Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4980f97d-060c-4860-8029-ca0d97082203/392ebc39-159a-38f8-a7b4-56f02eb17621.roa
File:                     392ebc39-159a-38f8-a7b4-56f02eb17621.roa (raw, json)
Hash identifier:          ZGAbHI/cogO9dFOaW0IT26HSdEvFmQ/VsOPoTxmPDOk=
Subject key identifier:   6B:58:5B:43:A0:0E:31:B3:70:D3:8F:0D:A6:63:A4:DC:87:88:8F:BD
Certificate issuer:       /CN=4980f97d-060c-4860-8029-ca0d97082203
Certificate serial:       010D0C9F4328584CCE71FD2AE2641B8BBE88E270
Authority key identifier: 1C:00:84:12:A2:2E:8A:18:2A:12:7A:B8:BE:2E:86:BD:2A:EC:BF:5B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4980f97d-060c-4860-8029-ca0d97082203.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4980f97d-060c-4860-8029-ca0d97082203/392ebc39-159a-38f8-a7b4-56f02eb17621.roa
Signing time:             Mon 09 Feb 2026 14:00:39 +0000
ROA not before:           Mon 09 Feb 2026 14:00:39 +0000
ROA not after:            Sun 10 May 2026 13:00:39 +0000
asID:                     215470
IP address blocks:        2602:faad:b::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4980f97d-060c-4860-8029-ca0d97082203/4980f97d-060c-4860-8029-ca0d97082203.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4980f97d-060c-4860-8029-ca0d97082203/4980f97d-060c-4860-8029-ca0d97082203.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4980f97d-060c-4860-8029-ca0d97082203.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ce:71:fd:2a:e2:64:1b:8b:be:88:e2:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4980f97d-060c-4860-8029-ca0d97082203
        Validity
            Not Before: Feb  9 14:00:39 2026 GMT
            Not After : May 10 13:00:39 2026 GMT
        Subject: CN=1a2b1980-b660-4579-9a1d-f0c92d803ec3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:16:ce:07:02:91:ef:5b:6b:dc:a2:50:4d:a3:
                    b2:ea:69:d8:cc:21:9e:d0:89:47:8d:19:27:77:d5:
                    09:fa:23:5a:7e:0b:a9:77:da:59:1f:95:48:14:58:
                    d2:5f:2c:1e:b2:15:fc:c4:78:44:e2:a2:20:a7:4c:
                    dc:1c:da:f1:9f:ab:5d:52:00:bc:3e:e5:53:8e:61:
                    fc:7b:e6:51:07:3a:14:37:6c:4c:ab:2f:89:f5:7b:
                    b4:6c:6d:b5:5f:2a:72:42:39:e8:87:d8:9e:b9:33:
                    78:02:15:b0:49:41:d1:f6:f0:ba:d7:ff:77:64:94:
                    62:f0:e9:56:f9:4e:27:f4:94:13:c0:46:ea:67:de:
                    6c:d5:ef:d9:7b:14:6c:76:bd:d2:34:04:04:d1:f9:
                    a7:91:0d:e5:00:ed:3b:c7:a2:1b:a1:5f:c7:26:d7:
                    39:2b:83:14:2d:8c:db:77:49:a3:02:49:5d:92:0f:
                    94:08:aa:88:4d:c3:d2:7f:8c:08:5b:32:da:18:34:
                    e7:cb:da:10:0c:f0:b5:44:08:56:1c:4b:72:42:4e:
                    a2:fa:48:33:1f:7d:6e:8f:57:70:11:73:9e:10:c2:
                    e1:e8:10:4d:65:f5:0f:12:4e:72:b2:e7:25:96:5f:
                    73:56:0d:e6:7c:7a:73:99:d3:52:a7:46:dc:87:13:
                    67:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:58:5B:43:A0:0E:31:B3:70:D3:8F:0D:A6:63:A4:DC:87:88:8F:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4980f97d-060c-4860-8029-ca0d97082203/392ebc39-159a-38f8-a7b4-56f02eb17621.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4980f97d-060c-4860-8029-ca0d97082203/4980f97d-060c-4860-8029-ca0d97082203.crl

            X509v3 Authority Key Identifier:
                keyid:1C:00:84:12:A2:2E:8A:18:2A:12:7A:B8:BE:2E:86:BD:2A:EC:BF:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4980f97d-060c-4860-8029-ca0d97082203.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:faad:b::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:27:c2:e6:27:08:84:77:ee:72:e9:e5:17:35:4a:44:44:ea:
         a0:53:8b:e9:1b:ce:4a:cc:53:69:d7:9c:86:de:b1:2b:89:7c:
         93:2a:0a:ff:38:78:22:db:ae:b3:8e:7a:e4:f3:e0:e5:a7:bb:
         d5:16:7a:ff:3d:00:db:07:4f:4a:3b:be:4f:2f:94:5c:cc:af:
         ee:d1:3c:c2:a9:ea:f3:67:d5:93:88:6e:da:77:52:b8:1b:0d:
         b2:79:a4:53:9e:a7:d2:1b:12:a0:6b:48:ae:4a:7c:12:c5:fd:
         0c:9f:9d:43:57:6a:a1:63:05:14:fa:f9:75:ae:59:21:50:4c:
         a0:f9:9b:11:50:0c:f1:23:37:a5:57:a2:e1:dd:52:03:e6:ff:
         c3:8a:3d:2b:67:d7:06:26:1b:0f:02:8c:fe:a2:5c:73:6b:1c:
         84:4c:93:83:a3:f3:d7:0c:3d:d0:6f:58:a1:33:bd:cc:ab:e1:
         00:16:70:86:fe:ac:89:b1:d5:b6:ac:8e:4f:03:03:a1:f1:59:
         c7:dd:f6:46:ff:46:6d:44:32:a5:1f:1d:9d:f9:c2:0b:6c:95:
         b3:55:5b:5a:2d:51:c4:97:75:e3:26:07:09:82:f5:b3:23:0a:
         b4:eb:88:ae:dc:2c:4d:4d:b5:df:f1:9c:aa:6c:e8:70:2f:43:
         7f:cd:11:e6
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEzOcf0q4mQbi76I4nAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDk4MGY5N2QtMDYwYy00ODYwLTgwMjktY2EwZDk3MDgy
MjAzMB4XDTI2MDIwOTE0MDAzOVoXDTI2MDUxMDEzMDAzOVowLzEtMCsGA1UEAxMk
MWEyYjE5ODAtYjY2MC00NTc5LTlhMWQtZjBjOTJkODAzZWMzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzRbOBwKR71tr3KJQTaOy6mnYzCGe0IlHjRkn
d9UJ+iNafgupd9pZH5VIFFjSXyweshX8xHhE4qIgp0zcHNrxn6tdUgC8PuVTjmH8
e+ZRBzoUN2xMqy+J9Xu0bG21XypyQjnoh9ieuTN4AhWwSUHR9vC61/93ZJRi8OlW
+U4n9JQTwEbqZ95s1e/ZexRsdr3SNAQE0fmnkQ3lAO07x6IboV/HJtc5K4MULYzb
d0mjAkldkg+UCKqITcPSf4wIWzLaGDTny9oQDPC1RAhWHEtyQk6i+kgzH31uj1dw
EXOeEMLh6BBNZfUPEk5ysuclll9zVg3mfHpzmdNSp0bchxNn1wIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFGtYW0OgDjGzcNOPDaZjpNyHiI+9MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC80OTgw
Zjk3ZC0wNjBjLTQ4NjAtODAyOS1jYTBkOTcwODIyMDMvMzkyZWJjMzktMTU5YS0z
OGY4LWE3YjQtNTZmMDJlYjE3NjIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNDk4MGY5N2QtMDYwYy00ODYwLTgw
MjktY2EwZDk3MDgyMjAzLzQ5ODBmOTdkLTA2MGMtNDg2MC04MDI5LWNhMGQ5NzA4
MjIwMy5jcmwwHwYDVR0jBBgwFoAUHACEEqIuihgqEnq4vi6GvSrsv1swDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC80OTgwZjk3ZC0wNjBjLTQ4NjAtODAyOS1jYTBk
OTcwODIyMDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL6rQAL
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAAknwuYnCIR37nLp5Rc1SkRE6qBTi+kbzkrMU2nXnIbesSuJfJMq
Cv84eCLbrrOOeuTz4OWnu9UWev89ANsHT0o7vk8vlFzMr+7RPMKp6vNn1ZOIbtp3
UrgbDbJ5pFOep9IbEqBrSK5KfBLF/QyfnUNXaqFjBRT6+XWuWSFQTKD5mxFQDPEj
N6VXouHdUgPm/8OKPStn1wYmGw8CjP6iXHNrHIRMk4Oj89cMPdBvWKEzvcyr4QAW
cIb+rImx1basjk8DA6HxWcfd9kb/Rm1EMqUfHZ35wgtslbNVW1otUcSXdeMmBwmC
9bMjCrTriK7cLE1Ntd/xnKps6HAvQ3/NEeY=
-----END CERTIFICATE-----
Generated at Mon Mar 2 16:33:19 2026 by rpki-client