Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2251ce17-87bb-4c44-9203-7a49e0687212/e6fe7cca-3ac3-3d28-8345-34a4d69e9c27.roa
File:                     e6fe7cca-3ac3-3d28-8345-34a4d69e9c27.roa (raw, json)
Hash identifier:          O1/gIQQEY1UfiVFUNNsZAFx8o3OKEfO0k+SEl7Y1C8k=
Subject key identifier:   FC:FD:E6:2F:2C:4F:6A:2E:CF:D7:1F:2D:E9:86:55:91:11:99:29:87
Certificate issuer:       /CN=2251ce17-87bb-4c44-9203-7a49e0687212
Certificate serial:       010D0C9F4328584D5234F13E4765B9C02A0FF780
Authority key identifier: 60:D7:AD:ED:DE:A3:92:0A:14:35:38:1D:B9:EF:96:42:5C:6B:17:D5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2251ce17-87bb-4c44-9203-7a49e0687212.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2251ce17-87bb-4c44-9203-7a49e0687212/e6fe7cca-3ac3-3d28-8345-34a4d69e9c27.roa
Signing time:             Sat 28 Mar 2026 18:44:32 +0000
ROA not before:           Sat 28 Mar 2026 18:44:32 +0000
ROA not after:            Sat 20 Jun 2026 01:00:32 +0000
asID:                     402104
IP address blocks:        2602:f47a::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2251ce17-87bb-4c44-9203-7a49e0687212/2251ce17-87bb-4c44-9203-7a49e0687212.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2251ce17-87bb-4c44-9203-7a49e0687212/2251ce17-87bb-4c44-9203-7a49e0687212.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2251ce17-87bb-4c44-9203-7a49e0687212.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 15 Apr 2026 04:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:52:34:f1:3e:47:65:b9:c0:2a:0f:f7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2251ce17-87bb-4c44-9203-7a49e0687212
        Validity
            Not Before: Mar 28 18:44:32 2026 GMT
            Not After : Jun 20 01:00:32 2026 GMT
        Subject: CN=a995b087-ba16-43f3-97b9-f2f00eca4dfd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:7c:81:10:f5:87:f8:82:b2:2a:b8:d1:15:96:
                    f6:ee:46:53:82:3e:39:a7:50:49:44:c6:ae:7f:b3:
                    ba:91:68:ed:7e:66:16:d9:27:c5:b3:c0:23:c2:e9:
                    33:fe:69:35:8e:99:13:ad:23:7d:24:57:79:dc:c3:
                    ab:59:3f:67:85:3d:ee:69:26:f4:8a:b4:d7:f3:59:
                    af:f5:91:29:1f:0f:e1:0f:db:c2:52:9b:dd:3a:ee:
                    fe:d1:09:12:4f:f6:3e:2d:42:4d:24:9a:ad:c4:a3:
                    29:af:ee:9f:41:18:9e:e1:da:f0:5c:8e:a8:c5:5d:
                    28:f2:19:ed:68:6d:1f:9b:ed:3a:d6:55:8a:53:8d:
                    13:65:44:97:b9:f5:6a:b9:4b:51:e3:69:28:7d:7c:
                    39:36:90:3f:6b:18:ec:82:cd:80:c0:74:6a:a9:d1:
                    2f:7a:c2:e3:e0:c7:02:92:57:5f:ea:1d:49:bb:4d:
                    2f:13:31:d5:b6:6b:20:47:a5:6c:ff:3e:b0:2c:0e:
                    e1:5b:06:d2:ea:b2:3c:9c:b9:c1:52:1b:2d:27:3e:
                    7f:79:63:2f:ba:c3:60:a8:3c:28:fa:10:93:92:57:
                    51:f8:f3:aa:f9:33:91:56:4d:c6:ca:89:4b:90:8e:
                    90:42:1d:f3:ba:4c:3a:59:ea:ad:ce:29:ef:ae:f8:
                    f3:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:FD:E6:2F:2C:4F:6A:2E:CF:D7:1F:2D:E9:86:55:91:11:99:29:87
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2251ce17-87bb-4c44-9203-7a49e0687212/e6fe7cca-3ac3-3d28-8345-34a4d69e9c27.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2251ce17-87bb-4c44-9203-7a49e0687212/2251ce17-87bb-4c44-9203-7a49e0687212.crl

            X509v3 Authority Key Identifier:
                keyid:60:D7:AD:ED:DE:A3:92:0A:14:35:38:1D:B9:EF:96:42:5C:6B:17:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2251ce17-87bb-4c44-9203-7a49e0687212.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f47a::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:04:30:05:34:00:bd:90:b6:49:f7:ee:d7:7c:55:4a:d5:d6:
         4c:66:43:40:79:dd:10:88:a3:26:94:d6:f8:07:85:75:a5:04:
         d9:a9:16:71:77:e6:d5:5f:48:57:8c:66:bb:70:6c:dd:5a:dd:
         10:71:65:66:c6:66:33:ef:a5:46:32:a1:c1:91:5a:e0:df:13:
         ed:f4:16:c8:32:dd:41:cb:e7:d2:99:52:b5:08:20:fe:c3:0b:
         fa:04:1a:e7:71:d5:b7:4f:09:7e:2d:c1:9e:9c:f7:0b:46:8f:
         5e:45:84:17:a4:6f:54:a3:d5:3f:e3:d5:f0:a6:d0:66:1e:33:
         96:9e:1c:60:45:d6:2a:61:ce:5d:4e:38:e7:37:e4:8d:43:24:
         36:ab:f9:ba:67:5c:0e:6a:bc:6f:1b:3d:e0:39:45:fd:f5:8e:
         49:6f:ad:19:67:cd:f6:09:dd:0b:28:99:66:d4:b1:12:c4:0a:
         ba:ac:87:40:a5:ad:95:2c:0a:af:bb:fe:e4:be:20:3a:2c:77:
         df:e3:ec:5e:84:42:15:5d:39:62:02:03:45:07:d3:a5:8a:04:
         55:20:3c:2f:56:1a:ed:ab:e4:c7:85:f7:b3:00:e5:b0:fb:9c:
         71:9c:df:bf:d1:21:6c:21:a5:f8:54:05:39:b7:0d:37:1b:09:
         84:ed:b0:fb
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE1SNPE+R2W5wCoP94AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjI1MWNlMTctODdiYi00YzQ0LTkyMDMtN2E0OWUwNjg3
MjEyMB4XDTI2MDMyODE4NDQzMloXDTI2MDYyMDAxMDAzMlowLzEtMCsGA1UEAxMk
YTk5NWIwODctYmExNi00M2YzLTk3YjktZjJmMDBlY2E0ZGZkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6HyBEPWH+IKyKrjRFZb27kZTgj45p1BJRMau
f7O6kWjtfmYW2SfFs8Ajwukz/mk1jpkTrSN9JFd53MOrWT9nhT3uaSb0irTX81mv
9ZEpHw/hD9vCUpvdOu7+0QkST/Y+LUJNJJqtxKMpr+6fQRie4drwXI6oxV0o8hnt
aG0fm+061lWKU40TZUSXufVquUtR42kofXw5NpA/axjsgs2AwHRqqdEvesLj4McC
kldf6h1Ju00vEzHVtmsgR6Vs/z6wLA7hWwbS6rI8nLnBUhstJz5/eWMvusNgqDwo
+hCTkldR+POq+TORVk3GyolLkI6QQh3zukw6WeqtzinvrvjzyQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFPz95i8sT2ouz9cfLemGVZERmSmHMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi8yMjUx
Y2UxNy04N2JiLTRjNDQtOTIwMy03YTQ5ZTA2ODcyMTIvZTZmZTdjY2EtM2FjMy0z
ZDI4LTgzNDUtMzRhNGQ2OWU5YzI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z
N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvMjI1MWNlMTctODdiYi00YzQ0LTky
MDMtN2E0OWUwNjg3MjEyLzIyNTFjZTE3LTg3YmItNGM0NC05MjAzLTdhNDllMDY4
NzIxMi5jcmwwHwYDVR0jBBgwFoAUYNet7d6jkgoUNTgdue+WQlxrF9UwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4
OC1hYmVhLWU0OTA5ZWYxYjRlMi8yMjUxY2UxNy04N2JiLTRjNDQtOTIwMy03YTQ5
ZTA2ODcyMTIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL0egAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAYQQwBTQAvZC2Sffu13xVStXWTGZDQHndEIijJpTW+AeFdaUE2akW
cXfm1V9IV4xmu3Bs3VrdEHFlZsZmM++lRjKhwZFa4N8T7fQWyDLdQcvn0plStQgg
/sML+gQa53HVt08Jfi3Bnpz3C0aPXkWEF6RvVKPVP+PV8KbQZh4zlp4cYEXWKmHO
XU445zfkjUMkNqv5umdcDmq8bxs94DlF/fWOSW+tGWfN9gndCyiZZtSxEsQKuqyH
QKWtlSwKr7v+5L4gOix33+PsXoRCFV05YgIDRQfTpYoEVSA8L1Ya7avkx4X3swDl
sPuccZzfv9EhbCGl+FQFObcNNxsJhO2w+w==
-----END CERTIFICATE-----
Generated at Mon Apr 13 12:10:29 2026 by rpki-client