Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/77447415-d9d5-4118-9a21-3e46593cee7d/587ceaf1-8081-35d2-aa6b-83fcb08fefac.roa
File:                     587ceaf1-8081-35d2-aa6b-83fcb08fefac.roa (raw, json)
Hash identifier:          kNGZZwbE5TrpX5inzz70OBtCi1F62L9ovo7VguL9kuI=
Subject key identifier:   F5:16:56:13:20:28:27:93:3C:2A:D0:AD:7B:EC:01:7B:53:01:F8:09
Certificate issuer:       /CN=77447415-d9d5-4118-9a21-3e46593cee7d
Certificate serial:       010D0C9F4328584D9E5019F2DF32443095E46680
Authority key identifier: 86:F1:E1:77:EF:06:6C:60:6A:1B:7F:D2:38:1E:80:DC:8C:A3:3E:E9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/77447415-d9d5-4118-9a21-3e46593cee7d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/77447415-d9d5-4118-9a21-3e46593cee7d/587ceaf1-8081-35d2-aa6b-83fcb08fefac.roa
Signing time:             Sat 25 Apr 2026 01:00:24 +0000
ROA not before:           Sat 25 Apr 2026 01:00:24 +0000
ROA not after:            Fri 24 Jul 2026 01:00:24 +0000
asID:                     215971
IP address blocks:        2602:f9e3::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/77447415-d9d5-4118-9a21-3e46593cee7d/77447415-d9d5-4118-9a21-3e46593cee7d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/77447415-d9d5-4118-9a21-3e46593cee7d/77447415-d9d5-4118-9a21-3e46593cee7d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/77447415-d9d5-4118-9a21-3e46593cee7d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:9e:50:19:f2:df:32:44:30:95:e4:66:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77447415-d9d5-4118-9a21-3e46593cee7d
        Validity
            Not Before: Apr 25 01:00:24 2026 GMT
            Not After : Jul 24 01:00:24 2026 GMT
        Subject: CN=cdd724df-27fd-42da-b58c-e88617d87530
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:31:3d:f0:ef:f0:33:80:ed:f4:cc:6d:a2:24:
                    7d:36:92:66:16:8c:7a:b8:54:8d:24:57:ad:f9:a6:
                    08:f9:cb:73:1a:7e:19:b3:d4:d3:6d:ab:7e:4d:09:
                    45:ec:88:87:3f:25:bf:88:86:94:ed:ec:01:9e:bc:
                    f0:ad:9a:57:fd:a8:c5:02:95:ba:c8:59:50:05:f8:
                    eb:29:4b:f4:44:52:f0:2a:62:95:f5:45:49:b0:7c:
                    e5:dc:48:c6:ae:31:96:f9:9f:1c:a6:16:74:53:8b:
                    21:2a:10:2f:ea:58:0e:a9:7f:83:f9:49:53:23:2b:
                    2a:5e:05:27:33:0c:b1:d8:50:11:84:ff:0f:3c:80:
                    b3:e6:83:62:9b:46:18:1d:a7:10:a3:2f:c3:8a:8e:
                    85:2b:e8:06:2a:2a:d1:3d:f2:cd:5a:87:e6:96:45:
                    96:1d:9c:9d:1b:32:67:59:6c:6a:b4:52:22:03:c1:
                    bf:53:30:8b:5d:ed:b9:4d:25:98:04:80:4c:43:52:
                    f1:9b:12:17:1a:c3:cf:d7:bb:b5:fa:2c:e4:4d:d2:
                    c8:ea:ac:65:af:f4:72:c3:73:fd:d0:84:5e:a6:90:
                    cc:32:34:a6:e2:96:cf:d9:b7:72:dc:e3:f4:13:b9:
                    14:f6:a9:c5:26:3f:98:13:8a:bf:7b:96:a5:90:c9:
                    02:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:16:56:13:20:28:27:93:3C:2A:D0:AD:7B:EC:01:7B:53:01:F8:09
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/77447415-d9d5-4118-9a21-3e46593cee7d/587ceaf1-8081-35d2-aa6b-83fcb08fefac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/77447415-d9d5-4118-9a21-3e46593cee7d/77447415-d9d5-4118-9a21-3e46593cee7d.crl

            X509v3 Authority Key Identifier:
                keyid:86:F1:E1:77:EF:06:6C:60:6A:1B:7F:D2:38:1E:80:DC:8C:A3:3E:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/77447415-d9d5-4118-9a21-3e46593cee7d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f9e3::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:f2:2e:1f:b3:51:e6:75:08:71:19:77:c2:2b:fc:2b:af:f5:
         53:c2:ac:5f:f7:9d:29:5e:cc:0d:9a:50:89:be:aa:f8:11:01:
         7b:59:72:c4:1b:c9:bd:4a:83:21:8f:c6:76:1e:0e:db:2a:0d:
         19:4a:aa:b3:52:f9:75:09:eb:36:71:0f:92:b7:12:3c:98:08:
         3b:4a:68:de:bb:19:03:49:e2:fe:db:ea:2f:88:90:cd:8e:39:
         20:c9:4e:0d:24:93:8e:24:eb:2b:24:4f:ad:ba:89:4b:55:b6:
         5e:d8:bc:43:37:58:26:aa:a4:e9:ba:8b:22:d1:c2:19:e8:fd:
         d6:90:12:3b:9b:d3:48:98:60:f3:7b:6d:e8:de:84:a5:0b:88:
         47:45:d7:c7:69:46:78:33:cd:d8:a9:d8:84:21:f9:4f:87:7f:
         95:8f:0d:bc:dd:66:bf:94:c9:d2:b9:a9:19:72:c5:0d:76:cb:
         6d:b0:db:20:d4:f4:60:ca:81:7c:a5:bc:32:c1:49:1f:4e:c0:
         5e:cd:ca:91:1b:8b:82:80:6c:a4:91:1c:99:a1:99:08:bb:0e:
         58:6a:88:e0:7c:1e:3d:1b:e8:52:05:3a:ae:7f:ad:da:e6:c7:
         22:34:de:8e:74:d2:5c:af:38:6c:fc:48:64:37:bf:1a:f8:c7:
         b8:cc:02:63
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE2eUBny3zJEMJXkZoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzc0NDc0MTUtZDlkNS00MTE4LTlhMjEtM2U0NjU5M2Nl
ZTdkMB4XDTI2MDQyNTAxMDAyNFoXDTI2MDcyNDAxMDAyNFowLzEtMCsGA1UEAxMk
Y2RkNzI0ZGYtMjdmZC00MmRhLWI1OGMtZTg4NjE3ZDg3NTMwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnjE98O/wM4Dt9MxtoiR9NpJmFox6uFSNJFet
+aYI+ctzGn4Zs9TTbat+TQlF7IiHPyW/iIaU7ewBnrzwrZpX/ajFApW6yFlQBfjr
KUv0RFLwKmKV9UVJsHzl3EjGrjGW+Z8cphZ0U4shKhAv6lgOqX+D+UlTIysqXgUn
Mwyx2FARhP8PPICz5oNim0YYHacQoy/Dio6FK+gGKirRPfLNWofmlkWWHZydGzJn
WWxqtFIiA8G/UzCLXe25TSWYBIBMQ1LxmxIXGsPP17u1+izkTdLI6qxlr/Ryw3P9
0IReppDMMjSm4pbP2bdy3OP0E7kU9qnFJj+YE4q/e5alkMkCFQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFPUWVhMgKCeTPCrQrXvsAXtTAfgJMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83NzQ0
NzQxNS1kOWQ1LTQxMTgtOWEyMS0zZTQ2NTkzY2VlN2QvNTg3Y2VhZjEtODA4MS0z
NWQyLWFhNmItODNmY2IwOGZlZmFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNzc0NDc0MTUtZDlkNS00MTE4LTlh
MjEtM2U0NjU5M2NlZTdkLzc3NDQ3NDE1LWQ5ZDUtNDExOC05YTIxLTNlNDY1OTNj
ZWU3ZC5jcmwwHwYDVR0jBBgwFoAUhvHhd+8GbGBqG3/SOB6A3IyjPukwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy83NzQ0NzQxNS1kOWQ1LTQxMTgtOWEyMS0zZTQ2
NTkzY2VlN2QuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL54wAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAVfIuH7NR5nUIcRl3wiv8K6/1U8KsX/edKV7MDZpQib6q+BEBe1ly
xBvJvUqDIY/Gdh4O2yoNGUqqs1L5dQnrNnEPkrcSPJgIO0po3rsZA0ni/tvqL4iQ
zY45IMlODSSTjiTrKyRPrbqJS1W2Xti8QzdYJqqk6bqLItHCGej91pASO5vTSJhg
83tt6N6EpQuIR0XXx2lGeDPN2KnYhCH5T4d/lY8NvN1mv5TJ0rmpGXLFDXbLbbDb
INT0YMqBfKW8MsFJH07AXs3KkRuLgoBspJEcmaGZCLsOWGqI4HwePRvoUgU6rn+t
2ubHIjTejnTSXK84bPxIZDe/GvjHuMwCYw==
-----END CERTIFICATE-----
Generated at Wed May 13 17:02:10 2026 by rpki-client