Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7e4eda42-1b89-4124-8a06-63381278375d/24b668fc-a509-3a42-8684-d6b7501ff35b.roa
File:                     24b668fc-a509-3a42-8684-d6b7501ff35b.roa (raw, json)
Hash identifier:          Q9FaVEw63qe6aS6zhWN98/290qTyZ1uvyDofEfrjtWo=
Subject key identifier:   E9:34:31:F2:7D:3C:85:88:C9:E4:E2:AD:6E:C9:1C:44:88:7F:0F:B8
Certificate issuer:       /CN=7e4eda42-1b89-4124-8a06-63381278375d
Certificate serial:       010D0C9F4328584D6AAA88344DA633C42CBF3F80
Authority key identifier: 8A:4F:5E:F7:FA:39:D8:47:50:32:90:17:1C:E3:C3:CB:E6:D3:B0:62
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7e4eda42-1b89-4124-8a06-63381278375d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7e4eda42-1b89-4124-8a06-63381278375d/24b668fc-a509-3a42-8684-d6b7501ff35b.roa
Signing time:             Mon 06 Apr 2026 13:00:30 +0000
ROA not before:           Mon 06 Apr 2026 13:00:30 +0000
ROA not after:            Sun 05 Jul 2026 13:00:30 +0000
asID:                     398646
IP address blocks:        2602:fe6b::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7e4eda42-1b89-4124-8a06-63381278375d/7e4eda42-1b89-4124-8a06-63381278375d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7e4eda42-1b89-4124-8a06-63381278375d/7e4eda42-1b89-4124-8a06-63381278375d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7e4eda42-1b89-4124-8a06-63381278375d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:6a:aa:88:34:4d:a6:33:c4:2c:bf:3f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e4eda42-1b89-4124-8a06-63381278375d
        Validity
            Not Before: Apr  6 13:00:30 2026 GMT
            Not After : Jul  5 13:00:30 2026 GMT
        Subject: CN=137ccd31-d38b-43e8-86f1-a7a6a06d264b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:96:3d:f0:f0:05:da:df:bd:d7:6c:d2:9e:cd:
                    f4:ba:52:0f:e5:29:44:a1:bd:7b:0c:8c:50:95:6c:
                    52:88:63:8c:d2:0e:17:9c:72:2e:38:41:9b:70:7c:
                    04:f4:93:13:8c:c2:05:21:7a:c4:0c:c5:83:a1:34:
                    f2:ff:20:3b:62:52:e1:83:b6:3a:64:ff:f7:aa:7d:
                    0b:28:fd:df:57:2f:b8:e1:cf:e6:95:2d:11:3f:65:
                    b5:f4:f9:29:aa:e0:bc:f2:03:37:d5:8e:93:f3:30:
                    80:52:a6:3d:26:72:4c:eb:92:9f:fd:0f:40:0b:4b:
                    3c:43:89:11:a1:68:6d:6d:ea:e6:e7:92:3d:f5:9e:
                    e6:f5:6d:13:01:c6:74:75:29:52:b8:fd:f5:24:27:
                    49:e5:b4:ad:a1:ae:98:08:c2:34:c8:f2:7a:47:18:
                    19:4b:44:e3:84:14:c3:c9:2a:b2:4a:c1:cc:ce:4c:
                    28:5e:9c:7f:90:0c:a2:7f:19:d5:14:b6:5e:a6:c6:
                    48:18:2d:a6:c2:a6:ea:98:10:f9:85:6d:04:1f:0a:
                    3c:c8:62:39:f3:8a:5a:85:24:7e:b4:2e:28:da:b6:
                    ec:46:63:97:59:52:7d:3f:4b:e1:a0:3f:19:63:07:
                    78:bd:cc:96:aa:06:ec:ad:74:4f:1f:20:0f:67:13:
                    ba:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:34:31:F2:7D:3C:85:88:C9:E4:E2:AD:6E:C9:1C:44:88:7F:0F:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7e4eda42-1b89-4124-8a06-63381278375d/24b668fc-a509-3a42-8684-d6b7501ff35b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7e4eda42-1b89-4124-8a06-63381278375d/7e4eda42-1b89-4124-8a06-63381278375d.crl

            X509v3 Authority Key Identifier:
                keyid:8A:4F:5E:F7:FA:39:D8:47:50:32:90:17:1C:E3:C3:CB:E6:D3:B0:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7e4eda42-1b89-4124-8a06-63381278375d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fe6b::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:f3:d5:76:c6:09:29:59:07:8e:01:b7:83:87:1b:2a:ab:dd:
         e2:63:6f:ac:76:9b:7f:33:24:8a:12:17:8b:3a:42:2e:ed:11:
         06:d4:8f:d7:68:71:8f:40:dc:e4:26:43:ff:ad:39:91:55:56:
         c0:13:4b:53:5c:5a:12:e6:92:db:26:31:5f:cd:ac:f8:d4:e8:
         be:2e:5a:9b:2d:42:30:36:5a:52:71:13:25:bf:15:11:c9:54:
         c1:d0:76:3d:c4:02:d0:5c:16:85:dd:4c:b7:b2:b3:97:ef:14:
         2b:36:05:55:5f:4e:e9:3d:08:75:48:43:c5:68:81:47:a2:7f:
         a2:00:ef:69:f2:de:36:76:a2:93:1e:e3:91:36:c8:10:93:09:
         08:ec:9c:37:f5:57:30:c7:54:59:9e:7d:62:13:0d:b3:e1:4d:
         a1:6b:9b:21:83:fa:30:ee:a0:97:bd:b5:b2:ac:f9:f2:a1:47:
         32:08:4a:98:53:54:16:08:51:c5:e8:65:2d:c6:b9:dd:fe:f2:
         bf:17:1b:08:37:2b:bb:7e:c2:2e:9d:54:22:9c:a9:bf:a2:d8:
         39:31:01:1f:17:0c:75:a3:c3:48:0d:26:52:d2:48:19:d0:dc:
         01:04:f2:6e:47:4e:16:53:65:81:05:18:49:24:0b:3f:b2:8d:
         ee:94:0f:1d
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE1qqog0TaYzxCy/P4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkN2U0ZWRhNDItMWI4OS00MTI0LThhMDYtNjMzODEyNzgz
NzVkMB4XDTI2MDQwNjEzMDAzMFoXDTI2MDcwNTEzMDAzMFowLzEtMCsGA1UEAxMk
MTM3Y2NkMzEtZDM4Yi00M2U4LTg2ZjEtYTdhNmEwNmQyNjRiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsJY98PAF2t+912zSns30ulIP5SlEob17DIxQ
lWxSiGOM0g4XnHIuOEGbcHwE9JMTjMIFIXrEDMWDoTTy/yA7YlLhg7Y6ZP/3qn0L
KP3fVy+44c/mlS0RP2W19PkpquC88gM31Y6T8zCAUqY9JnJM65Kf/Q9AC0s8Q4kR
oWhtberm55I99Z7m9W0TAcZ0dSlSuP31JCdJ5bStoa6YCMI0yPJ6RxgZS0TjhBTD
ySqySsHMzkwoXpx/kAyifxnVFLZepsZIGC2mwqbqmBD5hW0EHwo8yGI584pahSR+
tC4o2rbsRmOXWVJ9P0vhoD8ZYwd4vcyWqgbsrXRPHyAPZxO6OwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFOk0MfJ9PIWIyeTirW7JHESIfw+4MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83ZTRl
ZGE0Mi0xYjg5LTQxMjQtOGEwNi02MzM4MTI3ODM3NWQvMjRiNjY4ZmMtYTUwOS0z
YTQyLTg2ODQtZDZiNzUwMWZmMzViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvN2U0ZWRhNDItMWI4OS00MTI0LThh
MDYtNjMzODEyNzgzNzVkLzdlNGVkYTQyLTFiODktNDEyNC04YTA2LTYzMzgxMjc4
Mzc1ZC5jcmwwHwYDVR0jBBgwFoAUik9e9/o52EdQMpAXHOPDy+bTsGIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC83ZTRlZGE0Mi0xYjg5LTQxMjQtOGEwNi02MzM4
MTI3ODM3NWQuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgL+azBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQCB89V2xgkpWQeOAbeDhxsqq93iY2+sdpt/MySKEheLOkIu7REG1I/X
aHGPQNzkJkP/rTmRVVbAE0tTXFoS5pLbJjFfzaz41Oi+LlqbLUIwNlpScRMlvxUR
yVTB0HY9xALQXBaF3Uy3srOX7xQrNgVVX07pPQh1SEPFaIFHon+iAO9p8t42dqKT
HuORNsgQkwkI7Jw39Vcwx1RZnn1iEw2z4U2ha5shg/ow7qCXvbWyrPnyoUcyCEqY
U1QWCFHF6GUtxrnd/vK/FxsINyu7fsIunVQinKm/otg5MQEfFwx1o8NIDSZS0kgZ
0NwBBPJuR04WU2WBBRhJJAs/so3ulA8d
-----END CERTIFICATE-----
Generated at Sat Apr 18 01:14:17 2026 by rpki-client