Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8f6b23b1-c197-4db2-b4d4-a81adcd6f0e5/9a44da26-443b-3b94-bfa2-f0caa697019f.roa
File:                     9a44da26-443b-3b94-bfa2-f0caa697019f.roa (raw, json)
Hash identifier:          PG2CyEeEjrDV9ITshLN2gmrD0BmH+Z7eK9eBOnio6jA=
Subject key identifier:   61:BF:9F:76:0B:2C:65:45:3D:DA:A3:E7:F8:31:56:EF:6B:07:26:54
Certificate issuer:       /CN=8f6b23b1-c197-4db2-b4d4-a81adcd6f0e5
Certificate serial:       010D0C9F4328584E9A7FCE5321E908BB59ABCC00
Authority key identifier: ED:7E:CD:7E:EF:AE:EC:A6:4C:F5:ED:B0:44:CA:C4:02:FD:DA:43:C1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8f6b23b1-c197-4db2-b4d4-a81adcd6f0e5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8f6b23b1-c197-4db2-b4d4-a81adcd6f0e5/9a44da26-443b-3b94-bfa2-f0caa697019f.roa
Signing time:             Fri 24 Jul 2026 09:00:12 +0000
ROA not before:           Fri 24 Jul 2026 09:00:12 +0000
ROA not after:            Thu 22 Oct 2026 09:00:12 +0000
asID:                     19415
IP address blocks:        2602:f9d3::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8f6b23b1-c197-4db2-b4d4-a81adcd6f0e5/8f6b23b1-c197-4db2-b4d4-a81adcd6f0e5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8f6b23b1-c197-4db2-b4d4-a81adcd6f0e5/8f6b23b1-c197-4db2-b4d4-a81adcd6f0e5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8f6b23b1-c197-4db2-b4d4-a81adcd6f0e5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:9a:7f:ce:53:21:e9:08:bb:59:ab:cc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f6b23b1-c197-4db2-b4d4-a81adcd6f0e5
        Validity
            Not Before: Jul 24 09:00:12 2026 GMT
            Not After : Oct 22 09:00:12 2026 GMT
        Subject: CN=a0e6ea0a-cd90-4d96-825d-cd85929bdcc2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:57:13:a1:2a:85:1c:67:6d:10:36:87:ba:04:
                    55:29:82:0c:4b:1c:c5:24:3c:bc:e8:3c:61:27:47:
                    a9:42:a8:50:cf:d6:a4:cf:22:a6:2c:bb:ee:95:5e:
                    87:23:2c:b2:9f:34:f2:21:9c:be:2d:fc:76:80:cf:
                    0b:d1:63:97:a5:1c:30:f6:2a:52:f0:92:30:e4:6a:
                    2d:37:7c:6d:bb:e5:19:24:5c:7c:ce:c7:06:1b:30:
                    09:39:17:d8:19:f0:d0:ac:15:76:d7:c5:bc:e2:2a:
                    fe:38:fe:54:0f:f1:06:b9:6d:02:12:c0:72:c1:cd:
                    b9:64:74:b7:ba:22:0a:ac:a8:72:f7:52:ab:c3:60:
                    ff:72:6c:1d:2b:f8:91:06:ad:d3:25:1b:39:73:15:
                    01:de:22:da:00:66:f4:48:44:4a:27:bb:14:a9:79:
                    14:7a:71:1c:79:a9:59:36:63:64:45:e3:1c:d4:ac:
                    26:87:f1:f2:55:d4:37:01:14:71:17:94:bf:d3:ac:
                    36:c8:c3:e7:69:33:c2:f6:e6:bd:c6:d4:ea:89:1c:
                    65:de:6b:da:60:b4:b5:8e:30:9e:e2:4b:11:df:ac:
                    cd:95:d2:1a:b1:76:4c:16:23:29:58:d7:4d:a8:16:
                    94:c8:ea:31:7d:ca:5f:97:b9:70:3f:b8:6b:83:b0:
                    45:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:BF:9F:76:0B:2C:65:45:3D:DA:A3:E7:F8:31:56:EF:6B:07:26:54
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8f6b23b1-c197-4db2-b4d4-a81adcd6f0e5/9a44da26-443b-3b94-bfa2-f0caa697019f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8f6b23b1-c197-4db2-b4d4-a81adcd6f0e5/8f6b23b1-c197-4db2-b4d4-a81adcd6f0e5.crl

            X509v3 Authority Key Identifier:
                keyid:ED:7E:CD:7E:EF:AE:EC:A6:4C:F5:ED:B0:44:CA:C4:02:FD:DA:43:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8f6b23b1-c197-4db2-b4d4-a81adcd6f0e5.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f9d3::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:77:e5:70:5c:7e:4b:4d:90:58:66:0f:a1:72:85:71:24:c1:
         4f:7d:88:f8:b7:0d:ed:77:02:67:c6:40:4a:d2:95:4e:06:7e:
         72:5b:43:fd:6a:80:6e:b6:3a:8d:30:9d:e8:a6:fa:23:2b:04:
         25:a1:f5:2c:47:d0:55:11:8c:b3:e1:45:6a:25:99:f9:27:08:
         3e:ab:3c:04:ff:63:83:b0:6d:a0:df:30:61:7a:da:c5:48:17:
         ba:a3:9f:d3:73:c5:46:32:c8:18:de:07:9f:ef:98:98:3e:66:
         07:70:37:6d:af:c4:93:bf:df:45:b9:95:12:bd:5c:ec:19:13:
         5b:9f:5c:92:f6:2c:d7:f7:73:93:2b:52:c8:f0:f9:cf:ac:7c:
         39:ea:46:15:b6:d0:90:e9:0c:51:fc:e4:9f:f6:55:13:dd:c7:
         a0:b6:dd:86:91:68:1e:91:1f:b8:46:41:00:99:ae:66:ff:f7:
         f6:8b:1d:75:de:bb:7b:5a:09:42:31:b1:15:18:2b:c2:0e:12:
         93:29:32:c2:90:a6:c2:d7:63:c8:66:90:18:7b:d1:85:3b:eb:
         df:cc:a7:bf:ac:08:d5:e9:e6:fe:ae:45:74:7a:99:4e:e3:03:
         c4:e6:13:7a:a9:b9:5d:18:46:e3:c7:ef:8e:9f:2b:cb:55:22:
         6e:24:fd:92
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE6af85TIekIu1mrzAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGY2YjIzYjEtYzE5Ny00ZGIyLWI0ZDQtYTgxYWRjZDZm
MGU1MB4XDTI2MDcyNDA5MDAxMloXDTI2MTAyMjA5MDAxMlowLzEtMCsGA1UEAxMk
YTBlNmVhMGEtY2Q5MC00ZDk2LTgyNWQtY2Q4NTkyOWJkY2MyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqlcToSqFHGdtEDaHugRVKYIMSxzFJDy86Dxh
J0epQqhQz9akzyKmLLvulV6HIyyynzTyIZy+Lfx2gM8L0WOXpRww9ipS8JIw5Got
N3xtu+UZJFx8zscGGzAJORfYGfDQrBV218W84ir+OP5UD/EGuW0CEsBywc25ZHS3
uiIKrKhy91Krw2D/cmwdK/iRBq3TJRs5cxUB3iLaAGb0SERKJ7sUqXkUenEcealZ
NmNkReMc1Kwmh/HyVdQ3ARRxF5S/06w2yMPnaTPC9ua9xtTqiRxl3mvaYLS1jjCe
4ksR36zNldIasXZMFiMpWNdNqBaUyOoxfcpfl7lwP7hrg7BF/QIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFGG/n3YLLGVFPdqj5/gxVu9rByZUMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84ZjZi
MjNiMS1jMTk3LTRkYjItYjRkNC1hODFhZGNkNmYwZTUvOWE0NGRhMjYtNDQzYi0z
Yjk0LWJmYTItZjBjYWE2OTcwMTlmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvOGY2YjIzYjEtYzE5Ny00ZGIyLWI0
ZDQtYTgxYWRjZDZmMGU1LzhmNmIyM2IxLWMxOTctNGRiMi1iNGQ0LWE4MWFkY2Q2
ZjBlNS5jcmwwHwYDVR0jBBgwFoAU7X7Nfu+u7KZM9e2wRMrEAv3aQ8EwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy84ZjZiMjNiMS1jMTk3LTRkYjItYjRkNC1hODFh
ZGNkNmYwZTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL50wAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAX3flcFx+S02QWGYPoXKFcSTBT32I+LcN7XcCZ8ZAStKVTgZ+cltD
/WqAbrY6jTCd6Kb6IysEJaH1LEfQVRGMs+FFaiWZ+ScIPqs8BP9jg7BtoN8wYXra
xUgXuqOf03PFRjLIGN4Hn++YmD5mB3A3ba/Ek7/fRbmVEr1c7BkTW59ckvYs1/dz
kytSyPD5z6x8OepGFbbQkOkMUfzkn/ZVE93HoLbdhpFoHpEfuEZBAJmuZv/39osd
dd67e1oJQjGxFRgrwg4SkykywpCmwtdjyGaQGHvRhTvr38ynv6wI1enm/q5FdHqZ
TuMDxOYTeqm5XRhG48fvjp8ry1UibiT9kg==
-----END CERTIFICATE-----
Generated at Fri Jul 24 15:48:56 2026 by rpki-client