Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7a81e391-2f9f-43ac-a73e-e018e279c2d4/897e5bf9-2680-3976-86db-3f623fa56f40.roa
File:                     897e5bf9-2680-3976-86db-3f623fa56f40.roa (raw, json)
Hash identifier:          A01qkwMqRCDTvX0d7hE4XeiK0nSp8J1E1rlA/TRYmb4=
Subject key identifier:   40:CA:7E:06:15:9A:97:2E:F5:D0:7B:4A:A1:97:3A:1E:26:59:BE:2B
Certificate issuer:       /CN=7a81e391-2f9f-43ac-a73e-e018e279c2d4
Certificate serial:       010D0C9F4328584D8628CE3C32AB87ECE5B410C0
Authority key identifier: B3:B4:1C:AF:03:8E:97:E9:4E:5B:2F:D5:D1:EF:58:9C:29:ED:0F:4C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7a81e391-2f9f-43ac-a73e-e018e279c2d4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7a81e391-2f9f-43ac-a73e-e018e279c2d4/897e5bf9-2680-3976-86db-3f623fa56f40.roa
Signing time:             Thu 16 Apr 2026 09:22:07 +0000
ROA not before:           Thu 16 Apr 2026 09:22:07 +0000
ROA not after:            Wed 15 Jul 2026 09:22:07 +0000
asID:                     6517
IP address blocks:        2602:f5b0:10::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7a81e391-2f9f-43ac-a73e-e018e279c2d4/7a81e391-2f9f-43ac-a73e-e018e279c2d4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7a81e391-2f9f-43ac-a73e-e018e279c2d4/7a81e391-2f9f-43ac-a73e-e018e279c2d4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7a81e391-2f9f-43ac-a73e-e018e279c2d4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:86:28:ce:3c:32:ab:87:ec:e5:b4:10:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a81e391-2f9f-43ac-a73e-e018e279c2d4
        Validity
            Not Before: Apr 16 09:22:07 2026 GMT
            Not After : Jul 15 09:22:07 2026 GMT
        Subject: CN=c4613f62-cc63-4327-8bb9-b13e5f0dcad3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:1a:df:af:65:35:4f:04:3a:ff:9e:0d:dc:56:
                    ba:37:0b:4f:cb:82:a7:de:5e:00:5d:9f:40:6a:db:
                    6c:ef:a5:03:67:9a:e4:6d:63:7c:a4:65:b1:e4:4e:
                    13:73:b5:61:1d:77:1e:eb:c8:ed:d1:97:79:d2:13:
                    0a:c1:1d:86:45:96:a9:c6:f0:24:f6:a0:64:62:9e:
                    8b:85:b5:c8:c0:61:57:51:bb:ac:3c:fa:f8:54:4c:
                    27:aa:7b:f6:ab:63:58:f8:00:6e:84:45:bf:c5:6a:
                    bd:4c:02:31:ca:cf:56:24:e8:ae:9b:32:f8:a1:25:
                    23:b6:65:86:d1:79:74:a6:0a:14:47:05:aa:8a:6b:
                    61:0b:a4:65:78:e0:e9:58:35:46:b6:16:9d:fb:da:
                    e8:a9:13:03:2a:76:fc:e6:76:29:76:74:52:fc:32:
                    59:f0:a3:09:dd:e6:57:43:9b:90:62:67:6c:04:1b:
                    57:15:6b:81:ce:7c:d0:13:ca:68:78:49:fa:3d:2c:
                    e8:23:12:6a:bb:aa:1e:30:2b:c2:4c:00:d3:de:49:
                    81:69:50:5d:2a:6a:ab:01:0c:39:f4:68:27:50:5b:
                    b5:f5:fc:35:b4:ee:f0:05:c4:38:6c:79:93:d8:d1:
                    a4:33:6c:48:11:e5:91:1d:51:1a:0e:cf:9b:61:2b:
                    11:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:CA:7E:06:15:9A:97:2E:F5:D0:7B:4A:A1:97:3A:1E:26:59:BE:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7a81e391-2f9f-43ac-a73e-e018e279c2d4/897e5bf9-2680-3976-86db-3f623fa56f40.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7a81e391-2f9f-43ac-a73e-e018e279c2d4/7a81e391-2f9f-43ac-a73e-e018e279c2d4.crl

            X509v3 Authority Key Identifier:
                keyid:B3:B4:1C:AF:03:8E:97:E9:4E:5B:2F:D5:D1:EF:58:9C:29:ED:0F:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7a81e391-2f9f-43ac-a73e-e018e279c2d4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f5b0:10::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:11:79:96:d6:64:c6:ad:25:5a:55:5e:8d:f6:da:e3:50:07:
         8e:f4:de:db:e4:3b:05:07:6d:11:42:b0:5d:f7:72:f8:06:1a:
         5b:d1:fa:c2:1a:cf:8f:66:0e:a3:65:18:be:22:01:6f:47:1d:
         79:6c:95:bc:9f:72:bd:2c:3d:25:9b:2f:86:e9:e5:00:e2:47:
         bb:ce:c8:f9:67:b0:70:5a:51:84:05:30:d5:59:ef:a2:ad:a2:
         f1:d4:67:bd:ba:58:cb:61:d8:6b:0e:b5:d3:43:8c:45:ea:0a:
         f8:4a:46:db:79:bd:d8:3e:3d:ed:d3:31:6a:1c:58:8c:6e:96:
         22:f9:35:7e:29:b1:9c:06:53:74:15:36:d2:3c:de:22:3b:b8:
         6d:11:56:7e:74:a3:07:6c:6f:19:87:f6:02:aa:dd:af:fe:71:
         c9:05:bc:7b:43:bc:e3:c5:5a:c8:37:79:60:78:25:45:d5:e9:
         11:e2:7e:e7:ae:50:35:4d:e2:16:97:b0:18:0f:a2:2f:c3:3d:
         97:32:74:01:93:85:80:a7:61:0c:5b:02:89:75:40:09:30:d3:
         2b:04:07:f9:40:ba:d5:22:ba:02:18:1f:5d:41:9d:a3:d2:90:
         57:a1:13:17:c7:04:6c:09:49:d5:9f:20:45:2a:0d:13:20:a0:
         d5:31:d3:d5
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE2GKM48MquH7OW0EMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkN2E4MWUzOTEtMmY5Zi00M2FjLWE3M2UtZTAxOGUyNzlj
MmQ0MB4XDTI2MDQxNjA5MjIwN1oXDTI2MDcxNTA5MjIwN1owLzEtMCsGA1UEAxMk
YzQ2MTNmNjItY2M2My00MzI3LThiYjktYjEzZTVmMGRjYWQzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArBrfr2U1TwQ6/54N3Fa6NwtPy4Kn3l4AXZ9A
atts76UDZ5rkbWN8pGWx5E4Tc7VhHXce68jt0Zd50hMKwR2GRZapxvAk9qBkYp6L
hbXIwGFXUbusPPr4VEwnqnv2q2NY+ABuhEW/xWq9TAIxys9WJOiumzL4oSUjtmWG
0Xl0pgoURwWqimthC6RleODpWDVGthad+9roqRMDKnb85nYpdnRS/DJZ8KMJ3eZX
Q5uQYmdsBBtXFWuBznzQE8poeEn6PSzoIxJqu6oeMCvCTADT3kmBaVBdKmqrAQw5
9GgnUFu19fw1tO7wBcQ4bHmT2NGkM2xIEeWRHVEaDs+bYSsRJwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFEDKfgYVmpcu9dB7SqGXOh4mWb4rMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC83YTgx
ZTM5MS0yZjlmLTQzYWMtYTczZS1lMDE4ZTI3OWMyZDQvODk3ZTViZjktMjY4MC0z
OTc2LTg2ZGItM2Y2MjNmYTU2ZjQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k
MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvN2E4MWUzOTEtMmY5Zi00M2FjLWE3
M2UtZTAxOGUyNzljMmQ0LzdhODFlMzkxLTJmOWYtNDNhYy1hNzNlLWUwMThlMjc5
YzJkNC5jcmwwHwYDVR0jBBgwFoAUs7QcrwOOl+lOWy/V0e9YnCntD0wwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2
NS04MzA4LWRmMjU5N2UzNDNmOC83YTgxZTM5MS0yZjlmLTQzYWMtYTczZS1lMDE4
ZTI3OWMyZDQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL1sAAQ
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBABMReZbWZMatJVpVXo322uNQB4703tvkOwUHbRFCsF33cvgGGlvR
+sIaz49mDqNlGL4iAW9HHXlslbyfcr0sPSWbL4bp5QDiR7vOyPlnsHBaUYQFMNVZ
76KtovHUZ726WMth2GsOtdNDjEXqCvhKRtt5vdg+Pe3TMWocWIxuliL5NX4psZwG
U3QVNtI83iI7uG0RVn50owdsbxmH9gKq3a/+cckFvHtDvOPFWsg3eWB4JUXV6RHi
fueuUDVN4haXsBgPoi/DPZcydAGThYCnYQxbAol1QAkw0ysEB/lAutUiugIYH11B
naPSkFehExfHBGwJSdWfIEUqDRMgoNUx09U=
-----END CERTIFICATE-----
Generated at Fri Apr 17 05:01:12 2026 by rpki-client