Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/c2094aac-f917-3c6b-8bbc-b419d2002ffb.roa
File:                     c2094aac-f917-3c6b-8bbc-b419d2002ffb.roa (raw, json)
Hash identifier:          XK2DJA9pTGr+6WAIS5dVgD90wljMTagAo2U6+rocPzE=
Subject key identifier:   9C:F4:C5:31:43:E2:AB:41:0A:7F:44:0D:3E:22:E1:68:B2:62:A5:BC
Certificate issuer:       /CN=3aba2284-9d24-4b6f-bc96-aa407d7a426f
Certificate serial:       010D0C9F4328584D1435E843EE73B9848E6EEB00
Authority key identifier: B5:BE:EE:25:A1:3A:DA:9E:A2:53:19:6E:15:87:43:3E:67:0B:53:58
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/c2094aac-f917-3c6b-8bbc-b419d2002ffb.roa
Signing time:             Fri 06 Mar 2026 13:46:21 +0000
ROA not before:           Fri 06 Mar 2026 13:46:21 +0000
ROA not after:            Thu 04 Jun 2026 12:46:21 +0000
asID:                     16740
IP address blocks:        2602:f5c1:39::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/3aba2284-9d24-4b6f-bc96-aa407d7a426f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/3aba2284-9d24-4b6f-bc96-aa407d7a426f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 12 Mar 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:14:35:e8:43:ee:73:b9:84:8e:6e:eb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3aba2284-9d24-4b6f-bc96-aa407d7a426f
        Validity
            Not Before: Mar  6 13:46:21 2026 GMT
            Not After : Jun  4 12:46:21 2026 GMT
        Subject: CN=fef32b16-dc75-4667-b386-33b3620d82fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:78:be:5a:15:3f:03:76:90:b4:d4:15:c7:80:
                    2b:c4:c4:4a:29:25:7c:35:03:5c:e5:ff:5a:5f:69:
                    57:fc:97:9a:69:ac:33:0e:ab:34:30:bc:3d:fa:59:
                    af:cb:f8:e0:22:e7:4e:65:50:ee:67:f5:53:74:69:
                    b3:22:37:f2:d8:87:9c:06:d2:66:d2:ad:eb:99:5c:
                    b1:c1:6b:c9:93:fc:7f:c0:51:aa:4a:2d:20:4e:2e:
                    50:e6:b8:64:a9:23:11:fe:96:63:6c:50:33:72:e5:
                    93:5c:52:06:16:90:9c:3f:44:55:ee:e1:40:f8:7e:
                    ea:7a:d6:98:31:72:e9:ee:62:7f:c9:4d:ff:78:89:
                    31:ef:d1:af:68:83:fd:4f:a2:0e:81:a0:95:04:b8:
                    01:d3:1d:75:1e:ab:68:4e:0b:9c:81:a8:93:0e:7e:
                    fb:f3:9c:0f:18:76:7b:ec:8e:4f:10:fc:d5:91:b9:
                    0e:2b:91:69:1d:ee:42:e0:0a:d8:8d:a5:b1:a2:9f:
                    e4:4d:77:87:06:df:9c:99:4e:c5:8b:8c:c5:16:c4:
                    dd:d3:c6:d8:b7:c3:da:15:a7:ea:3f:cf:84:8b:28:
                    15:ff:a2:28:38:5a:fa:a5:6e:62:a2:82:31:6b:64:
                    c5:08:83:34:c3:d5:76:f4:1d:fc:5d:94:00:63:e4:
                    6c:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:F4:C5:31:43:E2:AB:41:0A:7F:44:0D:3E:22:E1:68:B2:62:A5:BC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/c2094aac-f917-3c6b-8bbc-b419d2002ffb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/3aba2284-9d24-4b6f-bc96-aa407d7a426f.crl

            X509v3 Authority Key Identifier:
                keyid:B5:BE:EE:25:A1:3A:DA:9E:A2:53:19:6E:15:87:43:3E:67:0B:53:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f5c1:39::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:04:4f:75:07:e3:87:de:32:f0:75:32:36:8b:18:bb:9e:f9:
         96:74:e4:98:c1:51:0b:8d:08:d4:0d:bf:ce:42:a0:af:ee:4d:
         f4:e8:ce:f7:04:c3:17:3a:15:a8:9b:11:33:e6:e8:84:dc:a3:
         94:cf:41:8d:86:02:7a:97:c6:31:a3:53:1f:58:ab:98:db:e2:
         4a:67:01:0b:da:83:79:93:05:17:6d:3d:e3:ab:1b:5e:b2:a0:
         05:2a:e2:9b:53:8f:1f:96:b8:38:b4:15:1e:d4:95:80:18:02:
         85:03:90:d5:17:ea:f1:d4:d3:d2:63:59:45:b1:e3:ba:d6:a2:
         9e:65:09:48:20:2e:b0:0e:a8:98:54:09:8f:5e:8b:2f:0c:04:
         3e:91:f6:93:c0:8c:5b:7b:5d:70:d9:73:63:ee:cf:df:24:c7:
         3a:6c:b1:d0:54:c3:e0:bd:2e:8a:6d:3c:a8:20:2c:22:98:6a:
         81:2a:8f:6c:6e:d2:27:55:41:c6:0a:bf:bc:98:2a:06:81:4b:
         b9:87:2b:e8:17:88:12:59:43:c0:2b:51:e0:c4:8d:3e:b0:87:
         00:a3:16:0f:04:8f:d5:55:fb:be:7e:92:7e:88:50:76:2d:d2:
         33:35:6f:3e:29:42:fa:e8:70:dc:f9:80:f8:69:be:72:9b:7c:
         d6:b5:46:37
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0UNehD7nO5hI5u6wAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2FiYTIyODQtOWQyNC00YjZmLWJjOTYtYWE0MDdkN2E0
MjZmMB4XDTI2MDMwNjEzNDYyMVoXDTI2MDYwNDEyNDYyMVowLzEtMCsGA1UEAxMk
ZmVmMzJiMTYtZGM3NS00NjY3LWIzODYtMzNiMzYyMGQ4MmZkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyni+WhU/A3aQtNQVx4ArxMRKKSV8NQNc5f9a
X2lX/JeaaawzDqs0MLw9+lmvy/jgIudOZVDuZ/VTdGmzIjfy2IecBtJm0q3rmVyx
wWvJk/x/wFGqSi0gTi5Q5rhkqSMR/pZjbFAzcuWTXFIGFpCcP0RV7uFA+H7qetaY
MXLp7mJ/yU3/eIkx79GvaIP9T6IOgaCVBLgB0x11HqtoTgucgaiTDn7785wPGHZ7
7I5PEPzVkbkOK5FpHe5C4ArYjaWxop/kTXeHBt+cmU7Fi4zFFsTd08bYt8PaFafq
P8+EiygV/6IoOFr6pW5iooIxa2TFCIM0w9V29B38XZQAY+RsNQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFJz0xTFD4qtBCn9EDT4i4WiyYqW8MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8zYWJh
MjI4NC05ZDI0LTRiNmYtYmM5Ni1hYTQwN2Q3YTQyNmYvYzIwOTRhYWMtZjkxNy0z
YzZiLThiYmMtYjQxOWQyMDAyZmZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k
MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvM2FiYTIyODQtOWQyNC00YjZmLWJj
OTYtYWE0MDdkN2E0MjZmLzNhYmEyMjg0LTlkMjQtNGI2Zi1iYzk2LWFhNDA3ZDdh
NDI2Zi5jcmwwHwYDVR0jBBgwFoAUtb7uJaE62p6iUxluFYdDPmcLU1gwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2
NS04MzA4LWRmMjU5N2UzNDNmOC8zYWJhMjI4NC05ZDI0LTRiNmYtYmM5Ni1hYTQw
N2Q3YTQyNmYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL1wQA5
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAF4ET3UH44feMvB1MjaLGLue+ZZ05JjBUQuNCNQNv85CoK/uTfTo
zvcEwxc6FaibETPm6ITco5TPQY2GAnqXxjGjUx9Yq5jb4kpnAQvag3mTBRdtPeOr
G16yoAUq4ptTjx+WuDi0FR7UlYAYAoUDkNUX6vHU09JjWUWx47rWop5lCUggLrAO
qJhUCY9eiy8MBD6R9pPAjFt7XXDZc2Puz98kxzpssdBUw+C9LoptPKggLCKYaoEq
j2xu0idVQcYKv7yYKgaBS7mHK+gXiBJZQ8ArUeDEjT6whwCjFg8Ej9VV+75+kn6I
UHYt0jM1bz4pQvrocNz5gPhpvnKbfNa1Rjc=
-----END CERTIFICATE-----
Generated at Wed Mar 11 19:03:03 2026 by rpki-client