Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c/285010fe-c3ab-3935-8021-24bc55b5dffe.roa
File:                     285010fe-c3ab-3935-8021-24bc55b5dffe.roa (raw, json)
Hash identifier:          NPHe8aoQgj2p+b34CLZ8CTPcB6yv3PHPvMHXZoasJQo=
Subject key identifier:   82:3C:1A:90:32:82:25:63:93:23:4E:D1:CF:E2:1B:8A:63:29:5A:34
Certificate issuer:       /CN=a234649d-ab49-458b-a5e3-7765fe7a066c
Certificate serial:       010D0C9F4328584D6AAA826A2AA914E9CCB9D880
Authority key identifier: 9F:03:E7:1A:5F:42:82:C9:DE:EC:0B:A1:1F:90:48:F4:57:7D:A1:99
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c/285010fe-c3ab-3935-8021-24bc55b5dffe.roa
Signing time:             Mon 06 Apr 2026 13:00:30 +0000
ROA not before:           Mon 06 Apr 2026 13:00:30 +0000
ROA not after:            Sun 05 Jul 2026 13:00:30 +0000
asID:                     199605
IP address blocks:        2602:f9f6:840::/42 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c/a234649d-ab49-458b-a5e3-7765fe7a066c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c/a234649d-ab49-458b-a5e3-7765fe7a066c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:6a:aa:82:6a:2a:a9:14:e9:cc:b9:d8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a234649d-ab49-458b-a5e3-7765fe7a066c
        Validity
            Not Before: Apr  6 13:00:30 2026 GMT
            Not After : Jul  5 13:00:30 2026 GMT
        Subject: CN=eada375c-5175-4dc4-8e47-9152414d8d95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:23:9a:f7:6f:9a:3c:e6:04:8b:e1:80:e9:fe:
                    be:97:28:97:78:dc:a6:6c:33:0a:87:1a:02:d2:00:
                    a1:62:5b:b2:6e:90:25:cf:2c:89:6d:0e:00:fc:5f:
                    03:bb:e8:fa:d9:35:58:8d:be:41:9b:17:81:c0:53:
                    f3:8f:4e:93:57:8d:b2:89:ee:6c:7c:5c:d6:67:84:
                    a6:ab:72:ca:d4:0d:de:2e:f6:24:51:98:2d:a7:f9:
                    77:38:89:cf:4a:28:c0:0c:b6:89:2c:40:4f:6a:de:
                    e4:10:66:2d:67:32:7b:00:c1:60:02:6b:04:0b:a3:
                    3b:12:a7:db:a7:c3:fd:c8:d3:09:e4:aa:b3:97:a0:
                    81:93:1c:34:1a:60:21:0b:e2:84:7d:a1:78:ac:4b:
                    8f:db:8a:00:a3:0d:9a:6e:a4:fe:d8:44:15:d4:3b:
                    84:37:ab:e7:0c:6e:cc:b2:75:6b:c1:58:82:78:7c:
                    bf:89:fd:22:64:61:7a:31:cf:12:84:d9:e8:bc:62:
                    5c:cc:15:94:a7:af:2e:32:28:b5:6e:c8:bc:34:ff:
                    00:ca:53:d3:a9:e1:52:d4:ef:f0:5f:a3:ef:d9:b5:
                    34:a8:10:ff:ce:e0:ef:ad:74:73:63:3f:26:50:3c:
                    71:ce:7c:78:e8:c2:59:66:46:39:13:be:d3:e9:21:
                    b0:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:3C:1A:90:32:82:25:63:93:23:4E:D1:CF:E2:1B:8A:63:29:5A:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c/285010fe-c3ab-3935-8021-24bc55b5dffe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c/a234649d-ab49-458b-a5e3-7765fe7a066c.crl

            X509v3 Authority Key Identifier:
                keyid:9F:03:E7:1A:5F:42:82:C9:DE:EC:0B:A1:1F:90:48:F4:57:7D:A1:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f9f6:840::/42

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:cf:cb:4b:56:17:56:64:40:53:46:cb:f6:41:6c:45:fb:34:
         55:65:2d:e5:1b:93:e4:87:e1:05:ae:6f:1e:0f:1d:a6:9c:fb:
         69:68:f2:39:89:72:64:73:06:f7:70:51:1d:c8:f6:bd:9a:c3:
         49:52:b7:a7:01:a8:b5:01:48:0d:fa:70:19:d7:d8:7d:10:b7:
         14:40:e7:04:2f:2b:3f:7a:d5:ab:97:54:6c:a8:a2:16:94:2f:
         df:9d:ca:cc:f0:3e:30:d3:cb:85:3b:de:47:76:ef:84:a0:31:
         d0:5a:e2:04:1d:24:92:61:de:82:d6:8c:b3:c2:d0:b5:ad:d8:
         3d:ec:35:4f:45:67:fa:74:18:1e:ae:4b:da:7b:83:7b:c9:87:
         59:6a:15:91:04:d4:7c:c1:d7:cf:bb:08:3b:fd:1c:f9:bc:2d:
         6f:bc:1e:39:19:6e:55:7e:02:c6:05:3a:19:18:e2:2d:9e:84:
         92:9a:d0:44:5e:c8:98:56:23:64:94:48:5e:55:74:9c:1d:8f:
         da:77:a8:55:ad:58:2f:60:d9:a1:16:17:b9:13:ee:66:81:93:
         8a:61:6f:46:44:a2:8e:71:8a:e4:92:34:87:e8:c6:d8:d9:45:
         b1:95:05:d9:a3:05:f0:bb:ce:90:51:d3:55:2d:0e:61:f5:0e:
         7a:65:8c:c4
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE1qqoJqKqkU6cy52IAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTIzNDY0OWQtYWI0OS00NThiLWE1ZTMtNzc2NWZlN2Ew
NjZjMB4XDTI2MDQwNjEzMDAzMFoXDTI2MDcwNTEzMDAzMFowLzEtMCsGA1UEAxMk
ZWFkYTM3NWMtNTE3NS00ZGM0LThlNDctOTE1MjQxNGQ4ZDk1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0SOa92+aPOYEi+GA6f6+lyiXeNymbDMKhxoC
0gChYluybpAlzyyJbQ4A/F8Du+j62TVYjb5BmxeBwFPzj06TV42yie5sfFzWZ4Sm
q3LK1A3eLvYkUZgtp/l3OInPSijADLaJLEBPat7kEGYtZzJ7AMFgAmsEC6M7Eqfb
p8P9yNMJ5Kqzl6CBkxw0GmAhC+KEfaF4rEuP24oAow2abqT+2EQV1DuEN6vnDG7M
snVrwViCeHy/if0iZGF6Mc8ShNnovGJczBWUp68uMii1bsi8NP8AylPTqeFS1O/w
X6Pv2bU0qBD/zuDvrXRzYz8mUDxxznx46MJZZkY5E77T6SGwJQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFII8GpAygiVjkyNO0c/iG4pjKVo0MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9hMjM0
NjQ5ZC1hYjQ5LTQ1OGItYTVlMy03NzY1ZmU3YTA2NmMvMjg1MDEwZmUtYzNhYi0z
OTM1LTgwMjEtMjRiYzU1YjVkZmZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYTIzNDY0OWQtYWI0OS00NThiLWE1
ZTMtNzc2NWZlN2EwNjZjL2EyMzQ2NDlkLWFiNDktNDU4Yi1hNWUzLTc3NjVmZTdh
MDY2Yy5jcmwwHwYDVR0jBBgwFoAUnwPnGl9Cgsne7AuhH5BI9Fd9oZkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy9hMjM0NjQ5ZC1hYjQ5LTQ1OGItYTVlMy03NzY1
ZmU3YTA2NmMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcGJgL59ghA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAEbPy0tWF1ZkQFNGy/ZBbEX7NFVlLeUbk+SH4QWubx4PHaac+2lo
8jmJcmRzBvdwUR3I9r2aw0lSt6cBqLUBSA36cBnX2H0QtxRA5wQvKz961auXVGyo
ohaUL9+dyszwPjDTy4U73kd274SgMdBa4gQdJJJh3oLWjLPC0LWt2D3sNU9FZ/p0
GB6uS9p7g3vJh1lqFZEE1HzB18+7CDv9HPm8LW+8HjkZblV+AsYFOhkY4i2ehJKa
0EReyJhWI2SUSF5VdJwdj9p3qFWtWC9g2aEWF7kT7maBk4phb0ZEoo5xiuSSNIfo
xtjZRbGVBdmjBfC7zpBR01UtDmH1DnpljMQ=
-----END CERTIFICATE-----
Generated at Fri Apr 17 21:05:24 2026 by rpki-client