Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/71694d9a-8a1f-478d-8d5f-c3d4c84ddea8/84a6cb81-8bd5-38db-b496-fd0e590df645.roa
File:                     84a6cb81-8bd5-38db-b496-fd0e590df645.roa (raw, json)
Hash identifier:          D93/IC8/O7QwvQHNNQS5xCdpSDhWVjaohRim71so7Lo=
Subject key identifier:   BA:CE:15:97:6E:32:4F:57:9F:97:97:B0:1B:1E:10:34:EC:BA:59:42
Certificate issuer:       /CN=71694d9a-8a1f-478d-8d5f-c3d4c84ddea8
Certificate serial:       010D0C9F4328584E0D8426B2B1645C6190649B80
Authority key identifier: 2D:D7:F3:49:98:6C:58:6B:C7:BF:E0:C1:9D:BF:8F:BC:2E:E4:BC:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/71694d9a-8a1f-478d-8d5f-c3d4c84ddea8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/71694d9a-8a1f-478d-8d5f-c3d4c84ddea8/84a6cb81-8bd5-38db-b496-fd0e590df645.roa
Signing time:             Wed 03 Jun 2026 21:00:12 +0000
ROA not before:           Wed 03 Jun 2026 21:00:12 +0000
ROA not after:            Tue 01 Sep 2026 21:00:12 +0000
asID:                     401170
IP address blocks:        2602:f8bf::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/71694d9a-8a1f-478d-8d5f-c3d4c84ddea8/71694d9a-8a1f-478d-8d5f-c3d4c84ddea8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/71694d9a-8a1f-478d-8d5f-c3d4c84ddea8/71694d9a-8a1f-478d-8d5f-c3d4c84ddea8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/71694d9a-8a1f-478d-8d5f-c3d4c84ddea8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:0d:84:26:b2:b1:64:5c:61:90:64:9b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71694d9a-8a1f-478d-8d5f-c3d4c84ddea8
        Validity
            Not Before: Jun  3 21:00:12 2026 GMT
            Not After : Sep  1 21:00:12 2026 GMT
        Subject: CN=4bc4bbd2-d5a7-4d8f-89df-ec7e523b8fd0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:95:f1:3b:74:77:c5:e8:b4:f0:bf:8c:df:95:
                    1e:9a:28:4f:2d:32:1d:01:1c:d0:42:a5:40:d7:53:
                    0b:9a:6e:0c:e2:46:06:4a:87:19:c9:e0:e3:1c:bc:
                    ce:95:bc:8f:5f:3f:3d:e6:bc:e5:69:de:8e:2a:d9:
                    29:7e:f0:0e:c5:d8:70:35:9f:5b:f7:eb:99:2b:e8:
                    17:3a:07:52:e2:34:1d:a6:25:85:7e:ec:af:54:cb:
                    74:09:f4:d3:b0:1e:83:41:6a:25:67:ad:32:d9:9f:
                    52:1e:59:80:c8:2d:02:31:dc:97:47:68:8e:04:41:
                    c0:8f:8c:a7:a9:a2:e0:70:90:da:d2:85:ff:8d:cb:
                    0c:11:43:34:99:cc:dd:42:2d:62:e9:79:42:5a:64:
                    7d:1e:a1:01:c7:71:fb:9c:84:b0:c9:79:9a:1e:02:
                    63:68:5d:86:e1:d0:a0:f1:6a:28:4a:5b:0a:9c:ad:
                    2e:75:6d:0c:32:87:56:3c:8d:25:79:83:5e:5d:15:
                    18:72:a3:1a:8c:d7:d8:66:01:f7:ab:f2:ba:18:38:
                    10:01:b0:15:e0:27:02:7c:04:ce:34:01:01:17:c9:
                    f1:b8:bb:cd:04:70:54:6f:4f:f8:94:34:42:ff:5e:
                    6d:53:56:90:6d:96:2a:f7:ef:b6:43:cc:25:98:4e:
                    27:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:CE:15:97:6E:32:4F:57:9F:97:97:B0:1B:1E:10:34:EC:BA:59:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/71694d9a-8a1f-478d-8d5f-c3d4c84ddea8/84a6cb81-8bd5-38db-b496-fd0e590df645.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/71694d9a-8a1f-478d-8d5f-c3d4c84ddea8/71694d9a-8a1f-478d-8d5f-c3d4c84ddea8.crl

            X509v3 Authority Key Identifier:
                keyid:2D:D7:F3:49:98:6C:58:6B:C7:BF:E0:C1:9D:BF:8F:BC:2E:E4:BC:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/71694d9a-8a1f-478d-8d5f-c3d4c84ddea8.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f8bf::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:2f:c9:ea:ed:62:a2:6b:08:c0:91:c2:2a:4b:f4:91:ea:d5:
         8c:4a:41:54:2a:60:09:b2:1b:95:d2:1c:f5:f4:ee:4a:5b:d7:
         ea:f6:3c:05:c6:da:d2:c3:82:1a:09:9a:cb:65:e3:1b:b6:54:
         ba:22:55:1f:c0:c6:2d:d8:55:55:99:e2:4b:9b:d2:98:7e:58:
         a0:45:bd:af:54:75:cf:ae:21:e2:5c:b7:1e:34:f9:b6:af:04:
         c0:47:67:6c:8b:95:4e:f5:d1:32:a6:84:b3:13:70:0d:87:86:
         34:a3:9e:4c:bd:2f:1f:86:f4:f2:05:52:59:9b:a7:ee:bc:40:
         39:72:51:da:79:18:4f:ca:f8:3c:6d:c7:f3:89:e3:15:b3:6a:
         f3:96:bd:55:75:49:0b:86:a0:b0:ca:e8:b7:1f:cf:04:87:b2:
         b9:83:ef:99:5a:0d:86:b5:f4:30:f5:ee:69:a2:17:64:09:dc:
         e4:5e:27:4e:f5:f9:66:15:81:64:65:3a:d8:86:1f:6d:d9:4b:
         03:ed:8b:3f:51:39:ce:65:81:71:0b:af:8e:6e:fc:f5:01:32:
         e6:3a:ca:db:3f:d8:77:1d:c5:b4:af:6e:61:e7:c7:ca:2d:1e:
         29:65:b8:66:84:bc:74:9c:54:6a:16:e3:e4:94:1c:07:0d:db:
         5e:7b:03:d5
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE4NhCaysWRcYZBkm4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzE2OTRkOWEtOGExZi00NzhkLThkNWYtYzNkNGM4NGRk
ZWE4MB4XDTI2MDYwMzIxMDAxMloXDTI2MDkwMTIxMDAxMlowLzEtMCsGA1UEAxMk
NGJjNGJiZDItZDVhNy00ZDhmLTg5ZGYtZWM3ZTUyM2I4ZmQwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgJXxO3R3xei08L+M35UemihPLTIdARzQQqVA
11MLmm4M4kYGSocZyeDjHLzOlbyPXz895rzlad6OKtkpfvAOxdhwNZ9b9+uZK+gX
OgdS4jQdpiWFfuyvVMt0CfTTsB6DQWolZ60y2Z9SHlmAyC0CMdyXR2iOBEHAj4yn
qaLgcJDa0oX/jcsMEUM0mczdQi1i6XlCWmR9HqEBx3H7nISwyXmaHgJjaF2G4dCg
8WooSlsKnK0udW0MModWPI0leYNeXRUYcqMajNfYZgH3q/K6GDgQAbAV4CcCfATO
NAEBF8nxuLvNBHBUb0/4lDRC/15tU1aQbZYq9++2Q8wlmE4n0QIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFLrOFZduMk9Xn5eXsBseEDTsullCMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS83MTY5
NGQ5YS04YTFmLTQ3OGQtOGQ1Zi1jM2Q0Yzg0ZGRlYTgvODRhNmNiODEtOGJkNS0z
OGRiLWI0OTYtZmQwZTU5MGRmNjQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvNzE2OTRkOWEtOGExZi00NzhkLThk
NWYtYzNkNGM4NGRkZWE4LzcxNjk0ZDlhLThhMWYtNDc4ZC04ZDVmLWMzZDRjODRk
ZGVhOC5jcmwwHwYDVR0jBBgwFoAULdfzSZhsWGvHv+DBnb+PvC7kvNwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS83MTY5NGQ5YS04YTFmLTQ3OGQtOGQ1Zi1jM2Q0
Yzg0ZGRlYTguY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL4vwAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAHi/J6u1iomsIwJHCKkv0kerVjEpBVCpgCbIbldIc9fTuSlvX6vY8
Bcba0sOCGgmay2XjG7ZUuiJVH8DGLdhVVZniS5vSmH5YoEW9r1R1z64h4ly3HjT5
tq8EwEdnbIuVTvXRMqaEsxNwDYeGNKOeTL0vH4b08gVSWZun7rxAOXJR2nkYT8r4
PG3H84njFbNq85a9VXVJC4agsMrotx/PBIeyuYPvmVoNhrX0MPXuaaIXZAnc5F4n
TvX5ZhWBZGU62IYfbdlLA+2LP1E5zmWBcQuvjm789QEy5jrK2z/Ydx3FtK9uYefH
yi0eKWW4ZoS8dJxUahbj5JQcBw3bXnsD1Q==
-----END CERTIFICATE-----
Generated at Sat Jun 13 15:54:03 2026 by rpki-client