Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d9aab8b4-16b6-4ccb-befe-b6d79a384b26/49786e0d-d30d-38f3-b079-274e8e93533c.roa
File:                     49786e0d-d30d-38f3-b079-274e8e93533c.roa (raw, json)
Hash identifier:          MCnXHv915ZAkte3NnbvgEAL77GL+w0vnIcKhhdpmfHs=
Subject key identifier:   A3:EC:E4:42:09:CB:97:88:FB:E0:EA:81:71:7D:FB:DE:1D:D0:77:11
Certificate issuer:       /CN=d9aab8b4-16b6-4ccb-befe-b6d79a384b26
Certificate serial:       010D0C9F4328584F5C0E68160A9333B716072C84
Authority key identifier: 9A:1E:CE:C2:A8:64:6C:6D:EC:A1:85:90:FF:24:B5:A0:B2:44:21:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d9aab8b4-16b6-4ccb-befe-b6d79a384b26.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d9aab8b4-16b6-4ccb-befe-b6d79a384b26/49786e0d-d30d-38f3-b079-274e8e93533c.roa
Signing time:             Thu 01 Oct 2026 16:58:51 +0000
ROA not before:           Thu 01 Oct 2026 16:58:51 +0000
ROA not after:            Wed 30 Dec 2026 17:58:51 +0000
asID:                     393699
IP address blocks:        2602:ff96:4::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d9aab8b4-16b6-4ccb-befe-b6d79a384b26/d9aab8b4-16b6-4ccb-befe-b6d79a384b26.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d9aab8b4-16b6-4ccb-befe-b6d79a384b26/d9aab8b4-16b6-4ccb-befe-b6d79a384b26.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d9aab8b4-16b6-4ccb-befe-b6d79a384b26.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 31 Oct 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:5c:0e:68:16:0a:93:33:b7:16:07:2c:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9aab8b4-16b6-4ccb-befe-b6d79a384b26
        Validity
            Not Before: Oct  1 16:58:51 2026 GMT
            Not After : Dec 30 17:58:51 2026 GMT
        Subject: CN=edbd253c-215f-4d68-a10e-a1b6c1578c1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:39:b7:36:5b:b4:11:54:12:53:80:e5:19:22:
                    9c:a5:3c:ab:53:57:6c:1d:e0:cd:d5:30:4a:4a:9e:
                    1e:ba:12:5e:3b:f8:0f:be:48:3c:b0:72:c7:84:84:
                    75:91:04:d4:a6:2d:7d:46:1d:09:d8:15:b6:25:39:
                    58:9a:fa:f6:6c:2c:e8:58:26:ce:82:3e:ba:6a:c5:
                    64:10:3f:df:c3:fd:7c:0f:60:5b:20:5b:5e:1b:30:
                    50:68:2d:ce:ed:42:9f:a2:8c:66:3f:8a:20:5c:72:
                    df:ab:c3:b1:1f:3c:5b:a2:80:c3:f1:ab:1c:f5:d3:
                    cb:31:5c:6d:5d:1e:95:e3:ea:a6:bb:f4:a9:95:79:
                    46:21:cd:e9:ca:3c:e4:73:96:b5:d9:bb:27:85:03:
                    e7:fd:49:1b:46:d5:5b:c9:32:a6:c8:e8:b2:6d:75:
                    10:af:f4:2f:1c:3a:cb:08:ee:cc:58:00:d1:c1:db:
                    37:23:d6:a2:d0:97:45:4f:2c:0a:d2:ef:97:cd:7b:
                    3c:3e:99:cb:66:d8:26:f7:66:df:2c:9f:af:d5:d5:
                    8b:58:80:15:6b:3f:18:6c:01:d5:97:e3:91:24:ce:
                    47:a6:df:99:d1:7e:6c:d9:34:bc:63:d7:b4:82:88:
                    ed:ea:f6:31:d4:52:d6:0c:c2:81:c6:48:fe:dc:1a:
                    8a:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:EC:E4:42:09:CB:97:88:FB:E0:EA:81:71:7D:FB:DE:1D:D0:77:11
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d9aab8b4-16b6-4ccb-befe-b6d79a384b26/49786e0d-d30d-38f3-b079-274e8e93533c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d9aab8b4-16b6-4ccb-befe-b6d79a384b26/d9aab8b4-16b6-4ccb-befe-b6d79a384b26.crl

            X509v3 Authority Key Identifier:
                keyid:9A:1E:CE:C2:A8:64:6C:6D:EC:A1:85:90:FF:24:B5:A0:B2:44:21:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d9aab8b4-16b6-4ccb-befe-b6d79a384b26.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:ff96:4::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:22:89:8d:dd:78:d1:cd:60:a0:9c:f9:2e:2b:dc:a7:58:1c:
         e7:86:5f:84:dd:35:be:38:57:46:b1:4a:43:d2:5f:12:1f:db:
         7b:b7:2b:84:78:90:33:bc:87:13:5a:fc:8a:1f:7f:25:1a:60:
         17:a3:c0:f1:83:5d:f7:8a:86:34:ca:ae:76:66:94:ad:ea:e4:
         78:87:17:66:4f:ca:0f:b0:3b:af:77:9b:ff:ab:bd:3e:32:84:
         13:d9:a7:dd:9e:e0:5d:74:c2:90:31:ef:5b:89:a2:87:37:57:
         d0:07:e0:ae:1c:7b:cd:5c:3b:8e:33:cf:ae:b5:39:15:f6:b7:
         07:48:0e:4e:8e:e4:1a:44:32:68:d0:d0:f0:48:21:b2:f8:73:
         99:9f:2e:c9:8f:e4:20:12:1e:56:0b:7b:b4:58:fb:43:8a:8f:
         f8:2b:86:ca:ca:e1:23:7b:91:35:34:25:3f:39:e7:08:19:73:
         ad:d0:e1:4d:63:16:5c:92:e3:62:82:d4:f6:ae:35:6b:2a:45:
         8d:57:7e:b0:58:36:1d:23:d7:70:13:c0:0d:93:ac:ab:e9:29:
         bb:a7:63:03:ef:d1:bc:94:ba:32:85:23:a5:06:33:2e:7c:d2:
         ab:8d:70:5b:ff:f3:07:90:98:e0:13:7f:41:cc:80:06:eb:e7:
         0b:b4:40:11
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9cDmgWCpMztxYHLIQwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDlhYWI4YjQtMTZiNi00Y2NiLWJlZmUtYjZkNzlhMzg0
YjI2MB4XDTI2MTAwMTE2NTg1MVoXDTI2MTIzMDE3NTg1MVowLzEtMCsGA1UEAxMk
ZWRiZDI1M2MtMjE1Zi00ZDY4LWExMGUtYTFiNmMxNTc4YzFiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArDm3Nlu0EVQSU4DlGSKcpTyrU1dsHeDN1TBK
Sp4euhJeO/gPvkg8sHLHhIR1kQTUpi19Rh0J2BW2JTlYmvr2bCzoWCbOgj66asVk
ED/fw/18D2BbIFteGzBQaC3O7UKfooxmP4ogXHLfq8OxHzxbooDD8asc9dPLMVxt
XR6V4+qmu/SplXlGIc3pyjzkc5a12bsnhQPn/UkbRtVbyTKmyOiybXUQr/QvHDrL
CO7MWADRwds3I9ai0JdFTywK0u+XzXs8PpnLZtgm92bfLJ+v1dWLWIAVaz8YbAHV
l+ORJM5Hpt+Z0X5s2TS8Y9e0gojt6vYx1FLWDMKBxkj+3BqKzQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFKPs5EIJy5eI++DqgXF9+94d0HcRMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9kOWFh
YjhiNC0xNmI2LTRjY2ItYmVmZS1iNmQ3OWEzODRiMjYvNDk3ODZlMGQtZDMwZC0z
OGYzLWIwNzktMjc0ZThlOTM1MzNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZDlhYWI4YjQtMTZiNi00Y2NiLWJl
ZmUtYjZkNzlhMzg0YjI2L2Q5YWFiOGI0LTE2YjYtNGNjYi1iZWZlLWI2ZDc5YTM4
NGIyNi5jcmwwHwYDVR0jBBgwFoAUmh7OwqhkbG3soYWQ/yS1oLJEIckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy9kOWFhYjhiNC0xNmI2LTRjY2ItYmVmZS1iNmQ3
OWEzODRiMjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL/lgAE
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAAoiiY3deNHNYKCc+S4r3KdYHOeGX4TdNb44V0axSkPSXxIf23u3
K4R4kDO8hxNa/IoffyUaYBejwPGDXfeKhjTKrnZmlK3q5HiHF2ZPyg+wO693m/+r
vT4yhBPZp92e4F10wpAx71uJooc3V9AH4K4ce81cO44zz661ORX2twdIDk6O5BpE
MmjQ0PBIIbL4c5mfLsmP5CASHlYLe7RY+0OKj/grhsrK4SN7kTU0JT855wgZc63Q
4U1jFlyS42KC1PauNWsqRY1XfrBYNh0j13ATwA2TrKvpKbunYwPv0byUujKFI6UG
My580quNcFv/8weQmOATf0HMgAbr5wu0QBE=
-----END CERTIFICATE-----
Generated at Fri Oct 30 10:03:01 2026 by rpki-client