Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5b959ce4-3ae9-4721-8444-22b2e7161104/0c04d91a-7fcf-3647-a3dc-bcedb63d6b05.roa
File:                     0c04d91a-7fcf-3647-a3dc-bcedb63d6b05.roa (raw, json)
Hash identifier:          Ghvv6A/2tvyCk7u5ciNYnv1hJs6X0qeM+ZkIGZktfDI=
Subject key identifier:   35:2D:F5:7C:08:A8:C3:50:D0:72:DC:D1:FC:72:AF:E3:7C:16:D0:64
Certificate issuer:       /CN=5b959ce4-3ae9-4721-8444-22b2e7161104
Certificate serial:       010D0C9F4328584CCA41EA0C378C5689B3B74080
Authority key identifier: F7:04:0B:E9:9B:F2:56:71:7F:ED:45:FE:D5:1E:7E:0A:FC:8F:D5:A3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5b959ce4-3ae9-4721-8444-22b2e7161104.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5b959ce4-3ae9-4721-8444-22b2e7161104/0c04d91a-7fcf-3647-a3dc-bcedb63d6b05.roa
Signing time:             Sun 08 Feb 2026 02:00:32 +0000
ROA not before:           Sun 08 Feb 2026 02:00:32 +0000
ROA not after:            Sat 09 May 2026 01:00:32 +0000
asID:                     32109
IP address blocks:        2602:ff0e::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5b959ce4-3ae9-4721-8444-22b2e7161104/5b959ce4-3ae9-4721-8444-22b2e7161104.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5b959ce4-3ae9-4721-8444-22b2e7161104/5b959ce4-3ae9-4721-8444-22b2e7161104.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5b959ce4-3ae9-4721-8444-22b2e7161104.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ca:41:ea:0c:37:8c:56:89:b3:b7:40:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b959ce4-3ae9-4721-8444-22b2e7161104
        Validity
            Not Before: Feb  8 02:00:32 2026 GMT
            Not After : May  9 01:00:32 2026 GMT
        Subject: CN=641c18f0-8c6c-4012-a1e2-7b829c6d98b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:12:90:b4:7e:82:eb:ee:82:af:82:80:50:b7:
                    ac:a6:86:eb:7f:16:4e:11:0f:d7:7d:fb:9f:bc:4d:
                    46:9b:b9:7a:a7:89:1b:d7:0d:59:d8:7c:99:32:fb:
                    67:d9:81:db:4d:49:ce:88:1f:86:1c:51:6e:d6:4e:
                    c6:56:5d:87:ad:fe:0c:18:d5:33:b6:68:b2:f7:0b:
                    1e:44:ef:0d:de:72:e0:f5:49:85:dd:65:2d:aa:ee:
                    a7:98:de:e6:75:ad:84:06:88:58:aa:94:e7:e7:2b:
                    74:0d:d8:62:47:dc:5d:1c:f0:32:c0:2a:87:34:b4:
                    ec:76:c7:c6:3c:a4:72:f2:c4:68:d7:1b:07:3f:16:
                    cf:07:09:2d:56:5e:fb:2d:a6:ed:3d:d9:19:78:df:
                    c0:13:cb:02:fa:90:0d:43:11:3a:ec:1e:a2:6f:2a:
                    d6:11:b1:15:e6:3a:87:49:83:e1:42:b3:9c:db:00:
                    ac:c3:28:ef:08:61:a0:27:c6:65:08:de:d2:70:41:
                    fb:8f:a3:b0:06:c9:2d:85:35:9d:d2:8f:97:dd:82:
                    03:ea:4d:dd:40:b0:79:28:d8:9c:cd:dd:dd:47:1d:
                    8d:0d:f4:c5:e3:a8:cb:9a:04:cc:55:a3:97:28:2c:
                    4a:65:93:ff:7a:20:5d:66:b5:20:5e:87:f6:49:28:
                    f5:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:2D:F5:7C:08:A8:C3:50:D0:72:DC:D1:FC:72:AF:E3:7C:16:D0:64
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5b959ce4-3ae9-4721-8444-22b2e7161104/0c04d91a-7fcf-3647-a3dc-bcedb63d6b05.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5b959ce4-3ae9-4721-8444-22b2e7161104/5b959ce4-3ae9-4721-8444-22b2e7161104.crl

            X509v3 Authority Key Identifier:
                keyid:F7:04:0B:E9:9B:F2:56:71:7F:ED:45:FE:D5:1E:7E:0A:FC:8F:D5:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5b959ce4-3ae9-4721-8444-22b2e7161104.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:ff0e::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:f7:31:af:9a:47:46:da:5b:4e:ca:68:f9:54:ae:0f:6b:55:
         08:d5:7b:09:4d:eb:6a:17:70:15:06:05:80:66:70:e3:29:06:
         fc:cd:3f:01:d6:cb:32:20:00:02:b3:2b:75:4d:66:c6:44:45:
         72:2b:e1:01:f6:2a:9e:fc:30:ad:61:69:4c:7d:ca:ca:00:05:
         4b:0a:92:80:b8:93:e1:59:58:e9:23:64:54:ad:cf:d4:b9:0d:
         d8:14:af:1e:5b:bb:5f:d9:ef:02:be:f3:e2:b1:bd:09:9a:69:
         fd:75:1d:a9:c1:f3:6f:8e:dc:fe:9f:d2:8e:96:08:c4:5e:83:
         e9:f4:94:db:7d:8e:70:55:d6:53:bf:9d:3e:59:6f:2f:5d:91:
         4b:cb:d8:cc:38:76:c7:b8:11:06:82:e1:79:94:e3:bf:f4:d5:
         3a:72:2f:a0:3b:34:c4:d1:03:dd:e4:b9:7d:ab:0e:39:fd:31:
         c2:e2:79:cb:71:bd:8d:38:57:7d:58:07:07:af:71:93:6d:f9:
         92:1b:bd:99:0c:ac:b0:8f:c1:1b:4d:e2:5e:35:4d:05:5b:6e:
         0a:cf:c0:73:22:75:3d:6b:a1:d2:dd:51:2d:24:59:af:60:ef:
         04:ce:f4:4e:8b:49:ae:13:75:94:e7:22:48:d6:4a:bd:fe:1b:
         e9:19:87:5c
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEzKQeoMN4xWibO3QIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWI5NTljZTQtM2FlOS00NzIxLTg0NDQtMjJiMmU3MTYx
MTA0MB4XDTI2MDIwODAyMDAzMloXDTI2MDUwOTAxMDAzMlowLzEtMCsGA1UEAxMk
NjQxYzE4ZjAtOGM2Yy00MDEyLWExZTItN2I4MjljNmQ5OGI1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1hKQtH6C6+6Cr4KAULespobrfxZOEQ/Xffuf
vE1Gm7l6p4kb1w1Z2HyZMvtn2YHbTUnOiB+GHFFu1k7GVl2Hrf4MGNUztmiy9wse
RO8N3nLg9UmF3WUtqu6nmN7mda2EBohYqpTn5yt0DdhiR9xdHPAywCqHNLTsdsfG
PKRy8sRo1xsHPxbPBwktVl77LabtPdkZeN/AE8sC+pANQxE67B6ibyrWEbEV5jqH
SYPhQrOc2wCswyjvCGGgJ8ZlCN7ScEH7j6OwBskthTWd0o+X3YID6k3dQLB5KNic
zd3dRx2NDfTF46jLmgTMVaOXKCxKZZP/eiBdZrUgXof2SSj1AwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFDUt9XwIqMNQ0HLc0fxyr+N8FtBkMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS81Yjk1
OWNlNC0zYWU5LTQ3MjEtODQ0NC0yMmIyZTcxNjExMDQvMGMwNGQ5MWEtN2ZjZi0z
NjQ3LWEzZGMtYmNlZGI2M2Q2YjA1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNWI5NTljZTQtM2FlOS00NzIxLTg0
NDQtMjJiMmU3MTYxMTA0LzViOTU5Y2U0LTNhZTktNDcyMS04NDQ0LTIyYjJlNzE2
MTEwNC5jcmwwHwYDVR0jBBgwFoAU9wQL6ZvyVnF/7UX+1R5+CvyP1aMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS81Yjk1OWNlNC0zYWU5LTQ3MjEtODQ0NC0yMmIy
ZTcxNjExMDQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgL/DgAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAQ/cxr5pHRtpbTspo+VSuD2tVCNV7CU3rahdwFQYFgGZw4ykG/M0/
AdbLMiAAArMrdU1mxkRFcivhAfYqnvwwrWFpTH3KygAFSwqSgLiT4VlY6SNkVK3P
1LkN2BSvHlu7X9nvAr7z4rG9CZpp/XUdqcHzb47c/p/SjpYIxF6D6fSU232OcFXW
U7+dPllvL12RS8vYzDh2x7gRBoLheZTjv/TVOnIvoDs0xNED3eS5fasOOf0xwuJ5
y3G9jThXfVgHB69xk235khu9mQyssI/BG03iXjVNBVtuCs/AcyJ1PWuh0t1RLSRZ
r2DvBM70TotJrhN1lOciSNZKvf4b6RmHXA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 23:23:32 2026 by rpki-client