Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/cc9578b8-1ce4-4d31-9753-bc111a3af6b9/28e8d494-3b59-3545-bee0-b91073713a2a.roa
File:                     28e8d494-3b59-3545-bee0-b91073713a2a.roa (raw, json)
Hash identifier:          XUT8yGTltPrnqVD55xjunAwnTkNd97q/wt5WF0gzXkc=
Subject key identifier:   88:71:E2:75:E3:A9:18:F9:B0:2E:A8:9A:D6:FB:B1:45:FE:4C:B9:E5
Certificate issuer:       /CN=cc9578b8-1ce4-4d31-9753-bc111a3af6b9
Certificate serial:       010D0C9F4328584E9A7FB0AA717EBDE0683E4A00
Authority key identifier: 18:DF:81:00:EC:73:7C:BD:5F:8B:75:AE:13:EA:2D:E5:6B:BA:AF:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/cc9578b8-1ce4-4d31-9753-bc111a3af6b9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/cc9578b8-1ce4-4d31-9753-bc111a3af6b9/28e8d494-3b59-3545-bee0-b91073713a2a.roa
Signing time:             Fri 24 Jul 2026 09:00:12 +0000
ROA not before:           Fri 24 Jul 2026 09:00:12 +0000
ROA not after:            Thu 22 Oct 2026 09:00:12 +0000
asID:                     402196
IP address blocks:        2602:f460::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/cc9578b8-1ce4-4d31-9753-bc111a3af6b9/cc9578b8-1ce4-4d31-9753-bc111a3af6b9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/cc9578b8-1ce4-4d31-9753-bc111a3af6b9/cc9578b8-1ce4-4d31-9753-bc111a3af6b9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/cc9578b8-1ce4-4d31-9753-bc111a3af6b9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:9a:7f:b0:aa:71:7e:bd:e0:68:3e:4a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc9578b8-1ce4-4d31-9753-bc111a3af6b9
        Validity
            Not Before: Jul 24 09:00:12 2026 GMT
            Not After : Oct 22 09:00:12 2026 GMT
        Subject: CN=c335cf14-47d8-44e1-8a7a-c60d4f778778
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:a6:ef:c7:c3:fa:a6:e5:b1:11:f1:24:f0:48:
                    b0:41:79:41:96:7e:75:ae:89:4b:91:ee:ca:24:65:
                    36:53:12:b0:c4:27:ea:8a:f6:a5:52:67:3b:22:b9:
                    a7:51:08:fa:bc:66:08:a0:0e:8b:94:c0:17:f6:73:
                    a9:5c:5e:c1:4b:75:25:84:7e:5d:11:d6:0d:11:c1:
                    dc:7f:ee:a8:4e:0b:d3:ad:9a:47:5d:ba:08:a7:57:
                    aa:13:8f:ee:b4:be:96:15:d6:19:57:ae:6f:7f:f9:
                    de:b2:a0:e8:1f:39:c4:28:bd:de:e1:40:04:6a:5e:
                    c3:c8:d1:a0:4d:4f:aa:60:b5:5e:c5:2f:18:3e:dd:
                    c2:ca:31:99:ef:8d:ed:ef:3f:1c:3c:6e:83:05:25:
                    a1:2c:c6:2d:dc:f0:7f:b7:8e:ef:4a:0f:f3:ef:6b:
                    0a:97:7d:d1:d8:6d:7e:cb:ef:0f:b3:26:54:81:90:
                    b7:9d:b4:1c:75:2a:02:a8:a8:08:75:da:89:48:32:
                    1c:0d:b3:67:6d:27:9f:ec:9a:06:5c:99:3f:1f:a2:
                    98:c9:88:32:c7:52:05:f3:3d:b8:74:f3:89:3f:27:
                    bb:56:7f:61:25:26:ae:c0:ac:e0:aa:94:2a:8a:b4:
                    84:42:ed:5c:bc:99:ca:82:45:c8:04:b2:af:b1:6c:
                    e7:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:71:E2:75:E3:A9:18:F9:B0:2E:A8:9A:D6:FB:B1:45:FE:4C:B9:E5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/cc9578b8-1ce4-4d31-9753-bc111a3af6b9/28e8d494-3b59-3545-bee0-b91073713a2a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/cc9578b8-1ce4-4d31-9753-bc111a3af6b9/cc9578b8-1ce4-4d31-9753-bc111a3af6b9.crl

            X509v3 Authority Key Identifier:
                keyid:18:DF:81:00:EC:73:7C:BD:5F:8B:75:AE:13:EA:2D:E5:6B:BA:AF:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/cc9578b8-1ce4-4d31-9753-bc111a3af6b9.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f460::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:df:06:ac:4c:a4:47:12:29:09:b5:c2:b8:af:e7:78:c8:78:
         f5:80:3a:d8:28:a9:31:b1:47:58:d8:8f:01:e7:4c:13:8d:7d:
         42:e7:2f:a0:cd:8c:4c:33:62:ac:0d:5c:48:a6:43:1b:f2:0c:
         64:10:7a:2e:06:2f:d5:d4:0b:79:83:67:64:91:79:bf:ad:de:
         d8:a4:be:1e:24:48:82:89:39:e4:1c:e6:8c:b5:a3:f7:25:3d:
         7a:b3:1c:6f:5f:49:06:91:12:a9:b4:ec:87:87:cd:34:21:88:
         7e:9e:fc:32:e3:cf:d8:b6:2b:38:c8:e6:fb:36:a9:31:12:20:
         3e:32:c1:01:ea:cc:fe:83:83:1d:e2:54:3d:f3:4c:7e:cb:a3:
         55:ec:cb:f9:19:eb:ab:11:82:72:76:58:46:bf:98:9c:67:11:
         99:d0:06:8a:59:cb:1c:a5:41:05:47:a6:ca:2e:f5:4a:a9:48:
         f3:84:24:16:62:80:a3:1d:0a:43:c3:bc:55:5c:1e:f3:6b:47:
         a3:7a:b0:18:d4:ad:91:68:73:bc:05:ea:5b:47:9c:6b:21:a1:
         e0:0c:39:10:36:5d:7c:2e:46:fb:0e:75:0c:a5:1c:2e:e0:4e:
         6f:54:4f:0e:4b:1c:9d:74:20:19:55:e5:df:21:fe:a0:5e:b7:
         9d:a0:d0:2f
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE6af7CqcX694Gg+SgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2M5NTc4YjgtMWNlNC00ZDMxLTk3NTMtYmMxMTFhM2Fm
NmI5MB4XDTI2MDcyNDA5MDAxMloXDTI2MTAyMjA5MDAxMlowLzEtMCsGA1UEAxMk
YzMzNWNmMTQtNDdkOC00NGUxLThhN2EtYzYwZDRmNzc4Nzc4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt6bvx8P6puWxEfEk8EiwQXlBln51rolLke7K
JGU2UxKwxCfqivalUmc7IrmnUQj6vGYIoA6LlMAX9nOpXF7BS3UlhH5dEdYNEcHc
f+6oTgvTrZpHXboIp1eqE4/utL6WFdYZV65vf/nesqDoHznEKL3e4UAEal7DyNGg
TU+qYLVexS8YPt3CyjGZ743t7z8cPG6DBSWhLMYt3PB/t47vSg/z72sKl33R2G1+
y+8PsyZUgZC3nbQcdSoCqKgIddqJSDIcDbNnbSef7JoGXJk/H6KYyYgyx1IF8z24
dPOJPye7Vn9hJSauwKzgqpQqirSEQu1cvJnKgkXIBLKvsWzntQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFIhx4nXjqRj5sC6omtb7sUX+TLnlMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9jYzk1
NzhiOC0xY2U0LTRkMzEtOTc1My1iYzExMWEzYWY2YjkvMjhlOGQ0OTQtM2I1OS0z
NTQ1LWJlZTAtYjkxMDczNzEzYTJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y
Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvY2M5NTc4YjgtMWNlNC00ZDMxLTk3
NTMtYmMxMTFhM2FmNmI5L2NjOTU3OGI4LTFjZTQtNGQzMS05NzUzLWJjMTExYTNh
ZjZiOS5jcmwwHwYDVR0jBBgwFoAUGN+BAOxzfL1fi3WuE+ot5Wu6r7cwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw
ZS1hZTdkLWU2Y2IxMGFmYTEyNS9jYzk1NzhiOC0xY2U0LTRkMzEtOTc1My1iYzEx
MWEzYWY2YjkuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL0YAAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAcN8GrEykRxIpCbXCuK/neMh49YA62CipMbFHWNiPAedME419Qucv
oM2MTDNirA1cSKZDG/IMZBB6LgYv1dQLeYNnZJF5v63e2KS+HiRIgok55BzmjLWj
9yU9erMcb19JBpESqbTsh4fNNCGIfp78MuPP2LYrOMjm+zapMRIgPjLBAerM/oOD
HeJUPfNMfsujVezL+RnrqxGCcnZYRr+YnGcRmdAGilnLHKVBBUemyi71SqlI84Qk
FmKAox0KQ8O8VVwe82tHo3qwGNStkWhzvAXqW0ecayGh4Aw5EDZdfC5G+w51DKUc
LuBOb1RPDkscnXQgGVXl3yH+oF63naDQLw==
-----END CERTIFICATE-----
Generated at Tue Jul 28 22:11:47 2026 by rpki-client