Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/3884fc48-6e8f-34d0-b3ae-21c5f13ad540.roa
File:                     3884fc48-6e8f-34d0-b3ae-21c5f13ad540.roa (raw, json)
Hash identifier:          N77HjfEPShJjgJaHvgG2Xl7sx66IX7M7OoQgKSdLkoE=
Subject key identifier:   8B:A4:8C:54:1F:56:92:B6:98:9F:FA:BF:A9:17:8B:1F:02:DC:94:F7
Certificate issuer:       /CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
Certificate serial:       010D0C9F4328584E4F1F61C3815F2D97DECF1A00
Authority key identifier: 80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/3884fc48-6e8f-34d0-b3ae-21c5f13ad540.roa
Signing time:             Sat 27 Jun 2026 09:00:12 +0000
ROA not before:           Sat 27 Jun 2026 09:00:12 +0000
ROA not after:            Fri 25 Sep 2026 09:00:12 +0000
asID:                     62610
IP address blocks:        2602:ffe4:c99::/48 maxlen: 48
                          2602:ffe4:c9a::/48 maxlen: 48
                          2602:ffe4:c9b::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 Jul 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:4f:1f:61:c3:81:5f:2d:97:de:cf:1a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
        Validity
            Not Before: Jun 27 09:00:12 2026 GMT
            Not After : Sep 25 09:00:12 2026 GMT
        Subject: CN=a7199258-7c12-4cd2-80ea-a9a065d2f1d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:7e:b3:72:ab:50:52:7a:1a:d9:47:48:b1:7f:
                    92:fd:49:65:80:ad:42:51:e0:9a:f9:02:60:d4:2d:
                    bc:ec:d1:b7:38:aa:a4:97:8c:30:08:99:27:af:64:
                    60:c7:16:5f:14:c4:74:01:b9:cc:5b:a2:e7:2f:db:
                    9a:b7:23:75:f7:87:c1:f8:29:18:b8:b4:68:8b:eb:
                    9a:2b:06:4f:91:94:00:b8:2d:7b:c6:3f:2d:1e:ef:
                    8f:ce:e0:c7:53:ed:ca:1f:b3:cb:5e:ae:04:73:e8:
                    a5:86:63:50:85:d8:52:ba:c4:77:de:07:fc:26:c3:
                    64:0c:91:a3:16:37:d4:ae:ed:99:ff:4d:2d:1b:24:
                    0b:88:85:28:b6:5e:8a:e6:90:f1:e2:ab:fa:2d:f4:
                    b2:0f:bd:9b:9a:68:90:16:6d:b1:37:25:ae:f8:08:
                    39:5c:08:15:53:88:f5:d5:94:b8:10:61:be:a6:d7:
                    da:d7:68:ea:1a:d3:62:23:2d:8b:3c:51:6f:d9:73:
                    57:f7:8c:0c:f9:12:e6:6b:e7:85:22:88:7a:0c:83:
                    e5:8a:8a:2b:a8:b1:f2:74:45:bb:e3:84:10:6c:99:
                    16:b6:14:75:f8:ad:ef:dc:33:9e:b2:09:dc:65:04:
                    de:80:6d:cd:62:b6:d5:ae:21:73:90:74:22:54:30:
                    ab:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:A4:8C:54:1F:56:92:B6:98:9F:FA:BF:A9:17:8B:1F:02:DC:94:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/3884fc48-6e8f-34d0-b3ae-21c5f13ad540.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl

            X509v3 Authority Key Identifier:
                keyid:80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:ffe4:c99::-2602:ffe4:c9b:ffff:ffff:ffff:ffff:ffff

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:f3:d7:c8:fe:3a:2a:7a:72:be:5e:b0:88:b1:a1:79:88:9a:
         6b:b4:f5:e6:a8:ec:9d:b0:3c:8b:bb:8a:14:6a:f3:b3:18:23:
         84:c6:1a:ac:a6:e5:78:c4:38:bf:66:03:cc:b5:4c:0f:0f:d0:
         d4:81:a9:10:03:67:31:a9:55:fa:35:3d:e6:37:7a:1d:5f:0b:
         d1:06:14:73:38:42:7a:97:8a:b5:82:a3:ed:c6:11:a2:4f:19:
         69:06:8a:e9:a9:e0:94:a7:a4:00:9a:19:12:55:d2:1e:c5:75:
         6c:c7:c4:43:57:b5:06:11:7f:ee:7c:c5:43:03:7f:c4:c0:7d:
         b7:d7:56:a9:70:38:e6:8c:7c:9e:ee:35:da:d9:b9:3f:da:e2:
         42:1f:10:f0:5f:42:cd:de:c1:59:e4:37:57:ef:9b:fa:4d:14:
         8a:e2:84:c2:05:71:88:d4:81:1e:1d:3f:77:df:f4:ce:cd:c5:
         d8:de:13:58:8b:0a:67:d0:e6:ed:ea:78:fe:b3:d2:9d:77:cb:
         0f:91:97:2f:8e:92:fa:97:58:a5:2f:d5:e0:02:3d:a5:a4:19:
         ff:4f:c1:c1:89:95:09:70:1f:70:87:f4:0d:e1:65:0d:db:a8:
         03:e2:b2:a0:62:69:af:bc:39:e5:70:50:cf:96:0f:05:62:d9:
         d8:e0:ba:b5
-----BEGIN CERTIFICATE-----
MIIGUTCCBTmgAwIBAgIUAQ0Mn0MoWE5PH2HDgV8tl97PGgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGQ3MjI1MmMtZTAyNC00MmM1LTljNTctODlmYzRmMWFm
M2E1MB4XDTI2MDYyNzA5MDAxMloXDTI2MDkyNTA5MDAxMlowLzEtMCsGA1UEAxMk
YTcxOTkyNTgtN2MxMi00Y2QyLTgwZWEtYTlhMDY1ZDJmMWQ0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyX6zcqtQUnoa2UdIsX+S/UllgK1CUeCa+QJg
1C287NG3OKqkl4wwCJknr2RgxxZfFMR0AbnMW6LnL9uatyN194fB+CkYuLRoi+ua
KwZPkZQAuC17xj8tHu+PzuDHU+3KH7PLXq4Ec+ilhmNQhdhSusR33gf8JsNkDJGj
FjfUru2Z/00tGyQLiIUotl6K5pDx4qv6LfSyD72bmmiQFm2xNyWu+Ag5XAgVU4j1
1ZS4EGG+ptfa12jqGtNiIy2LPFFv2XNX94wM+RLma+eFIoh6DIPlioorqLHydEW7
44QQbJkWthR1+K3v3DOesgncZQTegG3NYrbVriFzkHQiVDCrRwIDAQABo4IDYzCC
A18wHQYDVR0OBBYEFIukjFQfVpK2mJ/6v6kXix8C3JT3MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wZDcy
MjUyYy1lMDI0LTQyYzUtOWM1Ny04OWZjNGYxYWYzYTUvMzg4NGZjNDgtNmU4Zi0z
NGQwLWIzYWUtMjFjNWYxM2FkNTQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMGQ3MjI1MmMtZTAyNC00MmM1LTlj
NTctODlmYzRmMWFmM2E1LzBkNzIyNTJjLWUwMjQtNDJjNS05YzU3LTg5ZmM0ZjFh
ZjNhNS5jcmwwHwYDVR0jBBgwFoAUgDkIx1kQPtrj7fdhAQpEfi2CyX4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8wZDcyMjUyYy1lMDI0LTQyYzUtOWM1Ny04OWZj
NGYxYWYzYTUuY2VyMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAAjAUMBIDBwAmAv/k
DJkDBwImAv/kDJgwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUF
BwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRt
bDANBgkqhkiG9w0BAQsFAAOCAQEAUfPXyP46Knpyvl6wiLGheYiaa7T15qjsnbA8
i7uKFGrzsxgjhMYarKbleMQ4v2YDzLVMDw/Q1IGpEANnMalV+jU95jd6HV8L0QYU
czhCepeKtYKj7cYRok8ZaQaK6anglKekAJoZElXSHsV1bMfEQ1e1BhF/7nzFQwN/
xMB9t9dWqXA45ox8nu412tm5P9riQh8Q8F9Czd7BWeQ3V++b+k0UiuKEwgVxiNSB
Hh0/d9/0zs3F2N4TWIsKZ9Dm7ep4/rPSnXfLD5GXL46S+pdYpS/V4AI9paQZ/0/B
wYmVCXAfcIf0DeFlDduoA+KyoGJpr7w55XBQz5YPBWLZ2OC6tQ==
-----END CERTIFICATE-----
Generated at Tue Jul 21 14:59:53 2026 by rpki-client