Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2ca5e7d8-de7d-48b8-9cb1-491065714227/d913233a-3a0a-3239-a40b-c8e6be0927d3.roa
File:                     d913233a-3a0a-3239-a40b-c8e6be0927d3.roa (raw, json)
Hash identifier:          xwwpU43g/MZpEcUVUT+yOqr8jSKMK1O4LBt6JNEHiwc=
Subject key identifier:   C7:9B:AD:7E:5F:01:38:EE:0B:DE:34:0F:DB:36:6B:55:E5:5D:AF:53
Certificate issuer:       /CN=2ca5e7d8-de7d-48b8-9cb1-491065714227
Certificate serial:       010D0C9F4328584F0D6CF6B50883266E75087900
Authority key identifier: 26:3A:B2:36:A1:2A:13:CC:0A:7A:93:76:89:C4:AA:AA:24:2D:8A:9A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2ca5e7d8-de7d-48b8-9cb1-491065714227.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2ca5e7d8-de7d-48b8-9cb1-491065714227/d913233a-3a0a-3239-a40b-c8e6be0927d3.roa
Signing time:             Thu 03 Sep 2026 13:00:12 +0000
ROA not before:           Thu 03 Sep 2026 13:00:12 +0000
ROA not after:            Wed 02 Dec 2026 14:00:12 +0000
asID:                     25618
IP address blocks:        2602:f585::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2ca5e7d8-de7d-48b8-9cb1-491065714227/2ca5e7d8-de7d-48b8-9cb1-491065714227.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2ca5e7d8-de7d-48b8-9cb1-491065714227/2ca5e7d8-de7d-48b8-9cb1-491065714227.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2ca5e7d8-de7d-48b8-9cb1-491065714227.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:0d:6c:f6:b5:08:83:26:6e:75:08:79:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ca5e7d8-de7d-48b8-9cb1-491065714227
        Validity
            Not Before: Sep  3 13:00:12 2026 GMT
            Not After : Dec  2 14:00:12 2026 GMT
        Subject: CN=57f3ced5-cccc-4efd-9208-ae343bcd1c6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:2f:19:42:e6:b6:d4:90:9a:a7:aa:98:20:e7:
                    0b:25:6d:66:30:c9:11:e6:0a:dc:7e:b1:25:62:fb:
                    27:55:fd:41:12:f8:5d:57:99:2b:a0:df:69:3e:37:
                    c2:15:27:a6:d0:d1:c6:ff:b5:44:f3:ca:4a:2b:30:
                    16:f6:67:4a:ea:38:ef:46:db:8c:99:46:0a:34:2a:
                    90:13:ac:7b:90:f9:d3:f4:a0:93:35:ba:17:e1:e7:
                    6e:6a:f9:17:ce:38:a0:2f:61:7f:5c:dc:4c:1e:ca:
                    2f:f8:4b:06:1e:92:4b:36:fe:0a:17:d1:42:ce:bf:
                    76:2b:77:4d:b0:55:a2:78:40:2b:c5:e5:fa:42:49:
                    0f:27:fb:da:b8:17:0f:ef:2a:96:4d:a4:08:71:5d:
                    f2:bf:07:03:7a:93:58:88:60:43:b2:11:85:5a:7a:
                    a5:f2:a2:d6:2e:3e:46:79:e9:7e:05:68:a6:a2:05:
                    79:cd:e6:75:98:e7:86:17:7c:da:d8:c9:c4:3e:93:
                    df:56:81:40:da:30:a6:28:e4:fd:a1:7a:3f:c0:c0:
                    20:6d:b1:80:12:75:07:4e:d1:55:60:66:68:ee:95:
                    78:7b:bf:a6:bb:02:e4:ec:ce:59:5f:67:68:ad:d9:
                    69:b5:0f:f2:a6:5a:6b:d2:2c:26:82:76:53:53:7a:
                    43:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:9B:AD:7E:5F:01:38:EE:0B:DE:34:0F:DB:36:6B:55:E5:5D:AF:53
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2ca5e7d8-de7d-48b8-9cb1-491065714227/d913233a-3a0a-3239-a40b-c8e6be0927d3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2ca5e7d8-de7d-48b8-9cb1-491065714227/2ca5e7d8-de7d-48b8-9cb1-491065714227.crl

            X509v3 Authority Key Identifier:
                keyid:26:3A:B2:36:A1:2A:13:CC:0A:7A:93:76:89:C4:AA:AA:24:2D:8A:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2ca5e7d8-de7d-48b8-9cb1-491065714227.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f585::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:6f:ae:a8:b1:31:e0:12:ae:8f:61:d0:17:1d:ca:03:00:6d:
         ae:e5:96:6c:44:d0:db:e5:ba:bd:4a:61:d6:e3:71:1a:7f:99:
         09:6a:d7:42:b7:b8:f3:71:2d:e1:36:16:4e:5e:39:79:cd:4a:
         ca:1e:d2:0d:56:80:d0:51:e4:8d:e8:75:6f:5f:fd:84:cf:22:
         fc:56:29:2c:d2:a0:c1:15:3a:25:58:9d:e8:06:70:55:5b:ff:
         74:f6:b7:04:c1:33:c3:25:d7:b0:cf:c1:a2:7d:63:14:bd:46:
         03:52:e9:b5:21:41:8a:86:7d:54:48:65:8d:c8:f4:64:f7:dc:
         a9:a9:d9:6a:5a:e0:64:cc:01:3f:9a:80:f9:27:40:0a:09:65:
         cf:bd:7a:57:8e:83:32:9a:4b:35:d1:61:18:cc:f7:22:92:03:
         35:77:db:e5:10:bf:ea:cf:da:cd:b8:1b:f1:77:e0:43:12:45:
         1d:4e:83:1e:3e:21:8a:93:93:a2:12:3c:b2:13:ce:b6:e2:b3:
         56:75:57:5f:fc:44:5b:3c:a6:60:7a:28:0d:2f:e8:18:ba:ee:
         ba:ff:92:ea:d2:6b:94:e4:98:ff:c8:05:39:45:27:89:9b:13:
         93:c8:67:ae:d8:c8:c8:04:cc:d2:da:59:e6:8b:80:fe:fa:e2:
         69:63:b1:17
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE8NbPa1CIMmbnUIeQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmNhNWU3ZDgtZGU3ZC00OGI4LTljYjEtNDkxMDY1NzE0
MjI3MB4XDTI2MDkwMzEzMDAxMloXDTI2MTIwMjE0MDAxMlowLzEtMCsGA1UEAxMk
NTdmM2NlZDUtY2NjYy00ZWZkLTkyMDgtYWUzNDNiY2QxYzZmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArC8ZQua21JCap6qYIOcLJW1mMMkR5grcfrEl
YvsnVf1BEvhdV5kroN9pPjfCFSem0NHG/7VE88pKKzAW9mdK6jjvRtuMmUYKNCqQ
E6x7kPnT9KCTNboX4eduavkXzjigL2F/XNxMHsov+EsGHpJLNv4KF9FCzr92K3dN
sFWieEArxeX6QkkPJ/vauBcP7yqWTaQIcV3yvwcDepNYiGBDshGFWnql8qLWLj5G
eel+BWimogV5zeZ1mOeGF3za2MnEPpPfVoFA2jCmKOT9oXo/wMAgbbGAEnUHTtFV
YGZo7pV4e7+muwLk7M5ZX2dordlptQ/yplpr0iwmgnZTU3pDUwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFMebrX5fATjuC940D9s2a1XlXa9TMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8yY2E1
ZTdkOC1kZTdkLTQ4YjgtOWNiMS00OTEwNjU3MTQyMjcvZDkxMzIzM2EtM2EwYS0z
MjM5LWE0MGItYzhlNmJlMDkyN2QzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMmNhNWU3ZDgtZGU3ZC00OGI4LTlj
YjEtNDkxMDY1NzE0MjI3LzJjYTVlN2Q4LWRlN2QtNDhiOC05Y2IxLTQ5MTA2NTcx
NDIyNy5jcmwwHwYDVR0jBBgwFoAUJjqyNqEqE8wKepN2icSqqiQtipowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy8yY2E1ZTdkOC1kZTdkLTQ4YjgtOWNiMS00OTEw
NjU3MTQyMjcuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL1hQAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAl2+uqLEx4BKuj2HQFx3KAwBtruWWbETQ2+W6vUph1uNxGn+ZCWrX
Qre483Et4TYWTl45ec1Kyh7SDVaA0FHkjeh1b1/9hM8i/FYpLNKgwRU6JVid6AZw
VVv/dPa3BMEzwyXXsM/Bon1jFL1GA1LptSFBioZ9VEhljcj0ZPfcqanZalrgZMwB
P5qA+SdACgllz716V46DMppLNdFhGMz3IpIDNXfb5RC/6s/azbgb8XfgQxJFHU6D
Hj4hipOTohI8shPOtuKzVnVXX/xEWzymYHooDS/oGLruuv+S6tJrlOSY/8gFOUUn
iZsTk8hnrtjIyATM0tpZ5ouA/vriaWOxFw==
-----END CERTIFICATE-----
Generated at Mon Sep 21 14:58:20 2026 by rpki-client