Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/3f7fc985-f4fd-3d82-82cb-25dd72af9ea3.roa
File:                     3f7fc985-f4fd-3d82-82cb-25dd72af9ea3.roa (raw, json)
Hash identifier:          W8l8t31X3BSelciuQ1isM0EKCK+SZ9FkDbBCao1hCrA=
Subject key identifier:   A1:D6:6D:B6:03:E4:46:49:5D:FD:95:D0:84:E6:56:97:0A:B6:EF:08
Certificate issuer:       /CN=3aba2284-9d24-4b6f-bc96-aa407d7a426f
Certificate serial:       010D0C9F4328584F4C3D636698E6AA0EE02337C0
Authority key identifier: B5:BE:EE:25:A1:3A:DA:9E:A2:53:19:6E:15:87:43:3E:67:0B:53:58
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/3f7fc985-f4fd-3d82-82cb-25dd72af9ea3.roa
Signing time:             Sat 26 Sep 2026 01:00:13 +0000
ROA not before:           Sat 26 Sep 2026 01:00:13 +0000
ROA not after:            Fri 25 Dec 2026 02:00:13 +0000
asID:                     16740
IP address blocks:        2602:f5c1:3c::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/3aba2284-9d24-4b6f-bc96-aa407d7a426f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/3aba2284-9d24-4b6f-bc96-aa407d7a426f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 04 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:4c:3d:63:66:98:e6:aa:0e:e0:23:37:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3aba2284-9d24-4b6f-bc96-aa407d7a426f
        Validity
            Not Before: Sep 26 01:00:13 2026 GMT
            Not After : Dec 25 02:00:13 2026 GMT
        Subject: CN=966cd76c-95bb-4290-b227-c05140ada8d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:23:70:2f:3f:54:d3:10:2a:6a:ac:4c:34:90:
                    ab:bd:c6:d8:97:c8:2a:45:85:13:33:e0:0c:83:fd:
                    d2:d1:d7:c8:e9:e6:fc:4e:8d:63:bc:f1:9e:d7:e8:
                    a4:d7:88:5c:2f:8a:ef:41:a6:63:ed:d1:da:75:1b:
                    ae:c6:1c:29:94:91:7c:94:53:6d:06:d2:19:19:48:
                    7f:02:22:7d:45:13:5e:a1:a9:5b:6e:68:4b:84:31:
                    ab:8c:7b:b7:07:d2:7f:c7:f8:2c:5a:31:e3:fa:7f:
                    93:4e:12:b2:26:33:ed:e0:f0:0c:94:25:e4:0d:ba:
                    cf:b9:0f:39:7d:b9:38:ba:12:01:08:24:a3:30:4e:
                    cd:95:23:95:8b:36:45:4f:40:20:46:ce:3b:6d:8e:
                    57:bb:b3:be:cd:27:a0:ef:85:92:1f:84:55:32:2f:
                    79:39:42:61:8a:9d:bf:50:0e:d1:92:2f:04:b5:19:
                    49:62:8f:cb:6e:ae:cc:1f:b2:2e:31:4e:35:56:a0:
                    51:ff:d0:b3:48:6a:2d:4f:56:f9:a3:18:33:fe:87:
                    8a:77:0e:9b:14:e1:8a:df:cb:b8:4d:63:a2:e4:af:
                    d0:9e:15:97:09:4d:10:54:52:9d:84:29:c0:da:72:
                    10:f5:48:7a:95:fe:16:c9:2f:30:5e:f8:dd:c3:55:
                    e0:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:D6:6D:B6:03:E4:46:49:5D:FD:95:D0:84:E6:56:97:0A:B6:EF:08
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/3f7fc985-f4fd-3d82-82cb-25dd72af9ea3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/3aba2284-9d24-4b6f-bc96-aa407d7a426f.crl

            X509v3 Authority Key Identifier:
                keyid:B5:BE:EE:25:A1:3A:DA:9E:A2:53:19:6E:15:87:43:3E:67:0B:53:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f5c1:3c::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:6c:51:89:c2:a2:45:02:46:2d:7b:6b:4d:18:73:fc:a4:1f:
         b8:8d:2e:ae:f2:4e:da:51:99:dd:fc:f7:3c:3c:b3:a9:2a:19:
         2c:91:ef:3a:9d:d0:ab:3e:5f:3b:ab:55:cb:a6:83:74:66:32:
         19:b0:8e:b9:08:19:d3:10:99:a8:c6:75:5c:e7:9e:ce:96:46:
         0d:ce:b3:f9:ee:0e:ae:0c:f6:57:6e:ef:bc:91:85:59:01:ed:
         f1:2d:1f:76:c7:58:17:80:e5:e1:72:bf:c2:65:4f:f7:01:1a:
         36:b4:6b:e0:0f:9a:d2:ca:f3:72:6f:8f:a2:0d:93:3e:b5:db:
         07:c5:b2:5e:e5:92:17:08:19:7b:38:ec:79:9d:63:f3:54:12:
         2d:cc:a6:88:24:0e:b7:a1:8d:3f:51:d5:04:bf:f9:0f:37:2b:
         17:6e:ef:79:d9:77:44:f8:fd:7b:36:fb:30:ed:dc:3e:76:1c:
         a6:91:a3:36:53:ab:1f:e1:c9:66:ab:7f:b2:b6:28:d9:62:d7:
         bd:88:1e:ee:7e:60:66:6c:b3:02:d2:1a:06:40:db:e7:f6:d1:
         9b:3a:4f:74:f2:36:6b:ea:36:33:68:a0:9e:47:3d:f3:ea:10:
         bb:38:6a:d5:d9:49:64:e9:75:48:db:98:07:d4:a7:3a:e3:c5:
         ae:58:8b:55
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9MPWNmmOaqDuAjN8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2FiYTIyODQtOWQyNC00YjZmLWJjOTYtYWE0MDdkN2E0
MjZmMB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk
OTY2Y2Q3NmMtOTViYi00MjkwLWIyMjctYzA1MTQwYWRhOGQzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzCNwLz9U0xAqaqxMNJCrvcbYl8gqRYUTM+AM
g/3S0dfI6eb8To1jvPGe1+ik14hcL4rvQaZj7dHadRuuxhwplJF8lFNtBtIZGUh/
AiJ9RRNeoalbbmhLhDGrjHu3B9J/x/gsWjHj+n+TThKyJjPt4PAMlCXkDbrPuQ85
fbk4uhIBCCSjME7NlSOVizZFT0AgRs47bY5Xu7O+zSeg74WSH4RVMi95OUJhip2/
UA7Rki8EtRlJYo/Lbq7MH7IuMU41VqBR/9CzSGotT1b5oxgz/oeKdw6bFOGK38u4
TWOi5K/QnhWXCU0QVFKdhCnA2nIQ9Uh6lf4WyS8wXvjdw1XgTwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFKHWbbYD5EZJXf2V0ITmVpcKtu8IMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8zYWJh
MjI4NC05ZDI0LTRiNmYtYmM5Ni1hYTQwN2Q3YTQyNmYvM2Y3ZmM5ODUtZjRmZC0z
ZDgyLTgyY2ItMjVkZDcyYWY5ZWEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k
MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvM2FiYTIyODQtOWQyNC00YjZmLWJj
OTYtYWE0MDdkN2E0MjZmLzNhYmEyMjg0LTlkMjQtNGI2Zi1iYzk2LWFhNDA3ZDdh
NDI2Zi5jcmwwHwYDVR0jBBgwFoAUtb7uJaE62p6iUxluFYdDPmcLU1gwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2
NS04MzA4LWRmMjU5N2UzNDNmOC8zYWJhMjI4NC05ZDI0LTRiNmYtYmM5Ni1hYTQw
N2Q3YTQyNmYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL1wQA8
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAJNsUYnCokUCRi17a00Yc/ykH7iNLq7yTtpRmd389zw8s6kqGSyR
7zqd0Ks+XzurVcumg3RmMhmwjrkIGdMQmajGdVznns6WRg3Os/nuDq4M9ldu77yR
hVkB7fEtH3bHWBeA5eFyv8JlT/cBGja0a+APmtLK83Jvj6INkz612wfFsl7lkhcI
GXs47HmdY/NUEi3MpogkDrehjT9R1QS/+Q83Kxdu73nZd0T4/Xs2+zDt3D52HKaR
ozZTqx/hyWarf7K2KNli172IHu5+YGZsswLSGgZA2+f20Zs6T3TyNmvqNjNooJ5H
PfPqELs4atXZSWTpdUjbmAfUpzrjxa5Yi1U=
-----END CERTIFICATE-----
Generated at Sat Oct 3 15:47:13 2026 by rpki-client