Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4267f20f-20d1-4b5e-9bc0-40ee1ed26382/8021d1c0-d9f2-3469-a6fa-37212e5567b5.roa
File:                     8021d1c0-d9f2-3469-a6fa-37212e5567b5.roa (raw, json)
Hash identifier:          uojPvBtlmns3k/EeC1Mz/Hgwe2B9ffhte+yOU+fxIGg=
Subject key identifier:   69:E6:C8:AF:1D:0C:AD:77:1D:09:45:08:A6:C1:F7:8A:B5:98:36:32
Certificate issuer:       /CN=4267f20f-20d1-4b5e-9bc0-40ee1ed26382
Certificate serial:       010D0C9F4328584E3FC4713D0C3E05DBDCD84780
Authority key identifier: 5F:6D:69:9D:C7:34:E8:E1:FA:8E:B3:C8:6F:24:1E:43:43:49:C3:B3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4267f20f-20d1-4b5e-9bc0-40ee1ed26382.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4267f20f-20d1-4b5e-9bc0-40ee1ed26382/8021d1c0-d9f2-3469-a6fa-37212e5567b5.roa
Signing time:             Sun 21 Jun 2026 21:00:12 +0000
ROA not before:           Sun 21 Jun 2026 21:00:12 +0000
ROA not after:            Sat 19 Sep 2026 21:00:12 +0000
asID:                     402004
IP address blocks:        2602:f54e:1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4267f20f-20d1-4b5e-9bc0-40ee1ed26382/4267f20f-20d1-4b5e-9bc0-40ee1ed26382.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4267f20f-20d1-4b5e-9bc0-40ee1ed26382/4267f20f-20d1-4b5e-9bc0-40ee1ed26382.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4267f20f-20d1-4b5e-9bc0-40ee1ed26382.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:3f:c4:71:3d:0c:3e:05:db:dc:d8:47:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4267f20f-20d1-4b5e-9bc0-40ee1ed26382
        Validity
            Not Before: Jun 21 21:00:12 2026 GMT
            Not After : Sep 19 21:00:12 2026 GMT
        Subject: CN=e7cc8fb4-b8cd-421b-bd33-8342de84b05b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:f0:4f:75:f3:0b:fc:89:17:93:89:22:66:57:
                    95:c1:bc:dc:2b:fc:a3:7c:b8:fd:d2:f2:2b:e7:d1:
                    24:6b:88:71:60:69:a0:5f:40:1f:28:f7:1b:d6:05:
                    65:b2:b8:a0:a3:79:7d:14:87:70:0b:9d:82:e3:69:
                    11:33:f1:26:3f:1c:1e:68:32:11:9c:2d:27:be:e7:
                    3e:23:ea:7a:5a:64:5c:ca:58:7b:8c:aa:9d:66:2d:
                    79:ae:7d:5e:f5:c6:b9:3e:41:a6:8c:8f:07:51:22:
                    4e:a1:6a:8f:dd:3c:62:47:74:80:87:66:b2:24:05:
                    cd:d2:71:e7:b1:94:5a:0a:46:df:44:8d:bf:45:c8:
                    3c:6c:2d:2c:97:19:46:74:df:6c:1f:9f:9e:52:93:
                    81:e9:e5:a5:b3:9e:13:fa:10:73:09:e7:7f:6d:dc:
                    b0:ec:6f:21:ee:0b:65:a3:65:4c:1c:b0:ee:f9:57:
                    39:54:50:c3:3c:9f:f9:5c:77:28:4f:2e:f5:7a:f0:
                    fd:e9:dc:8b:fd:4c:d5:ae:54:57:dd:c9:a7:0d:22:
                    ac:3a:9d:65:e4:cd:8e:04:33:64:d6:0f:bb:22:a0:
                    b4:98:20:93:ea:37:fb:90:8e:d8:5e:60:d3:50:09:
                    d4:e1:d6:0b:a8:0e:78:69:a0:dd:21:1f:31:c9:ed:
                    8b:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:E6:C8:AF:1D:0C:AD:77:1D:09:45:08:A6:C1:F7:8A:B5:98:36:32
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4267f20f-20d1-4b5e-9bc0-40ee1ed26382/8021d1c0-d9f2-3469-a6fa-37212e5567b5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4267f20f-20d1-4b5e-9bc0-40ee1ed26382/4267f20f-20d1-4b5e-9bc0-40ee1ed26382.crl

            X509v3 Authority Key Identifier:
                keyid:5F:6D:69:9D:C7:34:E8:E1:FA:8E:B3:C8:6F:24:1E:43:43:49:C3:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4267f20f-20d1-4b5e-9bc0-40ee1ed26382.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f54e:1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:47:ab:90:8f:e6:f2:de:7a:a5:69:55:23:80:ed:50:d5:ff:
         47:88:31:fb:d5:b8:eb:f8:08:9f:be:50:50:9d:0f:87:6f:76:
         a6:6a:16:ba:d6:d8:48:67:36:10:0a:04:3a:e4:d3:f0:31:32:
         e9:49:9a:80:e1:32:a4:0c:6b:ce:73:45:bc:e3:7c:24:aa:72:
         3b:25:6d:4e:db:3e:6b:4d:11:9e:1c:ef:46:4b:38:6c:1d:c2:
         89:37:69:6a:18:75:60:67:95:66:7c:4c:39:3d:32:04:3d:63:
         4f:50:a4:bb:cf:98:6c:06:be:fd:d4:8a:02:d1:e3:67:4e:94:
         18:62:67:a8:22:e7:96:3f:2b:37:42:f1:96:c8:d9:b3:0a:06:
         39:d1:5e:4b:d2:dc:32:4d:48:d4:28:66:98:3a:4d:ef:73:a2:
         c8:44:d3:52:d1:69:eb:5f:b3:27:52:25:31:e4:05:ec:92:81:
         38:0f:ea:96:6f:36:d2:64:b0:4b:02:4e:b7:91:fa:03:4b:be:
         ed:c1:d7:d3:0a:6b:4c:ad:81:92:7d:25:96:80:a2:eb:ab:a7:
         08:64:f6:79:5b:eb:48:49:09:bb:5b:19:01:f5:69:04:e4:19:
         88:70:44:a2:0b:ac:15:0f:88:52:ec:e8:0e:69:6c:16:0e:a9:
         14:1b:54:90
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE4/xHE9DD4F29zYR4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDI2N2YyMGYtMjBkMS00YjVlLTliYzAtNDBlZTFlZDI2
MzgyMB4XDTI2MDYyMTIxMDAxMloXDTI2MDkxOTIxMDAxMlowLzEtMCsGA1UEAxMk
ZTdjYzhmYjQtYjhjZC00MjFiLWJkMzMtODM0MmRlODRiMDViMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1/BPdfML/IkXk4kiZleVwbzcK/yjfLj90vIr
59Eka4hxYGmgX0AfKPcb1gVlsrigo3l9FIdwC52C42kRM/EmPxweaDIRnC0nvuc+
I+p6WmRcylh7jKqdZi15rn1e9ca5PkGmjI8HUSJOoWqP3TxiR3SAh2ayJAXN0nHn
sZRaCkbfRI2/Rcg8bC0slxlGdN9sH5+eUpOB6eWls54T+hBzCed/bdyw7G8h7gtl
o2VMHLDu+Vc5VFDDPJ/5XHcoTy71evD96dyL/UzVrlRX3cmnDSKsOp1l5M2OBDNk
1g+7IqC0mCCT6jf7kI7YXmDTUAnU4dYLqA54aaDdIR8xye2LCQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFGnmyK8dDK13HQlFCKbB94q1mDYyMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi80MjY3
ZjIwZi0yMGQxLTRiNWUtOWJjMC00MGVlMWVkMjYzODIvODAyMWQxYzAtZDlmMi0z
NDY5LWE2ZmEtMzcyMTJlNTU2N2I1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z
N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvNDI2N2YyMGYtMjBkMS00YjVlLTli
YzAtNDBlZTFlZDI2MzgyLzQyNjdmMjBmLTIwZDEtNGI1ZS05YmMwLTQwZWUxZWQy
NjM4Mi5jcmwwHwYDVR0jBBgwFoAUX21pncc06OH6jrPIbyQeQ0NJw7MwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4
OC1hYmVhLWU0OTA5ZWYxYjRlMi80MjY3ZjIwZi0yMGQxLTRiNWUtOWJjMC00MGVl
MWVkMjYzODIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL1TgAB
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAAZHq5CP5vLeeqVpVSOA7VDV/0eIMfvVuOv4CJ++UFCdD4dvdqZq
FrrW2EhnNhAKBDrk0/AxMulJmoDhMqQMa85zRbzjfCSqcjslbU7bPmtNEZ4c70ZL
OGwdwok3aWoYdWBnlWZ8TDk9MgQ9Y09QpLvPmGwGvv3UigLR42dOlBhiZ6gi55Y/
KzdC8ZbI2bMKBjnRXkvS3DJNSNQoZpg6Te9zoshE01LRaetfsydSJTHkBeySgTgP
6pZvNtJksEsCTreR+gNLvu3B19MKa0ytgZJ9JZaAouurpwhk9nlb60hJCbtbGQH1
aQTkGYhwRKILrBUPiFLs6A5pbBYOqRQbVJA=
-----END CERTIFICATE-----
Generated at Sun Jul 12 23:52:52 2026 by rpki-client