Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dda1859b-9b6c-47e8-8de0-488bb1a65637/ec6fc01b-2e06-3dae-acef-1ce038321913.roa
File:                     ec6fc01b-2e06-3dae-acef-1ce038321913.roa (raw, json)
Hash identifier:          JDu1RZpT8HikFZTA1s+oGnA7CRvfsRgXb0vxAwqoVUM=
Subject key identifier:   1A:88:EF:70:4E:2C:AE:D2:45:E9:B4:59:67:70:3B:07:BA:FC:53:BF
Certificate issuer:       /CN=dda1859b-9b6c-47e8-8de0-488bb1a65637
Certificate serial:       010D0C9F4328584F6C58212993AE0968875D1320
Authority key identifier: D2:B4:52:E1:AB:44:F4:A8:D0:DA:27:FA:11:3A:57:DB:A3:95:CC:73
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dda1859b-9b6c-47e8-8de0-488bb1a65637.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dda1859b-9b6c-47e8-8de0-488bb1a65637/ec6fc01b-2e06-3dae-acef-1ce038321913.roa
Signing time:             Wed 07 Oct 2026 13:00:13 +0000
ROA not before:           Wed 07 Oct 2026 13:00:13 +0000
ROA not after:            Tue 05 Jan 2027 14:00:13 +0000
asID:                     44446
IP address blocks:        2602:f486:ff::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dda1859b-9b6c-47e8-8de0-488bb1a65637/dda1859b-9b6c-47e8-8de0-488bb1a65637.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dda1859b-9b6c-47e8-8de0-488bb1a65637/dda1859b-9b6c-47e8-8de0-488bb1a65637.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dda1859b-9b6c-47e8-8de0-488bb1a65637.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 26 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:6c:58:21:29:93:ae:09:68:87:5d:13:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dda1859b-9b6c-47e8-8de0-488bb1a65637
        Validity
            Not Before: Oct  7 13:00:13 2026 GMT
            Not After : Jan  5 14:00:13 2027 GMT
        Subject: CN=35470870-d793-4241-9a0d-dd66e38646a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:6d:98:2e:39:1f:91:72:5e:7a:c0:bb:54:c8:
                    eb:30:ce:3e:cd:30:b7:6b:9e:31:d0:72:9a:10:77:
                    53:88:e8:fd:ac:7f:58:b9:04:4c:8d:3f:01:0a:98:
                    a6:11:21:18:cb:82:f4:7b:a0:45:cf:0c:fe:77:e9:
                    db:72:c0:ed:87:8a:5c:78:d9:17:fd:58:53:1e:81:
                    ec:26:c9:03:87:cd:75:2b:c3:85:4f:d0:c1:f8:4b:
                    f9:36:39:78:a9:81:b4:69:ed:2e:f2:49:4b:82:bc:
                    de:c2:20:21:78:d5:08:aa:01:69:16:66:8d:8b:d0:
                    12:af:80:ef:52:88:c4:a8:31:27:a0:89:6f:45:c3:
                    3f:05:7d:20:6a:2d:62:d9:12:85:03:cc:5a:8c:83:
                    52:7d:80:25:78:0c:27:8a:b9:a9:bc:02:72:d0:24:
                    3e:95:78:dc:31:a0:e4:63:4b:a1:b8:5d:c7:88:7e:
                    51:d1:71:b9:6e:68:c1:7c:f3:41:d4:b7:e9:ab:58:
                    a5:95:d2:0a:f7:1b:a4:c7:b0:28:14:19:cc:ad:22:
                    5c:ec:9f:db:77:94:c3:79:84:6d:a2:30:7f:c1:5c:
                    b2:aa:b3:9f:fb:2a:15:ef:93:68:c1:13:43:1d:84:
                    fc:5a:ba:28:0d:4d:a3:d3:cd:f5:4e:ee:41:31:fa:
                    d4:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:88:EF:70:4E:2C:AE:D2:45:E9:B4:59:67:70:3B:07:BA:FC:53:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dda1859b-9b6c-47e8-8de0-488bb1a65637/ec6fc01b-2e06-3dae-acef-1ce038321913.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dda1859b-9b6c-47e8-8de0-488bb1a65637/dda1859b-9b6c-47e8-8de0-488bb1a65637.crl

            X509v3 Authority Key Identifier:
                keyid:D2:B4:52:E1:AB:44:F4:A8:D0:DA:27:FA:11:3A:57:DB:A3:95:CC:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dda1859b-9b6c-47e8-8de0-488bb1a65637.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f486:ff::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:9e:3b:d7:46:13:2a:3b:13:f3:6e:c0:7f:1e:93:63:b2:31:
         52:ea:9b:30:5b:33:be:ee:a8:1f:dc:74:30:3a:9e:8b:8c:18:
         50:44:00:c3:85:d2:4c:37:46:f0:00:66:1b:26:4d:be:ca:44:
         d1:e6:77:ed:f1:0e:0a:d7:85:a5:92:9d:ac:ca:b0:ef:71:15:
         83:ed:0e:5f:5f:19:19:b7:61:ce:6b:5b:e4:01:35:00:b7:78:
         94:d8:bd:a7:6c:56:8f:e1:16:fa:ef:83:ae:59:01:b7:61:11:
         a0:28:cd:78:f1:86:40:71:f0:5d:5f:01:4c:77:d1:9a:52:09:
         97:0e:ca:fa:dd:4b:56:4e:99:8d:46:4f:1e:19:57:22:c2:3c:
         2d:3f:45:96:9b:c0:09:f7:d7:e5:65:7d:11:94:58:01:e6:96:
         57:6d:5b:b5:98:6f:c3:dc:52:57:3b:c1:da:40:89:a6:7d:9e:
         f5:ad:b5:71:3a:41:37:b6:86:63:50:a1:6a:1c:b2:a8:35:c8:
         85:20:9b:51:f1:6a:fc:38:ad:67:f5:7b:8a:c4:c4:16:03:d9:
         f1:7c:4e:bd:98:e9:28:c7:16:6a:bd:10:f3:38:fb:34:e7:80:
         4c:92:b2:a8:78:08:c3:02:10:19:86:49:f8:56:a3:07:d1:fe:
         36:e2:9c:b8
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9sWCEpk64JaIddEyAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGRhMTg1OWItOWI2Yy00N2U4LThkZTAtNDg4YmIxYTY1
NjM3MB4XDTI2MTAwNzEzMDAxM1oXDTI3MDEwNTE0MDAxM1owLzEtMCsGA1UEAxMk
MzU0NzA4NzAtZDc5My00MjQxLTlhMGQtZGQ2NmUzODY0NmE3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtG2YLjkfkXJeesC7VMjrMM4+zTC3a54x0HKa
EHdTiOj9rH9YuQRMjT8BCpimESEYy4L0e6BFzwz+d+nbcsDth4pceNkX/VhTHoHs
JskDh811K8OFT9DB+Ev5Njl4qYG0ae0u8klLgrzewiAheNUIqgFpFmaNi9ASr4Dv
UojEqDEnoIlvRcM/BX0gai1i2RKFA8xajINSfYAleAwnirmpvAJy0CQ+lXjcMaDk
Y0uhuF3HiH5R0XG5bmjBfPNB1Lfpq1illdIK9xukx7AoFBnMrSJc7J/bd5TDeYRt
ojB/wVyyqrOf+yoV75NowRNDHYT8WrooDU2j0831Tu5BMfrUdQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFBqI73BOLK7SRem0WWdwOwe6/FO/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9kZGEx
ODU5Yi05YjZjLTQ3ZTgtOGRlMC00ODhiYjFhNjU2MzcvZWM2ZmMwMWItMmUwNi0z
ZGFlLWFjZWYtMWNlMDM4MzIxOTEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z
N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvZGRhMTg1OWItOWI2Yy00N2U4LThk
ZTAtNDg4YmIxYTY1NjM3L2RkYTE4NTliLTliNmMtNDdlOC04ZGUwLTQ4OGJiMWE2
NTYzNy5jcmwwHwYDVR0jBBgwFoAU0rRS4atE9KjQ2if6ETpX26OVzHMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4
OC1hYmVhLWU0OTA5ZWYxYjRlMi9kZGExODU5Yi05YjZjLTQ3ZTgtOGRlMC00ODhi
YjFhNjU2MzcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL0hgD/
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAGyeO9dGEyo7E/NuwH8ek2OyMVLqmzBbM77uqB/cdDA6nouMGFBE
AMOF0kw3RvAAZhsmTb7KRNHmd+3xDgrXhaWSnazKsO9xFYPtDl9fGRm3Yc5rW+QB
NQC3eJTYvadsVo/hFvrvg65ZAbdhEaAozXjxhkBx8F1fAUx30ZpSCZcOyvrdS1ZO
mY1GTx4ZVyLCPC0/RZabwAn31+VlfRGUWAHmlldtW7WYb8PcUlc7wdpAiaZ9nvWt
tXE6QTe2hmNQoWocsqg1yIUgm1Hxavw4rWf1e4rExBYD2fF8Tr2Y6SjHFmq9EPM4
+zTngEySsqh4CMMCEBmGSfhWowfR/jbinLg=
-----END CERTIFICATE-----
Generated at Sun Oct 25 14:26:01 2026 by rpki-client