18:10:7B:1A:52:96:71:BD:B8:82:7B:C1:86:7D:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6d54b36a-c725-4c18-93e1-825afc645e2c.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:127:f00e::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:07:9c:0c:9e:67:e4:0e:15:db:74:7f:4b:25:af:54:75:94:
         c2:49:b0:ab:6d:16:76:eb:af:27:2e:cb:68:ef:5b:fa:8f:90:
         52:76:7b:13:e1:93:9c:e7:56:06:d6:47:7b:a8:7c:0a:bc:a2:
         ae:90:91:66:74:92:88:f5:c0:57:59:bd:7f:fa:9a:39:86:0d:
         b2:47:9a:c4:98:1b:b1:de:3f:46:ef:8d:3d:01:42:9f:d3:cc:
         1e:5c:f1:5f:6d:e0:80:13:4b:86:15:d8:58:10:71:81:fc:18:
         79:2f:16:80:a4:82:39:20:06:d8:82:60:f4:ab:da:c8:b0:59:
         cf:d8:be:fb:22:2f:e2:7f:80:59:c1:4e:c0:46:d2:de:37:90:
         f5:ba:e5:6a:b0:bc:9d:00:9a:7a:f3:0c:a1:d0:0a:2a:28:97:
         12:25:eb:9f:68:4f:15:b5:28:71:c8:44:8e:78:17:ef:e2:f3:
         5f:8e:69:ec:6b:47:de:ab:09:60:97:ed:a9:49:c2:f6:f2:79:
         2d:87:1a:9b:8b:89:69:26:83:6c:a1:42:77:74:59:b7:3a:c7:
         f1:aa:58:4e:1b:9a:8e:b2:74:9f:06:ea:c1:57:a8:2a:9e:82:
         9b:41:f9:c7:2b:4e:47:aa:49:5d:56:38:05:41:80:c8:4f:d5:
         d5:ce:d2:61
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEzoEK8zP2oudnVZq4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNmQ1NGIzNmEtYzcyNS00YzE4LTkzZTEtODI1YWZjNjQ1
ZTJjMB4XDTI2MDIxODE4MTU0N1oXDTI2MDUxOTE3MTU0N1owLzEtMCsGA1UEAxMk
YTZmMjdlMGUtNjlkZS00OTcxLThiZTMtOGJiOTI2OGE5YThiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk+8Lz/PcTcbvpa+Nf86drAZR2NlI6xVvUH/T
9jhd9AZaRZQLmlJPGkEUURxHk8+0tpBRr4kE/B+p6ojmMCugNPn0uhEL93obMe7C
4pAqpmLAnhFHUpgTCGJ4W8s1q5iAQKGvW1iCBYY67uXZhRak69H0Lo3Imq9pXfkN
4fIi40pDYwCRSc4KHL5sEsnyldanH4DT4MwBJgnUOGOMWpH/EkuCJGLKMOa734Y9
F9d93XGCgsrV4uI1vfWgitUM4xQGv8I7UgCkWcSeyV22dbmTc5ZcpPH0lRoukLfy
8PiEZ64AsadPtBbA7LSi+rJEBjsCUrUcc0+crOZ941i9/8FuGwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFNncGqlZxogYQ74Plh/bDLK5laGDMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82ZDU0
YjM2YS1jNzI1LTRjMTgtOTNlMS04MjVhZmM2NDVlMmMvYTUyMDk3MmItNzU2OC0z
OGNmLTg0YTYtNmZiYTA3OTdjODY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNmQ1NGIzNmEtYzcyNS00YzE4LTkz
ZTEtODI1YWZjNjQ1ZTJjLzZkNTRiMzZhLWM3MjUtNGMxOC05M2UxLTgyNWFmYzY0
NWUyYy5jcmwwHwYDVR0jBBgwFoAUOFjVJZUYEHsaUpZxvbiCe8GGfbIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS82ZDU0YjM2YS1jNzI1LTRjMTgtOTNlMS04MjVh
ZmM2NDVlMmMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcBJiABJ/AO
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAHUHnAyeZ+QOFdt0f0slr1R1lMJJsKttFnbrrycuy2jvW/qPkFJ2
exPhk5znVgbWR3uofAq8oq6QkWZ0koj1wFdZvX/6mjmGDbJHmsSYG7HeP0bvjT0B
Qp/TzB5c8V9t4IATS4YV2FgQcYH8GHkvFoCkgjkgBtiCYPSr2siwWc/YvvsiL+J/
gFnBTsBG0t43kPW65WqwvJ0AmnrzDKHQCioolxIl659oTxW1KHHIRI54F+/i81+O
aexrR96rCWCX7alJwvbyeS2HGpuLiWkmg2yhQnd0Wbc6x/GqWE4bmo6ydJ8G6sFX
qCqegptB+ccrTkeqSV1WOAVBgMhP1dXO0mE=
-----END CERTIFICATE-----
Generated at Mon Feb 23 00:55:40 2026 by rpki-client