Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa/2269899c-82be-30a7-af5a-9936dbfc1a1d.roa
File:                     2269899c-82be-30a7-af5a-9936dbfc1a1d.roa (raw, json)
Hash identifier:          CUAvV079wVRJkhmAudZOkl7UDUvpr7PXdjE58F3J70g=
Subject key identifier:   46:09:53:87:46:A6:D0:C9:CB:50:62:30:EC:53:E0:64:5F:0D:42:B9
Certificate issuer:       /CN=f7798abb-711d-4f10-bc46-bceed055e1fa
Certificate serial:       010D0C9F4328584E104ED84A4213866CA16991E8
Authority key identifier: CC:90:3D:D7:AA:39:05:EC:E7:35:08:AC:CB:45:F4:6E:65:BC:1D:E1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa/2269899c-82be-30a7-af5a-9936dbfc1a1d.roa
Signing time:             Thu 04 Jun 2026 21:00:12 +0000
ROA not before:           Thu 04 Jun 2026 21:00:12 +0000
ROA not after:            Wed 02 Sep 2026 21:00:12 +0000
asID:                     20473
IP address blocks:        2602:fb54:220::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa/f7798abb-711d-4f10-bc46-bceed055e1fa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa/f7798abb-711d-4f10-bc46-bceed055e1fa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:10:4e:d8:4a:42:13:86:6c:a1:69:91:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f7798abb-711d-4f10-bc46-bceed055e1fa
        Validity
            Not Before: Jun  4 21:00:12 2026 GMT
            Not After : Sep  2 21:00:12 2026 GMT
        Subject: CN=7edfcb04-7add-4093-bbbe-465753447cf5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:e3:cd:dc:76:a5:c5:0e:83:28:e4:d6:35:7e:
                    5e:87:59:6d:3a:82:5e:f6:47:7f:ce:e4:75:03:84:
                    5a:31:fd:f9:cf:1a:79:20:94:01:48:8b:8a:17:e6:
                    44:0d:fd:c9:a4:8a:b8:b8:85:25:6f:a9:99:c7:f9:
                    bc:69:95:4d:6e:57:b8:38:cc:56:ab:c5:ba:51:c7:
                    63:a1:c1:f6:46:5e:3f:31:83:8c:8b:3f:37:88:32:
                    62:40:8c:23:2c:46:9b:33:05:66:e5:dc:7b:0f:c6:
                    ca:40:a8:fb:67:c5:38:ac:38:4e:41:00:9d:e2:4c:
                    77:c8:9c:4e:1a:76:87:69:00:ed:2c:57:20:64:db:
                    23:f1:66:3c:75:f5:7a:c1:dc:d1:47:ba:23:a8:f2:
                    c3:df:ae:ad:de:d0:c3:a8:23:e9:86:ef:f6:7f:bd:
                    6b:6d:ab:77:8d:fc:c5:c4:bc:22:72:2c:97:cb:db:
                    a1:08:92:8e:5d:6f:6d:a8:95:19:e9:7e:a7:fe:55:
                    ab:95:b3:58:e4:84:20:48:df:67:71:16:6b:57:77:
                    27:20:51:1a:66:15:da:44:ed:b9:a2:72:76:8e:19:
                    f4:8e:ed:fc:f6:ef:dd:ac:9c:1e:a5:2e:bc:8b:1b:
                    74:e3:14:da:e3:b0:30:9f:68:e9:8a:00:fb:0b:db:
                    1e:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:09:53:87:46:A6:D0:C9:CB:50:62:30:EC:53:E0:64:5F:0D:42:B9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa/2269899c-82be-30a7-af5a-9936dbfc1a1d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa/f7798abb-711d-4f10-bc46-bceed055e1fa.crl

            X509v3 Authority Key Identifier:
                keyid:CC:90:3D:D7:AA:39:05:EC:E7:35:08:AC:CB:45:F4:6E:65:BC:1D:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fb54:220::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:ed:40:16:e0:37:28:19:84:94:45:9b:0c:0f:95:91:b3:7c:
         b8:8c:dd:31:3a:98:12:f6:83:ac:25:5f:52:ec:25:73:8c:b4:
         6b:71:4b:be:1f:e4:b2:49:12:41:5f:3a:ea:d9:9e:c7:ce:a6:
         32:ec:b2:aa:f9:ec:bd:04:88:78:2a:2d:2d:cc:97:37:27:73:
         9a:14:65:81:c7:0a:7e:0b:ae:0b:90:81:8d:19:2b:45:e7:1d:
         5e:d0:68:da:21:bb:38:cf:1a:c2:c6:a8:b4:52:bf:6b:a6:a6:
         fc:3e:d2:c2:ee:1b:5d:70:51:1c:a4:a6:66:20:9c:c6:67:55:
         4c:6a:42:c6:4c:a1:54:c7:34:86:bd:af:40:cc:98:ce:1b:f8:
         f0:e9:70:54:bd:d7:e9:da:1f:37:22:d0:5c:2c:14:35:18:c1:
         6e:66:26:ec:9e:db:95:6b:03:fa:06:7d:0e:9e:5b:cd:90:79:
         2a:a5:b7:ad:8c:0e:fa:b2:c5:66:74:cd:82:0c:24:1a:77:b0:
         b7:c6:b5:f3:dc:72:a0:b7:03:bc:f2:45:3c:5b:f7:9b:12:d6:
         fe:bb:b9:d5:b9:d7:05:ce:6c:7d:b3:bc:b3:c8:e0:44:40:ae:
         fa:60:f0:b3:00:77:59:89:15:d8:7f:77:34:e6:ef:bf:87:81:
         0c:5b:fc:5d
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE4QTthKQhOGbKFpkegwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjc3OThhYmItNzExZC00ZjEwLWJjNDYtYmNlZWQwNTVl
MWZhMB4XDTI2MDYwNDIxMDAxMloXDTI2MDkwMjIxMDAxMlowLzEtMCsGA1UEAxMk
N2VkZmNiMDQtN2FkZC00MDkzLWJiYmUtNDY1NzUzNDQ3Y2Y1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhuPN3HalxQ6DKOTWNX5eh1ltOoJe9kd/zuR1
A4RaMf35zxp5IJQBSIuKF+ZEDf3JpIq4uIUlb6mZx/m8aZVNble4OMxWq8W6Ucdj
ocH2Rl4/MYOMiz83iDJiQIwjLEabMwVm5dx7D8bKQKj7Z8U4rDhOQQCd4kx3yJxO
GnaHaQDtLFcgZNsj8WY8dfV6wdzRR7ojqPLD366t3tDDqCPphu/2f71rbat3jfzF
xLwiciyXy9uhCJKOXW9tqJUZ6X6n/lWrlbNY5IQgSN9ncRZrV3cnIFEaZhXaRO25
onJ2jhn0ju389u/drJwepS68ixt04xTa47Awn2jpigD7C9seywIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFEYJU4dGptDJy1BiMOxT4GRfDUK5MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9mNzc5
OGFiYi03MTFkLTRmMTAtYmM0Ni1iY2VlZDA1NWUxZmEvMjI2OTg5OWMtODJiZS0z
MGE3LWFmNWEtOTkzNmRiZmMxYTFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZjc3OThhYmItNzExZC00ZjEwLWJj
NDYtYmNlZWQwNTVlMWZhL2Y3Nzk4YWJiLTcxMWQtNGYxMC1iYzQ2LWJjZWVkMDU1
ZTFmYS5jcmwwHwYDVR0jBBgwFoAUzJA916o5BeznNQisy0X0bmW8HeEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9mNzc5OGFiYi03MTFkLTRmMTAtYmM0Ni1iY2Vl
ZDA1NWUxZmEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgL7VAIg
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBACvtQBbgNygZhJRFmwwPlZGzfLiM3TE6mBL2g6wlX1LsJXOMtGtx
S74f5LJJEkFfOurZnsfOpjLssqr57L0EiHgqLS3Mlzcnc5oUZYHHCn4LrguQgY0Z
K0XnHV7QaNohuzjPGsLGqLRSv2umpvw+0sLuG11wURykpmYgnMZnVUxqQsZMoVTH
NIa9r0DMmM4b+PDpcFS91+naHzci0FwsFDUYwW5mJuye25VrA/oGfQ6eW82QeSql
t62MDvqyxWZ0zYIMJBp3sLfGtfPccqC3A7zyRTxb95sS1v67udW51wXObH2zvLPI
4ERArvpg8LMAd1mJFdh/dzTm77+HgQxb/F0=
-----END CERTIFICATE-----
Generated at Sat Jun 13 23:34:07 2026 by rpki-client