Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/45c9903a-58e9-4d12-b429-df86258726e0/89c120a2-1e35-30da-aab6-fe65c9e52460.roa
File:                     89c120a2-1e35-30da-aab6-fe65c9e52460.roa (raw, json)
Hash identifier:          mAM5ie8nAN+g6XH/onGO3f41KaFnwgQj0brfg2k53K0=
Subject key identifier:   8B:2B:CD:0A:12:EB:6E:77:C6:C1:42:5F:5E:C1:4A:EF:8D:D4:30:0A
Certificate issuer:       /CN=45c9903a-58e9-4d12-b429-df86258726e0
Certificate serial:       010D0C9F4328584FAF5884B5E5B43D43822E1D00
Authority key identifier: 84:A0:E7:D9:92:5E:5B:4E:18:AB:0C:43:AA:A2:80:5E:84:52:0D:A6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/45c9903a-58e9-4d12-b429-df86258726e0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/45c9903a-58e9-4d12-b429-df86258726e0/89c120a2-1e35-30da-aab6-fe65c9e52460.roa
Signing time:             Sat 31 Oct 2026 13:00:13 +0000
ROA not before:           Sat 31 Oct 2026 13:00:13 +0000
ROA not after:            Fri 29 Jan 2027 14:00:13 +0000
asID:                     14618
IP address blocks:        2602:f387:1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/45c9903a-58e9-4d12-b429-df86258726e0/45c9903a-58e9-4d12-b429-df86258726e0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/45c9903a-58e9-4d12-b429-df86258726e0/45c9903a-58e9-4d12-b429-df86258726e0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/45c9903a-58e9-4d12-b429-df86258726e0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 06 Nov 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:af:58:84:b5:e5:b4:3d:43:82:2e:1d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45c9903a-58e9-4d12-b429-df86258726e0
        Validity
            Not Before: Oct 31 13:00:13 2026 GMT
            Not After : Jan 29 14:00:13 2027 GMT
        Subject: CN=4f6fdb13-7be0-40ca-ad5c-7529bc3c9b67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:b9:bb:15:a9:86:f5:52:a7:d0:bb:77:9d:08:
                    e8:ba:06:ef:88:91:92:e5:67:e8:cc:e9:55:c0:ec:
                    da:c7:32:d8:99:05:e3:dc:69:9a:ad:7a:b4:20:43:
                    b8:be:94:8c:8a:b6:a4:ca:45:ef:bc:17:31:0a:58:
                    6d:e8:87:57:f4:ad:e9:2e:c3:78:24:be:b6:e0:7f:
                    c5:84:5d:37:5d:87:b8:38:77:2f:43:e3:fc:ce:12:
                    a7:19:b1:7b:03:41:1d:97:73:bd:b9:05:09:72:fa:
                    88:c7:50:0d:1d:ee:11:02:d4:7c:0d:d3:11:ba:f1:
                    c7:a9:e9:2e:a3:46:88:39:c5:e4:5d:d1:5e:92:9d:
                    3f:5d:9c:a8:2c:d7:78:86:d6:f2:47:bb:1c:73:a6:
                    6a:3c:6e:50:b4:84:25:9a:a2:c4:4e:3a:e0:a7:28:
                    68:ff:35:49:af:6d:be:e9:d3:56:0b:b3:56:76:98:
                    3d:90:65:ef:6e:ec:70:ad:93:6b:47:26:52:b2:06:
                    0d:c4:6a:1e:ca:4f:e5:45:55:63:db:d0:e7:50:73:
                    94:6b:39:e0:2e:02:31:58:85:be:1c:72:1e:a9:2c:
                    66:b5:09:8b:be:ed:61:cc:7e:64:66:68:6d:15:5b:
                    d7:ab:66:49:32:a8:ba:d4:1a:80:4d:a8:67:9c:45:
                    16:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:2B:CD:0A:12:EB:6E:77:C6:C1:42:5F:5E:C1:4A:EF:8D:D4:30:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/45c9903a-58e9-4d12-b429-df86258726e0/89c120a2-1e35-30da-aab6-fe65c9e52460.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/45c9903a-58e9-4d12-b429-df86258726e0/45c9903a-58e9-4d12-b429-df86258726e0.crl

            X509v3 Authority Key Identifier:
                keyid:84:A0:E7:D9:92:5E:5B:4E:18:AB:0C:43:AA:A2:80:5E:84:52:0D:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/45c9903a-58e9-4d12-b429-df86258726e0.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f387:1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:0f:9a:a3:e6:21:9d:47:23:00:ae:0e:3a:e2:34:96:f0:fd:
         31:08:17:05:82:db:dc:d0:58:b9:ac:44:da:f4:9f:f2:1b:00:
         11:1b:2d:99:c5:20:46:06:30:0f:72:fb:a2:7c:34:95:db:ff:
         51:cb:b0:fa:74:8b:7f:8b:dd:38:36:e0:c8:e3:65:44:42:49:
         df:4d:5c:8e:e1:43:6b:b7:8d:bb:f4:62:11:98:af:6a:72:ba:
         7d:4e:a3:05:98:a5:54:f4:de:99:f3:1f:aa:5d:18:87:2f:f4:
         25:7c:18:db:2f:6e:24:df:4d:f6:87:a7:77:1f:1b:3f:3f:fc:
         63:fd:71:b3:93:d5:71:9a:a1:9e:24:ac:0e:2e:58:29:f9:c2:
         64:ae:55:9a:1d:3b:47:ad:72:8f:92:8a:ff:f5:c0:c3:33:a9:
         8f:78:4f:ab:cc:7d:fe:dc:cf:4a:13:23:ec:a1:6a:da:db:4f:
         d1:03:8a:a0:a4:09:bc:36:8d:f6:f2:7c:f7:f5:9b:0b:3e:07:
         a7:06:0d:7a:3f:f3:9a:bd:30:1b:87:76:53:9c:23:5e:98:5e:
         30:7b:4c:d1:01:04:be:d7:5c:82:ca:c3:76:9b:fb:64:20:12:
         ea:be:ab:90:4c:7f:88:da:d2:ef:c8:ed:7f:69:0c:29:9f:6f:
         c8:41:7d:5c
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE+vWIS15bQ9Q4IuHQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDVjOTkwM2EtNThlOS00ZDEyLWI0MjktZGY4NjI1ODcy
NmUwMB4XDTI2MTAzMTEzMDAxM1oXDTI3MDEyOTE0MDAxM1owLzEtMCsGA1UEAxMk
NGY2ZmRiMTMtN2JlMC00MGNhLWFkNWMtNzUyOWJjM2M5YjY3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArLm7FamG9VKn0Lt3nQjougbviJGS5WfozOlV
wOzaxzLYmQXj3GmarXq0IEO4vpSMirakykXvvBcxClht6IdX9K3pLsN4JL624H/F
hF03XYe4OHcvQ+P8zhKnGbF7A0Edl3O9uQUJcvqIx1ANHe4RAtR8DdMRuvHHqeku
o0aIOcXkXdFekp0/XZyoLNd4htbyR7scc6ZqPG5QtIQlmqLETjrgpyho/zVJr22+
6dNWC7NWdpg9kGXvbuxwrZNrRyZSsgYNxGoeyk/lRVVj29DnUHOUazngLgIxWIW+
HHIeqSxmtQmLvu1hzH5kZmhtFVvXq2ZJMqi61BqATahnnEUW8wIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFIsrzQoS6253xsFCX17BSu+N1DAKMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi80NWM5
OTAzYS01OGU5LTRkMTItYjQyOS1kZjg2MjU4NzI2ZTAvODljMTIwYTItMWUzNS0z
MGRhLWFhYjYtZmU2NWM5ZTUyNDYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05
YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvNDVjOTkwM2EtNThlOS00ZDEyLWI0
MjktZGY4NjI1ODcyNmUwLzQ1Yzk5MDNhLTU4ZTktNGQxMi1iNDI5LWRmODYyNTg3
MjZlMC5jcmwwHwYDVR0jBBgwFoAUhKDn2ZJeW04YqwxDqqKAXoRSDaYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz
OS05NDBmLWJlMjczZDljMGI2Mi80NWM5OTAzYS01OGU5LTRkMTItYjQyOS1kZjg2
MjU4NzI2ZTAuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgLzhwAB
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAAEPmqPmIZ1HIwCuDjriNJbw/TEIFwWC29zQWLmsRNr0n/IbABEb
LZnFIEYGMA9y+6J8NJXb/1HLsPp0i3+L3Tg24MjjZURCSd9NXI7hQ2u3jbv0YhGY
r2pyun1OowWYpVT03pnzH6pdGIcv9CV8GNsvbiTfTfaHp3cfGz8//GP9cbOT1XGa
oZ4krA4uWCn5wmSuVZodO0etco+Siv/1wMMzqY94T6vMff7cz0oTI+yhatrbT9ED
iqCkCbw2jfbyfPf1mws+B6cGDXo/85q9MBuHdlOcI16YXjB7TNEBBL7XXILKw3ab
+2QgEuq+q5BMf4ja0u/I7X9pDCmfb8hBfVw=
-----END CERTIFICATE-----
Generated at Thu Nov 5 04:39:40 2026 by rpki-client