Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a42c5795-954d-468f-9deb-7f3ab63c11dd/a547e87a-0aa1-34fa-bbf0-192a72d66039.roa
File:                     a547e87a-0aa1-34fa-bbf0-192a72d66039.roa (raw, json)
Hash identifier:          CK8k0yyuij05DIRu33c5VtHa3KeqcPvPnA6fR2XtmO4=
Subject key identifier:   B7:B1:E7:E8:87:68:AB:FE:F7:B8:41:FE:94:26:1F:3E:82:7D:A2:2A
Certificate issuer:       /CN=a42c5795-954d-468f-9deb-7f3ab63c11dd
Certificate serial:       010D0C9F4328584EFF7774DED8BC2FE7539C6640
Authority key identifier: 85:0F:43:17:4E:E3:DC:C6:CF:1E:7A:58:D6:7C:8B:82:F1:17:DC:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a42c5795-954d-468f-9deb-7f3ab63c11dd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a42c5795-954d-468f-9deb-7f3ab63c11dd/a547e87a-0aa1-34fa-bbf0-192a72d66039.roa
Signing time:             Sat 29 Aug 2026 13:00:12 +0000
ROA not before:           Sat 29 Aug 2026 13:00:12 +0000
ROA not after:            Fri 27 Nov 2026 14:00:12 +0000
asID:                     399980
IP address blocks:        2602:fd10:e00::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a42c5795-954d-468f-9deb-7f3ab63c11dd/a42c5795-954d-468f-9deb-7f3ab63c11dd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a42c5795-954d-468f-9deb-7f3ab63c11dd/a42c5795-954d-468f-9deb-7f3ab63c11dd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a42c5795-954d-468f-9deb-7f3ab63c11dd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 Oct 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ff:77:74:de:d8:bc:2f:e7:53:9c:66:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a42c5795-954d-468f-9deb-7f3ab63c11dd
        Validity
            Not Before: Aug 29 13:00:12 2026 GMT
            Not After : Nov 27 14:00:12 2026 GMT
        Subject: CN=2bd56f2c-4d04-40de-bb15-2eeb0cbb73bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:df:07:22:6a:01:8e:ad:15:c4:c1:d1:43:d7:
                    43:b2:07:89:a4:44:74:e5:69:25:40:f0:bc:8c:66:
                    29:72:66:a5:ec:c2:a1:ba:66:cb:44:bd:4b:10:30:
                    1b:1a:73:90:b9:cc:e1:9e:bc:79:7a:c3:86:ac:96:
                    23:8e:72:9c:3d:92:89:94:32:53:d4:75:ff:8e:73:
                    54:db:16:04:a9:a9:44:df:f5:d6:a5:d6:35:95:e5:
                    fe:12:31:20:51:51:44:fc:83:07:56:c0:29:17:36:
                    69:94:5c:cc:9c:25:21:b9:94:6b:92:9f:79:f0:a3:
                    15:8a:8f:92:1a:e8:20:96:86:21:f4:7e:d7:1a:7b:
                    78:67:8c:b9:dc:35:aa:d9:12:f1:b1:05:c2:86:c1:
                    a0:f5:c1:68:ed:d4:9d:32:53:6d:3f:c1:a0:ef:5b:
                    ba:94:6a:74:45:47:6a:ac:fe:a1:f3:d0:d9:36:62:
                    1e:b1:f5:60:a1:f5:d8:e3:9d:7d:15:15:4c:c0:f9:
                    b5:a8:cc:6c:5a:69:91:37:28:7f:f1:6e:01:91:4b:
                    05:1d:ab:16:4c:05:db:13:71:5d:6d:23:33:8e:b0:
                    7b:1d:02:20:86:ae:b7:8f:5d:6a:e6:30:d2:d9:90:
                    78:92:36:10:1f:47:e1:df:45:ff:f7:1a:dc:34:da:
                    6e:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:B1:E7:E8:87:68:AB:FE:F7:B8:41:FE:94:26:1F:3E:82:7D:A2:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a42c5795-954d-468f-9deb-7f3ab63c11dd/a547e87a-0aa1-34fa-bbf0-192a72d66039.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a42c5795-954d-468f-9deb-7f3ab63c11dd/a42c5795-954d-468f-9deb-7f3ab63c11dd.crl

            X509v3 Authority Key Identifier:
                keyid:85:0F:43:17:4E:E3:DC:C6:CF:1E:7A:58:D6:7C:8B:82:F1:17:DC:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a42c5795-954d-468f-9deb-7f3ab63c11dd.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fd10:e00::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:c7:c4:51:03:5e:52:6a:38:97:d8:f1:0b:8b:9e:f1:da:e3:
         96:70:11:7e:60:51:c3:5a:1b:1a:66:e5:a3:22:ad:c7:6e:67:
         fb:14:d4:6c:57:b5:ee:ce:b8:b1:19:7d:c1:54:cc:1b:24:9c:
         d7:1f:e7:f2:ae:9a:88:bc:fe:d7:9b:f0:1d:d2:dc:aa:f5:e8:
         33:79:78:fc:88:63:55:53:d5:5d:29:fb:5f:d5:ab:36:7a:34:
         c3:b9:83:19:ae:8b:73:e1:08:4e:5e:88:fb:37:8c:51:7b:ef:
         65:c9:ea:be:3d:55:99:3b:79:04:b6:d1:f4:ff:03:5b:2d:cf:
         e2:9b:84:8a:3d:23:05:3b:b2:1f:b9:7e:ef:d1:80:8b:ac:27:
         9a:a8:91:35:86:ee:ae:25:b3:01:be:b5:20:3b:10:9b:cc:1e:
         7d:97:e0:68:cf:a2:96:4f:c8:1c:12:7d:22:0c:95:fa:c3:38:
         df:98:0a:3d:35:17:89:00:98:84:a6:54:d6:72:46:8f:1d:54:
         38:1f:89:1a:d6:42:af:d2:ba:46:7b:e9:b3:b3:2d:ae:ee:a1:
         5f:04:ab:88:c4:16:81:dd:33:05:1c:17:6e:96:f4:2e:88:eb:
         74:e2:86:76:57:4a:ca:97:88:c2:31:5b:2b:4f:94:2e:e4:9f:
         fd:3d:62:5e
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE7/d3Te2Lwv51OcZkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTQyYzU3OTUtOTU0ZC00NjhmLTlkZWItN2YzYWI2M2Mx
MWRkMB4XDTI2MDgyOTEzMDAxMloXDTI2MTEyNzE0MDAxMlowLzEtMCsGA1UEAxMk
MmJkNTZmMmMtNGQwNC00MGRlLWJiMTUtMmVlYjBjYmI3M2JmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqN8HImoBjq0VxMHRQ9dDsgeJpER05WklQPC8
jGYpcmal7MKhumbLRL1LEDAbGnOQuczhnrx5esOGrJYjjnKcPZKJlDJT1HX/jnNU
2xYEqalE3/XWpdY1leX+EjEgUVFE/IMHVsApFzZplFzMnCUhuZRrkp958KMVio+S
GuggloYh9H7XGnt4Z4y53DWq2RLxsQXChsGg9cFo7dSdMlNtP8Gg71u6lGp0RUdq
rP6h89DZNmIesfVgofXY4519FRVMwPm1qMxsWmmRNyh/8W4BkUsFHasWTAXbE3Fd
bSMzjrB7HQIghq63j11q5jDS2ZB4kjYQH0fh30X/9xrcNNpuhQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFLex5+iHaKv+97hB/pQmHz6CfaIqMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9hNDJj
NTc5NS05NTRkLTQ2OGYtOWRlYi03ZjNhYjYzYzExZGQvYTU0N2U4N2EtMGFhMS0z
NGZhLWJiZjAtMTkyYTcyZDY2MDM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYTQyYzU3OTUtOTU0ZC00NjhmLTlk
ZWItN2YzYWI2M2MxMWRkL2E0MmM1Nzk1LTk1NGQtNDY4Zi05ZGViLTdmM2FiNjNj
MTFkZC5jcmwwHwYDVR0jBBgwFoAUhQ9DF07j3MbPHnpY1nyLgvEX3HAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9hNDJjNTc5NS05NTRkLTQ2OGYtOWRlYi03ZjNh
YjYzYzExZGQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL9EA4w
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAWsfEUQNeUmo4l9jxC4ue8drjlnARfmBRw1obGmbloyKtx25n+xTU
bFe17s64sRl9wVTMGySc1x/n8q6aiLz+15vwHdLcqvXoM3l4/IhjVVPVXSn7X9Wr
Nno0w7mDGa6Lc+EITl6I+zeMUXvvZcnqvj1VmTt5BLbR9P8DWy3P4puEij0jBTuy
H7l+79GAi6wnmqiRNYburiWzAb61IDsQm8wefZfgaM+ilk/IHBJ9IgyV+sM435gK
PTUXiQCYhKZU1nJGjx1UOB+JGtZCr9K6Rnvps7Mtru6hXwSriMQWgd0zBRwXbpb0
LojrdOKGdldKypeIwjFbK0+ULuSf/T1iXg==
-----END CERTIFICATE-----
Generated at Thu Oct 8 19:01:11 2026 by rpki-client