Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/436b9892-2bc1-42e7-9f0b-fc169862bf8b/c057190d-ef07-3947-b98a-abc03a5cd3ac.roa
File:                     c057190d-ef07-3947-b98a-abc03a5cd3ac.roa (raw, json)
Hash identifier:          Cnk34qPULJg/nafimHBKMO+l4y7NtUuCBOdPBfkc5uY=
Subject key identifier:   30:BC:B6:72:16:D9:DC:0D:DE:F3:CC:DC:E4:50:3F:1F:A4:CB:F7:B2
Certificate issuer:       /CN=436b9892-2bc1-42e7-9f0b-fc169862bf8b
Certificate serial:       010D0C9F4328584E2809A6B803370F5F2A1DC3C0
Authority key identifier: 41:09:62:98:B9:A9:D0:C1:31:18:0E:12:3A:C4:10:8F:F7:6B:F0:6C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/436b9892-2bc1-42e7-9f0b-fc169862bf8b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/436b9892-2bc1-42e7-9f0b-fc169862bf8b/c057190d-ef07-3947-b98a-abc03a5cd3ac.roa
Signing time:             Sat 13 Jun 2026 09:00:12 +0000
ROA not before:           Sat 13 Jun 2026 09:00:12 +0000
ROA not after:            Fri 11 Sep 2026 09:00:12 +0000
asID:                     400647
IP address blocks:        2602:f8ce::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/436b9892-2bc1-42e7-9f0b-fc169862bf8b/436b9892-2bc1-42e7-9f0b-fc169862bf8b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/436b9892-2bc1-42e7-9f0b-fc169862bf8b/436b9892-2bc1-42e7-9f0b-fc169862bf8b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/436b9892-2bc1-42e7-9f0b-fc169862bf8b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:28:09:a6:b8:03:37:0f:5f:2a:1d:c3:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=436b9892-2bc1-42e7-9f0b-fc169862bf8b
        Validity
            Not Before: Jun 13 09:00:12 2026 GMT
            Not After : Sep 11 09:00:12 2026 GMT
        Subject: CN=7c1d61c4-66d6-434c-a637-6eaba2fb8a68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:78:eb:f5:57:ea:97:49:5f:81:0c:99:dd:6a:
                    2f:b6:fe:1e:10:c0:36:3d:f8:5a:1a:5d:52:44:c9:
                    7f:93:21:04:c9:73:b1:a2:14:b8:fd:88:7c:fd:5d:
                    8b:ed:be:b6:c9:4c:98:de:1d:0f:4f:65:e5:af:4d:
                    e0:60:12:7c:c2:67:5c:26:d3:07:80:98:cd:94:d4:
                    8c:c3:8b:18:d1:a5:79:31:d7:60:09:cd:3e:4e:e8:
                    3a:7f:99:a3:67:0c:23:91:d7:e8:d0:2b:c6:12:aa:
                    21:d7:8a:6d:f5:80:8d:72:8b:ac:82:b8:fe:49:37:
                    89:6d:7d:3e:70:03:71:39:b1:0b:24:60:5e:80:9c:
                    4f:82:b4:aa:ab:2c:b6:21:87:8b:ad:9f:d5:6a:6a:
                    88:f4:9a:b8:25:d2:3e:be:71:76:d0:61:eb:df:ed:
                    3c:c0:ff:90:03:e7:20:1d:cb:48:19:d6:2e:ab:13:
                    da:8a:92:00:91:49:6e:f8:29:64:5c:c9:0d:87:78:
                    67:1b:b0:80:c7:be:17:bf:c3:97:78:ea:86:b8:28:
                    c2:46:a5:c0:93:24:48:37:dc:53:2a:4e:55:a4:8c:
                    5a:49:16:54:ca:16:e4:33:d7:b6:a9:30:db:74:20:
                    91:36:87:c3:e1:81:88:6f:10:d3:26:05:cd:cf:ba:
                    31:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:BC:B6:72:16:D9:DC:0D:DE:F3:CC:DC:E4:50:3F:1F:A4:CB:F7:B2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/436b9892-2bc1-42e7-9f0b-fc169862bf8b/c057190d-ef07-3947-b98a-abc03a5cd3ac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/436b9892-2bc1-42e7-9f0b-fc169862bf8b/436b9892-2bc1-42e7-9f0b-fc169862bf8b.crl

            X509v3 Authority Key Identifier:
                keyid:41:09:62:98:B9:A9:D0:C1:31:18:0E:12:3A:C4:10:8F:F7:6B:F0:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/436b9892-2bc1-42e7-9f0b-fc169862bf8b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f8ce::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:1d:39:9b:fd:03:c2:9e:6a:06:c4:d8:83:47:04:91:86:4f:
         e6:c2:94:b6:d3:35:f4:2e:84:cd:3f:bd:f0:fb:98:42:f3:4e:
         04:ed:ea:80:d1:6e:89:6f:a7:42:51:19:80:16:d8:ce:6c:f3:
         48:b2:0c:f3:42:a0:46:93:56:7c:a9:34:f6:cf:72:4e:82:7c:
         05:0e:a1:97:50:23:14:7a:1d:97:24:1b:f3:45:62:3d:18:90:
         91:ac:94:02:75:ae:36:63:8f:13:f8:0e:51:79:af:3e:8f:13:
         1b:52:d2:f5:64:7b:44:5b:3a:c4:c5:9f:c5:a6:90:ba:91:92:
         43:d4:c7:06:42:31:9e:4c:0d:ce:87:8c:6c:f0:53:62:bb:8f:
         e0:3e:fe:22:3e:04:43:22:51:6b:04:95:ea:5a:1c:94:5c:10:
         bc:34:57:e7:2c:59:01:8d:a4:96:ee:53:9a:95:b3:55:95:3a:
         92:01:c1:7b:18:11:75:fe:33:b5:2b:13:ff:fc:cb:3d:db:d4:
         58:70:a7:f6:09:ef:a3:93:46:3a:c5:b2:eb:40:9c:de:5f:11:
         d0:e2:ab:be:5c:e1:4e:51:19:ad:53:2e:ba:ad:0c:a2:c6:43:
         d6:5b:a5:56:82:e6:18:ab:94:e3:48:36:58:bd:82:64:a8:cf:
         5b:f5:fc:a0
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE4oCaa4AzcPXyodw8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDM2Yjk4OTItMmJjMS00MmU3LTlmMGItZmMxNjk4NjJi
ZjhiMB4XDTI2MDYxMzA5MDAxMloXDTI2MDkxMTA5MDAxMlowLzEtMCsGA1UEAxMk
N2MxZDYxYzQtNjZkNi00MzRjLWE2MzctNmVhYmEyZmI4YTY4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk3jr9Vfql0lfgQyZ3Wovtv4eEMA2PfhaGl1S
RMl/kyEEyXOxohS4/Yh8/V2L7b62yUyY3h0PT2Xlr03gYBJ8wmdcJtMHgJjNlNSM
w4sY0aV5MddgCc0+Tug6f5mjZwwjkdfo0CvGEqoh14pt9YCNcousgrj+STeJbX0+
cANxObELJGBegJxPgrSqqyy2IYeLrZ/VamqI9Jq4JdI+vnF20GHr3+08wP+QA+cg
HctIGdYuqxPaipIAkUlu+ClkXMkNh3hnG7CAx74Xv8OXeOqGuCjCRqXAkyRIN9xT
Kk5VpIxaSRZUyhbkM9e2qTDbdCCRNofD4YGIbxDTJgXNz7ox8wIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFDC8tnIW2dwN3vPM3ORQPx+ky/eyMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS80MzZi
OTg5Mi0yYmMxLTQyZTctOWYwYi1mYzE2OTg2MmJmOGIvYzA1NzE5MGQtZWYwNy0z
OTQ3LWI5OGEtYWJjMDNhNWNkM2FjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvNDM2Yjk4OTItMmJjMS00MmU3LTlm
MGItZmMxNjk4NjJiZjhiLzQzNmI5ODkyLTJiYzEtNDJlNy05ZjBiLWZjMTY5ODYy
YmY4Yi5jcmwwHwYDVR0jBBgwFoAUQQlimLmp0MExGA4SOsQQj/dr8GwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS80MzZiOTg5Mi0yYmMxLTQyZTctOWYwYi1mYzE2
OTg2MmJmOGIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL4zgAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAIh05m/0Dwp5qBsTYg0cEkYZP5sKUttM19C6EzT+98PuYQvNOBO3q
gNFuiW+nQlEZgBbYzmzzSLIM80KgRpNWfKk09s9yToJ8BQ6hl1AjFHodlyQb80Vi
PRiQkayUAnWuNmOPE/gOUXmvPo8TG1LS9WR7RFs6xMWfxaaQupGSQ9THBkIxnkwN
zoeMbPBTYruP4D7+Ij4EQyJRawSV6loclFwQvDRX5yxZAY2klu5TmpWzVZU6kgHB
exgRdf4ztSsT//zLPdvUWHCn9gnvo5NGOsWy60Cc3l8R0OKrvlzhTlEZrVMuuq0M
osZD1lulVoLmGKuU40g2WL2CZKjPW/X8oA==
-----END CERTIFICATE-----
Generated at Sun Jun 14 17:55:19 2026 by rpki-client