Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/a5c518d0-6c8f-4cc0-8433-e63522746509/3e024614-9b72-3fbe-81c1-c635fe9e43df.roa
File:                     3e024614-9b72-3fbe-81c1-c635fe9e43df.roa (raw, json)
Hash identifier:          TNxDwe90XXGQQnrNVDSgrcmFGRQRjNbqGrkfD8cZFWQ=
Subject key identifier:   8A:22:66:05:46:7D:AC:BD:21:85:B4:A6:21:E4:CC:35:CA:5B:DF:6A
Certificate issuer:       /CN=a5c518d0-6c8f-4cc0-8433-e63522746509
Certificate serial:       010D0C9F4328584F43DD2A3811FEEB66E407F4C0
Authority key identifier: 2D:BA:CE:8D:F1:48:38:B5:3F:38:07:D5:D5:4A:CA:FC:C6:C2:9B:62
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/a5c518d0-6c8f-4cc0-8433-e63522746509.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/a5c518d0-6c8f-4cc0-8433-e63522746509/3e024614-9b72-3fbe-81c1-c635fe9e43df.roa
Signing time:             Wed 23 Sep 2026 01:00:12 +0000
ROA not before:           Wed 23 Sep 2026 01:00:12 +0000
ROA not after:            Tue 22 Dec 2026 02:00:12 +0000
asID:                     402778
IP address blocks:        2602:f33f:400::/38 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/a5c518d0-6c8f-4cc0-8433-e63522746509/a5c518d0-6c8f-4cc0-8433-e63522746509.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/a5c518d0-6c8f-4cc0-8433-e63522746509/a5c518d0-6c8f-4cc0-8433-e63522746509.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/a5c518d0-6c8f-4cc0-8433-e63522746509.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:43:dd:2a:38:11:fe:eb:66:e4:07:f4:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a5c518d0-6c8f-4cc0-8433-e63522746509
        Validity
            Not Before: Sep 23 01:00:12 2026 GMT
            Not After : Dec 22 02:00:12 2026 GMT
        Subject: CN=46681c8c-f351-49b2-b541-118855fded3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:6a:a4:d3:1e:28:3d:b7:c5:60:2d:b6:44:ed:
                    ae:db:04:ec:ed:f1:75:b3:f8:19:5b:f2:9f:9c:11:
                    fa:f9:c2:23:51:ee:74:ca:68:b9:03:aa:11:87:1b:
                    8d:d4:bb:03:a5:ed:6f:a3:63:80:02:1a:93:56:5d:
                    65:94:75:59:10:71:2c:8d:6d:da:34:fc:4a:87:b8:
                    b7:ea:6b:97:e4:00:48:eb:2b:da:a1:1b:17:7a:7d:
                    89:ac:27:b8:38:76:e6:b1:75:b3:cb:4f:a0:60:00:
                    36:02:fc:4d:28:c9:e5:20:4b:a8:b6:2d:93:56:31:
                    cb:b7:28:86:ea:da:3b:0d:2e:af:a4:0e:a4:44:2d:
                    cd:44:c5:24:af:bb:19:25:86:64:98:ef:84:1c:42:
                    ea:c7:f3:2c:ea:cb:43:dc:e7:15:b3:e8:e6:75:cf:
                    58:a9:5b:fc:ae:07:14:65:e3:30:88:ac:57:68:28:
                    76:4e:44:c7:a0:3f:cb:a2:55:1a:14:fb:33:8c:09:
                    ab:01:ad:b2:1f:1a:6e:e4:2e:5a:cd:5d:03:a3:34:
                    34:92:c0:66:64:e8:9e:4f:2c:f9:26:35:f5:a2:96:
                    89:ce:42:98:8f:09:eb:b7:d7:4f:84:79:e3:e1:fb:
                    b3:50:0c:79:33:12:95:83:78:b2:d8:b1:a3:c4:dd:
                    5e:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:22:66:05:46:7D:AC:BD:21:85:B4:A6:21:E4:CC:35:CA:5B:DF:6A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/a5c518d0-6c8f-4cc0-8433-e63522746509/3e024614-9b72-3fbe-81c1-c635fe9e43df.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/a5c518d0-6c8f-4cc0-8433-e63522746509/a5c518d0-6c8f-4cc0-8433-e63522746509.crl

            X509v3 Authority Key Identifier:
                keyid:2D:BA:CE:8D:F1:48:38:B5:3F:38:07:D5:D5:4A:CA:FC:C6:C2:9B:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/a5c518d0-6c8f-4cc0-8433-e63522746509.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f33f:400::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:16:e1:cd:b1:bb:f7:72:0a:5a:4e:c3:d3:cc:49:14:cb:30:
         ac:83:a6:cb:3e:dd:a5:b1:ba:76:86:f3:52:00:c3:d3:2a:a0:
         16:50:bb:9f:8c:6a:c3:cf:e8:cd:9b:46:4d:ac:79:df:c8:5a:
         e5:ef:3d:d7:09:2d:9c:79:87:d0:06:dd:c8:0f:5d:9a:8e:5d:
         fe:0b:a0:f4:22:23:ce:46:57:9f:d8:21:9b:04:eb:3d:64:41:
         bb:4c:50:58:1b:d3:eb:1d:77:48:f2:57:32:76:45:93:c4:3a:
         72:44:b3:4d:af:ad:04:58:fe:c2:26:05:33:e8:48:e7:40:6e:
         d3:fa:06:54:74:99:12:c6:9d:3e:ca:95:c5:e6:8a:db:56:fe:
         b5:af:4e:4f:4b:81:0a:ff:56:0c:a0:4f:fa:6b:4f:ad:76:5b:
         53:7b:13:38:66:3a:89:31:b3:c9:d0:a0:3e:07:0b:9a:39:f9:
         51:95:cd:cb:b5:34:b9:4f:f4:2c:a7:7f:69:3e:d0:aa:cf:23:
         9b:72:ca:95:8b:28:96:6e:53:da:3f:58:7d:42:77:28:ad:3d:
         5c:1e:7b:2c:2a:27:f9:17:7c:26:be:bb:99:62:08:e0:55:89:
         aa:9a:b3:06:20:12:de:3c:fa:e3:73:77:d5:14:01:17:a0:f0:
         36:07:73:6f
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE9D3So4Ef7rZuQH9MAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTVjNTE4ZDAtNmM4Zi00Y2MwLTg0MzMtZTYzNTIyNzQ2
NTA5MB4XDTI2MDkyMzAxMDAxMloXDTI2MTIyMjAyMDAxMlowLzEtMCsGA1UEAxMk
NDY2ODFjOGMtZjM1MS00OWIyLWI1NDEtMTE4ODU1ZmRlZDNmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsGqk0x4oPbfFYC22RO2u2wTs7fF1s/gZW/Kf
nBH6+cIjUe50ymi5A6oRhxuN1LsDpe1vo2OAAhqTVl1llHVZEHEsjW3aNPxKh7i3
6muX5ABI6yvaoRsXen2JrCe4OHbmsXWzy0+gYAA2AvxNKMnlIEuoti2TVjHLtyiG
6to7DS6vpA6kRC3NRMUkr7sZJYZkmO+EHELqx/Ms6stD3OcVs+jmdc9YqVv8rgcU
ZeMwiKxXaCh2TkTHoD/LolUaFPszjAmrAa2yHxpu5C5azV0DozQ0ksBmZOieTyz5
JjX1opaJzkKYjwnrt9dPhHnj4fuzUAx5MxKVg3iy2LGjxN1enQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFIoiZgVGfay9IYW0piHkzDXKW99qMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4Ny1iMmNjLTU2ODkzODFhM2M0Mi9hNWM1
MThkMC02YzhmLTRjYzAtODQzMy1lNjM1MjI3NDY1MDkvM2UwMjQ2MTQtOWI3Mi0z
ZmJlLTgxYzEtYzYzNWZlOWU0M2RmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82MTVmZTFkZC1k
ODI5LTRjODctYjJjYy01Njg5MzgxYTNjNDIvYTVjNTE4ZDAtNmM4Zi00Y2MwLTg0
MzMtZTYzNTIyNzQ2NTA5L2E1YzUxOGQwLTZjOGYtNGNjMC04NDMzLWU2MzUyMjc0
NjUwOS5jcmwwHwYDVR0jBBgwFoAULbrOjfFIOLU/OAfV1UrK/MbCm2IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4
Ny1iMmNjLTU2ODkzODFhM2M0Mi9hNWM1MThkMC02YzhmLTRjYzAtODQzMy1lNjM1
MjI3NDY1MDkuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgLzPwQw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAJxbhzbG793IKWk7D08xJFMswrIOmyz7dpbG6dobzUgDD0yqgFlC7
n4xqw8/ozZtGTax538ha5e891wktnHmH0AbdyA9dmo5d/gug9CIjzkZXn9ghmwTr
PWRBu0xQWBvT6x13SPJXMnZFk8Q6ckSzTa+tBFj+wiYFM+hI50Bu0/oGVHSZEsad
PsqVxeaK21b+ta9OT0uBCv9WDKBP+mtPrXZbU3sTOGY6iTGzydCgPgcLmjn5UZXN
y7U0uU/0LKd/aT7Qqs8jm3LKlYsolm5T2j9YfUJ3KK09XB57LCon+Rd8Jr67mWII
4FWJqpqzBiAS3jz643N31RQBF6DwNgdzbw==
-----END CERTIFICATE-----
Generated at Thu Sep 24 10:20:49 2026 by rpki-client