Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4ac0b9fd-fc4c-47c2-ba96-0ce118621de4/9b931910-2ac7-3231-8644-a41581603e70.roa
File:                     9b931910-2ac7-3231-8644-a41581603e70.roa (raw, json)
Hash identifier:          PNpN0lvTPJxJ3mFoUNXc7c0bIPEgFcBJI1PN2quxbig=
Subject key identifier:   5B:2D:D1:25:41:01:8F:EC:B2:ED:27:68:D6:A8:7D:70:5D:44:79:73
Certificate issuer:       /CN=4ac0b9fd-fc4c-47c2-ba96-0ce118621de4
Certificate serial:       010D0C9F4328584D00B273DB80F62ECD8BC62080
Authority key identifier: FA:85:8E:67:A7:9F:7B:1B:7C:F5:1F:7A:ED:A2:F8:D2:22:C4:25:1D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4ac0b9fd-fc4c-47c2-ba96-0ce118621de4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4ac0b9fd-fc4c-47c2-ba96-0ce118621de4/9b931910-2ac7-3231-8644-a41581603e70.roa
Signing time:             Fri 27 Feb 2026 14:00:40 +0000
ROA not before:           Fri 27 Feb 2026 14:00:40 +0000
ROA not after:            Thu 28 May 2026 13:00:40 +0000
asID:                     395176
IP address blocks:        2602:ff41::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4ac0b9fd-fc4c-47c2-ba96-0ce118621de4/4ac0b9fd-fc4c-47c2-ba96-0ce118621de4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4ac0b9fd-fc4c-47c2-ba96-0ce118621de4/4ac0b9fd-fc4c-47c2-ba96-0ce118621de4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4ac0b9fd-fc4c-47c2-ba96-0ce118621de4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:00:b2:73:db:80:f6:2e:cd:8b:c6:20:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ac0b9fd-fc4c-47c2-ba96-0ce118621de4
        Validity
            Not Before: Feb 27 14:00:40 2026 GMT
            Not After : May 28 13:00:40 2026 GMT
        Subject: CN=1f9137d9-b315-4b1d-b9a5-5b1962eac222
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:31:a6:be:83:2a:88:5e:eb:d7:13:1f:32:fe:
                    f7:ba:d7:e6:b5:22:84:2a:6e:a3:7e:38:52:a9:02:
                    10:bb:29:37:44:37:36:3c:29:56:02:09:c9:d4:23:
                    0c:d8:b8:11:a0:64:bd:8e:bb:d3:2f:89:ff:3a:0c:
                    84:d2:ed:37:d1:ba:2e:f6:c8:bf:9e:ec:34:79:01:
                    3f:cc:68:94:92:39:79:92:a2:b8:2c:34:b4:ae:ac:
                    19:e4:57:7e:2f:ec:00:f2:18:5c:a4:af:4d:cb:2d:
                    dd:ed:92:1f:2e:f5:32:3d:81:9e:79:26:bd:aa:ce:
                    d0:64:49:7f:6c:68:84:c8:3a:1a:66:e1:f1:02:24:
                    d2:c6:ce:eb:ca:4d:f3:9e:fa:51:08:f0:9f:dc:a0:
                    91:5e:20:8f:26:29:78:2b:a8:d3:9f:c3:0b:10:fc:
                    e6:fd:29:bc:75:3a:64:21:44:21:5e:b0:ee:b9:6d:
                    44:4b:1d:c5:af:d3:5f:33:51:cc:87:de:35:d8:24:
                    81:68:03:ae:a0:67:3c:ee:e2:e7:1d:1f:1b:b8:10:
                    b0:7f:9d:d1:7d:38:97:bb:f5:9d:54:b6:72:d9:0d:
                    01:a3:64:0b:d4:cc:5d:8d:51:2b:3a:ff:c6:53:4f:
                    89:84:cc:82:00:1a:4b:e8:88:4c:59:64:40:6d:55:
                    62:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:2D:D1:25:41:01:8F:EC:B2:ED:27:68:D6:A8:7D:70:5D:44:79:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4ac0b9fd-fc4c-47c2-ba96-0ce118621de4/9b931910-2ac7-3231-8644-a41581603e70.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4ac0b9fd-fc4c-47c2-ba96-0ce118621de4/4ac0b9fd-fc4c-47c2-ba96-0ce118621de4.crl

            X509v3 Authority Key Identifier:
                keyid:FA:85:8E:67:A7:9F:7B:1B:7C:F5:1F:7A:ED:A2:F8:D2:22:C4:25:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4ac0b9fd-fc4c-47c2-ba96-0ce118621de4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:ff41::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         be:1e:5d:8b:51:85:33:61:7b:0f:65:84:f0:fb:fe:68:8d:ea:
         95:61:b0:09:d1:18:96:11:13:8e:aa:01:9e:f9:9e:27:d5:8c:
         21:0a:07:3d:ea:99:79:6f:f1:a7:1c:6a:bc:e3:51:d6:c4:8f:
         ee:f1:11:8f:8d:84:36:94:2a:c3:57:f6:c7:9b:ea:46:2f:79:
         a4:ce:e4:5b:00:56:2a:c6:2e:37:27:bb:4f:b6:7d:15:b2:d2:
         14:3d:57:46:0b:53:ea:fc:c4:07:53:49:3d:e6:48:15:01:c7:
         26:21:f0:70:98:ad:e3:76:9b:ba:3b:dc:d2:32:c9:09:4d:0c:
         8c:35:f8:b3:f2:e7:63:a7:7a:69:03:7c:51:56:f7:84:7c:69:
         a6:8c:7f:11:02:e9:bd:61:2f:17:d9:d0:69:85:dc:f0:6c:33:
         b4:e8:62:64:13:0b:1f:60:98:2f:d6:d3:65:e8:2c:1f:e6:43:
         12:1e:5b:d6:f8:4f:13:3a:86:9b:3c:79:34:c7:e1:7c:64:37:
         29:1a:f9:7c:62:08:d6:07:84:29:49:42:8d:c9:65:6e:d4:d9:
         5c:00:b1:9c:14:24:7f:79:58:4a:5c:38:0e:bd:24:3f:e9:2b:
         c4:c8:4e:ed:70:7a:cf:df:71:19:14:ea:a1:cc:9e:2e:78:70:
         90:97:79:7c
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE0AsnPbgPYuzYvGIIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGFjMGI5ZmQtZmM0Yy00N2MyLWJhOTYtMGNlMTE4NjIx
ZGU0MB4XDTI2MDIyNzE0MDA0MFoXDTI2MDUyODEzMDA0MFowLzEtMCsGA1UEAxMk
MWY5MTM3ZDktYjMxNS00YjFkLWI5YTUtNWIxOTYyZWFjMjIyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlTGmvoMqiF7r1xMfMv73utfmtSKEKm6jfjhS
qQIQuyk3RDc2PClWAgnJ1CMM2LgRoGS9jrvTL4n/OgyE0u030bou9si/nuw0eQE/
zGiUkjl5kqK4LDS0rqwZ5Fd+L+wA8hhcpK9Nyy3d7ZIfLvUyPYGeeSa9qs7QZEl/
bGiEyDoaZuHxAiTSxs7ryk3znvpRCPCf3KCRXiCPJil4K6jTn8MLEPzm/Sm8dTpk
IUQhXrDuuW1ESx3Fr9NfM1HMh9412CSBaAOuoGc87uLnHR8buBCwf53RfTiXu/Wd
VLZy2Q0Bo2QL1MxdjVErOv/GU0+JhMyCABpL6IhMWWRAbVVitwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFFst0SVBAY/ssu0naNaofXBdRHlzMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy80YWMw
YjlmZC1mYzRjLTQ3YzItYmE5Ni0wY2UxMTg2MjFkZTQvOWI5MzE5MTAtMmFjNy0z
MjMxLTg2NDQtYTQxNTgxNjAzZTcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvNGFjMGI5ZmQtZmM0Yy00N2MyLWJh
OTYtMGNlMTE4NjIxZGU0LzRhYzBiOWZkLWZjNGMtNDdjMi1iYTk2LTBjZTExODYy
MWRlNC5jcmwwHwYDVR0jBBgwFoAU+oWOZ6efext89R967aL40iLEJR0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy80YWMwYjlmZC1mYzRjLTQ3YzItYmE5Ni0wY2Ux
MTg2MjFkZTQuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgL/QTBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQC+Hl2LUYUzYXsPZYTw+/5ojeqVYbAJ0RiWEROOqgGe+Z4n1YwhCgc9
6pl5b/GnHGq841HWxI/u8RGPjYQ2lCrDV/bHm+pGL3mkzuRbAFYqxi43J7tPtn0V
stIUPVdGC1Pq/MQHU0k95kgVAccmIfBwmK3jdpu6O9zSMskJTQyMNfiz8udjp3pp
A3xRVveEfGmmjH8RAum9YS8X2dBphdzwbDO06GJkEwsfYJgv1tNl6Cwf5kMSHlvW
+E8TOoabPHk0x+F8ZDcpGvl8YgjWB4QpSUKNyWVu1NlcALGcFCR/eVhKXDgOvSQ/
6SvEyE7tcHrP33EZFOqhzJ4ueHCQl3l8
-----END CERTIFICATE-----
Generated at Tue Mar 3 07:16:48 2026 by rpki-client