Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b35fefd7-f2e5-416c-932a-0d52d430c3cd/d0e5d746-9459-3ae2-9722-75f796e78853.roa
File:                     d0e5d746-9459-3ae2-9722-75f796e78853.roa (raw, json)
Hash identifier:          8W4Jgmnzjy2E3jqWM7mOLM/cfyMVDLwsQ2dzNWkq5Xw=
Subject key identifier:   00:2F:3F:28:FC:87:7D:17:EE:7D:E2:2E:5D:B5:68:2A:87:57:0D:10
Certificate issuer:       /CN=b35fefd7-f2e5-416c-932a-0d52d430c3cd
Certificate serial:       010D0C9F4328584E22744FE402C93FB0686F30CC
Authority key identifier: 67:4F:75:BE:1A:C4:72:EC:57:DF:A6:79:B2:9E:83:F9:B1:0B:7F:D2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b35fefd7-f2e5-416c-932a-0d52d430c3cd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b35fefd7-f2e5-416c-932a-0d52d430c3cd/d0e5d746-9459-3ae2-9722-75f796e78853.roa
Signing time:             Thu 11 Jun 2026 09:00:12 +0000
ROA not before:           Thu 11 Jun 2026 09:00:12 +0000
ROA not after:            Wed 09 Sep 2026 09:00:12 +0000
asID:                     140666
IP address blocks:        2602:fa80:46::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b35fefd7-f2e5-416c-932a-0d52d430c3cd/b35fefd7-f2e5-416c-932a-0d52d430c3cd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b35fefd7-f2e5-416c-932a-0d52d430c3cd/b35fefd7-f2e5-416c-932a-0d52d430c3cd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b35fefd7-f2e5-416c-932a-0d52d430c3cd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:22:74:4f:e4:02:c9:3f:b0:68:6f:30:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b35fefd7-f2e5-416c-932a-0d52d430c3cd
        Validity
            Not Before: Jun 11 09:00:12 2026 GMT
            Not After : Sep  9 09:00:12 2026 GMT
        Subject: CN=c1d27506-87c1-428e-a858-ecfc135db3ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:da:1b:86:4d:8a:f7:b3:bb:65:da:60:19:4a:
                    ef:ca:19:dd:23:fa:aa:12:45:41:c7:2a:f7:82:a8:
                    e8:30:c2:5e:45:6e:f2:1c:f8:85:35:37:72:3e:5d:
                    66:7f:f6:5e:c7:53:fb:9b:af:2b:bb:38:19:07:fd:
                    80:76:ae:ff:ba:46:ac:37:01:af:01:45:4f:a3:59:
                    3d:1b:e1:aa:77:e0:93:dc:d5:39:71:32:29:06:af:
                    49:a5:e4:7a:95:af:39:da:b4:39:11:ae:4c:2b:fd:
                    a6:b1:e1:ec:9a:43:b5:2a:6b:4e:2d:01:6b:40:0e:
                    85:1d:8f:af:a5:b4:7b:ee:b3:3f:52:7b:c3:73:3e:
                    23:02:8b:04:4a:ff:d2:0a:a8:73:45:b9:06:e0:5f:
                    c5:32:b3:a8:95:2a:32:11:a1:e7:f6:c8:76:f4:18:
                    e4:94:ec:45:03:0b:f8:dc:af:6a:6c:42:4c:97:c7:
                    2a:2e:a0:d4:93:16:43:71:17:c4:70:ff:fe:6f:21:
                    19:4d:8b:30:70:73:63:17:f8:ab:39:ca:40:ae:2b:
                    75:b6:db:ff:8e:09:34:32:00:94:17:6d:ec:88:70:
                    43:e4:a7:79:be:2f:49:53:c5:85:a2:d9:12:84:ca:
                    0f:f2:21:2f:fb:d3:66:02:e9:b4:eb:7b:dc:98:54:
                    98:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:2F:3F:28:FC:87:7D:17:EE:7D:E2:2E:5D:B5:68:2A:87:57:0D:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b35fefd7-f2e5-416c-932a-0d52d430c3cd/d0e5d746-9459-3ae2-9722-75f796e78853.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b35fefd7-f2e5-416c-932a-0d52d430c3cd/b35fefd7-f2e5-416c-932a-0d52d430c3cd.crl

            X509v3 Authority Key Identifier:
                keyid:67:4F:75:BE:1A:C4:72:EC:57:DF:A6:79:B2:9E:83:F9:B1:0B:7F:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b35fefd7-f2e5-416c-932a-0d52d430c3cd.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa80:46::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:dc:76:f8:82:3a:f6:ae:e4:78:b2:21:e4:0d:64:64:15:f9:
         26:8a:f0:83:24:91:6c:ce:d4:75:5d:b7:60:10:45:b2:65:47:
         f3:fe:e7:48:35:a7:10:1e:70:ce:be:38:e7:65:c3:87:ce:87:
         c2:67:8a:64:bc:f6:e8:4e:34:0d:1e:38:f9:d1:28:14:8d:85:
         31:41:3f:2a:cd:d8:5d:95:35:fa:d4:8a:69:db:ad:9e:27:72:
         19:b5:12:84:1a:64:56:df:81:54:0f:b6:9d:10:a1:4c:d2:b7:
         80:c7:44:94:18:49:3c:26:6c:33:c8:c3:f9:3d:96:fa:c0:5d:
         81:ea:2b:48:c3:1f:99:9a:1f:39:e9:a9:9f:6c:80:18:e7:01:
         c9:8b:7b:c1:29:a8:82:43:57:53:30:d2:19:1f:ef:ca:25:58:
         61:7d:5c:3a:91:91:ac:6a:09:c0:c0:54:02:a0:42:55:2d:ed:
         be:8d:68:ab:51:8f:b4:3a:05:56:ef:eb:7f:c5:ea:11:c6:ef:
         dd:04:ea:94:1b:be:8c:20:e0:99:e4:c7:f2:b5:0c:71:0f:19:
         15:d7:f0:8d:4e:dd:7c:8a:e7:10:67:02:f6:80:05:3d:1f:52:
         bc:ac:56:e0:e8:46:75:48:78:7c:46:ff:c6:76:2c:4c:28:57:
         98:73:14:75
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE4idE/kAsk/sGhvMMwwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjM1ZmVmZDctZjJlNS00MTZjLTkzMmEtMGQ1MmQ0MzBj
M2NkMB4XDTI2MDYxMTA5MDAxMloXDTI2MDkwOTA5MDAxMlowLzEtMCsGA1UEAxMk
YzFkMjc1MDYtODdjMS00MjhlLWE4NTgtZWNmYzEzNWRiM2FjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy9obhk2K97O7ZdpgGUrvyhndI/qqEkVBxyr3
gqjoMMJeRW7yHPiFNTdyPl1mf/Zex1P7m68ruzgZB/2Adq7/ukasNwGvAUVPo1k9
G+Gqd+CT3NU5cTIpBq9JpeR6la852rQ5Ea5MK/2mseHsmkO1KmtOLQFrQA6FHY+v
pbR77rM/UnvDcz4jAosESv/SCqhzRbkG4F/FMrOolSoyEaHn9sh29BjklOxFAwv4
3K9qbEJMl8cqLqDUkxZDcRfEcP/+byEZTYswcHNjF/irOcpArit1ttv/jgk0MgCU
F23siHBD5Kd5vi9JU8WFotkShMoP8iEv+9NmAum063vcmFSYPwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFAAvPyj8h30X7n3iLl21aCqHVw0QMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9iMzVm
ZWZkNy1mMmU1LTQxNmMtOTMyYS0wZDUyZDQzMGMzY2QvZDBlNWQ3NDYtOTQ1OS0z
YWUyLTk3MjItNzVmNzk2ZTc4ODUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYjM1ZmVmZDctZjJlNS00MTZjLTkz
MmEtMGQ1MmQ0MzBjM2NkL2IzNWZlZmQ3LWYyZTUtNDE2Yy05MzJhLTBkNTJkNDMw
YzNjZC5jcmwwHwYDVR0jBBgwFoAUZ091vhrEcuxX36Z5sp6D+bELf9IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9iMzVmZWZkNy1mMmU1LTQxNmMtOTMyYS0wZDUy
ZDQzMGMzY2QuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL6gABG
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAHHcdviCOvau5HiyIeQNZGQV+SaK8IMkkWzO1HVdt2AQRbJlR/P+
50g1pxAecM6+OOdlw4fOh8JnimS89uhONA0eOPnRKBSNhTFBPyrN2F2VNfrUimnb
rZ4nchm1EoQaZFbfgVQPtp0QoUzSt4DHRJQYSTwmbDPIw/k9lvrAXYHqK0jDH5ma
HznpqZ9sgBjnAcmLe8EpqIJDV1Mw0hkf78olWGF9XDqRkaxqCcDAVAKgQlUt7b6N
aKtRj7Q6BVbv63/F6hHG790E6pQbvowg4Jnkx/K1DHEPGRXX8I1O3XyK5xBnAvaA
BT0fUrysVuDoRnVIeHxG/8Z2LEwoV5hzFHU=
-----END CERTIFICATE-----
Generated at Sun Jun 14 02:30:51 2026 by rpki-client