Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8f9f6775-d445-4be7-9398-1cbbeacb9707/8cc45d19-3625-302e-81ff-dbc8599cae70.roa
File:                     8cc45d19-3625-302e-81ff-dbc8599cae70.roa (raw, json)
Hash identifier:          zlfgRVqQAVva7dYX+7Ly0F12CFNNefuuzFYN+LEZ/cM=
Subject key identifier:   BA:34:04:FF:9F:06:4E:EE:8E:52:07:BF:1C:E2:A4:02:E1:E9:39:E6
Certificate issuer:       /CN=8f9f6775-d445-4be7-9398-1cbbeacb9707
Certificate serial:       010D0C9F4328584E7FFA5254621E740E3A122A00
Authority key identifier: E0:F5:8A:69:D8:CC:14:75:75:6C:0E:30:5C:47:6E:B4:9D:19:F4:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8f9f6775-d445-4be7-9398-1cbbeacb9707.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8f9f6775-d445-4be7-9398-1cbbeacb9707/8cc45d19-3625-302e-81ff-dbc8599cae70.roa
Signing time:             Tue 14 Jul 2026 21:00:12 +0000
ROA not before:           Tue 14 Jul 2026 21:00:12 +0000
ROA not after:            Mon 12 Oct 2026 21:00:12 +0000
asID:                     401452
IP address blocks:        2602:2d4:1f0::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8f9f6775-d445-4be7-9398-1cbbeacb9707/8f9f6775-d445-4be7-9398-1cbbeacb9707.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8f9f6775-d445-4be7-9398-1cbbeacb9707/8f9f6775-d445-4be7-9398-1cbbeacb9707.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8f9f6775-d445-4be7-9398-1cbbeacb9707.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:7f:fa:52:54:62:1e:74:0e:3a:12:2a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f9f6775-d445-4be7-9398-1cbbeacb9707
        Validity
            Not Before: Jul 14 21:00:12 2026 GMT
            Not After : Oct 12 21:00:12 2026 GMT
        Subject: CN=0766a04f-72d6-4fca-9aa4-2a8e4e9ab96b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:f3:41:b6:98:3e:b7:e8:8c:91:58:7d:0d:69:
                    dd:ea:52:60:c1:2c:a1:32:b1:49:55:61:df:34:3c:
                    13:7d:62:d0:31:b1:4d:68:e9:38:06:6b:ae:17:8b:
                    81:3e:e5:66:4f:13:18:08:5a:12:49:4f:76:03:4a:
                    0d:b8:32:6c:e2:57:48:f3:10:bf:1c:ee:c6:05:7e:
                    fc:2b:f3:c3:34:2a:f3:b7:b8:64:f1:6a:5d:cb:f8:
                    e9:c5:f8:e5:ce:6c:a9:5c:0c:a3:a6:c5:75:f0:3d:
                    68:a1:a4:64:e8:ac:da:2a:d1:14:57:62:9e:1e:56:
                    ea:a4:45:07:4f:7f:05:b8:04:61:f5:a8:36:ff:b3:
                    60:61:7b:c7:16:58:ce:e0:f8:e5:9c:d0:6f:c6:e1:
                    fe:1c:49:3b:bf:17:8c:a9:75:00:6e:fb:00:a7:44:
                    83:13:b8:86:9b:b6:a4:a1:ac:c3:67:87:0d:1e:77:
                    ac:b1:88:48:bf:00:ae:a5:2f:92:6c:f4:f8:67:f7:
                    d1:e7:2a:75:d3:ea:4b:11:cf:61:78:d8:da:14:f9:
                    68:1f:73:b7:b4:c1:4a:33:b1:e4:68:ae:a6:41:44:
                    40:81:37:6b:fb:0e:24:1f:b6:90:cb:d3:ef:8b:fc:
                    bc:14:c7:24:c8:a1:19:d0:23:74:28:e3:67:a7:80:
                    f5:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:34:04:FF:9F:06:4E:EE:8E:52:07:BF:1C:E2:A4:02:E1:E9:39:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8f9f6775-d445-4be7-9398-1cbbeacb9707/8cc45d19-3625-302e-81ff-dbc8599cae70.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8f9f6775-d445-4be7-9398-1cbbeacb9707/8f9f6775-d445-4be7-9398-1cbbeacb9707.crl

            X509v3 Authority Key Identifier:
                keyid:E0:F5:8A:69:D8:CC:14:75:75:6C:0E:30:5C:47:6E:B4:9D:19:F4:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8f9f6775-d445-4be7-9398-1cbbeacb9707.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:2d4:1f0::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9a:55:1e:95:bc:9a:c9:fa:1e:b2:47:3d:09:fc:01:99:38:3c:
         6b:69:53:1d:f7:87:fb:50:96:c3:7f:62:74:9f:75:90:cc:ba:
         47:bb:58:a3:67:5b:1b:5e:23:93:e4:88:cc:af:81:54:7d:55:
         80:fa:14:5b:d2:fd:c6:0c:34:04:93:b1:c3:87:9c:05:2b:2a:
         22:19:f4:76:72:52:85:07:7c:b6:3d:96:cc:af:57:12:81:8d:
         93:81:ef:d8:41:1c:d3:07:c4:f4:db:e0:1e:1f:ae:7c:bc:50:
         cc:e0:ec:96:bb:a2:74:b9:e4:29:50:20:21:e0:e8:23:67:a9:
         01:9d:95:21:25:fc:09:2f:5b:fd:16:f3:bf:d7:2f:f1:57:f5:
         23:fa:4a:00:c3:00:14:5e:1f:9d:2c:b4:d0:48:18:63:f4:19:
         66:53:29:b8:00:50:2d:56:fa:36:4c:19:06:47:6d:f0:7a:61:
         d5:a5:ce:cb:2d:f1:f9:d9:05:17:b5:0f:fd:3f:73:06:cc:26:
         09:45:03:8f:86:31:c5:7e:cc:b1:e0:21:42:44:5e:3a:90:36:
         df:6d:39:ad:c6:99:03:92:ac:63:9a:6e:3f:ac:1c:d0:ad:78:
         69:b6:b4:8b:30:aa:6e:f3:a6:4b:c8:2f:9c:07:06:e9:cf:9e:
         55:d2:40:49
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE5/+lJUYh50DjoSKgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGY5ZjY3NzUtZDQ0NS00YmU3LTkzOTgtMWNiYmVhY2I5
NzA3MB4XDTI2MDcxNDIxMDAxMloXDTI2MTAxMjIxMDAxMlowLzEtMCsGA1UEAxMk
MDc2NmEwNGYtNzJkNi00ZmNhLTlhYTQtMmE4ZTRlOWFiOTZiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgPNBtpg+t+iMkVh9DWnd6lJgwSyhMrFJVWHf
NDwTfWLQMbFNaOk4BmuuF4uBPuVmTxMYCFoSSU92A0oNuDJs4ldI8xC/HO7GBX78
K/PDNCrzt7hk8Wpdy/jpxfjlzmypXAyjpsV18D1ooaRk6KzaKtEUV2KeHlbqpEUH
T38FuARh9ag2/7NgYXvHFljO4PjlnNBvxuH+HEk7vxeMqXUAbvsAp0SDE7iGm7ak
oazDZ4cNHnessYhIvwCupS+SbPT4Z/fR5yp10+pLEc9heNjaFPloH3O3tMFKM7Hk
aK6mQURAgTdr+w4kH7aQy9Pvi/y8FMckyKEZ0CN0KONnp4D16QIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFLo0BP+fBk7ujlIHvxzipALh6TnmMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi84Zjlm
Njc3NS1kNDQ1LTRiZTctOTM5OC0xY2JiZWFjYjk3MDcvOGNjNDVkMTktMzYyNS0z
MDJlLTgxZmYtZGJjODU5OWNhZTcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOGY5ZjY3NzUtZDQ0NS00YmU3LTkz
OTgtMWNiYmVhY2I5NzA3LzhmOWY2Nzc1LWQ0NDUtNGJlNy05Mzk4LTFjYmJlYWNi
OTcwNy5jcmwwHwYDVR0jBBgwFoAU4PWKadjMFHV1bA4wXEdutJ0Z9BIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi84ZjlmNjc3NS1kNDQ1LTRiZTctOTM5OC0xY2Ji
ZWFjYjk3MDcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgIC1AHw
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAJpVHpW8msn6HrJHPQn8AZk4PGtpUx33h/tQlsN/YnSfdZDMuke7
WKNnWxteI5PkiMyvgVR9VYD6FFvS/cYMNASTscOHnAUrKiIZ9HZyUoUHfLY9lsyv
VxKBjZOB79hBHNMHxPTb4B4frny8UMzg7Ja7onS55ClQICHg6CNnqQGdlSEl/Akv
W/0W87/XL/FX9SP6SgDDABReH50stNBIGGP0GWZTKbgAUC1W+jZMGQZHbfB6YdWl
zsst8fnZBRe1D/0/cwbMJglFA4+GMcV+zLHgIUJEXjqQNt9tOa3GmQOSrGOabj+s
HNCteGm2tIswqm7zpkvIL5wHBunPnlXSQEk=
-----END CERTIFICATE-----
Generated at Fri Jul 24 08:23:51 2026 by rpki-client