Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/c007bec6-63a6-3aa3-8fa3-7911489cacfa.roa
File:                     c007bec6-63a6-3aa3-8fa3-7911489cacfa.roa (raw, json)
Hash identifier:          SickiB5C5mFWgNXyMPrvEMvEn5TtxGXyrd0H25Kek8g=
Subject key identifier:   A5:BA:D9:74:DF:91:84:60:02:CE:35:51:D5:19:8E:73:BA:DA:20:FA
Certificate issuer:       /CN=9906748d-5823-4cd3-9a11-f3dc69a3e751
Certificate serial:       010D0C9F4328584E86F5088F38C261DC9EFB9580
Authority key identifier: A7:31:13:DA:A8:C2:6D:D3:40:47:B6:C3:2B:BA:78:43:31:2F:01:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/c007bec6-63a6-3aa3-8fa3-7911489cacfa.roa
Signing time:             Fri 17 Jul 2026 09:00:14 +0000
ROA not before:           Fri 17 Jul 2026 09:00:14 +0000
ROA not after:            Thu 15 Oct 2026 09:00:14 +0000
asID:                     14618
IP address blocks:        2620:147:c45::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 Jul 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:86:f5:08:8f:38:c2:61:dc:9e:fb:95:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9906748d-5823-4cd3-9a11-f3dc69a3e751
        Validity
            Not Before: Jul 17 09:00:14 2026 GMT
            Not After : Oct 15 09:00:14 2026 GMT
        Subject: CN=f5cacec9-9f15-49f4-a4cd-b0e26afcb33d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:cb:a8:88:08:77:15:c3:ef:e0:56:a3:18:5b:
                    3f:8b:da:b9:d6:e5:db:48:42:22:e3:e4:1d:38:9d:
                    8d:67:9e:56:67:c4:df:cc:45:fa:32:8e:91:7b:02:
                    bc:57:72:84:f0:42:f8:d5:c5:72:d2:84:ea:73:c8:
                    f2:0c:b2:78:ce:88:a4:54:84:77:0e:c8:f3:8d:03:
                    22:4f:40:cd:bb:33:45:06:e2:ed:7d:70:ac:78:69:
                    e8:9c:e8:85:cf:4e:27:71:e6:e4:7b:99:94:d2:b3:
                    0b:2c:a0:3c:be:56:a2:37:40:d8:8e:52:23:fb:52:
                    d9:44:a1:29:f4:f7:77:2d:ed:74:96:76:03:55:e8:
                    e1:ef:98:bc:3a:12:0e:f4:b4:41:9f:20:ef:4d:ae:
                    10:84:fa:5d:f3:c0:98:b2:46:b7:fe:fa:9f:b8:d5:
                    9f:89:a0:97:e2:95:4a:29:fd:71:8d:87:79:93:ab:
                    46:36:b2:63:58:57:bf:85:d9:49:fd:6c:40:6b:60:
                    a7:0d:c7:96:84:6c:ef:a8:67:e0:fa:54:e8:fb:ad:
                    c3:2c:90:69:fd:e1:34:f4:f2:c8:63:55:ba:43:2b:
                    13:40:f7:f6:8f:41:5f:b8:93:ff:18:b4:f9:66:01:
                    d7:9a:32:09:1c:68:19:5a:0b:4c:5f:2e:37:af:30:
                    34:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:BA:D9:74:DF:91:84:60:02:CE:35:51:D5:19:8E:73:BA:DA:20:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/c007bec6-63a6-3aa3-8fa3-7911489cacfa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.crl

            X509v3 Authority Key Identifier:
                keyid:A7:31:13:DA:A8:C2:6D:D3:40:47:B6:C3:2B:BA:78:43:31:2F:01:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:147:c45::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:07:ab:ef:0a:80:77:57:b2:8b:ae:3c:39:8f:59:a5:90:5d:
         2f:75:d0:0c:c7:83:8a:e0:f6:91:87:c2:7a:e4:86:1c:a4:8e:
         d9:0f:59:60:75:86:ac:c1:e0:13:5e:f9:18:c6:80:02:94:06:
         bc:04:d8:97:14:02:2e:81:e4:67:10:94:53:45:b3:33:c0:fc:
         a9:11:1e:c1:a8:53:73:da:93:cc:43:73:c6:76:61:f9:f2:7f:
         e4:8a:37:7b:18:2e:e9:8c:3a:25:21:0e:23:d9:49:bf:3e:42:
         63:b2:3a:35:bc:53:4f:9a:c3:b1:18:4f:12:19:d8:a0:e7:03:
         0e:0a:a8:bb:cd:72:97:5f:02:8b:62:52:1a:83:a4:1f:da:06:
         4d:97:92:54:5e:83:15:c8:dc:fb:22:b2:53:0f:39:32:a5:c9:
         db:6d:1f:51:5e:4b:37:f4:12:21:40:e3:ee:dc:61:0d:94:4f:
         11:2f:f7:03:b6:36:c7:ce:e6:d0:01:3e:29:6f:26:58:63:4c:
         0c:93:0c:d9:2f:31:06:ab:a6:d3:53:49:95:85:68:0f:1f:84:
         8b:cd:ed:3c:ab:d9:32:aa:f1:91:be:0f:ab:19:78:88:d2:4a:
         ec:e5:3e:67:94:62:14:3f:fa:97:86:ac:b3:9b:ef:c2:a1:a1:
         4f:6b:4e:86
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE6G9QiPOMJh3J77lYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTkwNjc0OGQtNTgyMy00Y2QzLTlhMTEtZjNkYzY5YTNl
NzUxMB4XDTI2MDcxNzA5MDAxNFoXDTI2MTAxNTA5MDAxNFowLzEtMCsGA1UEAxMk
ZjVjYWNlYzktOWYxNS00OWY0LWE0Y2QtYjBlMjZhZmNiMzNkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnMuoiAh3FcPv4FajGFs/i9q51uXbSEIi4+Qd
OJ2NZ55WZ8TfzEX6Mo6RewK8V3KE8EL41cVy0oTqc8jyDLJ4zoikVIR3DsjzjQMi
T0DNuzNFBuLtfXCseGnonOiFz04ncebke5mU0rMLLKA8vlaiN0DYjlIj+1LZRKEp
9Pd3Le10lnYDVejh75i8OhIO9LRBnyDvTa4QhPpd88CYska3/vqfuNWfiaCX4pVK
Kf1xjYd5k6tGNrJjWFe/hdlJ/WxAa2CnDceWhGzvqGfg+lTo+63DLJBp/eE09PLI
Y1W6QysTQPf2j0FfuJP/GLT5ZgHXmjIJHGgZWgtMXy43rzA0SQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFKW62XTfkYRgAs41UdUZjnO62iD6MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85OTA2
NzQ4ZC01ODIzLTRjZDMtOWExMS1mM2RjNjlhM2U3NTEvYzAwN2JlYzYtNjNhNi0z
YWEzLThmYTMtNzkxMTQ4OWNhY2ZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTkwNjc0OGQtNTgyMy00Y2QzLTlh
MTEtZjNkYzY5YTNlNzUxLzk5MDY3NDhkLTU4MjMtNGNkMy05YTExLWYzZGM2OWEz
ZTc1MS5jcmwwHwYDVR0jBBgwFoAUpzET2qjCbdNAR7bDK7p4QzEvAYAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85OTA2NzQ4ZC01ODIzLTRjZDMtOWExMS1mM2Rj
NjlhM2U3NTEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiABRwxF
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAFwHq+8KgHdXsouuPDmPWaWQXS910AzHg4rg9pGHwnrkhhykjtkP
WWB1hqzB4BNe+RjGgAKUBrwE2JcUAi6B5GcQlFNFszPA/KkRHsGoU3Pak8xDc8Z2
Yfnyf+SKN3sYLumMOiUhDiPZSb8+QmOyOjW8U0+aw7EYTxIZ2KDnAw4KqLvNcpdf
AotiUhqDpB/aBk2XklRegxXI3PsislMPOTKlydttH1FeSzf0EiFA4+7cYQ2UTxEv
9wO2NsfO5tABPilvJlhjTAyTDNkvMQarptNTSZWFaA8fhIvN7Tyr2TKq8ZG+D6sZ
eIjSSuzlPmeUYhQ/+peGrLOb78KhoU9rToY=
-----END CERTIFICATE-----
Generated at Tue Jul 21 15:58:40 2026 by rpki-client