Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4e15d598-623b-4ab3-ad43-b720fb599027/023a5a3d-a728-3257-beba-74d8f2fe97c2.roa
File:                     023a5a3d-a728-3257-beba-74d8f2fe97c2.roa (raw, json)
Hash identifier:          EIqD7bGcDJctEjVtacxnFnGpz9zu4s2l0H6aYM9E7PM=
Subject key identifier:   B5:12:F3:CF:B4:B3:12:26:E7:9D:FA:D7:61:DE:11:6E:F0:1F:0E:1B
Certificate issuer:       /CN=4e15d598-623b-4ab3-ad43-b720fb599027
Certificate serial:       010D0C9F4328584D2D3F720FA18627531CEF3600
Authority key identifier: B0:0B:40:9A:14:8B:AE:3F:03:86:25:50:26:AB:3F:80:15:AD:E5:8A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4e15d598-623b-4ab3-ad43-b720fb599027.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4e15d598-623b-4ab3-ad43-b720fb599027/023a5a3d-a728-3257-beba-74d8f2fe97c2.roa
Signing time:             Sun 15 Mar 2026 13:00:41 +0000
ROA not before:           Sun 15 Mar 2026 13:00:41 +0000
ROA not after:            Sat 13 Jun 2026 13:00:41 +0000
asID:                     401280
IP address blocks:        2602:f932::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4e15d598-623b-4ab3-ad43-b720fb599027/4e15d598-623b-4ab3-ad43-b720fb599027.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4e15d598-623b-4ab3-ad43-b720fb599027/4e15d598-623b-4ab3-ad43-b720fb599027.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4e15d598-623b-4ab3-ad43-b720fb599027.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:2d:3f:72:0f:a1:86:27:53:1c:ef:36:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e15d598-623b-4ab3-ad43-b720fb599027
        Validity
            Not Before: Mar 15 13:00:41 2026 GMT
            Not After : Jun 13 13:00:41 2026 GMT
        Subject: CN=5fcc0394-5444-4634-add0-1950ed40eb4e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:1d:9f:44:79:76:be:77:56:c7:84:f3:e8:c3:
                    df:55:08:92:a2:a4:7c:9e:08:10:03:d8:b5:5c:38:
                    0a:bf:db:30:05:fc:43:5c:67:07:cd:32:53:b3:39:
                    d1:61:96:71:3c:0b:ed:b2:bb:f4:50:65:de:0a:13:
                    69:d3:99:e4:5e:51:7f:0b:be:98:36:8c:88:54:67:
                    e3:b9:ff:ff:74:1a:a7:13:ec:ce:f6:2b:51:3e:91:
                    d4:f8:e4:ad:02:f3:bf:5a:e6:6c:36:dd:c8:84:fd:
                    a7:77:76:eb:65:45:d3:be:c7:7a:ad:cd:97:18:d0:
                    0f:70:0f:51:b4:64:16:48:e6:16:8d:46:58:29:d9:
                    31:d9:ba:b7:09:33:d0:d6:1e:44:8a:63:40:cf:ee:
                    bb:f8:96:fe:66:4a:73:29:8c:71:f8:c9:92:de:c8:
                    68:2f:b9:d7:27:a0:2a:40:80:fa:f8:de:54:bd:b5:
                    2f:cf:92:fd:3e:51:43:26:b3:1b:de:95:46:f3:58:
                    7c:d5:f6:29:54:af:c0:51:d0:e9:98:75:de:e0:92:
                    20:0d:07:c3:65:31:9c:ae:d2:88:5e:a8:d8:43:b7:
                    ed:7a:02:67:34:07:3a:36:ab:f8:b6:23:a3:0a:7a:
                    19:2e:13:e7:79:fb:ca:0a:9e:f4:35:2d:de:66:dd:
                    e4:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:12:F3:CF:B4:B3:12:26:E7:9D:FA:D7:61:DE:11:6E:F0:1F:0E:1B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4e15d598-623b-4ab3-ad43-b720fb599027/023a5a3d-a728-3257-beba-74d8f2fe97c2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4e15d598-623b-4ab3-ad43-b720fb599027/4e15d598-623b-4ab3-ad43-b720fb599027.crl

            X509v3 Authority Key Identifier:
                keyid:B0:0B:40:9A:14:8B:AE:3F:03:86:25:50:26:AB:3F:80:15:AD:E5:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4e15d598-623b-4ab3-ad43-b720fb599027.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f932::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:37:3d:a9:7f:61:44:43:c5:4d:c1:0b:75:0a:c7:80:5c:b0:
         bd:bd:73:7b:73:d0:0f:f5:ad:59:5f:2a:96:f8:b3:69:6b:b7:
         b8:e2:c2:9e:6a:20:e4:63:10:2f:b5:42:66:bb:f3:ca:1e:6a:
         54:ec:e5:ee:03:96:ed:23:0a:03:9f:40:79:8e:b5:39:39:8c:
         38:9b:5e:4b:f6:51:e3:5a:81:18:68:1f:00:0d:ee:4e:01:c2:
         ed:53:70:84:ec:ca:ae:a9:4f:55:8b:92:95:9f:44:48:df:cc:
         6c:1e:25:75:22:7c:b2:cf:34:3b:64:07:c2:8e:b3:d4:5e:6c:
         a6:b4:39:6f:50:6f:40:6c:44:e8:1c:a1:d2:85:c7:e0:6f:b2:
         b6:91:7b:b2:49:d4:db:27:b4:d3:eb:a0:e5:40:e0:5e:a6:4f:
         aa:f2:9c:79:cb:7c:e5:e7:8c:5e:52:58:b4:62:04:19:51:7d:
         48:af:89:ce:92:f3:fa:55:84:b8:57:c0:9c:bc:40:65:c5:aa:
         b5:ec:6e:f5:14:05:43:11:01:f2:02:9d:4f:ba:61:d8:23:db:
         9c:53:c5:0a:48:aa:5c:b8:5a:f1:98:ea:2a:37:bc:57:dd:3b:
         37:87:ff:55:d7:e6:f6:31:cf:5f:19:e1:84:eb:39:e0:5d:d7:
         d4:e4:62:68
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE0tP3IPoYYnUxzvNgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGUxNWQ1OTgtNjIzYi00YWIzLWFkNDMtYjcyMGZiNTk5
MDI3MB4XDTI2MDMxNTEzMDA0MVoXDTI2MDYxMzEzMDA0MVowLzEtMCsGA1UEAxMk
NWZjYzAzOTQtNTQ0NC00NjM0LWFkZDAtMTk1MGVkNDBlYjRlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyx2fRHl2vndWx4Tz6MPfVQiSoqR8nggQA9i1
XDgKv9swBfxDXGcHzTJTsznRYZZxPAvtsrv0UGXeChNp05nkXlF/C76YNoyIVGfj
uf//dBqnE+zO9itRPpHU+OStAvO/WuZsNt3IhP2nd3brZUXTvsd6rc2XGNAPcA9R
tGQWSOYWjUZYKdkx2bq3CTPQ1h5EimNAz+67+Jb+ZkpzKYxx+MmS3shoL7nXJ6Aq
QID6+N5UvbUvz5L9PlFDJrMb3pVG81h81fYpVK/AUdDpmHXe4JIgDQfDZTGcrtKI
XqjYQ7ftegJnNAc6Nqv4tiOjCnoZLhPnefvKCp70NS3eZt3kgQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFLUS88+0sxIm553612HeEW7wHw4bMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80ZTE1
ZDU5OC02MjNiLTRhYjMtYWQ0My1iNzIwZmI1OTkwMjcvMDIzYTVhM2QtYTcyOC0z
MjU3LWJlYmEtNzRkOGYyZmU5N2MyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNGUxNWQ1OTgtNjIzYi00YWIzLWFk
NDMtYjcyMGZiNTk5MDI3LzRlMTVkNTk4LTYyM2ItNGFiMy1hZDQzLWI3MjBmYjU5
OTAyNy5jcmwwHwYDVR0jBBgwFoAUsAtAmhSLrj8DhiVQJqs/gBWt5YowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC80ZTE1ZDU5OC02MjNiLTRhYjMtYWQ0My1iNzIw
ZmI1OTkwMjcuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL5MgAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAEjc9qX9hREPFTcELdQrHgFywvb1ze3PQD/WtWV8qlvizaWu3uOLC
nmog5GMQL7VCZrvzyh5qVOzl7gOW7SMKA59AeY61OTmMOJteS/ZR41qBGGgfAA3u
TgHC7VNwhOzKrqlPVYuSlZ9ESN/MbB4ldSJ8ss80O2QHwo6z1F5sprQ5b1BvQGxE
6Byh0oXH4G+ytpF7sknU2ye00+ug5UDgXqZPqvKcect85eeMXlJYtGIEGVF9SK+J
zpLz+lWEuFfAnLxAZcWqtexu9RQFQxEB8gKdT7ph2CPbnFPFCkiqXLha8ZjqKje8
V907N4f/Vdfm9jHPXxnhhOs54F3X1ORiaA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 13:52:22 2026 by rpki-client