Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91a20fbd-d241-4454-b2ba-4938f807efb0/1fb18c82-2010-342b-a856-54e0ec531d09.roa
File:                     1fb18c82-2010-342b-a856-54e0ec531d09.roa (raw, json)
Hash identifier:          cWCn97hhwJrVP7nJOqxlVdQizyp7bNIL9D+AMMbi3vM=
Subject key identifier:   7B:4B:55:4B:87:FC:C9:51:8E:39:2E:DC:00:70:99:EA:0B:82:18:86
Certificate issuer:       /CN=91a20fbd-d241-4454-b2ba-4938f807efb0
Certificate serial:       010D0C9F4328584CAE5E9052A413137CE551A700
Authority key identifier: B6:7E:EC:DB:29:C2:DE:FE:5D:4A:00:37:44:EC:49:90:D1:55:56:CE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91a20fbd-d241-4454-b2ba-4938f807efb0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91a20fbd-d241-4454-b2ba-4938f807efb0/1fb18c82-2010-342b-a856-54e0ec531d09.roa
Signing time:             Thu 29 Jan 2026 02:00:32 +0000
ROA not before:           Thu 29 Jan 2026 02:00:32 +0000
ROA not after:            Wed 29 Apr 2026 01:00:32 +0000
asID:                     26768
IP address blocks:        2602:2a4:9e::/48 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91a20fbd-d241-4454-b2ba-4938f807efb0/91a20fbd-d241-4454-b2ba-4938f807efb0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91a20fbd-d241-4454-b2ba-4938f807efb0/91a20fbd-d241-4454-b2ba-4938f807efb0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91a20fbd-d241-4454-b2ba-4938f807efb0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ae:5e:90:52:a4:13:13:7c:e5:51:a7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91a20fbd-d241-4454-b2ba-4938f807efb0
        Validity
            Not Before: Jan 29 02:00:32 2026 GMT
            Not After : Apr 29 01:00:32 2026 GMT
        Subject: CN=7432c3e0-9601-48f3-9738-5652bb9a7948
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:72:48:c7:30:b7:6c:d2:b7:06:55:5e:98:b3:
                    2c:61:ee:d0:07:01:13:38:96:4c:84:7b:c9:bd:4a:
                    1d:a8:dc:85:ee:89:b7:69:c7:e6:57:5c:68:71:ea:
                    d1:97:1c:1b:89:32:a6:4e:61:d8:11:45:26:28:13:
                    c2:df:9c:79:22:85:5b:34:e9:57:44:a4:0e:85:4e:
                    ac:02:8e:ec:b1:2f:21:fa:9b:c2:b1:3a:67:aa:c0:
                    45:81:75:71:ce:e4:06:b8:2d:a5:cf:6a:a6:32:4a:
                    a2:3a:99:e5:07:95:ac:f9:49:56:04:39:35:f9:bd:
                    30:b0:4d:b4:22:d6:5c:fa:b3:07:71:aa:61:2c:a8:
                    b9:dc:05:ba:f8:5b:76:6d:7d:a0:57:83:18:d7:7a:
                    6c:67:ab:71:e0:43:ee:7f:02:32:15:9a:b4:08:2d:
                    78:07:e6:6b:fb:54:de:76:d0:ae:aa:a5:df:9b:31:
                    df:16:d5:a8:73:c2:58:14:a6:bc:9f:65:03:31:e6:
                    aa:84:c0:84:b3:e8:44:20:92:e8:42:f3:6d:9a:09:
                    1d:2e:04:41:a1:6c:8d:f5:49:c5:1f:d7:cf:6b:5d:
                    d6:0b:6a:5c:67:31:8a:16:ff:f3:46:47:79:dd:24:
                    d3:a5:00:96:c7:97:18:7d:16:d9:e7:b5:51:e7:f4:
                    da:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:4B:55:4B:87:FC:C9:51:8E:39:2E:DC:00:70:99:EA:0B:82:18:86
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91a20fbd-d241-4454-b2ba-4938f807efb0/1fb18c82-2010-342b-a856-54e0ec531d09.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91a20fbd-d241-4454-b2ba-4938f807efb0/91a20fbd-d241-4454-b2ba-4938f807efb0.crl

            X509v3 Authority Key Identifier:
                keyid:B6:7E:EC:DB:29:C2:DE:FE:5D:4A:00:37:44:EC:49:90:D1:55:56:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91a20fbd-d241-4454-b2ba-4938f807efb0.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:2a4:9e::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:5f:76:61:91:a3:b1:b6:c5:95:9b:f8:bb:3b:c2:58:88:8a:
         e9:18:4a:07:31:8b:e3:6f:ec:9f:74:2a:7b:8b:63:6c:d0:5c:
         f4:a6:08:6f:c6:11:a5:38:8f:84:c3:67:ef:30:6e:69:59:00:
         1d:7a:63:ff:84:e0:fd:f8:cc:8b:cb:38:48:ca:30:ad:61:69:
         6b:af:cb:ab:0d:e4:a0:8a:36:9d:a5:76:b0:10:c3:15:14:6d:
         9d:2d:e3:1d:40:c6:8d:67:34:bf:05:09:18:9e:dd:bb:35:82:
         61:51:84:8b:ee:df:da:c9:23:78:c8:e5:78:a4:91:08:29:77:
         bb:d2:6e:90:84:97:ba:9f:26:69:12:d6:ba:24:39:df:ad:cc:
         5c:7e:46:c3:61:22:98:aa:be:9f:c8:d0:a0:8a:82:da:69:36:
         4b:ff:e0:58:84:26:ea:a3:1d:e8:3c:9f:fd:23:c2:30:dc:85:
         4a:1b:0f:59:16:fb:01:0b:a5:9b:5c:09:21:f9:5b:d2:dc:cd:
         bb:0a:38:bd:47:11:3d:6f:9e:53:e5:82:b3:ce:2e:f9:e3:25:
         6b:8b:ae:df:3a:e7:68:3d:e5:e7:14:ce:bd:c4:d1:ed:6a:df:
         fc:2f:b7:95:f4:a7:78:aa:7e:8f:c7:dd:f5:52:75:40:7a:59:
         e1:20:54:03
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEyuXpBSpBMTfOVRpwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTFhMjBmYmQtZDI0MS00NDU0LWIyYmEtNDkzOGY4MDdl
ZmIwMB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk
NzQzMmMzZTAtOTYwMS00OGYzLTk3MzgtNTY1MmJiOWE3OTQ4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuHJIxzC3bNK3BlVemLMsYe7QBwETOJZMhHvJ
vUodqNyF7om3acfmV1xocerRlxwbiTKmTmHYEUUmKBPC35x5IoVbNOlXRKQOhU6s
Ao7ssS8h+pvCsTpnqsBFgXVxzuQGuC2lz2qmMkqiOpnlB5Ws+UlWBDk1+b0wsE20
ItZc+rMHcaphLKi53AW6+Ft2bX2gV4MY13psZ6tx4EPufwIyFZq0CC14B+Zr+1Te
dtCuqqXfmzHfFtWoc8JYFKa8n2UDMeaqhMCEs+hEIJLoQvNtmgkdLgRBoWyN9UnF
H9fPa13WC2pcZzGKFv/zRkd53STTpQCWx5cYfRbZ57VR5/Ta9QIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFHtLVUuH/MlRjjku3ABwmeoLghiGMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS85MWEy
MGZiZC1kMjQxLTQ0NTQtYjJiYS00OTM4ZjgwN2VmYjAvMWZiMThjODItMjAxMC0z
NDJiLWE4NTYtNTRlMGVjNTMxZDA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOTFhMjBmYmQtZDI0MS00NDU0LWIy
YmEtNDkzOGY4MDdlZmIwLzkxYTIwZmJkLWQyNDEtNDQ1NC1iMmJhLTQ5MzhmODA3
ZWZiMC5jcmwwHwYDVR0jBBgwFoAUtn7s2ynC3v5dSgA3ROxJkNFVVs4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS85MWEyMGZiZC1kMjQxLTQ0NTQtYjJiYS00OTM4
ZjgwN2VmYjAuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgICpACe
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAGVfdmGRo7G2xZWb+Ls7wliIiukYSgcxi+Nv7J90KnuLY2zQXPSm
CG/GEaU4j4TDZ+8wbmlZAB16Y/+E4P34zIvLOEjKMK1haWuvy6sN5KCKNp2ldrAQ
wxUUbZ0t4x1Axo1nNL8FCRie3bs1gmFRhIvu39rJI3jI5XikkQgpd7vSbpCEl7qf
JmkS1rokOd+tzFx+RsNhIpiqvp/I0KCKgtppNkv/4FiEJuqjHeg8n/0jwjDchUob
D1kW+wELpZtcCSH5W9LczbsKOL1HET1vnlPlgrPOLvnjJWuLrt8652g95ecUzr3E
0e1q3/wvt5X0p3iqfo/H3fVSdUB6WeEgVAM=
-----END CERTIFICATE-----
Generated at Mon Mar 2 11:59:16 2026 by rpki-client