Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/af661c18-5dff-4d85-9a6f-659490c4ca99/d81b35d0-6073-370a-af7b-e3600929036c.roa
File:                     d81b35d0-6073-370a-af7b-e3600929036c.roa (raw, json)
Hash identifier:          vxI5Va71J7dGDI9RrNHM2ehl0WQLL8Q5xFCaD9dFmWw=
Subject key identifier:   59:AD:F0:6E:2C:69:89:2B:3D:07:24:66:FC:D6:A8:DC:CA:72:D4:08
Certificate issuer:       /CN=af661c18-5dff-4d85-9a6f-659490c4ca99
Certificate serial:       010D0C9F4328584EF01CC73BB1ABC454BD48CD00
Authority key identifier: 41:26:26:80:04:A2:FF:06:D2:8D:7E:7F:84:0A:A0:46:6A:12:D2:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/af661c18-5dff-4d85-9a6f-659490c4ca99.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/af661c18-5dff-4d85-9a6f-659490c4ca99/d81b35d0-6073-370a-af7b-e3600929036c.roa
Signing time:             Mon 24 Aug 2026 01:00:12 +0000
ROA not before:           Mon 24 Aug 2026 01:00:12 +0000
ROA not after:            Sun 22 Nov 2026 02:00:12 +0000
asID:                     396908
IP address blocks:        2602:f828::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/af661c18-5dff-4d85-9a6f-659490c4ca99/af661c18-5dff-4d85-9a6f-659490c4ca99.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/af661c18-5dff-4d85-9a6f-659490c4ca99/af661c18-5dff-4d85-9a6f-659490c4ca99.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/af661c18-5dff-4d85-9a6f-659490c4ca99.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 29 Aug 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f0:1c:c7:3b:b1:ab:c4:54:bd:48:cd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=af661c18-5dff-4d85-9a6f-659490c4ca99
        Validity
            Not Before: Aug 24 01:00:12 2026 GMT
            Not After : Nov 22 02:00:12 2026 GMT
        Subject: CN=62fd1159-4ea8-4486-b19c-47041df8ebf4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:34:09:76:e8:02:32:6e:86:d2:5a:63:f9:29:
                    70:dc:bf:22:e7:a6:4b:39:a9:0c:a0:30:6b:54:56:
                    7a:11:02:2f:18:e2:bf:ea:f7:c9:85:8b:f8:bb:af:
                    39:50:3b:22:bc:91:69:0b:fe:4f:93:85:2b:4e:6a:
                    6c:f4:cf:04:02:03:b3:e0:16:4b:c3:f8:f0:bc:b2:
                    13:82:c4:73:ff:f0:cd:ad:f7:41:01:84:0f:92:42:
                    9d:18:6d:59:4b:9c:ec:c6:e9:29:85:d7:96:7b:9a:
                    ef:f9:3d:95:b7:fe:6d:2b:f9:16:6b:d8:e7:b9:f4:
                    9a:c4:b7:c3:99:f8:ba:7c:13:e8:e8:b3:58:92:ef:
                    b3:62:36:fb:be:a3:1f:15:4b:fb:9e:47:95:72:43:
                    06:e5:f0:c0:89:37:97:80:8d:5b:29:13:7b:62:68:
                    1e:4b:54:66:5c:63:5e:03:32:88:a9:ce:2a:e6:19:
                    03:e9:c9:80:8a:ab:ea:ba:73:71:80:cc:31:d5:19:
                    e5:16:e7:5c:80:c7:20:97:a8:ed:17:d9:c4:a8:08:
                    66:0a:48:eb:2c:f9:91:5d:b1:3e:42:dd:8b:82:e0:
                    e8:b5:17:bd:47:c1:8a:86:9d:2a:0c:69:88:9a:07:
                    b0:6a:20:e7:23:63:43:b7:7b:6a:98:73:e8:f6:c3:
                    78:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:AD:F0:6E:2C:69:89:2B:3D:07:24:66:FC:D6:A8:DC:CA:72:D4:08
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/af661c18-5dff-4d85-9a6f-659490c4ca99/d81b35d0-6073-370a-af7b-e3600929036c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/af661c18-5dff-4d85-9a6f-659490c4ca99/af661c18-5dff-4d85-9a6f-659490c4ca99.crl

            X509v3 Authority Key Identifier:
                keyid:41:26:26:80:04:A2:FF:06:D2:8D:7E:7F:84:0A:A0:46:6A:12:D2:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/af661c18-5dff-4d85-9a6f-659490c4ca99.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f828::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:54:dc:e9:ce:12:41:30:8d:47:eb:b1:f9:5a:40:4a:1c:fb:
         2c:b9:b3:5d:27:39:90:ec:e0:30:74:d7:62:84:6e:06:ff:92:
         44:7b:6c:78:25:95:f4:a2:14:1c:75:d0:5f:c1:a6:3e:e6:c8:
         cb:23:5e:cc:34:1e:e6:b2:fa:b4:e7:26:96:23:a2:1e:44:45:
         45:9e:cf:0c:e5:d9:19:fd:0b:df:ce:25:89:f0:bf:55:0b:10:
         d3:a4:a9:62:52:77:20:b3:fc:0e:02:a2:59:c3:2f:e7:b6:89:
         95:b4:6c:75:51:fa:2a:7a:2a:3a:b4:a2:92:c8:6a:00:d5:7f:
         01:f9:c3:23:bd:6a:27:de:d4:e1:e6:76:90:0f:1d:1b:06:20:
         b2:f9:c0:ff:4b:05:64:a4:b5:1e:65:70:db:27:bd:86:25:25:
         ea:a5:2b:27:a8:41:4b:3c:6b:e3:e3:71:97:1a:12:2e:d8:aa:
         6e:ca:9f:01:f0:9d:d5:4c:62:be:48:10:a2:10:5a:50:4e:9c:
         a9:f7:bb:aa:e5:39:dd:3b:5b:fb:65:58:1d:f8:d5:2d:6e:e5:
         6b:2a:ca:f7:cb:20:d2:ed:74:48:bc:da:86:64:e4:d4:a4:31:
         bb:dc:8d:99:69:fb:d4:0e:a2:b8:14:1d:84:8f:29:58:7b:7c:
         53:9c:aa:2c
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE7wHMc7savEVL1IzQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWY2NjFjMTgtNWRmZi00ZDg1LTlhNmYtNjU5NDkwYzRj
YTk5MB4XDTI2MDgyNDAxMDAxMloXDTI2MTEyMjAyMDAxMlowLzEtMCsGA1UEAxMk
NjJmZDExNTktNGVhOC00NDg2LWIxOWMtNDcwNDFkZjhlYmY0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvDQJdugCMm6G0lpj+Slw3L8i56ZLOakMoDBr
VFZ6EQIvGOK/6vfJhYv4u685UDsivJFpC/5Pk4UrTmps9M8EAgOz4BZLw/jwvLIT
gsRz//DNrfdBAYQPkkKdGG1ZS5zsxukphdeWe5rv+T2Vt/5tK/kWa9jnufSaxLfD
mfi6fBPo6LNYku+zYjb7vqMfFUv7nkeVckMG5fDAiTeXgI1bKRN7YmgeS1RmXGNe
AzKIqc4q5hkD6cmAiqvqunNxgMwx1RnlFudcgMcgl6jtF9nEqAhmCkjrLPmRXbE+
Qt2LguDotRe9R8GKhp0qDGmImgewaiDnI2NDt3tqmHPo9sN4AQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFFmt8G4saYkrPQckZvzWqNzKctQIMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9hZjY2
MWMxOC01ZGZmLTRkODUtOWE2Zi02NTk0OTBjNGNhOTkvZDgxYjM1ZDAtNjA3My0z
NzBhLWFmN2ItZTM2MDA5MjkwMzZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y
Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvYWY2NjFjMTgtNWRmZi00ZDg1LTlh
NmYtNjU5NDkwYzRjYTk5L2FmNjYxYzE4LTVkZmYtNGQ4NS05YTZmLTY1OTQ5MGM0
Y2E5OS5jcmwwHwYDVR0jBBgwFoAUQSYmgASi/wbSjX5/hAqgRmoS0uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw
ZS1hZTdkLWU2Y2IxMGFmYTEyNS9hZjY2MWMxOC01ZGZmLTRkODUtOWE2Zi02NTk0
OTBjNGNhOTkuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL4KAAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAH1Tc6c4SQTCNR+ux+VpAShz7LLmzXSc5kOzgMHTXYoRuBv+SRHts
eCWV9KIUHHXQX8GmPubIyyNezDQe5rL6tOcmliOiHkRFRZ7PDOXZGf0L384lifC/
VQsQ06SpYlJ3ILP8DgKiWcMv57aJlbRsdVH6KnoqOrSikshqANV/AfnDI71qJ97U
4eZ2kA8dGwYgsvnA/0sFZKS1HmVw2ye9hiUl6qUrJ6hBSzxr4+NxlxoSLtiqbsqf
AfCd1UxivkgQohBaUE6cqfe7quU53Ttb+2VYHfjVLW7layrK98sg0u10SLzahmTk
1KQxu9yNmWn71A6iuBQdhI8pWHt8U5yqLA==
-----END CERTIFICATE-----
Generated at Wed Aug 26 22:35:21 2026 by rpki-client