Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa/df287de6-1914-3cd7-888e-504ff51dd500.roa
File:                     df287de6-1914-3cd7-888e-504ff51dd500.roa (raw, json)
Hash identifier:          42V2kNZfMgeSrdIU5mb2OSgQmHqxLujZc/avMUH2Dxk=
Subject key identifier:   CD:FA:38:FE:78:2A:74:B3:EB:CA:53:F7:78:59:74:1E:25:CE:BB:88
Certificate issuer:       /CN=f7798abb-711d-4f10-bc46-bceed055e1fa
Certificate serial:       010D0C9F4328584DD09056305CF7BFCAB73C9D40
Authority key identifier: CC:90:3D:D7:AA:39:05:EC:E7:35:08:AC:CB:45:F4:6E:65:BC:1D:E1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa/df287de6-1914-3cd7-888e-504ff51dd500.roa
Signing time:             Wed 13 May 2026 01:00:24 +0000
ROA not before:           Wed 13 May 2026 01:00:24 +0000
ROA not after:            Tue 11 Aug 2026 01:00:24 +0000
asID:                     23470
IP address blocks:        2602:fb54:149::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa/f7798abb-711d-4f10-bc46-bceed055e1fa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa/f7798abb-711d-4f10-bc46-bceed055e1fa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:d0:90:56:30:5c:f7:bf:ca:b7:3c:9d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f7798abb-711d-4f10-bc46-bceed055e1fa
        Validity
            Not Before: May 13 01:00:24 2026 GMT
            Not After : Aug 11 01:00:24 2026 GMT
        Subject: CN=f57d7c93-927e-4e04-aaba-b9f6286e5816
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:43:e2:ef:6a:ce:16:b5:a9:e2:9d:bf:07:69:
                    b1:2a:af:20:36:ce:cb:49:32:87:0c:4f:84:d0:5c:
                    93:97:ba:c8:93:33:2d:60:85:9b:50:d0:13:54:57:
                    21:ae:ed:71:56:da:01:8b:c1:f6:bc:6e:43:c6:18:
                    54:46:00:43:1e:0b:36:b8:dc:7c:3c:62:fb:00:61:
                    64:69:b5:29:fd:32:ed:a3:eb:f7:9c:04:e0:71:16:
                    e3:85:ce:0a:77:f0:08:2b:7b:8e:7a:56:ba:56:e9:
                    d0:e8:f5:1c:29:79:9d:db:02:46:ec:f2:a7:ff:fc:
                    60:b2:28:41:48:c6:33:91:59:a7:91:f3:a5:ab:f6:
                    30:2a:8c:ca:74:9d:c2:ce:71:e2:b5:bd:5e:c5:43:
                    95:76:37:8d:c5:c4:f4:72:bb:29:eb:b4:7d:6f:31:
                    5a:76:b3:18:80:bf:35:ef:da:a6:ca:07:1b:7d:00:
                    2f:d6:1f:01:94:2a:51:fc:7a:11:14:12:d1:9f:18:
                    6e:d9:5d:8c:76:bc:8a:68:4b:3e:3f:b3:19:e5:1d:
                    ba:e2:9b:ef:d5:41:d5:f3:75:24:02:24:ca:61:f2:
                    c4:b0:0b:28:29:e1:0e:86:56:36:e9:91:b2:c0:a9:
                    d4:9a:8b:f0:1e:cf:4a:61:fc:14:98:5c:d8:48:f5:
                    0a:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:FA:38:FE:78:2A:74:B3:EB:CA:53:F7:78:59:74:1E:25:CE:BB:88
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa/df287de6-1914-3cd7-888e-504ff51dd500.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa/f7798abb-711d-4f10-bc46-bceed055e1fa.crl

            X509v3 Authority Key Identifier:
                keyid:CC:90:3D:D7:AA:39:05:EC:E7:35:08:AC:CB:45:F4:6E:65:BC:1D:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fb54:149::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:d9:16:89:f9:48:5e:88:21:c8:e1:a5:ce:b1:20:ec:1d:ea:
         f7:70:b3:98:b7:e9:17:99:40:de:e9:fc:ca:11:c2:5d:b2:44:
         3b:f1:5d:8a:cf:2c:d0:e5:79:27:09:1f:c2:67:7e:d6:f1:2f:
         6d:8d:1d:87:b2:69:c8:6c:6d:a5:20:22:a4:5b:47:3c:7d:ac:
         7c:2d:f1:1e:3c:20:70:f3:1d:8a:bb:f0:dd:b9:77:fe:a5:ed:
         73:32:3d:15:ec:65:d8:af:c7:68:68:c0:de:20:d4:91:89:a5:
         ca:e0:7c:dd:25:07:11:bb:a1:6f:af:91:f7:26:84:5b:d5:44:
         15:59:6c:c0:20:b2:8a:9e:44:cb:7f:1e:e9:52:da:1a:cf:33:
         5d:dd:25:01:45:4b:96:58:40:d5:ce:b0:15:1f:c1:06:a6:04:
         e6:5a:7e:4c:1f:dd:67:1b:eb:55:e1:a5:62:35:3a:b6:a9:15:
         0e:7a:2a:14:75:fe:2b:39:eb:58:4f:f2:0f:1d:5f:09:dc:18:
         e3:42:c0:d3:4f:3c:96:f3:55:5d:36:9b:52:55:75:1e:3c:d6:
         e1:b6:c5:93:00:a9:46:09:ab:ac:d5:35:c8:fe:93:ed:22:ab:
         f9:22:9b:ae:39:f2:84:72:9a:22:5e:62:24:23:92:72:80:90:
         0a:49:50:d5
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE3QkFYwXPe/yrc8nUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjc3OThhYmItNzExZC00ZjEwLWJjNDYtYmNlZWQwNTVl
MWZhMB4XDTI2MDUxMzAxMDAyNFoXDTI2MDgxMTAxMDAyNFowLzEtMCsGA1UEAxMk
ZjU3ZDdjOTMtOTI3ZS00ZTA0LWFhYmEtYjlmNjI4NmU1ODE2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi0Pi72rOFrWp4p2/B2mxKq8gNs7LSTKHDE+E
0FyTl7rIkzMtYIWbUNATVFchru1xVtoBi8H2vG5DxhhURgBDHgs2uNx8PGL7AGFk
abUp/TLto+v3nATgcRbjhc4Kd/AIK3uOela6VunQ6PUcKXmd2wJG7PKn//xgsihB
SMYzkVmnkfOlq/YwKozKdJ3CznHitb1exUOVdjeNxcT0crsp67R9bzFadrMYgL81
79qmygcbfQAv1h8BlCpR/HoRFBLRnxhu2V2MdryKaEs+P7MZ5R264pvv1UHV83Uk
AiTKYfLEsAsoKeEOhlY26ZGywKnUmovwHs9KYfwUmFzYSPUKBwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFM36OP54KnSz68pT93hZdB4lzruIMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9mNzc5
OGFiYi03MTFkLTRmMTAtYmM0Ni1iY2VlZDA1NWUxZmEvZGYyODdkZTYtMTkxNC0z
Y2Q3LTg4OGUtNTA0ZmY1MWRkNTAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZjc3OThhYmItNzExZC00ZjEwLWJj
NDYtYmNlZWQwNTVlMWZhL2Y3Nzk4YWJiLTcxMWQtNGYxMC1iYzQ2LWJjZWVkMDU1
ZTFmYS5jcmwwHwYDVR0jBBgwFoAUzJA916o5BeznNQisy0X0bmW8HeEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9mNzc5OGFiYi03MTFkLTRmMTAtYmM0Ni1iY2Vl
ZDA1NWUxZmEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL7VAFJ
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAHDZFon5SF6IIcjhpc6xIOwd6vdws5i36ReZQN7p/MoRwl2yRDvx
XYrPLNDleScJH8JnftbxL22NHYeyachsbaUgIqRbRzx9rHwt8R48IHDzHYq78N25
d/6l7XMyPRXsZdivx2howN4g1JGJpcrgfN0lBxG7oW+vkfcmhFvVRBVZbMAgsoqe
RMt/HulS2hrPM13dJQFFS5ZYQNXOsBUfwQamBOZafkwf3Wcb61XhpWI1OrapFQ56
KhR1/is561hP8g8dXwncGONCwNNPPJbzVV02m1JVdR481uG2xZMAqUYJq6zVNcj+
k+0iq/kim6458oRymiJeYiQjknKAkApJUNU=
-----END CERTIFICATE-----
Generated at Wed May 13 16:21:20 2026 by rpki-client