Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35dd34c4-644d-463f-8aba-5a3d509d5560/cf7322cd-659f-31c1-827f-bb470449d31d.roa
File:                     cf7322cd-659f-31c1-827f-bb470449d31d.roa (raw, json)
Hash identifier:          Bq92Rxen68lYaSNKgnb2oJHEv6KR0NdxCCnk+tbiWAs=
Subject key identifier:   BE:33:D2:97:0E:7B:77:E1:7F:EB:42:71:B2:5D:CD:38:02:2A:85:62
Certificate issuer:       /CN=35dd34c4-644d-463f-8aba-5a3d509d5560
Certificate serial:       010D0C9F4328584CF6ECD6A59ED36917A4A4BE00
Authority key identifier: DE:68:B5:45:30:7A:DA:0B:73:6E:15:EE:60:89:9C:2F:9E:EE:1C:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35dd34c4-644d-463f-8aba-5a3d509d5560.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35dd34c4-644d-463f-8aba-5a3d509d5560/cf7322cd-659f-31c1-827f-bb470449d31d.roa
Signing time:             Tue 24 Feb 2026 02:00:31 +0000
ROA not before:           Tue 24 Feb 2026 02:00:31 +0000
ROA not after:            Mon 25 May 2026 01:00:31 +0000
asID:                     209242
IP address blocks:        2606:2c0:21::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35dd34c4-644d-463f-8aba-5a3d509d5560/35dd34c4-644d-463f-8aba-5a3d509d5560.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35dd34c4-644d-463f-8aba-5a3d509d5560/35dd34c4-644d-463f-8aba-5a3d509d5560.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35dd34c4-644d-463f-8aba-5a3d509d5560.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 02 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:f6:ec:d6:a5:9e:d3:69:17:a4:a4:be:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35dd34c4-644d-463f-8aba-5a3d509d5560
        Validity
            Not Before: Feb 24 02:00:31 2026 GMT
            Not After : May 25 01:00:31 2026 GMT
        Subject: CN=03da038f-6dca-48dc-b256-5f193245bbd8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:5d:de:11:b4:34:73:70:18:55:1e:80:c2:c5:
                    5e:35:f3:42:7d:23:06:05:69:32:55:8f:c9:1e:3e:
                    91:49:5a:76:6c:0d:1b:d8:f6:7b:c2:47:92:ed:d0:
                    bd:68:c2:49:48:b6:02:78:e8:a0:6e:07:5d:d1:f7:
                    ca:3f:b6:84:fb:0e:5f:af:da:e8:aa:f6:bd:12:f3:
                    76:5e:07:9b:ee:a6:e7:cf:7e:ff:24:51:cb:1c:84:
                    77:13:14:25:c3:98:11:e3:b4:a0:df:b4:d6:56:59:
                    d3:e5:98:85:6a:61:98:83:a1:9e:c5:a9:af:09:95:
                    7e:df:5d:5a:db:84:14:f5:70:c9:5c:06:38:2c:9b:
                    05:2e:8f:31:a0:f6:5a:58:e4:66:aa:fa:fd:6b:14:
                    7a:27:20:58:67:49:83:af:da:6a:d6:9c:d3:d1:53:
                    fd:e6:21:10:0b:a9:d9:48:56:12:ea:b0:af:0d:e8:
                    81:eb:5e:1b:b1:73:41:b2:5e:e9:d7:de:59:e9:06:
                    93:81:73:e4:ac:bb:3b:f5:bd:62:4f:9b:81:e8:cc:
                    14:19:61:ba:d7:67:84:c9:63:23:81:5b:e6:4a:82:
                    c6:44:74:4c:c8:d9:12:f1:93:9d:2d:fd:07:0a:90:
                    10:5b:ea:01:38:61:85:08:c9:43:f9:2e:a5:b7:67:
                    35:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:33:D2:97:0E:7B:77:E1:7F:EB:42:71:B2:5D:CD:38:02:2A:85:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35dd34c4-644d-463f-8aba-5a3d509d5560/cf7322cd-659f-31c1-827f-bb470449d31d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35dd34c4-644d-463f-8aba-5a3d509d5560/35dd34c4-644d-463f-8aba-5a3d509d5560.crl

            X509v3 Authority Key Identifier:
                keyid:DE:68:B5:45:30:7A:DA:0B:73:6E:15:EE:60:89:9C:2F:9E:EE:1C:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35dd34c4-644d-463f-8aba-5a3d509d5560.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:2c0:21::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:02:35:cc:6e:d4:2f:65:cd:90:5d:02:c6:45:0d:e1:96:10:
         fb:c8:e6:17:8a:49:43:55:60:45:34:c4:cf:03:9c:76:e9:a1:
         f8:62:99:65:aa:43:fb:6d:24:9c:f2:ff:30:e8:e3:6d:90:bd:
         dd:d8:f4:89:79:ec:14:ae:ef:75:32:3d:0c:21:32:37:81:e8:
         5e:47:2c:0a:56:e9:4a:aa:2b:31:a7:7c:ac:cc:b7:e2:40:d9:
         0d:21:df:30:e0:e6:b3:98:67:7e:75:70:05:69:54:60:59:80:
         c0:0d:70:b8:37:f0:ad:98:9f:ad:08:14:a4:88:ce:73:c3:95:
         b3:c2:3c:ae:01:75:9c:91:60:61:89:e5:c2:25:b0:7e:ba:02:
         38:d1:b5:2d:09:54:01:00:ab:df:67:b1:18:56:30:5f:1d:43:
         a3:e4:45:44:1e:39:ab:9f:6d:ac:b6:95:f6:fe:06:e5:7c:6c:
         e9:bb:72:7a:e8:b6:44:78:8d:46:e7:db:4f:90:ab:df:06:4c:
         eb:e8:ad:ae:6c:22:62:12:f0:f6:28:fc:19:14:57:5a:6b:a3:
         85:8a:0a:82:93:25:cf:32:5c:43:26:d5:5f:47:9a:31:bf:62:
         61:d4:39:bb:bc:a6:3d:4e:a3:b4:89:0e:76:d7:1a:87:03:17:
         9e:d6:5d:1e
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEz27NalntNpF6SkvgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzVkZDM0YzQtNjQ0ZC00NjNmLThhYmEtNWEzZDUwOWQ1
NTYwMB4XDTI2MDIyNDAyMDAzMVoXDTI2MDUyNTAxMDAzMVowLzEtMCsGA1UEAxMk
MDNkYTAzOGYtNmRjYS00OGRjLWIyNTYtNWYxOTMyNDViYmQ4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjV3eEbQ0c3AYVR6AwsVeNfNCfSMGBWkyVY/J
Hj6RSVp2bA0b2PZ7wkeS7dC9aMJJSLYCeOigbgdd0ffKP7aE+w5fr9roqva9EvN2
Xgeb7qbnz37/JFHLHIR3ExQlw5gR47Sg37TWVlnT5ZiFamGYg6GexamvCZV+311a
24QU9XDJXAY4LJsFLo8xoPZaWORmqvr9axR6JyBYZ0mDr9pq1pzT0VP95iEQC6nZ
SFYS6rCvDeiB614bsXNBsl7p195Z6QaTgXPkrLs79b1iT5uB6MwUGWG612eEyWMj
gVvmSoLGRHRMyNkS8ZOdLf0HCpAQW+oBOGGFCMlD+S6lt2c11wIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFL4z0pcOe3fhf+tCcbJdzTgCKoViMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zNWRk
MzRjNC02NDRkLTQ2M2YtOGFiYS01YTNkNTA5ZDU1NjAvY2Y3MzIyY2QtNjU5Zi0z
MWMxLTgyN2YtYmI0NzA0NDlkMzFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMzVkZDM0YzQtNjQ0ZC00NjNmLThh
YmEtNWEzZDUwOWQ1NTYwLzM1ZGQzNGM0LTY0NGQtNDYzZi04YWJhLTVhM2Q1MDlk
NTU2MC5jcmwwHwYDVR0jBBgwFoAU3mi1RTB62gtzbhXuYImcL57uHD8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS8zNWRkMzRjNC02NDRkLTQ2M2YtOGFiYS01YTNk
NTA5ZDU1NjAuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgYCwAAh
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBADoCNcxu1C9lzZBdAsZFDeGWEPvI5heKSUNVYEU0xM8DnHbpofhi
mWWqQ/ttJJzy/zDo422Qvd3Y9Il57BSu73UyPQwhMjeB6F5HLApW6UqqKzGnfKzM
t+JA2Q0h3zDg5rOYZ351cAVpVGBZgMANcLg38K2Yn60IFKSIznPDlbPCPK4BdZyR
YGGJ5cIlsH66AjjRtS0JVAEAq99nsRhWMF8dQ6PkRUQeOaufbay2lfb+BuV8bOm7
cnrotkR4jUbn20+Qq98GTOvora5sImIS8PYo/BkUV1pro4WKCoKTJc8yXEMm1V9H
mjG/YmHUObu8pj1Oo7SJDnbXGocDF57WXR4=
-----END CERTIFICATE-----
Generated at Sun Mar 1 14:46:32 2026 by rpki-client