Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aab17bea-e665-4ed1-abe3-d2a9ac34e0ea/c8350e69-c682-3045-a668-12659de11f07.roa
File:                     c8350e69-c682-3045-a668-12659de11f07.roa (raw, json)
Hash identifier:          vMdwMXhl2GqDFdgZqIDsqd2a4VhPtbGbwyqvEgRE0Q4=
Subject key identifier:   C0:82:AE:A1:A7:E7:25:18:3F:DB:D4:A3:87:5D:19:2A:27:53:AC:8F
Certificate issuer:       /CN=aab17bea-e665-4ed1-abe3-d2a9ac34e0ea
Certificate serial:       010D0C9F4328584F6F230FDE2C9147B908B80F08
Authority key identifier: 2D:A8:80:D4:EF:B5:CF:45:3C:4F:94:85:37:75:C6:0D:C1:14:15:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aab17bea-e665-4ed1-abe3-d2a9ac34e0ea.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aab17bea-e665-4ed1-abe3-d2a9ac34e0ea/c8350e69-c682-3045-a668-12659de11f07.roa
Signing time:             Thu 08 Oct 2026 13:00:12 +0000
ROA not before:           Thu 08 Oct 2026 13:00:12 +0000
ROA not after:            Wed 06 Jan 2027 14:00:12 +0000
asID:                     400861
IP address blocks:        2602:2da::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aab17bea-e665-4ed1-abe3-d2a9ac34e0ea/aab17bea-e665-4ed1-abe3-d2a9ac34e0ea.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aab17bea-e665-4ed1-abe3-d2a9ac34e0ea/aab17bea-e665-4ed1-abe3-d2a9ac34e0ea.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aab17bea-e665-4ed1-abe3-d2a9ac34e0ea.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 22 Oct 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:6f:23:0f:de:2c:91:47:b9:08:b8:0f:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aab17bea-e665-4ed1-abe3-d2a9ac34e0ea
        Validity
            Not Before: Oct  8 13:00:12 2026 GMT
            Not After : Jan  6 14:00:12 2027 GMT
        Subject: CN=f8b700ba-43c4-4a49-aa9f-a1a0ad340194
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:ba:9b:86:a1:c3:c2:67:07:3b:96:d7:39:ad:
                    74:df:c2:b2:7e:3d:10:6d:9f:8a:cf:17:fc:7a:6a:
                    6c:78:1a:da:92:4e:5b:c0:59:c8:fa:2c:c4:12:c1:
                    5d:d0:1e:48:ca:59:43:53:da:7f:18:c3:ce:43:4a:
                    25:bd:ca:6a:5c:12:1a:ca:d3:8d:9e:0c:20:44:32:
                    3a:a9:92:cf:34:e8:1c:b7:26:ca:9a:35:1d:29:99:
                    57:f4:c0:de:05:bb:ce:61:7f:26:33:ed:b6:8b:7a:
                    7d:dd:62:90:7b:98:1c:9e:53:59:aa:58:75:ce:8c:
                    a5:c3:6c:4a:c3:8b:99:bd:ba:fd:59:d8:78:5a:1a:
                    e5:5c:50:d0:47:13:54:be:d2:e9:ab:1d:79:09:b4:
                    ff:e9:0a:b5:91:76:ff:9b:a3:2a:4d:f1:9c:1a:d4:
                    71:e4:59:ea:fb:e6:ae:17:49:60:d1:54:fc:76:1b:
                    db:1c:c5:7e:3f:79:5a:25:3c:77:b3:4d:64:9d:6c:
                    7f:78:fe:6d:f2:11:01:50:12:f4:8b:b4:c6:a5:01:
                    05:26:ca:9a:f9:04:7d:87:e6:17:72:35:26:cb:a9:
                    72:34:a3:d0:91:de:30:5f:85:79:55:e9:de:74:e1:
                    5b:1e:23:ec:8e:97:b9:3a:1e:32:20:3d:13:a8:39:
                    f6:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:82:AE:A1:A7:E7:25:18:3F:DB:D4:A3:87:5D:19:2A:27:53:AC:8F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aab17bea-e665-4ed1-abe3-d2a9ac34e0ea/c8350e69-c682-3045-a668-12659de11f07.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aab17bea-e665-4ed1-abe3-d2a9ac34e0ea/aab17bea-e665-4ed1-abe3-d2a9ac34e0ea.crl

            X509v3 Authority Key Identifier:
                keyid:2D:A8:80:D4:EF:B5:CF:45:3C:4F:94:85:37:75:C6:0D:C1:14:15:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aab17bea-e665-4ed1-abe3-d2a9ac34e0ea.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:2da::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:44:da:4b:25:a4:ae:0a:6d:c7:be:63:67:24:3c:ee:3b:6c:
         27:85:2b:38:a5:ae:18:9c:98:2c:5b:65:e0:04:cd:63:a1:63:
         69:77:eb:cf:e9:d9:5e:7d:bb:0f:74:31:fd:8e:c1:48:04:98:
         be:61:56:83:83:dc:18:dd:53:bf:f5:99:d3:f9:09:0c:d7:11:
         26:5a:7e:90:9a:31:c5:91:ed:67:2c:0a:51:cd:ba:11:84:01:
         d8:60:c5:ee:e3:74:1d:2f:dd:ec:3a:41:9a:dc:8b:ad:c9:01:
         cc:5b:f1:2e:f8:6c:0b:4d:f0:90:2c:51:8d:c6:44:f7:a5:9f:
         cd:fc:42:f1:3a:3c:a0:c1:c0:87:90:d4:11:3b:2c:bd:12:28:
         42:79:a0:09:56:ab:4b:95:8d:28:06:b7:68:9f:99:55:3f:26:
         44:e7:59:ff:d0:38:60:86:3b:92:06:bc:a4:3e:80:7e:32:58:
         40:c7:4f:d5:1c:4b:93:92:ba:e4:7f:24:70:da:80:9f:84:06:
         26:21:10:f8:65:43:03:47:80:e9:21:13:70:93:8b:ce:22:ec:
         4b:52:98:40:7b:0a:cd:84:5b:af:2a:ea:20:3f:f3:15:e1:40:
         b8:ae:2d:2c:62:10:36:aa:e2:54:45:a6:d5:65:fa:c7:bb:2c:
         58:e1:28:91
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE9vIw/eLJFHuQi4DwgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWFiMTdiZWEtZTY2NS00ZWQxLWFiZTMtZDJhOWFjMzRl
MGVhMB4XDTI2MTAwODEzMDAxMloXDTI3MDEwNjE0MDAxMlowLzEtMCsGA1UEAxMk
ZjhiNzAwYmEtNDNjNC00YTQ5LWFhOWYtYTFhMGFkMzQwMTk0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjLqbhqHDwmcHO5bXOa1038Kyfj0QbZ+Kzxf8
empseBrakk5bwFnI+izEEsFd0B5IyllDU9p/GMPOQ0olvcpqXBIaytONngwgRDI6
qZLPNOgctybKmjUdKZlX9MDeBbvOYX8mM+22i3p93WKQe5gcnlNZqlh1zoylw2xK
w4uZvbr9Wdh4WhrlXFDQRxNUvtLpqx15CbT/6Qq1kXb/m6MqTfGcGtRx5Fnq++au
F0lg0VT8dhvbHMV+P3laJTx3s01knWx/eP5t8hEBUBL0i7TGpQEFJsqa+QR9h+YX
cjUmy6lyNKPQkd4wX4V5VenedOFbHiPsjpe5Oh4yID0TqDn22wIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFMCCrqGn5yUYP9vUo4ddGSonU6yPMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYWIx
N2JlYS1lNjY1LTRlZDEtYWJlMy1kMmE5YWMzNGUwZWEvYzgzNTBlNjktYzY4Mi0z
MDQ1LWE2NjgtMTI2NTlkZTExZjA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWFiMTdiZWEtZTY2NS00ZWQxLWFi
ZTMtZDJhOWFjMzRlMGVhL2FhYjE3YmVhLWU2NjUtNGVkMS1hYmUzLWQyYTlhYzM0
ZTBlYS5jcmwwHwYDVR0jBBgwFoAULaiA1O+1z0U8T5SFN3XGDcEUFSEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9hYWIxN2JlYS1lNjY1LTRlZDEtYWJlMy1kMmE5
YWMzNGUwZWEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgIC2gAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAPUTaSyWkrgptx75jZyQ87jtsJ4UrOKWuGJyYLFtl4ATNY6FjaXfr
z+nZXn27D3Qx/Y7BSASYvmFWg4PcGN1Tv/WZ0/kJDNcRJlp+kJoxxZHtZywKUc26
EYQB2GDF7uN0HS/d7DpBmtyLrckBzFvxLvhsC03wkCxRjcZE96WfzfxC8To8oMHA
h5DUETssvRIoQnmgCVarS5WNKAa3aJ+ZVT8mROdZ/9A4YIY7kga8pD6AfjJYQMdP
1RxLk5K65H8kcNqAn4QGJiEQ+GVDA0eA6SETcJOLziLsS1KYQHsKzYRbryrqID/z
FeFAuK4tLGIQNqriVEWm1WX6x7ssWOEokQ==
-----END CERTIFICATE-----
Generated at Tue Oct 20 18:28:49 2026 by rpki-client