Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/845a7397-7971-43f9-8d64-19e915943e4e/75c20892-bea3-3bae-9909-3c7cf46164e7.roa
File:                     75c20892-bea3-3bae-9909-3c7cf46164e7.roa (raw, json)
Hash identifier:          FBSlnPBf8ytr18iwsRwdlS34/DUbgVT/ZglJzEHVeA4=
Subject key identifier:   DA:98:AF:F5:94:0D:E5:8B:D5:E4:83:20:27:21:CE:65:9C:18:81:9C
Certificate issuer:       /CN=845a7397-7971-43f9-8d64-19e915943e4e
Certificate serial:       010D0C9F4328584F49730F73D0A97302837D3D40
Authority key identifier: 02:41:1C:8C:C7:21:8C:34:39:08:07:D6:F5:56:38:0A:3B:CC:7A:16
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/845a7397-7971-43f9-8d64-19e915943e4e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/845a7397-7971-43f9-8d64-19e915943e4e/75c20892-bea3-3bae-9909-3c7cf46164e7.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     401839
IP address blocks:        2602:f3af::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/845a7397-7971-43f9-8d64-19e915943e4e/845a7397-7971-43f9-8d64-19e915943e4e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/845a7397-7971-43f9-8d64-19e915943e4e/845a7397-7971-43f9-8d64-19e915943e4e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/845a7397-7971-43f9-8d64-19e915943e4e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:73:0f:73:d0:a9:73:02:83:7d:3d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=845a7397-7971-43f9-8d64-19e915943e4e
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=cf1b041b-b08e-4fe6-ba48-a8d14c43c153
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:d0:96:4a:73:15:85:36:0c:46:4f:ff:4b:93:
                    93:4d:87:1a:42:49:1a:88:bc:ff:3d:4a:ef:82:f3:
                    b0:f6:4d:f7:d9:6e:b2:b8:45:d5:08:0a:c4:a1:aa:
                    2e:42:72:39:b8:3a:67:2a:f2:70:1e:9d:b3:ea:fa:
                    bf:ba:c2:f6:eb:64:c0:d3:c8:ac:35:93:db:91:59:
                    d3:f5:da:f3:7e:81:77:4a:39:01:8b:4b:c0:b9:8e:
                    ad:16:00:fd:2f:36:9b:23:82:2c:02:9a:cd:32:b4:
                    57:7e:32:a1:b7:2f:e8:74:1a:44:6e:d4:7b:dd:41:
                    79:aa:52:9e:8e:b0:36:59:a9:9d:6f:af:e9:68:91:
                    bc:d0:e1:27:b8:19:7a:a6:05:b5:f1:4f:44:ed:9d:
                    6c:75:1b:21:36:1f:33:46:e1:05:41:02:f8:b0:34:
                    c4:b6:c6:12:c4:ac:ca:16:f6:d9:14:84:13:2a:06:
                    b4:30:20:64:0c:b0:c0:cf:3f:43:55:b1:e7:36:97:
                    e2:a7:43:aa:cf:5c:7e:04:99:40:1b:bf:c6:d0:9e:
                    d9:46:bb:3d:36:2e:da:29:20:c8:03:c6:91:93:71:
                    e0:12:52:b9:51:b5:b9:eb:32:37:db:04:35:df:4e:
                    4a:26:8e:96:63:72:03:cf:85:16:f4:e2:7b:c3:64:
                    0a:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:98:AF:F5:94:0D:E5:8B:D5:E4:83:20:27:21:CE:65:9C:18:81:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/845a7397-7971-43f9-8d64-19e915943e4e/75c20892-bea3-3bae-9909-3c7cf46164e7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/845a7397-7971-43f9-8d64-19e915943e4e/845a7397-7971-43f9-8d64-19e915943e4e.crl

            X509v3 Authority Key Identifier:
                keyid:02:41:1C:8C:C7:21:8C:34:39:08:07:D6:F5:56:38:0A:3B:CC:7A:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/845a7397-7971-43f9-8d64-19e915943e4e.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f3af::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:66:62:df:3b:97:c7:c5:cb:e3:e9:e6:c3:8c:b9:c0:0b:a7:
         fa:65:6d:31:6e:75:59:84:c3:1c:66:dd:ea:65:ec:29:4c:55:
         95:fe:e9:d6:58:d2:ca:4e:f8:43:77:32:88:09:7f:74:c5:f1:
         3a:15:61:2b:b1:32:82:a8:01:54:41:21:48:ab:03:35:4d:7b:
         8e:d5:0d:d8:18:44:33:3d:ee:4b:13:6b:62:f3:af:29:3b:48:
         a9:71:46:94:15:2a:35:9a:cf:98:83:de:e7:29:8d:22:8f:b4:
         89:2e:24:33:67:72:b7:fd:dd:7f:b7:96:fb:6e:ed:a5:4d:58:
         24:67:d0:19:ca:a7:a7:b4:8d:89:1e:96:7e:b6:6d:72:bb:4a:
         c1:07:91:f2:71:15:56:16:51:06:1b:54:3d:27:11:d2:77:35:
         71:c3:29:18:2d:ca:7c:da:2d:28:44:31:df:8f:ac:e5:fc:c4:
         a5:88:50:d4:20:33:cd:50:9e:96:6a:d6:36:6e:32:80:3e:7f:
         62:e6:70:d5:42:a0:b5:60:16:f9:23:df:2f:92:22:c8:1a:35:
         c5:52:60:7b:e8:93:d6:0d:4f:6f:94:fe:cd:ac:8a:e1:a8:ef:
         b3:38:03:13:93:9e:19:27:85:78:c0:53:70:8c:a1:95:ba:83:
         0e:39:56:ed
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE9Jcw9z0KlzAoN9PUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODQ1YTczOTctNzk3MS00M2Y5LThkNjQtMTllOTE1OTQz
ZTRlMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
Y2YxYjA0MWItYjA4ZS00ZmU2LWJhNDgtYThkMTRjNDNjMTUzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1dCWSnMVhTYMRk//S5OTTYcaQkkaiLz/PUrv
gvOw9k332W6yuEXVCArEoaouQnI5uDpnKvJwHp2z6vq/usL262TA08isNZPbkVnT
9drzfoF3SjkBi0vAuY6tFgD9LzabI4IsAprNMrRXfjKhty/odBpEbtR73UF5qlKe
jrA2Wamdb6/paJG80OEnuBl6pgW18U9E7Z1sdRshNh8zRuEFQQL4sDTEtsYSxKzK
FvbZFIQTKga0MCBkDLDAzz9DVbHnNpfip0Oqz1x+BJlAG7/G0J7ZRrs9Ni7aKSDI
A8aRk3HgElK5UbW56zI32wQ1305KJo6WY3IDz4UW9OJ7w2QKywIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFNqYr/WUDeWL1eSDICchzmWcGIGcMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi84NDVh
NzM5Ny03OTcxLTQzZjktOGQ2NC0xOWU5MTU5NDNlNGUvNzVjMjA4OTItYmVhMy0z
YmFlLTk5MDktM2M3Y2Y0NjE2NGU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z
N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvODQ1YTczOTctNzk3MS00M2Y5LThk
NjQtMTllOTE1OTQzZTRlLzg0NWE3Mzk3LTc5NzEtNDNmOS04ZDY0LTE5ZTkxNTk0
M2U0ZS5jcmwwHwYDVR0jBBgwFoAUAkEcjMchjDQ5CAfW9VY4CjvMehYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4
OC1hYmVhLWU0OTA5ZWYxYjRlMi84NDVhNzM5Ny03OTcxLTQzZjktOGQ2NC0xOWU5
MTU5NDNlNGUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgLzrwAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEATmZi3zuXx8XL4+nmw4y5wAun+mVtMW51WYTDHGbd6mXsKUxVlf7p
1ljSyk74Q3cyiAl/dMXxOhVhK7EygqgBVEEhSKsDNU17jtUN2BhEMz3uSxNrYvOv
KTtIqXFGlBUqNZrPmIPe5ymNIo+0iS4kM2dyt/3df7eW+27tpU1YJGfQGcqnp7SN
iR6WfrZtcrtKwQeR8nEVVhZRBhtUPScR0nc1ccMpGC3KfNotKEQx34+s5fzEpYhQ
1CAzzVCelmrWNm4ygD5/YuZw1UKgtWAW+SPfL5IiyBo1xVJge+iT1g1Pb5T+zayK
4ajvszgDE5OeGSeFeMBTcIyhlbqDDjlW7Q==
-----END CERTIFICATE-----
Generated at Fri Sep 25 07:55:04 2026 by rpki-client