Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2775f7c3-c238-47d5-98c9-835a28d9095e/4bdf525f-c871-3e38-b3fc-adc51096b141.roa
File:                     4bdf525f-c871-3e38-b3fc-adc51096b141.roa (raw, json)
Hash identifier:          B4V+BnuwLuHK14/exESfDKsrNDJePEEReCUHqmt32ZQ=
Subject key identifier:   76:7E:3F:12:81:BE:1B:B3:1A:86:33:88:27:32:FC:3F:CE:C2:C3:43
Certificate issuer:       /CN=2775f7c3-c238-47d5-98c9-835a28d9095e
Certificate serial:       010D0C9F4328584E4559F3A2324472805BC28D00
Authority key identifier: D1:24:DF:CC:7F:5B:80:D2:8D:EC:FE:EE:8C:CF:52:33:8E:B5:21:44
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2775f7c3-c238-47d5-98c9-835a28d9095e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2775f7c3-c238-47d5-98c9-835a28d9095e/4bdf525f-c871-3e38-b3fc-adc51096b141.roa
Signing time:             Tue 23 Jun 2026 21:00:12 +0000
ROA not before:           Tue 23 Jun 2026 21:00:12 +0000
ROA not after:            Mon 21 Sep 2026 21:00:12 +0000
asID:                     62467
IP address blocks:        2602:fccf:800::/37 maxlen: 37
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2775f7c3-c238-47d5-98c9-835a28d9095e/2775f7c3-c238-47d5-98c9-835a28d9095e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2775f7c3-c238-47d5-98c9-835a28d9095e/2775f7c3-c238-47d5-98c9-835a28d9095e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2775f7c3-c238-47d5-98c9-835a28d9095e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 Jul 2026 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:45:59:f3:a2:32:44:72:80:5b:c2:8d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2775f7c3-c238-47d5-98c9-835a28d9095e
        Validity
            Not Before: Jun 23 21:00:12 2026 GMT
            Not After : Sep 21 21:00:12 2026 GMT
        Subject: CN=1507f71e-8558-46b1-8f62-6073589b9fe2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:d4:d1:f4:41:34:e6:f2:5f:13:ca:a7:94:3f:
                    29:97:ca:e1:ff:13:00:4d:0a:a8:b0:16:ac:83:10:
                    1f:7a:30:73:3c:03:13:44:31:77:10:64:10:db:80:
                    5e:86:54:b3:3a:53:7d:40:29:9f:aa:dc:c9:27:25:
                    e1:5f:87:d3:18:1b:ad:81:77:4f:d3:78:36:99:02:
                    49:32:71:6e:2e:9e:2b:b4:0b:14:40:97:0b:1e:a6:
                    0a:f9:b2:70:22:17:66:52:1e:18:fa:2a:65:d5:8f:
                    39:63:a9:2d:db:10:70:39:1a:f8:90:9a:2d:f5:2e:
                    f3:ea:70:32:f1:ac:85:11:8e:5b:95:c7:1d:26:fe:
                    14:31:bf:fb:48:a0:55:00:d3:65:2d:1e:a7:3b:07:
                    80:a1:24:f6:9d:09:44:d4:f2:d6:3e:d1:83:b3:77:
                    36:46:9f:37:d2:69:f2:21:9a:07:f1:fb:c3:fa:c1:
                    26:8c:89:01:fa:f7:95:7a:2b:9c:4b:3d:d1:28:f7:
                    e2:85:43:22:9c:60:43:0d:5c:71:a3:59:87:6a:b3:
                    be:69:d0:2a:99:b0:96:36:c6:5e:da:c8:e1:4d:d4:
                    8b:8a:f7:ef:5a:e4:9a:0d:24:f5:f6:03:19:6b:af:
                    a1:de:a3:67:00:e8:d5:8a:4d:e9:5c:9c:32:7f:02:
                    02:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:7E:3F:12:81:BE:1B:B3:1A:86:33:88:27:32:FC:3F:CE:C2:C3:43
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2775f7c3-c238-47d5-98c9-835a28d9095e/4bdf525f-c871-3e38-b3fc-adc51096b141.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2775f7c3-c238-47d5-98c9-835a28d9095e/2775f7c3-c238-47d5-98c9-835a28d9095e.crl

            X509v3 Authority Key Identifier:
                keyid:D1:24:DF:CC:7F:5B:80:D2:8D:EC:FE:EE:8C:CF:52:33:8E:B5:21:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2775f7c3-c238-47d5-98c9-835a28d9095e.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fccf:800::/37

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:74:64:8e:d9:80:7d:e6:44:f0:51:0f:a9:f3:f6:0c:0f:e5:
         c3:7e:16:41:47:16:ca:ed:d6:4c:24:e3:cd:54:3a:6e:75:c5:
         8a:91:ac:c7:1c:d0:b2:0c:97:b1:dc:e9:87:1e:65:bf:9d:44:
         1f:9f:65:9b:c1:96:d6:12:31:c8:22:82:fc:9e:35:d5:06:ac:
         18:16:87:ef:34:6a:8a:95:17:80:bc:55:c6:6f:ea:11:77:68:
         8d:1b:d2:35:02:6a:84:4d:12:fd:db:09:dd:d8:33:d2:9f:d9:
         e3:fa:53:53:6e:96:76:bb:15:6b:3e:63:e7:af:13:dc:91:7e:
         3f:2a:6c:91:2a:c4:14:d4:44:2c:83:45:8e:eb:b4:88:61:99:
         04:dd:2f:36:d9:36:92:e9:cc:63:16:52:94:56:32:2f:18:ba:
         a2:d8:06:c4:c0:fe:75:19:0a:1d:80:f5:10:dc:a5:e8:dc:04:
         1a:2d:f0:70:1d:1b:5e:f2:1d:82:34:1c:ed:11:12:a1:d6:7a:
         0a:e4:2a:1c:b7:21:87:3d:23:55:cb:4e:cf:d9:84:d9:36:6d:
         76:70:9c:7a:b1:8b:38:ce:b4:31:4d:d7:2b:21:5e:f5:05:47:
         37:2c:78:07:6f:07:02:b8:55:d4:3d:cf:c2:ca:ae:b1:76:8f:
         77:f3:d5:49
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE5FWfOiMkRygFvCjQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjc3NWY3YzMtYzIzOC00N2Q1LTk4YzktODM1YTI4ZDkw
OTVlMB4XDTI2MDYyMzIxMDAxMloXDTI2MDkyMTIxMDAxMlowLzEtMCsGA1UEAxMk
MTUwN2Y3MWUtODU1OC00NmIxLThmNjItNjA3MzU4OWI5ZmUyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv9TR9EE05vJfE8qnlD8pl8rh/xMATQqosBas
gxAfejBzPAMTRDF3EGQQ24BehlSzOlN9QCmfqtzJJyXhX4fTGButgXdP03g2mQJJ
MnFuLp4rtAsUQJcLHqYK+bJwIhdmUh4Y+ipl1Y85Y6kt2xBwORr4kJot9S7z6nAy
8ayFEY5blccdJv4UMb/7SKBVANNlLR6nOweAoST2nQlE1PLWPtGDs3c2Rp830mny
IZoH8fvD+sEmjIkB+veVeiucSz3RKPfihUMinGBDDVxxo1mHarO+adAqmbCWNsZe
2sjhTdSLivfvWuSaDST19gMZa6+h3qNnAOjVik3pXJwyfwICswIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFHZ+PxKBvhuzGoYziCcy/D/OwsNDMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8yNzc1
ZjdjMy1jMjM4LTQ3ZDUtOThjOS04MzVhMjhkOTA5NWUvNGJkZjUyNWYtYzg3MS0z
ZTM4LWIzZmMtYWRjNTEwOTZiMTQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMjc3NWY3YzMtYzIzOC00N2Q1LTk4
YzktODM1YTI4ZDkwOTVlLzI3NzVmN2MzLWMyMzgtNDdkNS05OGM5LTgzNWEyOGQ5
MDk1ZS5jcmwwHwYDVR0jBBgwFoAU0STfzH9bgNKN7P7ujM9SM461IUQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy8yNzc1ZjdjMy1jMjM4LTQ3ZDUtOThjOS04MzVh
MjhkOTA5NWUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYDJgL8zwgw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEABHRkjtmAfeZE8FEPqfP2DA/lw34WQUcWyu3WTCTjzVQ6bnXFipGs
xxzQsgyXsdzphx5lv51EH59lm8GW1hIxyCKC/J411QasGBaH7zRqipUXgLxVxm/q
EXdojRvSNQJqhE0S/dsJ3dgz0p/Z4/pTU26WdrsVaz5j568T3JF+PypskSrEFNRE
LINFjuu0iGGZBN0vNtk2kunMYxZSlFYyLxi6otgGxMD+dRkKHYD1ENyl6NwEGi3w
cB0bXvIdgjQc7RESodZ6CuQqHLchhz0jVctOz9mE2TZtdnCcerGLOM60MU3XKyFe
9QVHNyx4B28HArhV1D3PwsqusXaPd/PVSQ==
-----END CERTIFICATE-----
Generated at Thu Jul 23 02:01:47 2026 by rpki-client