Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5a757a69-2945-4b01-b30c-29c3ff74ae4b/1f74085a-91aa-3331-9a65-b05046d33510.roa
File:                     1f74085a-91aa-3331-9a65-b05046d33510.roa (raw, json)
Hash identifier:          Cubh+mFzc6nd83Ma0Gttfosmh4GCrqZJqvWdd4JSUMk=
Subject key identifier:   4B:6B:B4:B0:D0:30:A1:07:00:A2:02:A3:21:74:82:6F:B2:A4:9A:1F
Certificate issuer:       /CN=5a757a69-2945-4b01-b30c-29c3ff74ae4b
Certificate serial:       010D0C9F4328584DF7A5E6CD3FF7873C942CFE40
Authority key identifier: A8:EB:81:AE:2C:25:0B:A2:04:D6:36:83:5A:23:18:21:11:B2:59:7D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5a757a69-2945-4b01-b30c-29c3ff74ae4b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5a757a69-2945-4b01-b30c-29c3ff74ae4b/1f74085a-91aa-3331-9a65-b05046d33510.roa
Signing time:             Wed 27 May 2026 01:00:14 +0000
ROA not before:           Wed 27 May 2026 01:00:14 +0000
ROA not after:            Tue 25 Aug 2026 01:00:14 +0000
asID:                     40716
IP address blocks:        2602:81b:e000::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5a757a69-2945-4b01-b30c-29c3ff74ae4b/5a757a69-2945-4b01-b30c-29c3ff74ae4b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5a757a69-2945-4b01-b30c-29c3ff74ae4b/5a757a69-2945-4b01-b30c-29c3ff74ae4b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5a757a69-2945-4b01-b30c-29c3ff74ae4b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:f7:a5:e6:cd:3f:f7:87:3c:94:2c:fe:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a757a69-2945-4b01-b30c-29c3ff74ae4b
        Validity
            Not Before: May 27 01:00:14 2026 GMT
            Not After : Aug 25 01:00:14 2026 GMT
        Subject: CN=4a00349a-5a98-4a47-88b5-50a92f3bbd4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:0f:02:01:b7:48:3f:6c:7b:93:3c:f4:c6:c6:
                    81:e3:27:e5:1c:a4:07:4e:27:ed:87:6a:ee:e2:78:
                    a6:ab:f1:a8:15:42:49:93:33:b6:54:a0:5e:6b:9f:
                    aa:80:18:09:c1:41:2b:55:dd:50:bf:96:b5:4e:89:
                    07:48:b6:f6:c9:27:d6:a3:71:4d:db:5e:60:95:ce:
                    3a:96:a1:e4:a9:c7:fd:16:33:22:99:54:86:b9:76:
                    68:9c:ba:9d:c7:01:8c:6b:19:30:e6:28:98:2e:0e:
                    d5:1c:55:c5:4e:8e:c9:d7:24:e5:d9:1a:6b:e5:ad:
                    7e:dd:dc:f5:b4:00:d8:84:5a:8c:10:f7:11:11:f4:
                    b3:3a:99:9e:d9:bf:a9:d2:f7:86:a3:11:0c:7d:9e:
                    44:b7:80:3b:73:f0:29:34:ae:c7:da:eb:30:71:b9:
                    68:49:db:1d:3c:7b:02:15:0d:6a:9e:62:c8:45:9e:
                    5a:6f:45:ac:4b:c1:5b:13:1a:6a:99:30:8e:4a:51:
                    65:50:42:68:4f:1f:71:be:12:2f:f2:a4:0f:e3:0f:
                    34:84:0a:9f:13:1d:5d:e7:cb:9a:26:ba:e2:b7:d4:
                    26:db:d7:e0:ec:5a:a6:f9:4d:c0:71:ab:38:67:a4:
                    f6:6f:b4:68:ec:b7:86:c7:fe:ba:10:71:6f:1d:ee:
                    75:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:6B:B4:B0:D0:30:A1:07:00:A2:02:A3:21:74:82:6F:B2:A4:9A:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5a757a69-2945-4b01-b30c-29c3ff74ae4b/1f74085a-91aa-3331-9a65-b05046d33510.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5a757a69-2945-4b01-b30c-29c3ff74ae4b/5a757a69-2945-4b01-b30c-29c3ff74ae4b.crl

            X509v3 Authority Key Identifier:
                keyid:A8:EB:81:AE:2C:25:0B:A2:04:D6:36:83:5A:23:18:21:11:B2:59:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5a757a69-2945-4b01-b30c-29c3ff74ae4b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:81b:e000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:15:53:0f:d6:5a:b5:10:44:95:80:f5:cf:42:89:3d:fb:5d:
         77:11:4d:94:60:c4:d0:d8:bc:94:57:29:18:19:f1:41:5b:30:
         c5:c7:93:95:d7:83:dd:fe:93:0a:3a:ad:00:77:e7:ac:f6:06:
         de:89:36:a7:9b:0b:02:4d:c1:0c:51:5a:9e:ab:b3:b3:48:aa:
         31:37:9a:51:9e:f7:ec:27:ad:b5:c1:22:6f:a0:d3:a9:b5:16:
         ed:f3:d4:3e:8a:4e:54:13:31:aa:8d:78:00:0e:e2:be:e3:8c:
         22:35:b5:2a:f7:e8:65:be:c4:94:bf:90:9e:95:83:ea:77:b5:
         dc:5d:a8:cd:3c:a3:99:25:65:2c:cb:8a:ce:d0:31:44:86:11:
         d3:72:b2:a8:04:2b:14:31:18:aa:91:e5:6e:78:64:c8:0b:a0:
         31:eb:4f:f4:4d:ae:f3:6a:7e:68:c3:67:6d:46:6b:42:13:b2:
         36:51:05:de:15:7a:3e:b7:ee:e6:1c:f7:5a:f1:25:6e:af:ac:
         e8:eb:1c:a7:67:f2:1e:c9:9d:2a:b9:c5:f1:e5:62:16:11:10:
         fb:db:66:87:68:63:f6:6f:7e:2b:6c:b6:96:9b:e8:ac:3e:a9:
         93:37:80:27:a3:33:5c:30:11:6f:55:e1:ed:9f:f9:9a:14:9e:
         4e:e7:ae:33
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE33pebNP/eHPJQs/kAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWE3NTdhNjktMjk0NS00YjAxLWIzMGMtMjljM2ZmNzRh
ZTRiMB4XDTI2MDUyNzAxMDAxNFoXDTI2MDgyNTAxMDAxNFowLzEtMCsGA1UEAxMk
NGEwMDM0OWEtNWE5OC00YTQ3LTg4YjUtNTBhOTJmM2JiZDRkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmA8CAbdIP2x7kzz0xsaB4yflHKQHTifth2ru
4nimq/GoFUJJkzO2VKBea5+qgBgJwUErVd1Qv5a1TokHSLb2ySfWo3FN215glc46
lqHkqcf9FjMimVSGuXZonLqdxwGMaxkw5iiYLg7VHFXFTo7J1yTl2Rpr5a1+3dz1
tADYhFqMEPcREfSzOpme2b+p0veGoxEMfZ5Et4A7c/ApNK7H2uswcbloSdsdPHsC
FQ1qnmLIRZ5ab0WsS8FbExpqmTCOSlFlUEJoTx9xvhIv8qQP4w80hAqfEx1d58ua
Jrrit9Qm29fg7Fqm+U3Acas4Z6T2b7Ro7LeGx/66EHFvHe51rwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFEtrtLDQMKEHAKICoyF0gm+ypJofMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC81YTc1
N2E2OS0yOTQ1LTRiMDEtYjMwYy0yOWMzZmY3NGFlNGIvMWY3NDA4NWEtOTFhYS0z
MzMxLTlhNjUtYjA1MDQ2ZDMzNTEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNWE3NTdhNjktMjk0NS00YjAxLWIz
MGMtMjljM2ZmNzRhZTRiLzVhNzU3YTY5LTI5NDUtNGIwMS1iMzBjLTI5YzNmZjc0
YWU0Yi5jcmwwHwYDVR0jBBgwFoAUqOuBriwlC6IE1jaDWiMYIRGyWX0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC81YTc1N2E2OS0yOTQ1LTRiMDEtYjMwYy0yOWMz
ZmY3NGFlNGIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgIIG+Aw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEABxVTD9ZatRBElYD1z0KJPftddxFNlGDE0Ni8lFcpGBnxQVswxceT
ldeD3f6TCjqtAHfnrPYG3ok2p5sLAk3BDFFanquzs0iqMTeaUZ737CettcEib6DT
qbUW7fPUPopOVBMxqo14AA7ivuOMIjW1KvfoZb7ElL+QnpWD6ne13F2ozTyjmSVl
LMuKztAxRIYR03KyqAQrFDEYqpHlbnhkyAugMetP9E2u82p+aMNnbUZrQhOyNlEF
3hV6Prfu5hz3WvElbq+s6Oscp2fyHsmdKrnF8eViFhEQ+9tmh2hj9m9+K2y2lpvo
rD6pkzeAJ6MzXDARb1Xh7Z/5mhSeTueuMw==
-----END CERTIFICATE-----
Generated at Sat Jun 13 20:22:26 2026 by rpki-client