Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9/6920a5d2-97bf-3fe2-a29e-10d959837927.roa
File:                     6920a5d2-97bf-3fe2-a29e-10d959837927.roa (raw, json)
Hash identifier:          QV5a4QFqExV3VJ64DwBjoemH3nJ546QIWqmFYs+l5os=
Subject key identifier:   67:7E:C7:61:57:68:85:80:14:7E:5B:2F:F4:10:27:8D:00:68:CB:EA
Certificate issuer:       /CN=aa912e91-41d3-4894-893c-8de4f94175f9
Certificate serial:       010D0C9F4328584EA2DFD03F8619F0A8AFFC5400
Authority key identifier: 76:54:89:41:17:BD:71:F5:3E:44:87:AF:EB:98:7F:6D:B6:25:E6:55
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9/6920a5d2-97bf-3fe2-a29e-10d959837927.roa
Signing time:             Mon 27 Jul 2026 09:00:12 +0000
ROA not before:           Mon 27 Jul 2026 09:00:12 +0000
ROA not after:            Sun 25 Oct 2026 09:00:12 +0000
asID:                     16509
IP address blocks:        2602:fe40:1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9/aa912e91-41d3-4894-893c-8de4f94175f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9/aa912e91-41d3-4894-893c-8de4f94175f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a2:df:d0:3f:86:19:f0:a8:af:fc:54:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa912e91-41d3-4894-893c-8de4f94175f9
        Validity
            Not Before: Jul 27 09:00:12 2026 GMT
            Not After : Oct 25 09:00:12 2026 GMT
        Subject: CN=61b092e4-acf3-465d-baa1-32a793aa1478
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:36:d2:86:75:7c:0e:33:6d:4a:0e:3e:a3:c3:
                    31:65:22:66:f8:78:42:44:d5:95:77:eb:b5:fe:dd:
                    7f:82:8a:d9:5b:3c:95:7d:a9:a0:5c:9d:37:ba:66:
                    02:4d:12:b5:91:b8:1f:a3:ff:fe:ba:ff:2e:2a:76:
                    d6:3f:17:72:79:f4:1e:22:a1:7e:15:3d:8e:c9:e9:
                    35:ac:5e:45:b2:43:36:56:59:4d:7e:47:d4:bb:e9:
                    d7:f7:42:7c:f6:c5:71:d1:7e:10:52:09:67:01:f4:
                    cb:c5:f1:d8:51:b6:82:05:de:a3:f3:e4:03:9c:0b:
                    b1:3c:13:f4:79:84:29:ca:5a:c3:02:49:5c:13:64:
                    57:1a:32:d9:09:1b:14:12:03:c7:3c:09:3a:44:5d:
                    10:3a:87:5e:2c:24:5f:a2:84:a8:83:f8:6c:ea:18:
                    de:2b:74:24:41:3b:ce:14:5d:df:ce:c9:6a:25:44:
                    c9:fa:31:ae:dd:7b:4f:ba:47:d4:65:8d:bd:ef:f2:
                    5f:71:4b:4a:b6:a7:7c:7a:5f:59:6a:d6:4a:80:1a:
                    fc:71:48:54:1d:a8:03:45:62:01:dc:cd:e9:12:b2:
                    dd:4d:a0:ad:57:79:8a:34:5e:66:5c:2c:4a:c3:5d:
                    e9:00:bb:04:3e:73:c8:28:c8:53:82:fb:0e:b1:4a:
                    a6:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:7E:C7:61:57:68:85:80:14:7E:5B:2F:F4:10:27:8D:00:68:CB:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9/6920a5d2-97bf-3fe2-a29e-10d959837927.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9/aa912e91-41d3-4894-893c-8de4f94175f9.crl

            X509v3 Authority Key Identifier:
                keyid:76:54:89:41:17:BD:71:F5:3E:44:87:AF:EB:98:7F:6D:B6:25:E6:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fe40:1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:7a:61:e5:56:54:3f:9e:80:19:58:14:53:60:65:81:7b:83:
         ab:89:2c:b0:dc:eb:c5:3e:00:68:8a:36:7e:63:df:fe:b3:4c:
         6f:f6:50:8c:4e:51:36:1b:27:8e:a5:bd:af:63:53:a0:50:e0:
         71:42:6d:2b:48:6d:19:9f:9e:88:f0:31:6b:1b:49:f0:84:99:
         e0:02:bc:0d:66:1f:69:5a:aa:94:6c:2c:37:fb:27:8a:2b:60:
         56:d7:c0:69:4d:16:80:b4:3f:f0:b7:6c:10:ce:1d:e5:78:a8:
         da:ba:c0:35:88:c3:74:9d:74:b2:17:7f:81:80:3c:cc:77:4a:
         3c:07:31:38:c5:84:9e:9b:93:37:ac:31:85:97:2b:c8:b0:a1:
         a2:d9:49:cb:97:ed:1a:d7:03:71:a2:6c:b5:ad:f6:5f:ce:39:
         22:5b:a8:2e:e2:85:ab:d2:98:b7:74:89:86:47:97:5f:4c:fe:
         9c:d7:e6:c6:2b:13:73:8f:c7:35:b7:da:ab:5e:ba:d2:df:20:
         54:6a:8d:1c:24:04:e1:9f:bf:8a:f5:48:b2:00:e1:ab:83:ca:
         bd:3a:b9:eb:05:c9:54:26:4b:65:68:ff:35:4b:2f:49:67:d6:
         40:24:e0:d4:85:e9:17:e7:7a:9a:e1:58:f7:2b:cc:a5:d2:c1:
         80:6b:24:13
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE6i39A/hhnwqK/8VAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWE5MTJlOTEtNDFkMy00ODk0LTg5M2MtOGRlNGY5NDE3
NWY5MB4XDTI2MDcyNzA5MDAxMloXDTI2MTAyNTA5MDAxMlowLzEtMCsGA1UEAxMk
NjFiMDkyZTQtYWNmMy00NjVkLWJhYTEtMzJhNzkzYWExNDc4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoTbShnV8DjNtSg4+o8MxZSJm+HhCRNWVd+u1
/t1/gorZWzyVfamgXJ03umYCTRK1kbgfo//+uv8uKnbWPxdyefQeIqF+FT2Oyek1
rF5FskM2VllNfkfUu+nX90J89sVx0X4QUglnAfTLxfHYUbaCBd6j8+QDnAuxPBP0
eYQpylrDAklcE2RXGjLZCRsUEgPHPAk6RF0QOodeLCRfooSog/hs6hjeK3QkQTvO
FF3fzslqJUTJ+jGu3XtPukfUZY297/JfcUtKtqd8el9ZatZKgBr8cUhUHagDRWIB
3M3pErLdTaCtV3mKNF5mXCxKw13pALsEPnPIKMhTgvsOsUqmAwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFGd+x2FXaIWAFH5bL/QQJ40AaMvqMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hYTkx
MmU5MS00MWQzLTQ4OTQtODkzYy04ZGU0Zjk0MTc1ZjkvNjkyMGE1ZDItOTdiZi0z
ZmUyLWEyOWUtMTBkOTU5ODM3OTI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYWE5MTJlOTEtNDFkMy00ODk0LTg5
M2MtOGRlNGY5NDE3NWY5L2FhOTEyZTkxLTQxZDMtNDg5NC04OTNjLThkZTRmOTQx
NzVmOS5jcmwwHwYDVR0jBBgwFoAUdlSJQRe9cfU+RIev65h/bbYl5lUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9hYTkxMmU5MS00MWQzLTQ4OTQtODkzYy04ZGU0
Zjk0MTc1ZjkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL+QAAB
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBADB6YeVWVD+egBlYFFNgZYF7g6uJLLDc68U+AGiKNn5j3/6zTG/2
UIxOUTYbJ46lva9jU6BQ4HFCbStIbRmfnojwMWsbSfCEmeACvA1mH2laqpRsLDf7
J4orYFbXwGlNFoC0P/C3bBDOHeV4qNq6wDWIw3SddLIXf4GAPMx3SjwHMTjFhJ6b
kzesMYWXK8iwoaLZScuX7RrXA3GibLWt9l/OOSJbqC7ihavSmLd0iYZHl19M/pzX
5sYrE3OPxzW32qteutLfIFRqjRwkBOGfv4r1SLIA4auDyr06uesFyVQmS2Vo/zVL
L0ln1kAk4NSF6RfneprhWPcrzKXSwYBrJBM=
-----END CERTIFICATE-----
Generated at Wed Jul 29 00:36:17 2026 by rpki-client