Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/0452da18-1252-4f2f-a3b1-80b32b6d2a9b/7eef445c-3118-388e-96f6-477ba677dc0d.roa
File:                     7eef445c-3118-388e-96f6-477ba677dc0d.roa (raw, json)
Hash identifier:          Chmb7eH1vnGntDcbjkDrlcFPKbMmdSbDa+LtgKmbyU4=
Subject key identifier:   4C:7A:67:FB:C8:AA:30:E3:3F:F3:A4:87:16:DA:F2:8B:B4:3B:EA:5F
Certificate issuer:       /CN=0452da18-1252-4f2f-a3b1-80b32b6d2a9b
Certificate serial:       010D0C9F4328584DC150811EECB6686022F078C0
Authority key identifier: 29:EA:2C:26:C3:E2:D4:1D:89:87:77:34:1F:B7:E0:3C:38:87:C9:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/0452da18-1252-4f2f-a3b1-80b32b6d2a9b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/0452da18-1252-4f2f-a3b1-80b32b6d2a9b/7eef445c-3118-388e-96f6-477ba677dc0d.roa
Signing time:             Thu 07 May 2026 13:54:48 +0000
ROA not before:           Thu 07 May 2026 13:54:48 +0000
ROA not after:            Wed 05 Aug 2026 13:54:48 +0000
asID:                     9304
IP address blocks:        2602:f3de::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/0452da18-1252-4f2f-a3b1-80b32b6d2a9b/0452da18-1252-4f2f-a3b1-80b32b6d2a9b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/0452da18-1252-4f2f-a3b1-80b32b6d2a9b/0452da18-1252-4f2f-a3b1-80b32b6d2a9b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/0452da18-1252-4f2f-a3b1-80b32b6d2a9b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:c1:50:81:1e:ec:b6:68:60:22:f0:78:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0452da18-1252-4f2f-a3b1-80b32b6d2a9b
        Validity
            Not Before: May  7 13:54:48 2026 GMT
            Not After : Aug  5 13:54:48 2026 GMT
        Subject: CN=d30911be-abb6-4422-bffa-c684c919ddf5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:bc:95:ea:23:00:a4:70:a7:68:6e:8c:32:9f:
                    d9:e1:03:e4:08:5a:cf:fd:e0:9a:8e:62:fc:0b:ec:
                    a2:88:7b:13:63:d9:9a:5e:a4:85:17:af:70:c5:89:
                    6a:22:40:a2:27:89:20:11:fe:82:ab:3f:e2:db:34:
                    2c:3d:e7:45:80:38:22:3d:45:d1:c1:79:e1:43:c0:
                    ba:d4:26:75:ef:07:13:73:8f:71:d2:72:32:22:0d:
                    3d:56:5b:c3:3d:07:4b:83:0f:c9:2d:33:7c:20:95:
                    c2:96:04:fb:3e:22:c6:1e:ac:c5:c6:00:59:9e:29:
                    5c:a3:f1:5f:88:cd:b6:11:46:78:d3:e0:8a:83:9f:
                    3c:27:81:df:a3:10:df:50:fa:5b:c7:4c:38:c8:1e:
                    bb:e6:9c:19:71:fc:e8:15:e4:0d:c6:1c:b0:54:48:
                    43:66:d7:43:cf:65:a0:65:43:ae:45:ee:87:68:5e:
                    38:9b:5d:7e:48:94:b4:54:42:d7:c6:29:5d:e5:2d:
                    f4:53:c1:41:2e:cc:60:5f:a1:4e:24:db:bc:71:a4:
                    3c:ac:23:0d:26:62:33:e2:cd:a6:71:51:a9:13:fe:
                    ca:68:a0:f7:75:29:58:1e:7c:af:1e:ea:3f:23:1f:
                    c8:79:bd:51:3a:5c:4e:09:a5:83:4a:9d:13:1f:64:
                    50:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:7A:67:FB:C8:AA:30:E3:3F:F3:A4:87:16:DA:F2:8B:B4:3B:EA:5F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/0452da18-1252-4f2f-a3b1-80b32b6d2a9b/7eef445c-3118-388e-96f6-477ba677dc0d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/0452da18-1252-4f2f-a3b1-80b32b6d2a9b/0452da18-1252-4f2f-a3b1-80b32b6d2a9b.crl

            X509v3 Authority Key Identifier:
                keyid:29:EA:2C:26:C3:E2:D4:1D:89:87:77:34:1F:B7:E0:3C:38:87:C9:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/0452da18-1252-4f2f-a3b1-80b32b6d2a9b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f3de::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:f8:21:86:bd:92:11:12:7d:28:e8:86:6e:d2:48:02:d7:58:
         4c:e7:a2:88:a1:7c:7f:bc:05:4d:ee:04:d2:b2:f7:b5:6e:c2:
         a3:62:e0:3a:df:1b:d3:a8:a7:eb:33:43:ac:a6:2a:b4:d5:55:
         90:c4:06:49:b7:c3:82:23:3d:5b:fe:c6:7e:22:f7:84:6c:e0:
         08:5b:ca:2d:54:0d:e5:2c:9a:e7:5d:bc:ad:73:b9:30:4c:ea:
         b8:d1:33:b4:80:f2:6d:4b:f9:71:8b:d6:1e:ce:86:9f:27:bb:
         91:ca:f6:ec:9d:aa:ec:88:1a:ee:08:de:1e:53:80:87:f8:7a:
         eb:9e:73:11:ea:f2:90:87:09:d2:92:de:0b:88:75:60:b4:e1:
         46:95:7c:53:78:4d:96:dd:ff:6f:cd:2d:62:c1:d3:4b:bd:fa:
         a4:9b:12:88:69:87:0c:09:c7:09:19:d9:5d:d1:11:5b:d4:f2:
         da:33:d5:9a:66:72:41:61:79:95:3d:2d:1d:15:75:61:d1:86:
         f9:ed:59:75:ba:f9:5c:b8:cc:fd:77:f3:2f:89:a8:03:18:b0:
         39:f6:67:8b:dd:d5:47:d3:a1:82:16:18:fd:d5:d9:55:29:f2:
         9a:72:02:ec:11:0b:5f:e4:fa:1c:0f:be:a5:36:ce:12:b1:8d:
         52:66:8a:01
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE3BUIEe7LZoYCLweMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDQ1MmRhMTgtMTI1Mi00ZjJmLWEzYjEtODBiMzJiNmQy
YTliMB4XDTI2MDUwNzEzNTQ0OFoXDTI2MDgwNTEzNTQ0OFowLzEtMCsGA1UEAxMk
ZDMwOTExYmUtYWJiNi00NDIyLWJmZmEtYzY4NGM5MTlkZGY1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArryV6iMApHCnaG6MMp/Z4QPkCFrP/eCajmL8
C+yiiHsTY9maXqSFF69wxYlqIkCiJ4kgEf6Cqz/i2zQsPedFgDgiPUXRwXnhQ8C6
1CZ17wcTc49x0nIyIg09VlvDPQdLgw/JLTN8IJXClgT7PiLGHqzFxgBZnilco/Ff
iM22EUZ40+CKg588J4HfoxDfUPpbx0w4yB675pwZcfzoFeQNxhywVEhDZtdDz2Wg
ZUOuRe6HaF44m11+SJS0VELXxild5S30U8FBLsxgX6FOJNu8caQ8rCMNJmIz4s2m
cVGpE/7KaKD3dSlYHnyvHuo/Ix/Ieb1ROlxOCaWDSp0TH2RQ7wIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFEx6Z/vIqjDjP/Okhxba8ou0O+pfMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8wNDUy
ZGExOC0xMjUyLTRmMmYtYTNiMS04MGIzMmI2ZDJhOWIvN2VlZjQ0NWMtMzExOC0z
ODhlLTk2ZjYtNDc3YmE2NzdkYzBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05
YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMDQ1MmRhMTgtMTI1Mi00ZjJmLWEz
YjEtODBiMzJiNmQyYTliLzA0NTJkYTE4LTEyNTItNGYyZi1hM2IxLTgwYjMyYjZk
MmE5Yi5jcmwwHwYDVR0jBBgwFoAUKeosJsPi1B2Jh3c0H7fgPDiHye0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz
OS05NDBmLWJlMjczZDljMGI2Mi8wNDUyZGExOC0xMjUyLTRmMmYtYTNiMS04MGIz
MmI2ZDJhOWIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgLz3gAA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAGz4IYa9khESfSjohm7SSALXWEznooihfH+8BU3uBNKy97VuwqNi
4DrfG9Oop+szQ6ymKrTVVZDEBkm3w4IjPVv+xn4i94Rs4Ahbyi1UDeUsmuddvK1z
uTBM6rjRM7SA8m1L+XGL1h7Ohp8nu5HK9uydquyIGu4I3h5TgIf4euuecxHq8pCH
CdKS3guIdWC04UaVfFN4TZbd/2/NLWLB00u9+qSbEohphwwJxwkZ2V3REVvU8toz
1ZpmckFheZU9LR0VdWHRhvntWXW6+Vy4zP138y+JqAMYsDn2Z4vd1UfToYIWGP3V
2VUp8ppyAuwRC1/k+hwPvqU2zhKxjVJmigE=
-----END CERTIFICATE-----
Generated at Wed May 13 07:35:41 2026 by rpki-client