Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/74d22a1a-fc42-41ba-92e0-a233913b3c86/f145100c-8b42-3aee-8d94-34fbf0d93af1.roa
File:                     f145100c-8b42-3aee-8d94-34fbf0d93af1.roa (raw, json)
Hash identifier:          TRaUVdk3QERFjVz+tiH9BnPEmvfRyw5roeYVlu+1jkY=
Subject key identifier:   CA:12:60:DC:18:82:4A:65:2E:90:12:06:11:9F:3C:1F:72:82:CF:88
Certificate issuer:       /CN=74d22a1a-fc42-41ba-92e0-a233913b3c86
Certificate serial:       010D0C9F4328584E6477DE1B41D078830A878200
Authority key identifier: C3:D3:22:A9:74:F7:21:7C:96:FA:3E:27:A6:90:34:74:A6:75:8B:DD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/74d22a1a-fc42-41ba-92e0-a233913b3c86.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/74d22a1a-fc42-41ba-92e0-a233913b3c86/f145100c-8b42-3aee-8d94-34fbf0d93af1.roa
Signing time:             Sun 05 Jul 2026 00:30:52 +0000
ROA not before:           Sun 05 Jul 2026 00:30:52 +0000
ROA not after:            Sat 03 Oct 2026 00:30:52 +0000
asID:                     14618
IP address blocks:        2602:81d:e002::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/74d22a1a-fc42-41ba-92e0-a233913b3c86/74d22a1a-fc42-41ba-92e0-a233913b3c86.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/74d22a1a-fc42-41ba-92e0-a233913b3c86/74d22a1a-fc42-41ba-92e0-a233913b3c86.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/74d22a1a-fc42-41ba-92e0-a233913b3c86.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 Jul 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:64:77:de:1b:41:d0:78:83:0a:87:82:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74d22a1a-fc42-41ba-92e0-a233913b3c86
        Validity
            Not Before: Jul  5 00:30:52 2026 GMT
            Not After : Oct  3 00:30:52 2026 GMT
        Subject: CN=28f173f2-45e0-4d28-bb4e-81175d4dc1aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:77:38:f8:b0:93:22:ef:0a:0f:fb:3e:fd:dd:
                    b9:21:c2:78:3b:c4:91:a0:7e:c4:1a:77:9b:21:64:
                    8f:0e:43:1e:45:92:60:ac:9c:e4:83:c7:8d:ed:25:
                    42:44:9b:52:2f:cf:cd:b6:78:3a:d5:42:f2:8a:b1:
                    2f:b2:a5:63:56:f5:dd:08:7b:60:e1:24:60:20:98:
                    3c:4f:e4:aa:9a:9c:fb:c2:db:59:4c:33:62:9b:58:
                    33:0b:1d:8f:f5:27:da:52:fc:83:ee:bd:86:fb:6f:
                    8f:61:f3:19:52:5f:5d:62:9c:74:f1:f2:f6:5c:42:
                    32:e4:33:67:40:99:13:2e:d0:c3:9d:8c:b9:81:b5:
                    02:dd:b5:e2:d3:9f:32:76:91:5a:d6:2c:6b:33:6c:
                    95:be:60:2f:cd:12:2e:91:57:7e:f4:dc:e5:30:b5:
                    10:c0:b6:c7:1e:95:e3:46:e4:6f:3d:25:2b:47:ca:
                    61:0d:e4:f0:21:b4:e8:62:3f:8b:b3:1f:1c:7b:20:
                    73:b5:ec:19:06:dc:5a:e0:82:43:5b:70:9d:83:82:
                    a8:c5:ba:af:26:41:02:29:f0:d9:f0:44:0f:41:c0:
                    6a:b6:a8:8c:9c:c7:34:ac:1d:c8:d4:57:4f:8d:99:
                    13:0b:77:f1:0a:82:08:c5:86:fe:dc:54:ce:7a:2f:
                    7c:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:12:60:DC:18:82:4A:65:2E:90:12:06:11:9F:3C:1F:72:82:CF:88
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/74d22a1a-fc42-41ba-92e0-a233913b3c86/f145100c-8b42-3aee-8d94-34fbf0d93af1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/74d22a1a-fc42-41ba-92e0-a233913b3c86/74d22a1a-fc42-41ba-92e0-a233913b3c86.crl

            X509v3 Authority Key Identifier:
                keyid:C3:D3:22:A9:74:F7:21:7C:96:FA:3E:27:A6:90:34:74:A6:75:8B:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/74d22a1a-fc42-41ba-92e0-a233913b3c86.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:81d:e002::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:61:5c:f0:93:13:3f:35:20:22:e9:62:ae:16:01:61:f2:a1:
         3f:58:ec:a2:ec:44:4a:9b:a0:0f:07:ba:46:de:2c:36:bb:ad:
         24:50:0c:da:cf:18:d6:26:00:fc:70:fa:b6:5d:9b:90:14:81:
         a0:e9:08:9a:be:99:d6:e9:ea:55:84:1c:51:cf:4d:1f:1b:bd:
         9f:09:77:6e:e0:6c:a1:56:f1:c3:a2:cc:7f:8c:4b:ec:a0:76:
         0d:1b:5f:23:65:fe:39:16:f6:71:c0:87:ce:11:e8:a3:a3:6c:
         01:94:90:07:4a:5e:0f:1a:43:08:13:d4:c7:34:f9:98:00:24:
         ef:2b:9c:91:75:7f:18:e5:1a:bc:16:59:d9:93:5f:8c:c4:e6:
         5c:a9:77:51:f5:4c:1a:3f:5b:90:94:ca:60:ee:33:8a:fd:c0:
         a4:99:fb:27:eb:aa:7b:63:df:75:a4:12:c5:fe:ff:31:0a:43:
         ae:e9:af:b3:ba:2f:5d:74:23:0e:59:76:b5:e0:d5:0e:82:04:
         b2:41:da:51:aa:58:14:a8:05:a9:c2:e7:12:5d:07:ae:ba:f9:
         ed:72:d6:1f:b1:00:c0:67:28:63:45:a6:a1:55:0c:49:2c:6c:
         b4:0a:c1:0c:2e:97:88:6e:b3:43:ec:e8:2b:e9:38:3d:6a:bc:
         b2:8c:60:d8
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE5kd94bQdB4gwqHggAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzRkMjJhMWEtZmM0Mi00MWJhLTkyZTAtYTIzMzkxM2Iz
Yzg2MB4XDTI2MDcwNTAwMzA1MloXDTI2MTAwMzAwMzA1MlowLzEtMCsGA1UEAxMk
MjhmMTczZjItNDVlMC00ZDI4LWJiNGUtODExNzVkNGRjMWFhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnnc4+LCTIu8KD/s+/d25IcJ4O8SRoH7EGneb
IWSPDkMeRZJgrJzkg8eN7SVCRJtSL8/Ntng61ULyirEvsqVjVvXdCHtg4SRgIJg8
T+Sqmpz7wttZTDNim1gzCx2P9SfaUvyD7r2G+2+PYfMZUl9dYpx08fL2XEIy5DNn
QJkTLtDDnYy5gbUC3bXi058ydpFa1ixrM2yVvmAvzRIukVd+9NzlMLUQwLbHHpXj
RuRvPSUrR8phDeTwIbToYj+Lsx8ceyBztewZBtxa4IJDW3Cdg4KoxbqvJkECKfDZ
8EQPQcBqtqiMnMc0rB3I1FdPjZkTC3fxCoIIxYb+3FTOei98uQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFMoSYNwYgkplLpASBhGfPB9ygs+IMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi83NGQy
MmExYS1mYzQyLTQxYmEtOTJlMC1hMjMzOTEzYjNjODYvZjE0NTEwMGMtOGI0Mi0z
YWVlLThkOTQtMzRmYmYwZDkzYWYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05
YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvNzRkMjJhMWEtZmM0Mi00MWJhLTky
ZTAtYTIzMzkxM2IzYzg2Lzc0ZDIyYTFhLWZjNDItNDFiYS05MmUwLWEyMzM5MTNi
M2M4Ni5jcmwwHwYDVR0jBBgwFoAUw9MiqXT3IXyW+j4nppA0dKZ1i90wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz
OS05NDBmLWJlMjczZDljMGI2Mi83NGQyMmExYS1mYzQyLTQxYmEtOTJlMC1hMjMz
OTEzYjNjODYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgIIHeAC
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAGphXPCTEz81ICLpYq4WAWHyoT9Y7KLsREqboA8HukbeLDa7rSRQ
DNrPGNYmAPxw+rZdm5AUgaDpCJq+mdbp6lWEHFHPTR8bvZ8Jd27gbKFW8cOizH+M
S+ygdg0bXyNl/jkW9nHAh84R6KOjbAGUkAdKXg8aQwgT1Mc0+ZgAJO8rnJF1fxjl
GrwWWdmTX4zE5lypd1H1TBo/W5CUymDuM4r9wKSZ+yfrqntj33WkEsX+/zEKQ67p
r7O6L110Iw5ZdrXg1Q6CBLJB2lGqWBSoBanC5xJdB666+e1y1h+xAMBnKGNFpqFV
DEksbLQKwQwul4hus0Ps6CvpOD1qvLKMYNg=
-----END CERTIFICATE-----
Generated at Mon Jul 6 18:15:40 2026 by rpki-client