Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2/defa4b41-4cbc-3128-83c6-ac72490d9f2c.roa
File:                     defa4b41-4cbc-3128-83c6-ac72490d9f2c.roa (raw, json)
Hash identifier:          03JjZGjUgiqsL90qGkYu9h7K+8QoWcfIx1OmkV4iTfw=
Subject key identifier:   C4:3F:A2:00:DA:46:E0:86:FE:9F:B4:3A:D6:88:1A:68:59:5C:AE:3B
Certificate issuer:       /CN=df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2
Certificate serial:       010D0C9F4328584CAB8C49DD6C9F9F4427333F80
Authority key identifier: 19:E9:04:44:F4:A8:F5:DA:05:93:6E:23:2E:65:34:63:37:9E:BB:AB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2/defa4b41-4cbc-3128-83c6-ac72490d9f2c.roa
Signing time:             Wed 28 Jan 2026 02:00:29 +0000
ROA not before:           Wed 28 Jan 2026 02:00:29 +0000
ROA not after:            Tue 28 Apr 2026 01:00:29 +0000
asID:                     62874
IP address blocks:        2602:ffb7:594::/48 maxlen: 48
                          2602:ffb7:5a0::/46 maxlen: 46
                          2602:ffb7:d00::/40 maxlen: 40
                          2602:ffb7:f00::/40 maxlen: 40
                          2602:ffd9::/36 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ab:8c:49:dd:6c:9f:9f:44:27:33:3f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2
        Validity
            Not Before: Jan 28 02:00:29 2026 GMT
            Not After : Apr 28 01:00:29 2026 GMT
        Subject: CN=f8666031-afbf-460e-80f2-5f9532e14b41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:58:c5:23:2f:28:87:62:4d:96:69:aa:8a:8a:
                    27:c1:26:43:34:2a:a5:3e:e6:f2:97:2b:f2:83:d7:
                    ee:c4:d1:74:28:22:cc:d4:02:08:fe:d3:1c:e1:b5:
                    1f:5e:d6:93:06:b8:30:0d:46:25:82:6f:0e:9f:84:
                    ac:02:db:6d:50:4e:e7:d6:c7:cf:e1:58:20:52:f8:
                    8c:5e:73:f3:50:a3:1c:10:d5:7c:93:06:e3:4c:e0:
                    d5:31:cd:bc:fc:26:c7:bb:c9:b8:70:90:95:14:8d:
                    c5:62:75:e1:87:62:5d:03:48:a7:bb:0a:61:e3:4b:
                    b6:de:d8:fa:6f:03:cc:c9:fa:53:8a:16:b7:ba:05:
                    6c:05:7c:90:b4:cd:9b:88:60:de:12:d2:a9:e2:05:
                    6b:9b:4c:e5:c8:ef:9b:4f:e2:9c:46:06:bb:f4:b9:
                    a2:18:30:0b:95:8a:44:47:c9:a7:fe:9c:e5:35:48:
                    38:55:9a:b9:aa:c3:d9:35:d0:1c:f4:e5:16:60:a4:
                    06:44:d9:cc:65:6f:fe:a1:30:a2:eb:e0:51:17:88:
                    4c:dd:be:02:b5:86:78:e3:b4:12:1f:fb:31:fb:fc:
                    56:ad:ae:9a:26:8e:c5:e8:a8:39:b6:ba:df:87:dc:
                    a9:4e:21:86:f2:1a:b0:35:12:1a:b7:87:06:c2:5b:
                    84:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:3F:A2:00:DA:46:E0:86:FE:9F:B4:3A:D6:88:1A:68:59:5C:AE:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2/defa4b41-4cbc-3128-83c6-ac72490d9f2c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2.crl

            X509v3 Authority Key Identifier:
                keyid:19:E9:04:44:F4:A8:F5:DA:05:93:6E:23:2E:65:34:63:37:9E:BB:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:ffb7:594::/48
                  2602:ffb7:5a0::/46
                  2602:ffb7:d00::/40
                  2602:ffb7:f00::/40
                  2602:ffd9::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b6:99:91:97:8a:63:14:67:db:4e:fd:8e:34:12:33:3e:b5:2f:
         dd:7c:8f:1f:80:6c:f8:e4:ef:23:76:fe:2b:a0:6b:66:fd:d3:
         80:45:18:ef:71:47:81:5f:e6:f0:4c:a6:0e:99:b7:22:b6:a7:
         1d:2c:6b:53:b8:80:ab:6e:86:fe:b5:22:a2:46:12:f1:5d:f4:
         f1:db:82:62:cd:3a:69:a9:1a:99:71:4e:20:b9:e0:d1:6c:a5:
         b5:dc:ec:9a:00:e8:14:51:63:90:37:bf:67:74:45:4b:52:8e:
         6b:b4:ed:e6:90:1b:31:be:25:7a:58:11:42:fb:0b:01:74:00:
         dd:7e:c3:15:bd:2f:97:8d:a6:63:25:16:2e:7b:47:7f:48:b1:
         15:0b:62:a3:0a:04:6f:92:9c:70:ce:83:c0:33:b6:a1:a4:f4:
         0d:8c:31:07:ad:1d:3f:2d:a9:93:ad:da:3b:2e:b7:f8:53:08:
         8c:52:69:67:aa:f9:4b:6a:82:91:40:61:81:5b:25:43:ab:b7:
         f9:f2:6f:5d:3c:c3:62:a6:66:fb:cf:7e:af:4b:30:fc:0b:42:
         e8:10:9c:d0:94:82:fc:34:6d:63:41:f4:a1:30:53:ab:cd:62:
         58:9c:55:d4:3c:df:97:ca:17:11:79:dd:68:b3:0b:88:f1:a0:
         04:a2:ff:8b
-----BEGIN CERTIFICATE-----
MIIGZzCCBU+gAwIBAgIUAQ0Mn0MoWEyrjEndbJ+fRCczP4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGY3OTk5YzgtZTRhNS00NWZjLTljYzItYzRmZTdmMThi
ZmUyMB4XDTI2MDEyODAyMDAyOVoXDTI2MDQyODAxMDAyOVowLzEtMCsGA1UEAxMk
Zjg2NjYwMzEtYWZiZi00NjBlLTgwZjItNWY5NTMyZTE0YjQxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1VjFIy8oh2JNlmmqioonwSZDNCqlPubylyvy
g9fuxNF0KCLM1AII/tMc4bUfXtaTBrgwDUYlgm8On4SsAtttUE7n1sfP4VggUviM
XnPzUKMcENV8kwbjTODVMc28/CbHu8m4cJCVFI3FYnXhh2JdA0inuwph40u23tj6
bwPMyfpTiha3ugVsBXyQtM2biGDeEtKp4gVrm0zlyO+bT+KcRga79LmiGDALlYpE
R8mn/pzlNUg4VZq5qsPZNdAc9OUWYKQGRNnMZW/+oTCi6+BRF4hM3b4CtYZ447QS
H/sx+/xWra6aJo7F6Kg5trrfh9ypTiGG8hqwNRIat4cGwluETwIDAQABo4IDeTCC
A3UwHQYDVR0OBBYEFMQ/ogDaRuCG/p+0OtaIGmhZXK47MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kZjc5
OTljOC1lNGE1LTQ1ZmMtOWNjMi1jNGZlN2YxOGJmZTIvZGVmYTRiNDEtNGNiYy0z
MTI4LTgzYzYtYWM3MjQ5MGQ5ZjJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZGY3OTk5YzgtZTRhNS00NWZjLTlj
YzItYzRmZTdmMThiZmUyL2RmNzk5OWM4LWU0YTUtNDVmYy05Y2MyLWM0ZmU3ZjE4
YmZlMi5jcmwwHwYDVR0jBBgwFoAUGekERPSo9doFk24jLmU0Yzeeu6swDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi9kZjc5OTljOC1lNGE1LTQ1ZmMtOWNjMi1jNGZl
N2YxOGJmZTIuY2VyMEMGCCsGAQUFBwEHAQH/BDQwMjAwBAIAAjAqAwcAJgL/twWU
AwcCJgL/twWgAwYAJgL/tw0DBgAmAv+3DwMGBCYC/9kAMFQGA1UdIAEB/wRKMEgw
RgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQv
cmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBALaZkZeK
YxRn2079jjQSMz61L918jx+AbPjk7yN2/iuga2b904BFGO9xR4Ff5vBMpg6ZtyK2
px0sa1O4gKtuhv61IqJGEvFd9PHbgmLNOmmpGplxTiC54NFspbXc7JoA6BRRY5A3
v2d0RUtSjmu07eaQGzG+JXpYEUL7CwF0AN1+wxW9L5eNpmMlFi57R39IsRULYqMK
BG+SnHDOg8AztqGk9A2MMQetHT8tqZOt2jsut/hTCIxSaWeq+UtqgpFAYYFbJUOr
t/nyb108w2KmZvvPfq9LMPwLQugQnNCUgvw0bWNB9KEwU6vNYlicVdQ835fKFxF5
3WizC4jxoASi/4s=
-----END CERTIFICATE-----
Generated at Mon Mar 2 07:11:45 2026 by rpki-client