Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/fd0cb8cd-dfcd-33e8-96eb-d6867e44d42c.roa
File:                     fd0cb8cd-dfcd-33e8-96eb-d6867e44d42c.roa (raw, json)
Hash identifier:          8ut3x3fjezJb3wTy0Sbo5qntvZTmhTKqRL3hrHWGXxo=
Subject key identifier:   21:5E:D8:DC:00:D8:AD:16:9C:1A:D2:A0:C2:74:F3:2F:B8:BA:23:10
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584C794C8C559B7688BB69E0DF80
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/fd0cb8cd-dfcd-33e8-96eb-d6867e44d42c.roa
Signing time:             Sat 10 Jan 2026 02:00:31 +0000
ROA not before:           Sat 10 Jan 2026 02:00:31 +0000
ROA not after:            Fri 10 Apr 2026 01:00:31 +0000
asID:                     400719
IP address blocks:        2001:470:109::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 21 Feb 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:79:4c:8c:55:9b:76:88:bb:69:e0:df:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Jan 10 02:00:31 2026 GMT
            Not After : Apr 10 01:00:31 2026 GMT
        Subject: CN=d8dc09ae-87ba-4a35-ab95-2de1e0a10242
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:8f:22:e0:75:7e:40:bb:c1:59:a7:ed:87:17:
                    88:d6:62:cb:72:62:a9:5c:d9:0a:62:59:c1:9c:87:
                    d8:18:91:1f:63:7b:8c:4e:90:5d:c6:86:68:be:af:
                    69:05:90:9e:6d:de:12:7b:1e:32:d4:32:d2:4c:04:
                    dd:07:92:b3:16:ec:40:d2:62:61:c6:b4:fb:60:97:
                    f8:f5:72:bb:69:8f:79:f5:ad:c2:25:40:82:12:57:
                    06:d3:e4:d9:d7:b4:99:0d:aa:64:3d:35:17:6e:4b:
                    cc:dd:e2:de:81:7e:d9:88:29:e7:ab:0f:d9:db:85:
                    e2:aa:53:80:09:5c:6f:37:f2:a7:39:b3:9a:e4:43:
                    b3:94:94:48:b5:73:ca:10:e8:5c:d4:ec:5a:54:23:
                    9c:d7:ec:6f:30:a9:a4:61:a5:eb:28:10:97:e8:f6:
                    b5:aa:a3:2f:1d:08:ec:e3:d0:bc:c0:3d:88:0c:a6:
                    3c:06:6b:ca:e1:9e:7c:e9:45:a2:31:c8:86:0d:be:
                    7a:0c:8d:dc:1b:9b:6b:15:99:75:b7:d8:34:26:4f:
                    2d:e9:1f:2e:71:0f:fb:e4:0f:69:65:3c:38:cb:26:
                    67:be:b4:cb:d7:1b:9f:8f:ed:8c:c5:db:a2:df:e9:
                    01:49:ea:25:2c:39:9b:15:e2:c8:57:28:12:a7:38:
                    39:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:5E:D8:DC:00:D8:AD:16:9C:1A:D2:A0:C2:74:F3:2F:B8:BA:23:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/fd0cb8cd-dfcd-33e8-96eb-d6867e44d42c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:109::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:14:2c:e5:b4:5c:01:dd:7f:e2:4f:9b:2d:29:93:8a:a3:f4:
         82:13:92:86:cd:3d:00:81:b3:b6:6d:b1:62:4e:df:77:5a:2b:
         81:4b:a2:69:35:6c:0c:9c:16:cb:f9:f8:b9:63:52:68:0e:65:
         83:1d:0b:a0:75:a2:28:a5:5d:35:45:d9:10:c4:b7:7b:35:f0:
         1f:c2:eb:ba:6e:3e:1d:a5:0d:7a:1b:11:7d:36:03:31:df:92:
         b4:cb:38:92:94:50:0c:7d:4f:73:e7:f1:11:7a:15:a9:f2:d2:
         0c:b1:3a:28:d9:62:67:f5:5e:76:3c:66:45:e4:2e:22:d5:b2:
         ec:50:f1:41:79:1a:37:14:3a:da:0b:f0:e6:06:2c:ef:2a:69:
         ec:2e:ab:1e:2b:71:d8:99:69:47:98:10:6e:3e:7b:e7:f1:f4:
         7b:03:d8:4a:45:00:d7:fb:b6:b3:4e:9f:aa:30:b6:64:f1:46:
         33:e5:c0:66:06:33:99:41:c6:a1:21:6e:6a:16:db:40:18:d3:
         0c:d9:9b:4d:9d:e2:4d:47:9f:c1:c6:ab:1c:eb:2d:f4:50:09:
         e8:35:5d:76:c9:fc:b9:d9:b0:4a:55:2b:60:dc:3d:4b:08:ec:
         03:94:b1:83:d6:73:69:02:71:b9:81:f2:67:9e:73:0e:8c:39:
         1e:a4:1f:e2
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEx5TIxVm3aIu2ng34AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI2MDExMDAyMDAzMVoXDTI2MDQxMDAxMDAzMVowLzEtMCsGA1UEAxMk
ZDhkYzA5YWUtODdiYS00YTM1LWFiOTUtMmRlMWUwYTEwMjQyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnY8i4HV+QLvBWafthxeI1mLLcmKpXNkKYlnB
nIfYGJEfY3uMTpBdxoZovq9pBZCebd4Sex4y1DLSTATdB5KzFuxA0mJhxrT7YJf4
9XK7aY959a3CJUCCElcG0+TZ17SZDapkPTUXbkvM3eLegX7ZiCnnqw/Z24XiqlOA
CVxvN/KnObOa5EOzlJRItXPKEOhc1OxaVCOc1+xvMKmkYaXrKBCX6Pa1qqMvHQjs
49C8wD2IDKY8BmvK4Z586UWiMciGDb56DI3cG5trFZl1t9g0Jk8t6R8ucQ/75A9p
ZTw4yyZnvrTL1xufj+2Mxdui3+kBSeolLDmbFeLIVygSpzg5wwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFCFe2NwA2K0WnBrSoMJ08y+4uiMQMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvZmQwY2I4Y2QtZGZjZC0z
M2U4LTk2ZWItZDY4NjdlNDRkNDJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAEJ
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAHMULOW0XAHdf+JPmy0pk4qj9IITkobNPQCBs7ZtsWJO33daK4FL
omk1bAycFsv5+LljUmgOZYMdC6B1oiilXTVF2RDEt3s18B/C67puPh2lDXobEX02
AzHfkrTLOJKUUAx9T3Pn8RF6Fany0gyxOijZYmf1XnY8ZkXkLiLVsuxQ8UF5GjcU
OtoL8OYGLO8qaewuqx4rcdiZaUeYEG4+e+fx9HsD2EpFANf7trNOn6owtmTxRjPl
wGYGM5lBxqEhbmoW20AY0wzZm02d4k1Hn8HGqxzrLfRQCeg1XXbJ/LnZsEpVK2Dc
PUsI7AOUsYPWc2kCcbmB8meecw6MOR6kH+I=
-----END CERTIFICATE-----
Generated at Thu Feb 19 17:54:27 2026 by rpki-client