Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4/a0f2799f-a502-347f-bf84-3f5a6d253844.roa
File:                     a0f2799f-a502-347f-bf84-3f5a6d253844.roa (raw, json)
Hash identifier:          gdritYOTo1guOdERhNyYygf0XnPNsiumy5kEVKK49bc=
Subject key identifier:   95:A9:7D:52:18:E5:18:2E:65:DA:95:8B:D2:67:FA:EC:E7:A1:BF:26
Certificate issuer:       /CN=da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4
Certificate serial:       010D0C9F4328584D624A544B116B4655557F8A80
Authority key identifier: B1:AB:4F:F6:34:69:7B:5B:ED:E2:5D:45:30:00:14:37:65:25:14:8A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4/a0f2799f-a502-347f-bf84-3f5a6d253844.roa
Signing time:             Fri 03 Apr 2026 13:00:30 +0000
ROA not before:           Fri 03 Apr 2026 13:00:30 +0000
ROA not after:            Thu 02 Jul 2026 13:00:30 +0000
asID:                     401395
IP address blocks:        2602:f7db::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:62:4a:54:4b:11:6b:46:55:55:7f:8a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4
        Validity
            Not Before: Apr  3 13:00:30 2026 GMT
            Not After : Jul  2 13:00:30 2026 GMT
        Subject: CN=8220697a-d80e-417f-b59c-fb2ae2422b59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:0b:ce:d6:ff:90:0d:c2:18:91:27:08:5c:ee:
                    ce:57:32:fa:6e:fa:d9:43:b5:1e:04:3e:9a:38:c3:
                    ab:78:c7:1e:36:d7:6c:43:77:dd:36:2f:86:de:74:
                    09:58:27:cc:bb:7f:54:82:c7:8a:a3:fa:20:40:3c:
                    72:dc:1e:43:97:67:2c:70:b8:bf:f8:57:aa:09:6d:
                    32:d0:49:ac:33:9b:61:a9:a5:c1:e9:1c:f0:54:2b:
                    b0:34:d2:6e:cf:b4:21:68:61:dc:2c:24:0b:58:81:
                    d1:33:60:f9:ce:53:80:81:13:ba:e0:b7:71:fc:d0:
                    35:24:a1:dd:04:03:67:34:80:47:71:04:e8:34:14:
                    10:b7:5c:6f:97:36:77:b8:4b:1c:86:0b:ca:15:87:
                    dc:0d:03:0c:f9:a8:1e:f3:f2:44:e2:6e:27:ac:58:
                    fe:ee:c9:0a:4b:48:8e:cb:80:f7:bb:c4:2f:67:7e:
                    02:15:ac:b9:d3:7f:67:5e:bd:bd:ca:8e:f2:e2:3b:
                    de:2d:33:da:7b:4b:7f:c3:ca:dd:d0:5c:90:4b:37:
                    45:76:1b:b2:4a:48:d4:29:ae:fe:1b:1c:22:e7:1f:
                    15:82:fb:50:1f:02:47:8c:62:15:6d:d5:1c:54:27:
                    f6:a1:3d:8e:9e:6c:7b:52:e1:58:3b:32:28:0d:b6:
                    be:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:A9:7D:52:18:E5:18:2E:65:DA:95:8B:D2:67:FA:EC:E7:A1:BF:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4/a0f2799f-a502-347f-bf84-3f5a6d253844.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4.crl

            X509v3 Authority Key Identifier:
                keyid:B1:AB:4F:F6:34:69:7B:5B:ED:E2:5D:45:30:00:14:37:65:25:14:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f7db::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:6d:0a:a6:62:08:f4:6b:1a:e5:5d:17:be:1b:93:86:1e:71:
         f6:18:06:a2:52:b0:1d:19:f9:f7:42:85:ed:09:59:2a:e5:e5:
         cd:5c:df:5b:fb:f6:98:0d:dd:70:fc:1f:c0:2e:2d:30:b6:42:
         f5:0d:fa:bb:b1:ef:2e:e2:5e:d9:b7:bc:f5:41:46:94:cc:40:
         f3:c9:ae:ad:64:15:85:da:06:8a:fb:53:7d:7a:45:e1:4b:bb:
         d8:90:34:4c:ec:b7:e0:aa:fd:86:f1:77:a6:14:9e:c1:d4:01:
         b4:68:44:ac:da:d0:22:89:4f:7b:ff:3d:f3:c3:ed:d7:a2:d2:
         aa:b5:75:09:8d:5f:2e:39:2e:a1:38:8a:52:05:52:f0:70:81:
         06:18:cb:b6:d2:f9:10:95:8b:77:6b:34:f9:b9:80:53:11:3e:
         3d:ad:68:b8:11:74:d4:06:ac:3a:e2:74:78:63:77:03:af:46:
         f0:16:27:63:41:73:b3:a8:bc:c0:00:53:40:78:10:bd:ff:4b:
         cf:e7:41:3a:9b:91:08:8d:eb:e9:9c:d0:41:18:ed:6b:9a:8d:
         3d:12:39:a2:df:ac:0d:cc:f5:43:c6:d7:6c:c8:42:92:09:b8:
         4f:ec:7b:5f:e3:fa:fb:43:42:3c:65:97:0a:16:cd:f2:fc:15:
         87:3a:f3:67
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE1iSlRLEWtGVVV/ioAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGExZDE1ZmUtOTRlOS00YWViLTkzYzctZDQ4MWIzYzJm
MWE0MB4XDTI2MDQwMzEzMDAzMFoXDTI2MDcwMjEzMDAzMFowLzEtMCsGA1UEAxMk
ODIyMDY5N2EtZDgwZS00MTdmLWI1OWMtZmIyYWUyNDIyYjU5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsgvO1v+QDcIYkScIXO7OVzL6bvrZQ7UeBD6a
OMOreMceNtdsQ3fdNi+G3nQJWCfMu39UgseKo/ogQDxy3B5Dl2cscLi/+FeqCW0y
0EmsM5thqaXB6RzwVCuwNNJuz7QhaGHcLCQLWIHRM2D5zlOAgRO64Ldx/NA1JKHd
BANnNIBHcQToNBQQt1xvlzZ3uEschgvKFYfcDQMM+age8/JE4m4nrFj+7skKS0iO
y4D3u8QvZ34CFay5039nXr29yo7y4jveLTPae0t/w8rd0FyQSzdFdhuySkjUKa7+
Gxwi5x8VgvtQHwJHjGIVbdUcVCf2oT2Onmx7UuFYOzIoDba+1QIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFJWpfVIY5RguZdqVi9Jn+uznob8mMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9kYTFk
MTVmZS05NGU5LTRhZWItOTNjNy1kNDgxYjNjMmYxYTQvYTBmMjc5OWYtYTUwMi0z
NDdmLWJmODQtM2Y1YTZkMjUzODQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZGExZDE1ZmUtOTRlOS00YWViLTkz
YzctZDQ4MWIzYzJmMWE0L2RhMWQxNWZlLTk0ZTktNGFlYi05M2M3LWQ0ODFiM2My
ZjFhNC5jcmwwHwYDVR0jBBgwFoAUsatP9jRpe1vt4l1FMAAUN2UlFIowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9kYTFkMTVmZS05NGU5LTRhZWItOTNjNy1kNDgx
YjNjMmYxYTQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL32wAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAFG0KpmII9Gsa5V0XvhuThh5x9hgGolKwHRn590KF7QlZKuXlzVzf
W/v2mA3dcPwfwC4tMLZC9Q36u7HvLuJe2be89UFGlMxA88murWQVhdoGivtTfXpF
4Uu72JA0TOy34Kr9hvF3phSewdQBtGhErNrQIolPe/8988Pt16LSqrV1CY1fLjku
oTiKUgVS8HCBBhjLttL5EJWLd2s0+bmAUxE+Pa1ouBF01AasOuJ0eGN3A69G8BYn
Y0Fzs6i8wABTQHgQvf9Lz+dBOpuRCI3r6ZzQQRjta5qNPRI5ot+sDcz1Q8bXbMhC
kgm4T+x7X+P6+0NCPGWXChbN8vwVhzrzZw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 16:40:52 2026 by rpki-client