Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2/defa4b41-4cbc-3128-83c6-ac72490d9f2c.roa
File:                     defa4b41-4cbc-3128-83c6-ac72490d9f2c.roa (raw, json)
Hash identifier:          2XRGwH0PL+VhLX3VBSTQpeOX1eTNXlrXl3/jwxKO9IE=
Subject key identifier:   D6:4C:0A:CE:AA:C0:E0:1C:DB:2B:8B:31:93:9E:38:67:23:1B:28:E8
Certificate issuer:       /CN=df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2
Certificate serial:       010D0C9F4328584E6C6F6525C210C3FA564454A0
Authority key identifier: 19:E9:04:44:F4:A8:F5:DA:05:93:6E:23:2E:65:34:63:37:9E:BB:AB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2/defa4b41-4cbc-3128-83c6-ac72490d9f2c.roa
Signing time:             Tue 07 Jul 2026 21:00:13 +0000
ROA not before:           Tue 07 Jul 2026 21:00:13 +0000
ROA not after:            Mon 05 Oct 2026 21:00:13 +0000
asID:                     62874
IP address blocks:        2602:ffb7:594::/48 maxlen: 48
                          2602:ffb7:5a0::/46 maxlen: 46
                          2602:ffb7:d00::/40 maxlen: 40
                          2602:ffb7:f00::/40 maxlen: 40
                          2602:ffd9::/36 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:6c:6f:65:25:c2:10:c3:fa:56:44:54:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2
        Validity
            Not Before: Jul  7 21:00:13 2026 GMT
            Not After : Oct  5 21:00:13 2026 GMT
        Subject: CN=6bdaf790-bcd2-4fae-8dce-a8ba9981c2ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:7d:5f:ac:f9:a0:19:85:71:72:6a:73:30:e4:
                    42:78:e1:6a:77:9a:f2:e4:f3:cc:aa:ae:de:f2:b9:
                    2d:26:d0:f8:d3:01:29:34:46:48:53:e1:8b:9f:cb:
                    88:42:40:9e:53:3a:3e:a0:30:23:b8:21:1b:6c:d5:
                    ac:59:85:58:a6:33:b7:59:d4:13:dd:90:98:bc:cd:
                    e4:3f:b7:c5:d3:c1:62:e9:96:c3:ac:d0:24:dc:80:
                    6c:50:7e:7f:73:0e:78:91:cc:be:1f:98:d3:0d:02:
                    d8:27:2a:4c:19:d9:d3:da:22:2a:07:f8:d7:2a:4c:
                    ce:01:91:6a:c6:6d:dd:bc:01:65:bc:ea:fc:0c:d5:
                    1d:64:6e:60:61:51:46:88:08:5e:cc:70:db:42:b9:
                    08:de:f4:16:e8:9e:e0:db:35:da:fc:ec:45:ca:4e:
                    0e:28:ce:f7:e1:8c:fc:b3:05:e6:e3:c4:34:cf:f3:
                    20:6c:76:73:fe:c1:f9:a8:c1:54:a6:e3:5b:3c:d9:
                    58:0b:50:9f:17:ce:f9:19:4b:0a:b0:10:e1:bc:67:
                    72:f6:f1:6a:ea:57:93:6e:97:5b:67:63:eb:53:78:
                    e8:bc:d3:3d:73:c7:6a:14:1b:25:eb:35:dc:0f:d1:
                    3c:d2:81:cc:73:74:03:ca:fc:81:a3:02:b6:ae:00:
                    19:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:4C:0A:CE:AA:C0:E0:1C:DB:2B:8B:31:93:9E:38:67:23:1B:28:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2/defa4b41-4cbc-3128-83c6-ac72490d9f2c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2.crl

            X509v3 Authority Key Identifier:
                keyid:19:E9:04:44:F4:A8:F5:DA:05:93:6E:23:2E:65:34:63:37:9E:BB:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:ffb7:594::/48
                  2602:ffb7:5a0::/46
                  2602:ffb7:d00::/40
                  2602:ffb7:f00::/40
                  2602:ffd9::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a0:5c:92:9e:81:2d:c0:aa:b5:89:f6:3e:60:c2:08:d2:69:5e:
         29:a3:3a:03:47:96:f3:08:9d:6c:7f:33:7e:18:45:72:85:a9:
         b0:1e:24:79:55:87:73:09:eb:0e:04:7a:e2:91:51:4e:37:10:
         ce:9e:9f:12:1c:41:90:f6:18:cf:67:b1:33:f1:ac:4b:d0:05:
         e0:30:24:b3:b0:00:b5:c8:87:e8:61:95:a6:3f:49:2b:8c:76:
         88:0d:c6:af:96:44:e3:c1:b4:43:b8:c2:29:4d:61:bd:67:ed:
         7a:ff:b6:71:a4:6c:08:37:d7:5b:6f:a5:42:b1:db:96:b6:b3:
         b6:51:92:58:bf:e2:db:1e:6b:cf:ca:23:e7:a6:bd:96:37:65:
         21:d0:70:47:53:1c:8e:ad:f5:d0:15:af:73:8c:fd:1a:5c:d4:
         a8:e4:25:79:2a:a0:94:4a:0d:f1:ac:23:d5:a0:e1:e8:a2:08:
         a4:01:7a:96:11:48:3e:1b:5c:0c:ca:2d:07:ec:46:ab:ad:42:
         5d:04:31:6f:78:17:45:b5:8c:16:ef:1a:d6:4b:ad:3b:d5:dc:
         a6:c1:74:7c:69:50:f1:35:01:64:ca:4d:58:2e:4f:f1:63:43:
         5b:ba:e9:6a:db:60:e7:9a:3d:e6:61:f8:f1:6c:c6:12:f7:b1:
         e8:c2:48:07
-----BEGIN CERTIFICATE-----
MIIGZzCCBU+gAwIBAgIUAQ0Mn0MoWE5sb2UlwhDD+lZEVKAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGY3OTk5YzgtZTRhNS00NWZjLTljYzItYzRmZTdmMThi
ZmUyMB4XDTI2MDcwNzIxMDAxM1oXDTI2MTAwNTIxMDAxM1owLzEtMCsGA1UEAxMk
NmJkYWY3OTAtYmNkMi00ZmFlLThkY2UtYThiYTk5ODFjMmJhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnn1frPmgGYVxcmpzMORCeOFqd5ry5PPMqq7e
8rktJtD40wEpNEZIU+GLn8uIQkCeUzo+oDAjuCEbbNWsWYVYpjO3WdQT3ZCYvM3k
P7fF08Fi6ZbDrNAk3IBsUH5/cw54kcy+H5jTDQLYJypMGdnT2iIqB/jXKkzOAZFq
xm3dvAFlvOr8DNUdZG5gYVFGiAhezHDbQrkI3vQW6J7g2zXa/OxFyk4OKM734Yz8
swXm48Q0z/MgbHZz/sH5qMFUpuNbPNlYC1CfF875GUsKsBDhvGdy9vFq6leTbpdb
Z2PrU3jovNM9c8dqFBsl6zXcD9E80oHMc3QDyvyBowK2rgAZsQIDAQABo4IDeTCC
A3UwHQYDVR0OBBYEFNZMCs6qwOAc2yuLMZOeOGcjGyjoMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kZjc5
OTljOC1lNGE1LTQ1ZmMtOWNjMi1jNGZlN2YxOGJmZTIvZGVmYTRiNDEtNGNiYy0z
MTI4LTgzYzYtYWM3MjQ5MGQ5ZjJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZGY3OTk5YzgtZTRhNS00NWZjLTlj
YzItYzRmZTdmMThiZmUyL2RmNzk5OWM4LWU0YTUtNDVmYy05Y2MyLWM0ZmU3ZjE4
YmZlMi5jcmwwHwYDVR0jBBgwFoAUGekERPSo9doFk24jLmU0Yzeeu6swDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi9kZjc5OTljOC1lNGE1LTQ1ZmMtOWNjMi1jNGZl
N2YxOGJmZTIuY2VyMEMGCCsGAQUFBwEHAQH/BDQwMjAwBAIAAjAqAwcAJgL/twWU
AwcCJgL/twWgAwYAJgL/tw0DBgAmAv+3DwMGBCYC/9kAMFQGA1UdIAEB/wRKMEgw
RgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQv
cmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAKBckp6B
LcCqtYn2PmDCCNJpXimjOgNHlvMInWx/M34YRXKFqbAeJHlVh3MJ6w4EeuKRUU43
EM6enxIcQZD2GM9nsTPxrEvQBeAwJLOwALXIh+hhlaY/SSuMdogNxq+WROPBtEO4
wilNYb1n7Xr/tnGkbAg311tvpUKx25a2s7ZRkli/4tsea8/KI+emvZY3ZSHQcEdT
HI6t9dAVr3OM/Rpc1KjkJXkqoJRKDfGsI9Wg4eiiCKQBepYRSD4bXAzKLQfsRqut
Ql0EMW94F0W1jBbvGtZLrTvV3KbBdHxpUPE1AWTKTVguT/FjQ1u66WrbYOeaPeZh
+PFsxhL3sejCSAc=
-----END CERTIFICATE-----
Generated at Tue Jul 21 14:30:30 2026 by rpki-client