Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8d2f044f-e9ba-4827-afd6-8e01d323d3ec/a9399f39-298b-36c8-946d-92f64b938202.roa
File:                     a9399f39-298b-36c8-946d-92f64b938202.roa (raw, json)
Hash identifier:          eC280nDoelXUAVAzYiSo7JfyCZDEUTN7BVSfAT0m1nU=
Subject key identifier:   B8:A8:E2:50:65:77:86:26:57:65:51:1D:B1:09:D9:20:EA:CC:DA:4E
Certificate issuer:       /CN=8d2f044f-e9ba-4827-afd6-8e01d323d3ec
Certificate serial:       010D0C9F4328584CCFB8078332DF77BAB80067B8
Authority key identifier: AF:3F:E4:D8:29:57:9D:AE:9B:52:E2:DF:D1:82:AB:8C:FA:84:53:DA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8d2f044f-e9ba-4827-afd6-8e01d323d3ec.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8d2f044f-e9ba-4827-afd6-8e01d323d3ec/a9399f39-298b-36c8-946d-92f64b938202.roa
Signing time:             Tue 10 Feb 2026 00:55:42 +0000
ROA not before:           Tue 10 Feb 2026 00:55:42 +0000
ROA not after:            Sun 10 May 2026 23:55:42 +0000
asID:                     215327
IP address blocks:        2602:f76f:10::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8d2f044f-e9ba-4827-afd6-8e01d323d3ec/8d2f044f-e9ba-4827-afd6-8e01d323d3ec.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8d2f044f-e9ba-4827-afd6-8e01d323d3ec/8d2f044f-e9ba-4827-afd6-8e01d323d3ec.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8d2f044f-e9ba-4827-afd6-8e01d323d3ec.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:cf:b8:07:83:32:df:77:ba:b8:00:67:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d2f044f-e9ba-4827-afd6-8e01d323d3ec
        Validity
            Not Before: Feb 10 00:55:42 2026 GMT
            Not After : May 10 23:55:42 2026 GMT
        Subject: CN=a8cef80b-ea48-4fa3-b9ce-2a6f5a30ed55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:d0:d2:60:58:65:38:43:70:ea:71:1e:b8:11:
                    02:f3:48:3a:ca:b1:0b:08:95:7d:6f:85:9e:4e:a5:
                    05:27:36:66:7b:14:b1:06:af:5f:60:f1:c8:93:98:
                    d0:4d:62:df:ce:7c:ab:b9:d3:da:9a:8d:98:b7:b0:
                    c6:87:f7:75:b5:21:3a:0d:05:7e:11:34:a7:e7:c2:
                    4f:a4:7f:e3:71:ad:a7:09:f1:87:3e:c3:64:01:f7:
                    99:61:03:4b:73:79:5c:d9:ba:23:8b:aa:c1:5a:03:
                    3f:52:98:58:15:52:56:ee:4f:94:86:da:2b:0d:48:
                    d0:d6:d3:c3:48:70:08:68:56:70:76:82:dc:a6:42:
                    ab:ef:5f:ef:7f:50:94:27:d8:8e:b7:e8:d3:45:3c:
                    c4:f0:34:3b:96:8a:89:b6:63:8a:b4:7e:e9:a9:d7:
                    e2:e4:24:f7:37:1b:77:c3:65:97:17:30:e7:d6:10:
                    f8:81:40:ac:f4:cc:2c:7b:3b:4b:fe:19:cd:04:ec:
                    07:eb:63:0f:12:a6:50:e3:d4:47:ef:cb:75:de:83:
                    f4:a4:6a:4b:a7:30:b5:d4:b2:86:40:4a:20:c8:7c:
                    cb:09:f1:3a:79:4f:ba:75:5c:f9:4f:74:bf:0f:93:
                    8d:7e:79:37:33:e6:34:01:b1:7b:fe:c3:26:ff:e6:
                    a5:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:A8:E2:50:65:77:86:26:57:65:51:1D:B1:09:D9:20:EA:CC:DA:4E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8d2f044f-e9ba-4827-afd6-8e01d323d3ec/a9399f39-298b-36c8-946d-92f64b938202.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8d2f044f-e9ba-4827-afd6-8e01d323d3ec/8d2f044f-e9ba-4827-afd6-8e01d323d3ec.crl

            X509v3 Authority Key Identifier:
                keyid:AF:3F:E4:D8:29:57:9D:AE:9B:52:E2:DF:D1:82:AB:8C:FA:84:53:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8d2f044f-e9ba-4827-afd6-8e01d323d3ec.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f76f:10::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:04:b4:95:9c:61:c8:a3:5f:ba:13:0c:35:64:b5:a2:1d:b1:
         e0:58:e4:86:5a:17:f8:9a:51:94:9c:30:f5:c8:6f:7a:70:b7:
         e2:e6:02:b3:d7:13:fa:57:d9:24:e5:0b:25:78:e1:21:cb:23:
         91:6d:a2:86:9e:1d:8b:18:9c:f6:8e:f3:9b:a7:d8:34:dd:e1:
         4e:5a:78:a7:a1:d5:c9:f4:74:1c:bf:a7:6c:08:ec:12:41:34:
         af:01:32:79:5e:bd:0a:03:84:ac:12:10:08:cb:78:85:f4:75:
         64:24:2b:98:38:6c:42:5c:c0:92:9a:be:17:be:ab:68:a9:76:
         82:f9:d1:f9:97:90:0a:3e:e8:c3:04:e1:3d:1c:bf:c2:19:49:
         2a:5d:ad:f1:f5:9a:d4:40:d3:7f:6e:84:01:79:9d:eb:be:49:
         cb:be:e5:5f:94:48:56:97:7b:ca:d5:13:8b:01:75:9e:e9:1b:
         4a:aa:b1:3f:6f:77:75:76:24:00:eb:52:ed:69:65:82:7f:bb:
         0f:fe:d3:0e:42:b5:f6:35:3b:31:08:45:1f:49:89:6a:53:0d:
         c3:e5:72:54:08:2b:18:4e:81:37:da:cb:e8:1a:c8:be:fc:cf:
         3e:18:5f:b0:56:14:34:ae:d9:5e:67:c1:c8:ac:fe:56:65:a6:
         03:c6:e4:79
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEzPuAeDMt93urgAZ7gwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGQyZjA0NGYtZTliYS00ODI3LWFmZDYtOGUwMWQzMjNk
M2VjMB4XDTI2MDIxMDAwNTU0MloXDTI2MDUxMDIzNTU0MlowLzEtMCsGA1UEAxMk
YThjZWY4MGItZWE0OC00ZmEzLWI5Y2UtMmE2ZjVhMzBlZDU1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAidDSYFhlOENw6nEeuBEC80g6yrELCJV9b4We
TqUFJzZmexSxBq9fYPHIk5jQTWLfznyrudPamo2Yt7DGh/d1tSE6DQV+ETSn58JP
pH/jca2nCfGHPsNkAfeZYQNLc3lc2boji6rBWgM/UphYFVJW7k+UhtorDUjQ1tPD
SHAIaFZwdoLcpkKr71/vf1CUJ9iOt+jTRTzE8DQ7loqJtmOKtH7pqdfi5CT3Nxt3
w2WXFzDn1hD4gUCs9MwseztL/hnNBOwH62MPEqZQ49RH78t13oP0pGpLpzC11LKG
QEogyHzLCfE6eU+6dVz5T3S/D5ONfnk3M+Y0AbF7/sMm/+alPwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFLio4lBld4YmV2VRHbEJ2SDqzNpOMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi84ZDJm
MDQ0Zi1lOWJhLTQ4MjctYWZkNi04ZTAxZDMyM2QzZWMvYTkzOTlmMzktMjk4Yi0z
NmM4LTk0NmQtOTJmNjRiOTM4MjAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvOGQyZjA0NGYtZTliYS00ODI3LWFm
ZDYtOGUwMWQzMjNkM2VjLzhkMmYwNDRmLWU5YmEtNDgyNy1hZmQ2LThlMDFkMzIz
ZDNlYy5jcmwwHwYDVR0jBBgwFoAUrz/k2ClXna6bUuLf0YKrjPqEU9owDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi84ZDJmMDQ0Zi1lOWJhLTQ4MjctYWZkNi04ZTAx
ZDMyM2QzZWMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgL3bwAQ
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAG0EtJWcYcijX7oTDDVktaIdseBY5IZaF/iaUZScMPXIb3pwt+Lm
ArPXE/pX2STlCyV44SHLI5FtooaeHYsYnPaO85un2DTd4U5aeKeh1cn0dBy/p2wI
7BJBNK8BMnlevQoDhKwSEAjLeIX0dWQkK5g4bEJcwJKavhe+q2ipdoL50fmXkAo+
6MME4T0cv8IZSSpdrfH1mtRA039uhAF5neu+Scu+5V+USFaXe8rVE4sBdZ7pG0qq
sT9vd3V2JADrUu1pZYJ/uw/+0w5CtfY1OzEIRR9JiWpTDcPlclQIKxhOgTfay+ga
yL78zz4YX7BWFDSu2V5nwcis/lZlpgPG5Hk=
-----END CERTIFICATE-----
Generated at Sun Mar 1 22:06:52 2026 by rpki-client