Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d/6c03172a-7023-376d-98bb-2e1ff0df0403.roa
File:                     6c03172a-7023-376d-98bb-2e1ff0df0403.roa (raw, json)
Hash identifier:          OvAdL742amJvFovcdU8ZgLPRbZW29G5jyfUPiSHwZfE=
Subject key identifier:   02:D7:D6:71:53:67:55:F2:09:01:CC:2D:50:E7:E6:82:41:CE:F4:E5
Certificate issuer:       /CN=f2f0585e-a28e-4ead-9b1c-defd291ce54d
Certificate serial:       010D0C9F4328584EED5222EBA7D754DBE5C1E080
Authority key identifier: 7B:C6:78:77:88:93:19:53:E7:11:02:39:94:6D:8B:3D:13:7A:C2:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d/6c03172a-7023-376d-98bb-2e1ff0df0403.roa
Signing time:             Sun 23 Aug 2026 01:00:12 +0000
ROA not before:           Sun 23 Aug 2026 01:00:12 +0000
ROA not after:            Sat 21 Nov 2026 02:00:12 +0000
asID:                     50842
IP address blocks:        2602:fb68:40::/42 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d/f2f0585e-a28e-4ead-9b1c-defd291ce54d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d/f2f0585e-a28e-4ead-9b1c-defd291ce54d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 27 Aug 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ed:52:22:eb:a7:d7:54:db:e5:c1:e0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f2f0585e-a28e-4ead-9b1c-defd291ce54d
        Validity
            Not Before: Aug 23 01:00:12 2026 GMT
            Not After : Nov 21 02:00:12 2026 GMT
        Subject: CN=b6ae5dd8-bf71-46ef-84ca-1fa2b9e42010
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:09:ff:49:33:0c:5c:bb:70:18:e3:fc:a8:e1:
                    99:85:ed:f3:b8:d8:ad:68:7e:a5:d0:70:12:5c:06:
                    95:0c:b7:1c:e5:23:91:f7:48:36:3d:b6:da:70:8b:
                    81:ca:51:4d:31:aa:54:83:b9:00:90:f6:67:37:5f:
                    9c:c9:b6:9e:99:c5:94:b1:13:ff:1d:2b:fb:e0:18:
                    51:6d:9b:ba:cd:97:bf:df:58:a2:30:f0:a6:fb:be:
                    b3:2d:9f:7b:74:e7:eb:83:fc:0f:ec:65:d4:49:b2:
                    3d:9b:5a:bc:78:73:58:4d:6b:b0:80:1e:0c:47:43:
                    65:e6:2f:fd:44:48:e1:1d:ad:ca:70:66:8a:d2:a1:
                    cf:03:7b:17:ca:5f:4a:e6:a1:25:3d:6a:57:bc:67:
                    15:b0:75:a5:ca:84:38:31:3d:16:c6:e3:a6:06:b3:
                    90:5a:4a:0f:10:29:78:aa:0d:e5:7f:2d:3f:8b:e9:
                    4b:d3:58:80:09:1c:1e:af:ad:f3:ae:ef:97:39:97:
                    77:cc:e8:d1:9d:ea:88:2b:a7:a2:56:8b:8a:d6:17:
                    92:7e:73:10:f8:b4:82:5b:ac:72:54:5d:33:aa:92:
                    e8:4b:33:d6:00:de:3e:4d:75:be:10:d7:ac:d5:08:
                    cf:01:e6:0d:a8:0b:f9:ec:5d:2b:48:23:b9:2a:28:
                    9a:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:D7:D6:71:53:67:55:F2:09:01:CC:2D:50:E7:E6:82:41:CE:F4:E5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d/6c03172a-7023-376d-98bb-2e1ff0df0403.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d/f2f0585e-a28e-4ead-9b1c-defd291ce54d.crl

            X509v3 Authority Key Identifier:
                keyid:7B:C6:78:77:88:93:19:53:E7:11:02:39:94:6D:8B:3D:13:7A:C2:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fb68:40::/42

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:86:97:f6:38:9a:b9:e9:bd:d8:e4:92:92:ca:df:2a:d1:e1:
         38:19:30:65:0a:0f:68:8c:d3:5f:f1:30:ad:c5:eb:e2:c8:9f:
         e7:dd:52:90:3e:37:f1:cb:7b:ea:fb:bf:ae:26:29:95:a5:77:
         24:a9:b0:ee:83:a9:55:09:00:05:6a:43:fd:82:ca:31:25:f7:
         bf:48:26:eb:15:ee:ea:16:9d:7c:06:f3:b1:77:c6:14:e7:e2:
         8f:e5:2e:7a:fc:a6:d5:7a:3d:01:b0:b2:e2:91:f8:62:e6:e7:
         47:3a:94:bb:8d:63:d9:34:ab:02:31:af:da:b0:4c:ef:2f:1e:
         53:ff:fa:7b:e4:65:f9:8a:10:01:c2:46:99:c7:ae:a4:bb:22:
         94:02:3e:87:a5:ab:4d:37:f8:47:4e:2a:19:54:7c:7b:22:b5:
         69:0c:3e:21:fc:4d:6c:74:63:78:e8:9b:06:c6:45:e6:f7:32:
         db:bc:7b:a0:7a:6e:b6:bd:f7:f9:31:8e:63:da:10:82:f0:e3:
         2a:99:cf:be:51:c2:f2:a3:63:80:f1:d3:f5:67:80:14:80:f5:
         e9:47:91:97:5d:52:35:19:f2:64:ee:0e:f7:98:23:d8:e2:ef:
         d3:d9:e2:f3:93:9b:70:e4:f8:7f:46:9f:cc:72:23:b9:b7:2c:
         30:44:12:47
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE7tUiLrp9dU2+XB4IAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjJmMDU4NWUtYTI4ZS00ZWFkLTliMWMtZGVmZDI5MWNl
NTRkMB4XDTI2MDgyMzAxMDAxMloXDTI2MTEyMTAyMDAxMlowLzEtMCsGA1UEAxMk
YjZhZTVkZDgtYmY3MS00NmVmLTg0Y2EtMWZhMmI5ZTQyMDEwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkwn/STMMXLtwGOP8qOGZhe3zuNitaH6l0HAS
XAaVDLcc5SOR90g2PbbacIuBylFNMapUg7kAkPZnN1+cybaemcWUsRP/HSv74BhR
bZu6zZe/31iiMPCm+76zLZ97dOfrg/wP7GXUSbI9m1q8eHNYTWuwgB4MR0Nl5i/9
REjhHa3KcGaK0qHPA3sXyl9K5qElPWpXvGcVsHWlyoQ4MT0WxuOmBrOQWkoPECl4
qg3lfy0/i+lL01iACRwer63zru+XOZd3zOjRneqIK6eiVouK1heSfnMQ+LSCW6xy
VF0zqpLoSzPWAN4+TXW+ENes1QjPAeYNqAv57F0rSCO5Kiia8wIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFALX1nFTZ1XyCQHMLVDn5oJBzvTlMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mMmYw
NTg1ZS1hMjhlLTRlYWQtOWIxYy1kZWZkMjkxY2U1NGQvNmMwMzE3MmEtNzAyMy0z
NzZkLTk4YmItMmUxZmYwZGYwNDAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZjJmMDU4NWUtYTI4ZS00ZWFkLTli
MWMtZGVmZDI5MWNlNTRkL2YyZjA1ODVlLWEyOGUtNGVhZC05YjFjLWRlZmQyOTFj
ZTU0ZC5jcmwwHwYDVR0jBBgwFoAUe8Z4d4iTGVPnEQI5lG2LPRN6wo8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9mMmYwNTg1ZS1hMjhlLTRlYWQtOWIxYy1kZWZk
MjkxY2U1NGQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcGJgL7aABA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBACmGl/Y4mrnpvdjkkpLK3yrR4TgZMGUKD2iM01/xMK3F6+LIn+fd
UpA+N/HLe+r7v64mKZWldySpsO6DqVUJAAVqQ/2CyjEl979IJusV7uoWnXwG87F3
xhTn4o/lLnr8ptV6PQGwsuKR+GLm50c6lLuNY9k0qwIxr9qwTO8vHlP/+nvkZfmK
EAHCRpnHrqS7IpQCPoelq003+EdOKhlUfHsitWkMPiH8TWx0Y3jomwbGReb3Mtu8
e6B6bra99/kxjmPaEILw4yqZz75RwvKjY4Dx0/VngBSA9elHkZddUjUZ8mTuDveY
I9ji79PZ4vOTm3Dk+H9Gn8xyI7m3LDBEEkc=
-----END CERTIFICATE-----
Generated at Wed Aug 26 08:09:19 2026 by rpki-client