Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/1a7077e9-a4f8-4399-b93b-258103b803bd/ec2f6d87-a4cb-3d05-bb57-f4f190561eb2.roa
File:                     ec2f6d87-a4cb-3d05-bb57-f4f190561eb2.roa (raw, json)
Hash identifier:          i/wPcJ3MR2gcfan6mc/ypM+a8+kQ/OoHxSlEBgwhOZQ=
Subject key identifier:   83:88:BF:CD:8C:D7:59:CF:AA:76:C3:9A:69:B1:5D:F5:4D:B7:72:AF
Certificate issuer:       /CN=1a7077e9-a4f8-4399-b93b-258103b803bd
Certificate serial:       010D0C9F4328584CBD6865C2A5D4847CC6FE5600
Authority key identifier: 0D:BD:CA:53:85:C1:EB:0A:63:AA:8B:38:53:E5:B8:84:F8:19:8F:32
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/1a7077e9-a4f8-4399-b93b-258103b803bd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/1a7077e9-a4f8-4399-b93b-258103b803bd/ec2f6d87-a4cb-3d05-bb57-f4f190561eb2.roa
Signing time:             Tue 03 Feb 2026 11:32:46 +0000
ROA not before:           Tue 03 Feb 2026 11:32:46 +0000
ROA not after:            Mon 04 May 2026 10:32:46 +0000
asID:                     16581
IP address blocks:        2602:817:6000::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/1a7077e9-a4f8-4399-b93b-258103b803bd/1a7077e9-a4f8-4399-b93b-258103b803bd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/1a7077e9-a4f8-4399-b93b-258103b803bd/1a7077e9-a4f8-4399-b93b-258103b803bd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/1a7077e9-a4f8-4399-b93b-258103b803bd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 22 Feb 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:bd:68:65:c2:a5:d4:84:7c:c6:fe:56:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a7077e9-a4f8-4399-b93b-258103b803bd
        Validity
            Not Before: Feb  3 11:32:46 2026 GMT
            Not After : May  4 10:32:46 2026 GMT
        Subject: CN=b5301e75-c32b-46d6-91fe-34d25cf334f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:36:b9:e3:40:c1:57:4a:a3:bf:6b:a1:28:0b:
                    2a:86:c0:76:00:3d:52:dd:91:1a:69:3b:dc:55:72:
                    b9:0f:38:e9:14:0f:4c:08:6a:cf:cc:98:9e:d8:0d:
                    f2:03:c0:37:02:41:52:78:ea:1a:b5:01:0b:90:e4:
                    b5:f7:2b:66:59:a4:2e:3f:d1:d0:04:74:a9:31:dc:
                    ca:cb:55:e9:d8:36:ef:06:11:6f:ed:04:5e:73:0a:
                    5d:00:43:58:cb:20:20:69:c8:af:2e:93:8d:6c:7c:
                    6f:34:1c:cd:6e:a3:15:e9:b6:34:be:3b:c9:d2:52:
                    95:fd:0a:dd:df:ec:bb:a3:40:68:31:fa:48:38:e9:
                    d6:11:0f:85:0b:5c:09:8e:52:41:a1:12:ce:d6:7e:
                    b4:bd:22:31:73:f0:10:fd:54:14:88:82:ae:2c:de:
                    d1:0c:c8:29:79:a6:4e:33:41:18:ca:74:c5:01:f8:
                    2b:2d:5a:f3:78:1e:52:e1:26:78:ca:32:d9:09:40:
                    bb:0c:2d:d7:9e:0d:da:3f:7c:dc:a7:f3:ae:69:fa:
                    0d:01:f2:e5:1f:8c:da:7e:ac:fa:1a:ab:3f:be:fc:
                    ee:c6:c3:9c:09:1f:c5:3f:c4:92:bb:fb:a0:0e:1c:
                    bf:62:9c:c0:3e:02:fc:09:8b:7a:2f:7d:95:4c:ab:
                    db:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:88:BF:CD:8C:D7:59:CF:AA:76:C3:9A:69:B1:5D:F5:4D:B7:72:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/1a7077e9-a4f8-4399-b93b-258103b803bd/ec2f6d87-a4cb-3d05-bb57-f4f190561eb2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/1a7077e9-a4f8-4399-b93b-258103b803bd/1a7077e9-a4f8-4399-b93b-258103b803bd.crl

            X509v3 Authority Key Identifier:
                keyid:0D:BD:CA:53:85:C1:EB:0A:63:AA:8B:38:53:E5:B8:84:F8:19:8F:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/1a7077e9-a4f8-4399-b93b-258103b803bd.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:817:6000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:94:e8:26:1f:62:f7:45:09:5b:83:f0:ee:2a:2b:5f:71:cc:
         b4:24:fb:c9:b0:34:f0:b4:d1:e2:02:b0:2f:72:91:20:ff:67:
         09:4c:88:6e:c1:35:a9:76:3f:dd:b2:37:cb:1a:6f:71:04:64:
         29:fd:54:db:6d:46:3f:46:9b:9b:00:53:42:41:fe:b5:02:74:
         d6:45:f1:72:3e:73:43:ad:da:0b:0a:4b:3c:a7:ab:cf:d5:ee:
         dc:3c:c1:02:9a:d2:3b:18:4d:7f:f3:f0:37:df:bf:bf:cf:29:
         76:90:2b:8e:f1:39:1c:fc:e9:f4:cf:e2:a6:6f:b3:ae:e7:40:
         0b:ba:18:f0:f8:e7:d8:6a:74:7d:0e:df:70:a4:31:55:6f:09:
         82:b7:fd:8b:0e:55:66:53:5c:b4:04:55:fc:3e:60:87:38:37:
         8d:25:9a:c5:2d:6b:b9:aa:f3:6e:95:ba:5b:ec:59:99:4c:28:
         15:4a:1b:18:40:7a:1a:2a:3b:69:71:eb:92:96:da:e5:29:e3:
         de:b0:86:77:2a:dc:62:55:57:3f:80:75:a6:71:09:13:e0:3b:
         79:fb:01:ae:16:5f:ef:41:5a:ff:e6:ed:7d:44:5b:ab:d5:b1:
         da:7c:b0:74:05:ac:b6:bf:9e:82:f6:bc:9c:9b:8d:c3:78:16:
         b5:bc:55:77
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEy9aGXCpdSEfMb+VgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMWE3MDc3ZTktYTRmOC00Mzk5LWI5M2ItMjU4MTAzYjgw
M2JkMB4XDTI2MDIwMzExMzI0NloXDTI2MDUwNDEwMzI0NlowLzEtMCsGA1UEAxMk
YjUzMDFlNzUtYzMyYi00NmQ2LTkxZmUtMzRkMjVjZjMzNGY0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Da540DBV0qjv2uhKAsqhsB2AD1S3ZEaaTvc
VXK5DzjpFA9MCGrPzJie2A3yA8A3AkFSeOoatQELkOS19ytmWaQuP9HQBHSpMdzK
y1Xp2DbvBhFv7QRecwpdAENYyyAgacivLpONbHxvNBzNbqMV6bY0vjvJ0lKV/Qrd
3+y7o0BoMfpIOOnWEQ+FC1wJjlJBoRLO1n60vSIxc/AQ/VQUiIKuLN7RDMgpeaZO
M0EYynTFAfgrLVrzeB5S4SZ4yjLZCUC7DC3Xng3aP3zcp/OuafoNAfLlH4zafqz6
Gqs/vvzuxsOcCR/FP8SSu/ugDhy/YpzAPgL8CYt6L32VTKvbqQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFIOIv82M11nPqnbDmmmxXfVNt3KvMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS8xYTcw
NzdlOS1hNGY4LTQzOTktYjkzYi0yNTgxMDNiODAzYmQvZWMyZjZkODctYTRjYi0z
ZDA1LWJiNTctZjRmMTkwNTYxZWIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y
Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvMWE3MDc3ZTktYTRmOC00Mzk5LWI5
M2ItMjU4MTAzYjgwM2JkLzFhNzA3N2U5LWE0ZjgtNDM5OS1iOTNiLTI1ODEwM2I4
MDNiZC5jcmwwHwYDVR0jBBgwFoAUDb3KU4XB6wpjqos4U+W4hPgZjzIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw
ZS1hZTdkLWU2Y2IxMGFmYTEyNS8xYTcwNzdlOS1hNGY4LTQzOTktYjkzYi0yNTgx
MDNiODAzYmQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgIIF2AA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAJGU6CYfYvdFCVuD8O4qK19xzLQk+8mwNPC00eICsC9ykSD/ZwlM
iG7BNal2P92yN8sab3EEZCn9VNttRj9Gm5sAU0JB/rUCdNZF8XI+c0Ot2gsKSzyn
q8/V7tw8wQKa0jsYTX/z8Dffv7/PKXaQK47xORz86fTP4qZvs67nQAu6GPD459hq
dH0O33CkMVVvCYK3/YsOVWZTXLQEVfw+YIc4N40lmsUta7mq826VulvsWZlMKBVK
GxhAehoqO2lx65KW2uUp496whncq3GJVVz+AdaZxCRPgO3n7Aa4WX+9BWv/m7X1E
W6vVsdp8sHQFrLa/noL2vJybjcN4FrW8VXc=
-----END CERTIFICATE-----
Generated at Thu Feb 19 21:09:49 2026 by rpki-client