Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/b9783e06-fddb-3a23-b6c3-1b809e91e7b6.roa
File:                     b9783e06-fddb-3a23-b6c3-1b809e91e7b6.roa (raw, json)
Hash identifier:          Fcl/SXkyw6a4X+I3/s0ey/YwxI6UQBAh/bdUn6TfK8Y=
Subject key identifier:   0A:B8:7C:E2:92:E8:26:1B:2B:12:2C:89:36:A3:DC:AC:E0:8C:FD:22
Certificate issuer:       /CN=b1898100-f40c-4002-b68a-8a97b548e69d
Certificate serial:       010D0C9F4328584E253F1F8C611CEAD6D86C9C80
Authority key identifier: 89:4C:F8:BD:0D:34:34:87:18:70:33:F9:00:70:4A:CB:0F:78:52:53
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/b9783e06-fddb-3a23-b6c3-1b809e91e7b6.roa
Signing time:             Fri 12 Jun 2026 09:00:11 +0000
ROA not before:           Fri 12 Jun 2026 09:00:11 +0000
ROA not after:            Thu 10 Sep 2026 09:00:11 +0000
asID:                     18526
IP address blocks:        2602:fd6f:aab::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/b1898100-f40c-4002-b68a-8a97b548e69d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/b1898100-f40c-4002-b68a-8a97b548e69d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 13 Jun 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:25:3f:1f:8c:61:1c:ea:d6:d8:6c:9c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1898100-f40c-4002-b68a-8a97b548e69d
        Validity
            Not Before: Jun 12 09:00:11 2026 GMT
            Not After : Sep 10 09:00:11 2026 GMT
        Subject: CN=c4085dc5-455e-4cea-8d9e-3683149ecf8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:84:f1:d7:77:92:d9:ec:3e:13:01:a6:c8:c5:
                    58:fa:3b:fe:7e:1a:18:bc:5e:0a:26:49:00:1d:6b:
                    bf:99:4d:35:e9:3e:f9:44:29:49:b2:0d:76:8a:68:
                    89:e9:18:b2:8a:c2:00:c3:f4:a2:0d:b9:1b:72:c3:
                    ea:73:c5:01:96:a5:41:1e:ce:f2:fc:7d:4e:5a:5c:
                    8b:f3:17:23:e3:38:d5:91:4c:d5:60:2b:07:cd:29:
                    4a:bf:3d:a0:f2:19:d7:53:13:ae:5a:5d:28:71:d2:
                    90:ef:cc:71:d4:21:79:97:65:8b:1c:fd:1d:bf:c3:
                    73:fb:76:e7:95:61:34:14:67:71:0d:b4:76:ec:18:
                    47:93:78:d2:c5:57:10:67:9a:c4:d5:e4:d5:b8:1a:
                    1d:7f:3e:09:22:b7:61:9b:4c:13:d1:ad:40:e3:7f:
                    71:41:9f:fb:09:2c:05:03:a5:7c:28:41:b6:7b:5f:
                    dc:96:13:b7:a4:f3:c2:7a:09:e5:d7:90:99:ea:22:
                    01:8a:51:7e:91:1d:d3:9b:d5:8e:6e:ba:a6:bf:d3:
                    c7:0f:79:11:30:00:c6:4b:f6:da:a9:22:0b:aa:f3:
                    15:0b:1e:f6:84:47:b9:17:27:4e:e5:3a:7d:1d:a2:
                    19:40:5b:51:4b:f1:d9:55:05:50:84:c5:ba:2a:a3:
                    b4:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:B8:7C:E2:92:E8:26:1B:2B:12:2C:89:36:A3:DC:AC:E0:8C:FD:22
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/b9783e06-fddb-3a23-b6c3-1b809e91e7b6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/b1898100-f40c-4002-b68a-8a97b548e69d.crl

            X509v3 Authority Key Identifier:
                keyid:89:4C:F8:BD:0D:34:34:87:18:70:33:F9:00:70:4A:CB:0F:78:52:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fd6f:aab::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:11:fd:4d:91:21:f9:92:19:59:e0:63:79:72:32:0d:7e:ab:
         81:45:e1:b4:f1:10:3f:84:4c:dd:4a:40:0b:13:cc:13:64:68:
         68:a2:45:70:f4:dd:5a:9b:a0:ab:b2:36:d7:7f:0e:19:c6:6b:
         c3:79:c6:e5:67:f2:e0:d7:29:9c:00:c3:27:3a:89:7b:b8:4a:
         7b:b2:de:d0:c2:0a:46:25:ef:4e:91:49:26:98:8e:46:37:c7:
         4a:3d:f6:2b:b0:cf:93:0b:bb:cd:c6:e8:10:e8:db:7f:09:09:
         4d:18:ef:b6:54:c2:9a:3f:20:aa:18:ab:d9:3a:06:ba:45:6b:
         6f:eb:58:be:32:37:31:00:c9:a9:db:40:d9:5e:65:69:a8:96:
         08:0b:cd:0f:36:56:31:35:59:3d:d6:72:bc:a0:df:38:dc:fb:
         8b:1e:11:57:41:b7:b1:b1:b6:4d:86:c1:e1:07:e6:0a:1b:15:
         09:59:7a:b6:de:18:43:d6:92:37:86:cb:86:c8:eb:0c:f2:b1:
         9a:27:5c:99:fd:fd:ef:dd:7b:83:e2:ca:11:03:eb:a8:dc:b6:
         c8:ba:32:c7:ec:83:a1:ca:a6:59:c5:b5:9d:55:58:eb:ad:75:
         a6:b3:d4:31:c2:d3:77:f8:49:7c:9f:a7:6d:43:64:60:0b:64:
         64:4c:2d:fb
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE4lPx+MYRzq1thsnIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjE4OTgxMDAtZjQwYy00MDAyLWI2OGEtOGE5N2I1NDhl
NjlkMB4XDTI2MDYxMjA5MDAxMVoXDTI2MDkxMDA5MDAxMVowLzEtMCsGA1UEAxMk
YzQwODVkYzUtNDU1ZS00Y2VhLThkOWUtMzY4MzE0OWVjZjhiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnYTx13eS2ew+EwGmyMVY+jv+fhoYvF4KJkkA
HWu/mU016T75RClJsg12imiJ6RiyisIAw/SiDbkbcsPqc8UBlqVBHs7y/H1OWlyL
8xcj4zjVkUzVYCsHzSlKvz2g8hnXUxOuWl0ocdKQ78xx1CF5l2WLHP0dv8Nz+3bn
lWE0FGdxDbR27BhHk3jSxVcQZ5rE1eTVuBodfz4JIrdhm0wT0a1A439xQZ/7CSwF
A6V8KEG2e1/clhO3pPPCegnl15CZ6iIBilF+kR3Tm9WObrqmv9PHD3kRMADGS/ba
qSILqvMVCx72hEe5FydO5Tp9HaIZQFtRS/HZVQVQhMW6KqO0SQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFAq4fOKS6CYbKxIsiTaj3KzgjP0iMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9iMTg5
ODEwMC1mNDBjLTQwMDItYjY4YS04YTk3YjU0OGU2OWQvYjk3ODNlMDYtZmRkYi0z
YTIzLWI2YzMtMWI4MDllOTFlN2I2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYjE4OTgxMDAtZjQwYy00MDAyLWI2
OGEtOGE5N2I1NDhlNjlkL2IxODk4MTAwLWY0MGMtNDAwMi1iNjhhLThhOTdiNTQ4
ZTY5ZC5jcmwwHwYDVR0jBBgwFoAUiUz4vQ00NIcYcDP5AHBKyw94UlMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9iMTg5ODEwMC1mNDBjLTQwMDItYjY4YS04YTk3
YjU0OGU2OWQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL9bwqr
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAAoR/U2RIfmSGVngY3lyMg1+q4FF4bTxED+ETN1KQAsTzBNkaGii
RXD03VqboKuyNtd/DhnGa8N5xuVn8uDXKZwAwyc6iXu4Snuy3tDCCkYl706RSSaY
jkY3x0o99iuwz5MLu83G6BDo238JCU0Y77ZUwpo/IKoYq9k6BrpFa2/rWL4yNzEA
yanbQNleZWmolggLzQ82VjE1WT3Wcryg3zjc+4seEVdBt7Gxtk2GweEH5gobFQlZ
erbeGEPWkjeGy4bI6wzysZonXJn9/e/de4PiyhED66jctsi6Msfsg6HKplnFtZ1V
WOutdaaz1DHC03f4SXyfp21DZGALZGRMLfs=
-----END CERTIFICATE-----
Generated at Fri Jun 12 14:44:38 2026 by rpki-client