Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37/fde54c99-938c-346d-911e-b3a36062bb7c.roa
File:                     fde54c99-938c-346d-911e-b3a36062bb7c.roa (raw, json)
Hash identifier:          2kpzlSQ+JWmbDSrsWlfJQOvNodQvR+RvtFYBGlMfynM=
Subject key identifier:   39:C5:32:FA:42:35:CF:7B:A3:9B:13:D3:61:E9:C8:35:12:8A:05:12
Certificate issuer:       /CN=1ae9796a-5f3d-4f47-b117-42360a213e37
Certificate serial:       010D0C9F4328584CBDB1E688A18572D051F42A40
Authority key identifier: 4E:CB:3A:FE:5F:05:1E:AC:06:DD:59:CE:47:A6:DE:B3:29:7F:41:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37/fde54c99-938c-346d-911e-b3a36062bb7c.roa
Signing time:             Tue 03 Feb 2026 14:00:39 +0000
ROA not before:           Tue 03 Feb 2026 14:00:39 +0000
ROA not after:            Mon 04 May 2026 13:00:39 +0000
asID:                     13627
IP address blocks:        2602:fba3::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37/1ae9796a-5f3d-4f47-b117-42360a213e37.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37/1ae9796a-5f3d-4f47-b117-42360a213e37.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:bd:b1:e6:88:a1:85:72:d0:51:f4:2a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ae9796a-5f3d-4f47-b117-42360a213e37
        Validity
            Not Before: Feb  3 14:00:39 2026 GMT
            Not After : May  4 13:00:39 2026 GMT
        Subject: CN=ee59118f-eafb-4138-a799-beef3c818cd4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:49:44:c3:71:4d:65:1e:2d:6c:b5:1a:89:4d:
                    a6:b6:e5:8a:d5:80:3d:3e:b3:05:85:d7:90:7a:cf:
                    47:80:16:7c:e1:b5:69:ac:8f:32:ac:6f:26:e7:8d:
                    54:4b:e4:f3:3c:08:54:c8:54:31:2d:53:ba:aa:ce:
                    7e:06:46:0f:eb:e4:44:10:91:fd:04:14:c9:61:b6:
                    23:19:42:57:dc:6d:dc:de:08:00:37:f2:da:fc:8c:
                    ef:e1:00:fe:49:99:54:34:e7:06:ec:74:58:19:1f:
                    c5:93:be:ed:89:cd:f4:2d:68:a0:58:15:0e:f3:8c:
                    12:62:2e:78:64:aa:63:ff:b6:19:e2:c6:c7:8e:54:
                    90:8e:65:ae:71:8d:c8:b4:65:71:6c:8e:c1:81:30:
                    3d:bf:02:9b:45:21:45:7f:d9:7d:c2:ba:9c:4b:e6:
                    06:96:40:13:a3:d6:5a:ac:a4:e4:d4:4c:7b:e6:3e:
                    51:79:6a:10:02:85:c8:45:63:82:41:44:74:fc:cf:
                    37:76:75:4d:5d:1f:bf:94:8d:6d:61:37:55:39:bc:
                    3a:c8:02:ba:7e:80:55:cb:a1:f2:5f:78:45:b1:31:
                    3b:26:ac:cc:db:44:02:bc:53:cf:75:16:00:c1:20:
                    07:5d:b9:f7:34:0c:a2:bf:d2:62:47:01:bd:04:dc:
                    be:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:C5:32:FA:42:35:CF:7B:A3:9B:13:D3:61:E9:C8:35:12:8A:05:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37/fde54c99-938c-346d-911e-b3a36062bb7c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37/1ae9796a-5f3d-4f47-b117-42360a213e37.crl

            X509v3 Authority Key Identifier:
                keyid:4E:CB:3A:FE:5F:05:1E:AC:06:DD:59:CE:47:A6:DE:B3:29:7F:41:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fba3::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:d9:93:9d:e0:9f:5d:8d:e3:9a:ca:9c:a8:3c:1b:a8:24:b4:
         45:dd:c7:03:f8:6a:88:ee:21:36:73:f5:13:93:ad:aa:47:02:
         58:b9:ce:b0:9e:52:88:ad:74:f6:5c:9b:0c:82:bd:a0:c3:f1:
         e3:b3:17:6e:28:8a:ff:bf:44:6c:98:fd:1e:6c:0f:91:25:65:
         6d:a1:73:05:e5:23:27:0a:d4:34:16:49:c0:13:b9:0f:eb:f0:
         50:2a:9f:b6:50:29:6c:d7:20:81:74:85:ec:b5:49:b6:a6:5b:
         3e:e4:02:c3:99:8f:6a:8e:f4:9f:8f:49:a2:ee:32:cb:5b:3f:
         fd:9d:55:0f:33:e2:8f:ef:2d:79:4b:40:4d:97:11:ca:50:a6:
         17:a7:0e:9d:8e:38:41:87:d1:df:46:cd:22:e8:3b:04:c2:7d:
         38:87:d2:aa:ed:b6:c7:1a:61:99:b0:f4:27:22:69:f7:7f:4c:
         c2:5b:4c:e6:65:1d:cb:71:08:aa:4c:dc:e0:fb:c1:ad:63:64:
         24:9f:c8:bf:dd:fc:57:a8:54:88:fb:69:85:39:97:f1:fe:18:
         5c:cc:e9:bd:a7:83:c7:9b:60:f4:2e:39:22:11:b7:81:5e:17:
         88:85:88:d8:04:fd:b4:ad:43:0a:87:6b:56:4a:60:48:21:60:
         f6:96:f8:8c
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEy9seaIoYVy0FH0KkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMWFlOTc5NmEtNWYzZC00ZjQ3LWIxMTctNDIzNjBhMjEz
ZTM3MB4XDTI2MDIwMzE0MDAzOVoXDTI2MDUwNDEzMDAzOVowLzEtMCsGA1UEAxMk
ZWU1OTExOGYtZWFmYi00MTM4LWE3OTktYmVlZjNjODE4Y2Q0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqUlEw3FNZR4tbLUaiU2mtuWK1YA9PrMFhdeQ
es9HgBZ84bVprI8yrG8m541US+TzPAhUyFQxLVO6qs5+BkYP6+REEJH9BBTJYbYj
GUJX3G3c3ggAN/La/Izv4QD+SZlUNOcG7HRYGR/Fk77tic30LWigWBUO84wSYi54
ZKpj/7YZ4sbHjlSQjmWucY3ItGVxbI7BgTA9vwKbRSFFf9l9wrqcS+YGlkATo9Za
rKTk1Ex75j5ReWoQAoXIRWOCQUR0/M83dnVNXR+/lI1tYTdVObw6yAK6foBVy6Hy
X3hFsTE7JqzM20QCvFPPdRYAwSAHXbn3NAyiv9JiRwG9BNy+8QIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFDnFMvpCNc97o5sT02HpyDUSigUSMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xYWU5
Nzk2YS01ZjNkLTRmNDctYjExNy00MjM2MGEyMTNlMzcvZmRlNTRjOTktOTM4Yy0z
NDZkLTkxMWUtYjNhMzYwNjJiYjdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMWFlOTc5NmEtNWYzZC00ZjQ3LWIx
MTctNDIzNjBhMjEzZTM3LzFhZTk3OTZhLTVmM2QtNGY0Ny1iMTE3LTQyMzYwYTIx
M2UzNy5jcmwwHwYDVR0jBBgwFoAUTss6/l8FHqwG3VnOR6besyl/QdwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8xYWU5Nzk2YS01ZjNkLTRmNDctYjExNy00MjM2
MGEyMTNlMzcuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgL7owAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAadmTneCfXY3jmsqcqDwbqCS0Rd3HA/hqiO4hNnP1E5OtqkcCWLnO
sJ5SiK109lybDIK9oMPx47MXbiiK/79EbJj9HmwPkSVlbaFzBeUjJwrUNBZJwBO5
D+vwUCqftlApbNcggXSF7LVJtqZbPuQCw5mPao70n49Jou4yy1s//Z1VDzPij+8t
eUtATZcRylCmF6cOnY44QYfR30bNIug7BMJ9OIfSqu22xxphmbD0JyJp939MwltM
5mUdy3EIqkzc4PvBrWNkJJ/Iv938V6hUiPtphTmX8f4YXMzpvaeDx5tg9C45IhG3
gV4XiIWI2AT9tK1DCodrVkpgSCFg9pb4jA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 14:12:29 2026 by rpki-client