Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/af3da563-8689-4ebd-a553-31a2f310113a/76f67f84-6693-3a33-8bf2-2b4e5d536b3d.roa
File:                     76f67f84-6693-3a33-8bf2-2b4e5d536b3d.roa (raw, json)
Hash identifier:          sDpCReazUpl4QBYZE715lF6T5gha1qaovHGnoJ7c0uk=
Subject key identifier:   AC:BC:E7:E7:88:84:DE:A3:62:B5:57:A6:51:05:8B:31:6E:1B:E8:0D
Certificate issuer:       /CN=af3da563-8689-4ebd-a553-31a2f310113a
Certificate serial:       010D0C9F4328584E1A144C0FC46BC73A3E867040
Authority key identifier: A6:AF:DB:BC:B6:BD:07:C4:FC:50:80:BB:DA:6D:DC:37:E0:69:92:E0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/af3da563-8689-4ebd-a553-31a2f310113a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/af3da563-8689-4ebd-a553-31a2f310113a/76f67f84-6693-3a33-8bf2-2b4e5d536b3d.roa
Signing time:             Mon 08 Jun 2026 09:00:12 +0000
ROA not before:           Mon 08 Jun 2026 09:00:12 +0000
ROA not after:            Sun 06 Sep 2026 09:00:12 +0000
asID:                     399688
IP address blocks:        2602:fb21::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/af3da563-8689-4ebd-a553-31a2f310113a/af3da563-8689-4ebd-a553-31a2f310113a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/af3da563-8689-4ebd-a553-31a2f310113a/af3da563-8689-4ebd-a553-31a2f310113a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/af3da563-8689-4ebd-a553-31a2f310113a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 12 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:1a:14:4c:0f:c4:6b:c7:3a:3e:86:70:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=af3da563-8689-4ebd-a553-31a2f310113a
        Validity
            Not Before: Jun  8 09:00:12 2026 GMT
            Not After : Sep  6 09:00:12 2026 GMT
        Subject: CN=122433dd-854d-4fb2-a1e3-96b9fd299c94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:1b:ac:34:d6:42:6d:9d:45:43:dc:6f:18:82:
                    b3:b8:b5:d8:d8:7b:09:72:be:eb:cb:08:cb:bc:8d:
                    1d:fb:4c:f6:22:ac:e9:eb:64:c6:57:4d:9d:e7:1f:
                    95:ad:bf:dc:53:63:26:78:0c:e5:6e:dd:1d:e9:18:
                    cf:99:ef:e5:29:07:3a:87:73:3e:47:72:a8:b5:21:
                    59:54:9c:83:ba:d1:d4:d7:b9:6e:11:89:90:c3:1c:
                    f9:2a:71:30:cd:71:1c:04:ac:2a:5d:c6:5a:09:19:
                    b0:16:94:26:b7:43:37:48:27:fa:89:6c:d6:f9:5c:
                    77:31:37:d0:d8:9f:3e:55:fd:a6:39:39:de:f4:de:
                    f8:b5:c4:d1:ae:9a:99:65:ce:eb:81:bf:e1:4a:b8:
                    41:f8:4e:b1:0a:04:2f:ee:ae:c3:50:e5:fe:4e:72:
                    7e:2f:3b:33:ed:b5:b0:9c:a4:cc:3c:17:66:d7:37:
                    35:36:f8:bf:4f:68:91:3c:16:9d:86:93:20:0e:c8:
                    2c:ab:cf:e2:f8:01:96:cb:d8:f4:af:d7:19:e7:3b:
                    b3:ad:ee:a7:89:b8:2e:32:d7:58:10:15:cd:e5:96:
                    42:2d:8e:bb:b5:80:19:7c:ff:1c:6b:56:90:85:6c:
                    cb:63:08:e8:69:fb:52:b7:aa:ac:5d:c8:47:21:e6:
                    56:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:BC:E7:E7:88:84:DE:A3:62:B5:57:A6:51:05:8B:31:6E:1B:E8:0D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/af3da563-8689-4ebd-a553-31a2f310113a/76f67f84-6693-3a33-8bf2-2b4e5d536b3d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/af3da563-8689-4ebd-a553-31a2f310113a/af3da563-8689-4ebd-a553-31a2f310113a.crl

            X509v3 Authority Key Identifier:
                keyid:A6:AF:DB:BC:B6:BD:07:C4:FC:50:80:BB:DA:6D:DC:37:E0:69:92:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/af3da563-8689-4ebd-a553-31a2f310113a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fb21::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:ca:d8:8b:39:53:44:07:6c:70:47:c6:3a:fd:45:83:50:8e:
         70:b7:f9:ec:8f:a2:57:77:a2:f9:75:82:7e:dd:7b:97:1b:32:
         af:6d:d0:39:1b:6d:fd:56:db:99:16:67:bd:2f:00:9e:3f:91:
         40:26:a6:61:cd:f9:15:3e:11:5c:0f:f6:8a:cc:f6:6c:a7:15:
         e4:f0:a2:e1:ee:f8:e0:36:5b:95:cb:27:ae:44:06:60:76:c4:
         92:ac:29:93:5c:49:4f:f6:c2:46:32:7c:7e:a2:28:3e:ee:e3:
         a5:ed:36:c9:6f:4f:ad:5c:6e:b7:7f:2e:a8:a3:9d:56:7a:e4:
         be:ea:01:e9:cb:0d:43:0f:ec:3d:fa:f2:0f:c2:97:61:6a:2c:
         e3:6b:50:b6:eb:50:79:71:fd:19:5f:b8:c1:85:a5:ee:1b:1c:
         db:50:98:0e:09:5a:a9:5f:93:d6:a0:c4:34:ef:48:64:4a:2c:
         0c:2d:96:f3:93:45:fd:ef:d7:b5:8d:9a:56:17:ac:ca:33:a6:
         a7:24:5e:3d:e0:57:5f:62:cf:4c:d9:2e:4c:cc:d0:44:bd:06:
         9a:2e:d2:ae:11:cb:af:68:c4:da:6f:a1:08:fb:cf:ca:bd:7f:
         de:3b:8f:a0:22:0a:07:ff:2c:da:1a:56:f6:10:76:e5:c1:9f:
         a5:f0:42:88
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE4aFEwPxGvHOj6GcEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWYzZGE1NjMtODY4OS00ZWJkLWE1NTMtMzFhMmYzMTAx
MTNhMB4XDTI2MDYwODA5MDAxMloXDTI2MDkwNjA5MDAxMlowLzEtMCsGA1UEAxMk
MTIyNDMzZGQtODU0ZC00ZmIyLWExZTMtOTZiOWZkMjk5Yzk0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnRusNNZCbZ1FQ9xvGIKzuLXY2HsJcr7rywjL
vI0d+0z2Iqzp62TGV02d5x+Vrb/cU2MmeAzlbt0d6RjPme/lKQc6h3M+R3KotSFZ
VJyDutHU17luEYmQwxz5KnEwzXEcBKwqXcZaCRmwFpQmt0M3SCf6iWzW+Vx3MTfQ
2J8+Vf2mOTne9N74tcTRrpqZZc7rgb/hSrhB+E6xCgQv7q7DUOX+TnJ+Lzsz7bWw
nKTMPBdm1zc1Nvi/T2iRPBadhpMgDsgsq8/i+AGWy9j0r9cZ5zuzre6nibguMtdY
EBXN5ZZCLY67tYAZfP8ca1aQhWzLYwjoaftSt6qsXchHIeZWuQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFKy85+eIhN6jYrVXplEFizFuG+gNMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9hZjNk
YTU2My04Njg5LTRlYmQtYTU1My0zMWEyZjMxMDExM2EvNzZmNjdmODQtNjY5My0z
YTMzLThiZjItMmI0ZTVkNTM2YjNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k
MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYWYzZGE1NjMtODY4OS00ZWJkLWE1
NTMtMzFhMmYzMTAxMTNhL2FmM2RhNTYzLTg2ODktNGViZC1hNTUzLTMxYTJmMzEw
MTEzYS5jcmwwHwYDVR0jBBgwFoAUpq/bvLa9B8T8UIC72m3cN+BpkuAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2
NS04MzA4LWRmMjU5N2UzNDNmOC9hZjNkYTU2My04Njg5LTRlYmQtYTU1My0zMWEy
ZjMxMDExM2EuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL7IQAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAIcrYizlTRAdscEfGOv1Fg1COcLf57I+iV3ei+XWCft17lxsyr23Q
ORtt/VbbmRZnvS8Anj+RQCamYc35FT4RXA/2isz2bKcV5PCi4e744DZblcsnrkQG
YHbEkqwpk1xJT/bCRjJ8fqIoPu7jpe02yW9PrVxut38uqKOdVnrkvuoB6csNQw/s
PfryD8KXYWos42tQtutQeXH9GV+4wYWl7hsc21CYDglaqV+T1qDENO9IZEosDC2W
85NF/e/XtY2aVhesyjOmpyRePeBXX2LPTNkuTMzQRL0Gmi7SrhHLr2jE2m+hCPvP
yr1/3juPoCIKB/8s2hpW9hB25cGfpfBCiA==
-----END CERTIFICATE-----
Generated at Wed Jun 10 03:37:07 2026 by rpki-client