Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/68de9da0-8f7e-4231-9340-c37abafc3714/8a0ea394-fc28-3c94-a59e-c8b7102e6f95.roa
File:                     8a0ea394-fc28-3c94-a59e-c8b7102e6f95.roa (raw, json)
Hash identifier:          JQmsQ31zOW3xKYfHnugO2QMF8k/yUliKE7qvLpPKS80=
Subject key identifier:   E1:5C:1A:A9:F2:98:4D:34:DE:E0:84:77:E5:85:90:15:EE:57:75:9E
Certificate issuer:       /CN=68de9da0-8f7e-4231-9340-c37abafc3714
Certificate serial:       010D0C9F4328584F63F820898B15EBA094472F80
Authority key identifier: DC:74:DC:1B:39:F9:01:8C:99:40:40:0E:5B:12:7C:73:3A:CF:E1:0F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/68de9da0-8f7e-4231-9340-c37abafc3714.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/68de9da0-8f7e-4231-9340-c37abafc3714/8a0ea394-fc28-3c94-a59e-c8b7102e6f95.roa
Signing time:             Sun 04 Oct 2026 13:00:13 +0000
ROA not before:           Sun 04 Oct 2026 13:00:13 +0000
ROA not after:            Sat 02 Jan 2027 14:00:13 +0000
asID:                     1030
IP address blocks:        2602:f9cb::/40 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/68de9da0-8f7e-4231-9340-c37abafc3714/68de9da0-8f7e-4231-9340-c37abafc3714.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/68de9da0-8f7e-4231-9340-c37abafc3714/68de9da0-8f7e-4231-9340-c37abafc3714.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/68de9da0-8f7e-4231-9340-c37abafc3714.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 08 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:63:f8:20:89:8b:15:eb:a0:94:47:2f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68de9da0-8f7e-4231-9340-c37abafc3714
        Validity
            Not Before: Oct  4 13:00:13 2026 GMT
            Not After : Jan  2 14:00:13 2027 GMT
        Subject: CN=8c9e98f0-f370-4eac-8590-bb0bb934bcf5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:ff:11:75:61:e3:2e:65:32:a4:1f:d3:37:20:
                    2f:b1:fc:72:b9:22:35:de:ba:f9:ed:ef:e4:f0:e8:
                    8d:6a:01:ed:49:81:65:0e:5d:ce:bd:9f:f0:8f:d5:
                    ae:89:1e:de:b2:d0:27:6a:26:18:5a:c2:37:71:fd:
                    b2:3d:d9:dd:61:fa:4f:67:3f:24:69:83:a2:19:7e:
                    00:86:bd:15:31:72:1f:c3:57:ff:fb:c8:fc:82:c2:
                    24:ba:a4:70:05:37:89:f7:0f:ee:2a:a1:e3:47:b8:
                    47:bd:f9:d0:cc:05:80:e8:38:3d:75:98:8c:c1:01:
                    7d:ba:73:a7:cb:20:81:6b:2c:f2:32:fa:82:1c:2d:
                    6a:64:8b:30:e7:c9:d8:c2:7a:ce:10:54:04:2b:1a:
                    48:da:7c:67:12:e8:d8:89:25:19:6d:84:5a:09:4f:
                    8c:a2:5d:bb:51:db:da:b8:bf:9b:ea:b0:75:69:94:
                    7e:a1:7d:d4:3e:54:cf:e6:4f:f1:e6:63:f8:b9:77:
                    a6:c9:ca:81:eb:82:73:a9:36:e3:57:62:37:b1:cd:
                    c2:21:2c:16:31:25:f7:74:36:0c:7f:a4:a9:0d:41:
                    45:64:ec:85:6d:a1:3e:5d:8d:62:0c:0c:ca:eb:56:
                    46:4d:1c:c4:68:bc:3b:51:dd:3b:a9:3a:3b:8a:17:
                    8f:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:5C:1A:A9:F2:98:4D:34:DE:E0:84:77:E5:85:90:15:EE:57:75:9E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/68de9da0-8f7e-4231-9340-c37abafc3714/8a0ea394-fc28-3c94-a59e-c8b7102e6f95.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/68de9da0-8f7e-4231-9340-c37abafc3714/68de9da0-8f7e-4231-9340-c37abafc3714.crl

            X509v3 Authority Key Identifier:
                keyid:DC:74:DC:1B:39:F9:01:8C:99:40:40:0E:5B:12:7C:73:3A:CF:E1:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/68de9da0-8f7e-4231-9340-c37abafc3714.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f9cb::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:bd:12:f2:82:5c:7f:37:d2:ac:ef:e7:2c:98:f8:ee:be:d0:
         7b:8e:3d:49:12:95:ea:14:2f:c4:e0:ff:a7:d6:8e:39:70:a4:
         2a:a7:23:76:18:5f:65:7b:3f:01:e4:af:c5:c9:d2:78:c5:e1:
         6d:1a:4d:26:60:9e:1b:52:0e:fb:f5:6e:d6:bf:52:66:eb:91:
         35:60:48:ab:e6:c8:a6:82:50:0f:54:4f:e4:6f:77:dd:34:19:
         f3:a3:88:65:ee:41:fc:47:9a:37:b1:9a:d9:1b:76:73:0b:00:
         23:78:5c:eb:98:8c:45:1c:3a:72:1a:e5:b2:66:79:14:44:b9:
         04:81:1a:5b:ff:7b:e3:57:52:19:95:9b:4b:58:71:a0:c6:00:
         d5:9e:54:18:28:0e:1a:f4:22:c4:46:ab:5b:c9:4d:9b:5e:84:
         52:8a:17:bb:78:5d:ef:0f:13:ff:d7:99:70:ec:14:37:5b:fa:
         91:91:73:29:a8:dd:82:ad:f4:7f:bf:ad:f2:71:cb:4c:26:53:
         2f:2e:23:38:09:fa:ed:65:a0:9e:a0:35:1d:6d:c3:ce:e2:58:
         5b:c9:01:5a:b5:f1:d3:75:15:1a:6d:d7:a4:81:48:30:89:28:
         34:17:88:9a:cd:32:5f:80:ba:07:26:af:f8:1c:22:76:f9:43:
         ef:24:de:0e
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE9j+CCJixXroJRHL4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjhkZTlkYTAtOGY3ZS00MjMxLTkzNDAtYzM3YWJhZmMz
NzE0MB4XDTI2MTAwNDEzMDAxM1oXDTI3MDEwMjE0MDAxM1owLzEtMCsGA1UEAxMk
OGM5ZTk4ZjAtZjM3MC00ZWFjLTg1OTAtYmIwYmI5MzRiY2Y1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiv8RdWHjLmUypB/TNyAvsfxyuSI13rr57e/k
8OiNagHtSYFlDl3OvZ/wj9WuiR7estAnaiYYWsI3cf2yPdndYfpPZz8kaYOiGX4A
hr0VMXIfw1f/+8j8gsIkuqRwBTeJ9w/uKqHjR7hHvfnQzAWA6Dg9dZiMwQF9unOn
yyCBayzyMvqCHC1qZIsw58nYwnrOEFQEKxpI2nxnEujYiSUZbYRaCU+Mol27Udva
uL+b6rB1aZR+oX3UPlTP5k/x5mP4uXemycqB64JzqTbjV2I3sc3CISwWMSX3dDYM
f6SpDUFFZOyFbaE+XY1iDAzK61ZGTRzEaLw7Ud07qTo7ihePsQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFOFcGqnymE003uCEd+WFkBXuV3WeMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy82OGRl
OWRhMC04ZjdlLTQyMzEtOTM0MC1jMzdhYmFmYzM3MTQvOGEwZWEzOTQtZmMyOC0z
Yzk0LWE1OWUtYzhiNzEwMmU2Zjk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNjhkZTlkYTAtOGY3ZS00MjMxLTkz
NDAtYzM3YWJhZmMzNzE0LzY4ZGU5ZGEwLThmN2UtNDIzMS05MzQwLWMzN2FiYWZj
MzcxNC5jcmwwHwYDVR0jBBgwFoAU3HTcGzn5AYyZQEAOWxJ8czrP4Q8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy82OGRlOWRhMC04ZjdlLTQyMzEtOTM0MC1jMzdh
YmFmYzM3MTQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL5ywAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAOL0S8oJcfzfSrO/nLJj47r7Qe449SRKV6hQvxOD/p9aOOXCkKqcj
dhhfZXs/AeSvxcnSeMXhbRpNJmCeG1IO+/Vu1r9SZuuRNWBIq+bIpoJQD1RP5G93
3TQZ86OIZe5B/EeaN7Ga2Rt2cwsAI3hc65iMRRw6chrlsmZ5FES5BIEaW/9741dS
GZWbS1hxoMYA1Z5UGCgOGvQixEarW8lNm16EUooXu3hd7w8T/9eZcOwUN1v6kZFz
Kajdgq30f7+t8nHLTCZTLy4jOAn67WWgnqA1HW3DzuJYW8kBWrXx03UVGm3XpIFI
MIkoNBeIms0yX4C6Byav+BwidvlD7yTeDg==
-----END CERTIFICATE-----
Generated at Tue Oct 6 23:23:56 2026 by rpki-client