Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/aca1c1b9-8639-3361-90a7-91bdd330887b.roa
File:                     aca1c1b9-8639-3361-90a7-91bdd330887b.roa (raw, json)
Hash identifier:          IgOnqXKTTWmEQlRG9KsTgG8GWvNvdxRHMn/vyOXFcDw=
Subject key identifier:   5E:86:F6:A3:AE:62:30:5E:C9:F2:49:3E:3B:80:89:7F:75:F0:AB:30
Certificate issuer:       /CN=f375140c-52cc-401f-b3a0-476ffa367076
Certificate serial:       010D0C9F4328584D95EFFE5E63BDF9296359EF80
Authority key identifier: 44:EA:00:A7:AC:0D:83:8E:EC:A5:10:EE:B1:42:FF:0B:98:5E:06:F3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/aca1c1b9-8639-3361-90a7-91bdd330887b.roa
Signing time:             Wed 22 Apr 2026 01:00:23 +0000
ROA not before:           Wed 22 Apr 2026 01:00:23 +0000
ROA not after:            Tue 21 Jul 2026 01:00:23 +0000
asID:                     399976
IP address blocks:        2602:80c:203b::/48 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:95:ef:fe:5e:63:bd:f9:29:63:59:ef:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f375140c-52cc-401f-b3a0-476ffa367076
        Validity
            Not Before: Apr 22 01:00:23 2026 GMT
            Not After : Jul 21 01:00:23 2026 GMT
        Subject: CN=8b768a45-a817-46ae-9dae-ac9ce71fa789
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:62:ff:7c:c6:56:0b:3f:9e:3d:70:b0:71:05:
                    96:70:bb:3d:d7:ff:01:36:82:5b:83:d0:3e:af:3e:
                    e4:a4:74:3d:a5:72:40:37:52:b6:23:59:61:7c:85:
                    65:2b:3b:b3:1d:22:63:ef:a0:a6:2f:39:cf:37:8f:
                    df:5e:44:89:ec:5a:30:19:54:fa:5e:84:b5:f2:7a:
                    5a:7d:8b:e4:30:07:6a:21:45:08:f3:60:6d:11:73:
                    f5:20:04:11:29:27:22:f1:c1:90:cb:ec:79:54:be:
                    7f:2e:2b:d1:d9:a1:6a:3b:7e:a1:20:3e:83:75:28:
                    10:8d:9a:fa:ac:1d:d9:92:a2:df:ac:5e:d1:9a:62:
                    e6:d6:4e:5d:e3:e3:9e:3e:de:1c:64:2c:98:36:74:
                    ac:37:ba:e5:f7:7f:86:84:ad:69:c2:22:83:00:1f:
                    84:18:81:de:64:45:60:f4:d9:58:25:bb:db:27:5b:
                    20:44:8f:47:8c:4e:1d:3f:cf:ee:17:5c:af:20:c0:
                    fb:4d:31:3e:0c:92:71:c0:6b:6e:31:c2:80:56:bc:
                    d5:ea:cb:44:6a:1f:b0:ba:91:de:54:38:78:8d:9c:
                    63:79:c3:ab:90:6f:bf:5b:2a:e3:d7:d9:54:53:07:
                    83:42:d2:38:55:d1:5b:2b:20:05:e2:2b:51:82:ad:
                    71:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:86:F6:A3:AE:62:30:5E:C9:F2:49:3E:3B:80:89:7F:75:F0:AB:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/aca1c1b9-8639-3361-90a7-91bdd330887b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.crl

            X509v3 Authority Key Identifier:
                keyid:44:EA:00:A7:AC:0D:83:8E:EC:A5:10:EE:B1:42:FF:0B:98:5E:06:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:80c:203b::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:e3:85:76:c5:f1:18:3a:3d:d4:f6:12:c3:25:2b:64:92:c6:
         0e:b9:d8:0e:60:93:16:6a:90:37:4c:e8:ac:6d:d4:f0:7e:27:
         a5:e6:bd:08:ea:bb:ba:c8:d2:d9:3f:41:42:32:5a:8e:7a:fe:
         16:f9:d8:a3:7a:8b:ca:c2:41:f5:46:ce:07:e8:80:1b:7a:84:
         0c:4f:22:30:95:92:ca:38:99:3e:de:32:c7:31:6d:32:13:f4:
         09:33:5b:a4:2f:15:d6:19:02:28:12:b5:09:76:1b:85:18:7f:
         b2:d8:9c:38:ed:05:8f:78:93:28:76:32:fe:cd:1e:95:2f:87:
         ae:75:20:80:60:7b:7f:7e:2b:b2:75:7c:bc:cb:c5:c2:79:92:
         1f:36:79:df:e8:6c:fe:95:1b:9f:ab:81:5b:32:41:af:23:89:
         a4:96:a5:bb:db:80:7f:1e:f3:b6:ce:5a:61:d4:1d:20:cf:61:
         9b:42:85:1b:de:ae:25:a7:a0:3e:c4:cc:e4:17:94:ed:41:21:
         17:0a:b3:c3:5c:f4:c7:1d:f5:1a:88:d9:64:70:be:30:36:e7:
         8e:93:55:35:72:61:00:f9:98:7f:fd:72:80:3f:86:64:89:1a:
         58:a6:f3:fc:ad:d5:e0:cd:ca:9d:11:5e:5d:5a:55:b3:6c:54:
         a9:80:91:66
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE2V7/5eY735KWNZ74AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjM3NTE0MGMtNTJjYy00MDFmLWIzYTAtNDc2ZmZhMzY3
MDc2MB4XDTI2MDQyMjAxMDAyM1oXDTI2MDcyMTAxMDAyM1owLzEtMCsGA1UEAxMk
OGI3NjhhNDUtYTgxNy00NmFlLTlkYWUtYWM5Y2U3MWZhNzg5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA12L/fMZWCz+ePXCwcQWWcLs91/8BNoJbg9A+
rz7kpHQ9pXJAN1K2I1lhfIVlKzuzHSJj76CmLznPN4/fXkSJ7FowGVT6XoS18npa
fYvkMAdqIUUI82BtEXP1IAQRKSci8cGQy+x5VL5/LivR2aFqO36hID6DdSgQjZr6
rB3ZkqLfrF7RmmLm1k5d4+OePt4cZCyYNnSsN7rl93+GhK1pwiKDAB+EGIHeZEVg
9NlYJbvbJ1sgRI9HjE4dP8/uF1yvIMD7TTE+DJJxwGtuMcKAVrzV6stEah+wupHe
VDh4jZxjecOrkG+/Wyrj19lUUweDQtI4VdFbKyAF4itRgq1x9QIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFF6G9qOuYjBeyfJJPjuAiX918KswMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9mMzc1
MTQwYy01MmNjLTQwMWYtYjNhMC00NzZmZmEzNjcwNzYvYWNhMWMxYjktODYzOS0z
MzYxLTkwYTctOTFiZGQzMzA4ODdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZjM3NTE0MGMtNTJjYy00MDFmLWIz
YTAtNDc2ZmZhMzY3MDc2L2YzNzUxNDBjLTUyY2MtNDAxZi1iM2EwLTQ3NmZmYTM2
NzA3Ni5jcmwwHwYDVR0jBBgwFoAUROoAp6wNg47spRDusUL/C5heBvMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9mMzc1MTQwYy01MmNjLTQwMWYtYjNhMC00NzZm
ZmEzNjcwNzYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgIIDCA7
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBACHjhXbF8Rg6PdT2EsMlK2SSxg652A5gkxZqkDdM6Kxt1PB+J6Xm
vQjqu7rI0tk/QUIyWo56/hb52KN6i8rCQfVGzgfogBt6hAxPIjCVkso4mT7eMscx
bTIT9AkzW6QvFdYZAigStQl2G4UYf7LYnDjtBY94kyh2Mv7NHpUvh651IIBge39+
K7J1fLzLxcJ5kh82ed/obP6VG5+rgVsyQa8jiaSWpbvbgH8e87bOWmHUHSDPYZtC
hRveriWnoD7EzOQXlO1BIRcKs8Nc9Mcd9RqI2WRwvjA2546TVTVyYQD5mH/9coA/
hmSJGlim8/yt1eDNyp0RXl1aVbNsVKmAkWY=
-----END CERTIFICATE-----
Generated at Wed May 13 15:02:15 2026 by rpki-client