Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8b0c570a-5446-44a6-b51f-a75c2f3aa621/6a093ec8-9aed-3637-8024-8dac0b00cfbd.roa
File:                     6a093ec8-9aed-3637-8024-8dac0b00cfbd.roa (raw, json)
Hash identifier:          YuXAedF9xrvTcfxaMDBr4/MsW6rbtWSRlXDvI1VQrFM=
Subject key identifier:   70:A8:E6:75:47:D3:D8:EC:AD:0A:4C:5E:B6:24:72:72:71:BC:A6:53
Certificate issuer:       /CN=8b0c570a-5446-44a6-b51f-a75c2f3aa621
Certificate serial:       010D0C9F4328584D3B34DCB2962D609B4FAA6A00
Authority key identifier: 40:AB:E0:A2:5E:B2:A8:F1:0C:E2:50:F3:92:C8:53:19:7B:67:12:8B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8b0c570a-5446-44a6-b51f-a75c2f3aa621.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8b0c570a-5446-44a6-b51f-a75c2f3aa621/6a093ec8-9aed-3637-8024-8dac0b00cfbd.roa
Signing time:             Fri 20 Mar 2026 13:00:40 +0000
ROA not before:           Fri 20 Mar 2026 13:00:40 +0000
ROA not after:            Thu 18 Jun 2026 13:00:40 +0000
asID:                     42615
IP address blocks:        2602:fafb::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8b0c570a-5446-44a6-b51f-a75c2f3aa621/8b0c570a-5446-44a6-b51f-a75c2f3aa621.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8b0c570a-5446-44a6-b51f-a75c2f3aa621/8b0c570a-5446-44a6-b51f-a75c2f3aa621.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8b0c570a-5446-44a6-b51f-a75c2f3aa621.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:3b:34:dc:b2:96:2d:60:9b:4f:aa:6a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b0c570a-5446-44a6-b51f-a75c2f3aa621
        Validity
            Not Before: Mar 20 13:00:40 2026 GMT
            Not After : Jun 18 13:00:40 2026 GMT
        Subject: CN=78a628a0-1fc3-4dd9-bdc9-f84dc6d2c721
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:ae:bd:62:77:50:b7:d4:24:5f:6f:e4:6d:9f:
                    de:22:84:3e:86:3c:b1:26:09:38:2a:57:51:cd:24:
                    13:16:8e:d2:c5:2f:ae:51:62:f7:57:1f:f0:34:2b:
                    5c:73:6f:bd:f4:29:dc:39:1a:55:a1:e5:ba:df:1e:
                    52:cc:db:68:24:23:93:a3:78:31:5c:23:65:a8:d3:
                    5a:e7:2f:2e:2e:60:78:a1:c0:8a:fe:7f:a3:4d:70:
                    57:54:c3:6b:42:14:7a:15:38:e4:4d:80:b8:5d:f6:
                    d1:c4:d3:30:bc:cc:06:37:1f:3c:5b:b8:dd:4d:8b:
                    54:f1:d6:ba:3a:94:a6:61:41:75:c4:38:ba:82:10:
                    4c:83:9c:c2:00:e1:e8:fb:33:39:08:b8:d6:0e:6f:
                    76:7f:9b:aa:d3:c5:c7:23:83:74:c2:21:fd:6a:1d:
                    9c:97:fb:71:84:60:23:c7:58:3b:8e:a2:73:43:63:
                    bf:d9:0d:8a:b1:13:1f:d4:2f:50:0f:40:e1:90:7a:
                    c0:af:ed:8a:6a:9d:ea:83:74:e2:0c:19:56:05:2f:
                    0e:e7:d0:85:eb:10:c9:34:8c:8f:49:67:f9:88:dc:
                    68:45:ce:d3:5b:65:88:1b:b9:75:af:47:c5:02:01:
                    b0:2b:c3:d0:88:d4:91:91:b4:a6:3f:ba:77:98:db:
                    e7:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:A8:E6:75:47:D3:D8:EC:AD:0A:4C:5E:B6:24:72:72:71:BC:A6:53
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8b0c570a-5446-44a6-b51f-a75c2f3aa621/6a093ec8-9aed-3637-8024-8dac0b00cfbd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8b0c570a-5446-44a6-b51f-a75c2f3aa621/8b0c570a-5446-44a6-b51f-a75c2f3aa621.crl

            X509v3 Authority Key Identifier:
                keyid:40:AB:E0:A2:5E:B2:A8:F1:0C:E2:50:F3:92:C8:53:19:7B:67:12:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8b0c570a-5446-44a6-b51f-a75c2f3aa621.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fafb::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:b4:43:78:fc:d8:3d:dc:0e:5a:bf:b3:ed:e5:83:6c:88:b4:
         19:96:7e:16:bb:54:f9:76:37:1f:67:2d:9a:3a:b0:89:fb:0e:
         c3:35:7b:92:45:48:88:49:35:45:9e:d0:39:e1:7c:1b:2a:33:
         4a:ee:20:f2:0e:e0:e0:71:d0:02:d0:bd:e8:d8:eb:18:55:36:
         45:8d:a0:44:52:b0:1e:8a:3d:b8:fd:e2:e9:a2:2b:9f:1b:d7:
         c7:64:b9:dd:5b:dd:10:f5:c8:08:df:80:29:b1:ef:7e:29:82:
         75:bc:42:d0:77:07:aa:ae:be:35:4c:cf:52:e6:06:c4:52:f5:
         b7:7c:be:75:7f:3e:8e:8a:82:57:42:21:42:cf:a0:0c:1d:0b:
         06:ce:1c:6f:36:21:98:03:28:22:3d:c5:d8:81:1e:47:97:2c:
         84:f2:a0:da:b1:18:36:6c:b5:f8:5b:c7:cc:90:18:ef:dc:d8:
         2f:16:e2:49:86:f2:c4:f6:ea:dd:26:bc:e8:60:e2:96:97:84:
         54:0a:05:cc:89:c6:a7:f8:d0:14:e0:87:ff:94:13:4c:3a:1a:
         50:f3:cd:28:b2:88:08:82:28:0e:0f:73:da:bc:bf:0b:25:d5:
         84:de:ef:3d:c9:ae:85:51:dd:9a:91:08:9f:97:d8:27:6a:cd:
         ae:52:f2:e7
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE07NNyyli1gm0+qagAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGIwYzU3MGEtNTQ0Ni00NGE2LWI1MWYtYTc1YzJmM2Fh
NjIxMB4XDTI2MDMyMDEzMDA0MFoXDTI2MDYxODEzMDA0MFowLzEtMCsGA1UEAxMk
NzhhNjI4YTAtMWZjMy00ZGQ5LWJkYzktZjg0ZGM2ZDJjNzIxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAta69YndQt9QkX2/kbZ/eIoQ+hjyxJgk4KldR
zSQTFo7SxS+uUWL3Vx/wNCtcc2+99CncORpVoeW63x5SzNtoJCOTo3gxXCNlqNNa
5y8uLmB4ocCK/n+jTXBXVMNrQhR6FTjkTYC4XfbRxNMwvMwGNx88W7jdTYtU8da6
OpSmYUF1xDi6ghBMg5zCAOHo+zM5CLjWDm92f5uq08XHI4N0wiH9ah2cl/txhGAj
x1g7jqJzQ2O/2Q2KsRMf1C9QD0DhkHrAr+2Kap3qg3TiDBlWBS8O59CF6xDJNIyP
SWf5iNxoRc7TW2WIG7l1r0fFAgGwK8PQiNSRkbSmP7p3mNvnuQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFHCo5nVH09jsrQpMXrYkcnJxvKZTMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84YjBj
NTcwYS01NDQ2LTQ0YTYtYjUxZi1hNzVjMmYzYWE2MjEvNmEwOTNlYzgtOWFlZC0z
NjM3LTgwMjQtOGRhYzBiMDBjZmJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOGIwYzU3MGEtNTQ0Ni00NGE2LWI1
MWYtYTc1YzJmM2FhNjIxLzhiMGM1NzBhLTU0NDYtNDRhNi1iNTFmLWE3NWMyZjNh
YTYyMS5jcmwwHwYDVR0jBBgwFoAUQKvgol6yqPEM4lDzkshTGXtnEoswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi84YjBjNTcwYS01NDQ2LTQ0YTYtYjUxZi1hNzVj
MmYzYWE2MjEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgL6+wAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAB7RDePzYPdwOWr+z7eWDbIi0GZZ+FrtU+XY3H2ctmjqwifsOwzV7
kkVIiEk1RZ7QOeF8GyozSu4g8g7g4HHQAtC96NjrGFU2RY2gRFKwHoo9uP3i6aIr
nxvXx2S53VvdEPXICN+AKbHvfimCdbxC0HcHqq6+NUzPUuYGxFL1t3y+dX8+joqC
V0IhQs+gDB0LBs4cbzYhmAMoIj3F2IEeR5cshPKg2rEYNmy1+FvHzJAY79zYLxbi
SYbyxPbq3Sa86GDilpeEVAoFzInGp/jQFOCH/5QTTDoaUPPNKLKICIIoDg9z2ry/
CyXVhN7vPcmuhVHdmpEIn5fYJ2rNrlLy5w==
-----END CERTIFICATE-----
Generated at Wed Mar 25 23:15:36 2026 by rpki-client