Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/ddd5a9ee-ba09-3f4f-97cc-95ba6254f43c.roa
File:                     ddd5a9ee-ba09-3f4f-97cc-95ba6254f43c.roa (raw, json)
Hash identifier:          Kb4yuwU6nfuPgyjN927RXHJ9/Jsk14UVdP46b87TLPI=
Subject key identifier:   6C:82:A0:BD:25:89:6E:B0:9D:B5:25:DF:3B:34:BE:67:4D:26:32:AA
Certificate issuer:       /CN=f375140c-52cc-401f-b3a0-476ffa367076
Certificate serial:       010D0C9F4328584D95F00069038372A29B306F00
Authority key identifier: 44:EA:00:A7:AC:0D:83:8E:EC:A5:10:EE:B1:42:FF:0B:98:5E:06:F3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/ddd5a9ee-ba09-3f4f-97cc-95ba6254f43c.roa
Signing time:             Wed 22 Apr 2026 01:00:23 +0000
ROA not before:           Wed 22 Apr 2026 01:00:23 +0000
ROA not after:            Tue 21 Jul 2026 01:00:23 +0000
asID:                     399976
IP address blocks:        2602:80c:20c2::/48 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:95:f0:00:69:03:83:72:a2:9b:30:6f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f375140c-52cc-401f-b3a0-476ffa367076
        Validity
            Not Before: Apr 22 01:00:23 2026 GMT
            Not After : Jul 21 01:00:23 2026 GMT
        Subject: CN=921a2055-d6fc-4544-8ea2-a49b6530da49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:bf:26:fd:1b:89:f8:27:8f:1f:6a:63:0c:c0:
                    d9:b1:6c:81:09:ea:32:3f:ea:f7:a3:e8:1e:a1:28:
                    97:45:fb:19:b8:0f:64:da:63:73:d7:b9:a0:0d:0b:
                    50:2f:9f:91:98:20:77:53:c3:7f:f3:5f:ac:96:d0:
                    c8:00:13:26:79:37:93:6f:bd:5a:f5:eb:cf:7a:00:
                    72:b6:f8:53:ee:16:9c:8e:02:62:ac:ac:15:c8:4a:
                    0a:e8:d1:ce:ad:d7:61:04:b9:77:c0:2d:11:ac:95:
                    0d:9c:0d:9f:88:cc:f0:91:db:06:08:f4:bf:cc:c0:
                    e2:8f:78:84:01:f5:51:21:c8:27:61:2d:65:a2:34:
                    d4:38:80:0f:f6:bb:d4:d1:1a:9d:2c:81:9e:2b:47:
                    51:53:76:a7:28:bc:a4:34:86:79:09:d4:94:10:30:
                    72:fb:ab:e2:33:01:79:1f:08:f4:7b:f1:84:f4:14:
                    e5:42:31:38:96:a5:3d:f3:bd:ce:0a:1c:6d:d3:06:
                    e1:3d:06:12:5f:c1:0c:2b:03:9a:a6:e2:0a:34:d8:
                    e3:ff:15:93:1d:89:c5:5c:06:08:5e:ac:06:ac:43:
                    fd:e9:f6:f1:a5:23:fa:01:a9:bc:39:04:25:c3:86:
                    ad:72:c3:f6:a4:62:04:ae:2f:a0:2e:69:45:03:b3:
                    4a:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:82:A0:BD:25:89:6E:B0:9D:B5:25:DF:3B:34:BE:67:4D:26:32:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/ddd5a9ee-ba09-3f4f-97cc-95ba6254f43c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.crl

            X509v3 Authority Key Identifier:
                keyid:44:EA:00:A7:AC:0D:83:8E:EC:A5:10:EE:B1:42:FF:0B:98:5E:06:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:80c:20c2::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:c0:38:41:e5:8c:b3:34:25:4c:30:c3:2f:12:cf:97:5e:24:
         78:f5:20:4b:b3:20:1b:c1:72:e4:d7:28:13:59:8c:f0:98:6a:
         89:95:6c:2d:93:13:fc:54:b3:eb:48:cd:e5:b5:30:2d:cc:e5:
         f1:d4:99:26:51:21:ae:9e:a9:1a:50:f1:73:b2:f7:82:97:5e:
         d3:cf:65:26:c9:dd:6f:2a:68:75:d7:35:73:04:5d:a7:d7:fb:
         2b:1b:43:65:4b:f7:56:da:c1:c3:f7:f5:0a:46:1f:a3:82:b0:
         22:a4:c6:41:0c:e6:af:51:b8:1c:bc:2b:d9:51:26:76:0c:f4:
         65:e6:f3:43:0e:c8:c9:67:5b:f5:4e:cd:09:46:10:f6:4d:05:
         9e:81:db:85:b0:d8:9a:d4:bf:ea:d6:82:43:b5:b8:97:4d:77:
         e9:74:65:c8:20:82:d6:27:db:68:c2:72:b6:ab:cd:3f:78:7b:
         d1:c9:fb:26:0d:0d:8d:98:a9:72:93:f7:d5:d0:51:1c:61:1f:
         66:b6:19:63:ea:c7:c5:5e:75:29:dc:d9:e3:8b:b1:35:09:e9:
         a3:46:c1:cb:1d:2f:0a:dd:b1:b9:be:4d:e1:8e:86:28:e1:1b:
         cd:98:d8:2a:8d:70:76:b0:a3:4d:75:32:7f:7c:3c:57:b8:30:
         8b:36:18:84
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE2V8ABpA4NyopswbwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjM3NTE0MGMtNTJjYy00MDFmLWIzYTAtNDc2ZmZhMzY3
MDc2MB4XDTI2MDQyMjAxMDAyM1oXDTI2MDcyMTAxMDAyM1owLzEtMCsGA1UEAxMk
OTIxYTIwNTUtZDZmYy00NTQ0LThlYTItYTQ5YjY1MzBkYTQ5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgb8m/RuJ+CePH2pjDMDZsWyBCeoyP+r3o+ge
oSiXRfsZuA9k2mNz17mgDQtQL5+RmCB3U8N/81+sltDIABMmeTeTb71a9evPegBy
tvhT7hacjgJirKwVyEoK6NHOrddhBLl3wC0RrJUNnA2fiMzwkdsGCPS/zMDij3iE
AfVRIcgnYS1lojTUOIAP9rvU0RqdLIGeK0dRU3anKLykNIZ5CdSUEDBy+6viMwF5
Hwj0e/GE9BTlQjE4lqU9873OChxt0wbhPQYSX8EMKwOapuIKNNjj/xWTHYnFXAYI
XqwGrEP96fbxpSP6Aam8OQQlw4atcsP2pGIEri+gLmlFA7NKTQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFGyCoL0liW6wnbUl3zs0vmdNJjKqMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9mMzc1
MTQwYy01MmNjLTQwMWYtYjNhMC00NzZmZmEzNjcwNzYvZGRkNWE5ZWUtYmEwOS0z
ZjRmLTk3Y2MtOTViYTYyNTRmNDNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZjM3NTE0MGMtNTJjYy00MDFmLWIz
YTAtNDc2ZmZhMzY3MDc2L2YzNzUxNDBjLTUyY2MtNDAxZi1iM2EwLTQ3NmZmYTM2
NzA3Ni5jcmwwHwYDVR0jBBgwFoAUROoAp6wNg47spRDusUL/C5heBvMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9mMzc1MTQwYy01MmNjLTQwMWYtYjNhMC00NzZm
ZmEzNjcwNzYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgIIDCDC
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAAPAOEHljLM0JUwwwy8Sz5deJHj1IEuzIBvBcuTXKBNZjPCYaomV
bC2TE/xUs+tIzeW1MC3M5fHUmSZRIa6eqRpQ8XOy94KXXtPPZSbJ3W8qaHXXNXME
XafX+ysbQ2VL91bawcP39QpGH6OCsCKkxkEM5q9RuBy8K9lRJnYM9GXm80MOyMln
W/VOzQlGEPZNBZ6B24Ww2JrUv+rWgkO1uJdNd+l0ZcgggtYn22jCcrarzT94e9HJ
+yYNDY2YqXKT99XQURxhH2a2GWPqx8VedSnc2eOLsTUJ6aNGwcsdLwrdsbm+TeGO
hijhG82Y2CqNcHawo011Mn98PFe4MIs2GIQ=
-----END CERTIFICATE-----
Generated at Wed May 13 12:06:50 2026 by rpki-client