Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4ee5141e-a069-4955-8c55-4da5dfd36fa7/8c417310-1190-3606-a87a-59e4951b567e.roa
File:                     8c417310-1190-3606-a87a-59e4951b567e.roa (raw, json)
Hash identifier:          tyla336b2LD9gbun20T8bTV5Bdc34ulhhWoit6t1Fc4=
Subject key identifier:   C9:71:A5:93:D3:25:55:77:CE:AE:DB:DD:C0:DE:8C:7D:06:8D:8C:67
Certificate issuer:       /CN=4ee5141e-a069-4955-8c55-4da5dfd36fa7
Certificate serial:       010D0C9F4328584D4A8FBB5ACF41E9C3BC9C4540
Authority key identifier: 65:C9:42:6B:A0:76:47:52:56:27:29:98:79:48:05:81:BE:B5:AE:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4ee5141e-a069-4955-8c55-4da5dfd36fa7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4ee5141e-a069-4955-8c55-4da5dfd36fa7/8c417310-1190-3606-a87a-59e4951b567e.roa
Signing time:             Thu 26 Mar 2026 01:00:32 +0000
ROA not before:           Thu 26 Mar 2026 01:00:32 +0000
ROA not after:            Wed 24 Jun 2026 01:00:32 +0000
asID:                     0
IP address blocks:        2001:504:13f::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4ee5141e-a069-4955-8c55-4da5dfd36fa7/4ee5141e-a069-4955-8c55-4da5dfd36fa7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4ee5141e-a069-4955-8c55-4da5dfd36fa7/4ee5141e-a069-4955-8c55-4da5dfd36fa7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4ee5141e-a069-4955-8c55-4da5dfd36fa7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:4a:8f:bb:5a:cf:41:e9:c3:bc:9c:45:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ee5141e-a069-4955-8c55-4da5dfd36fa7
        Validity
            Not Before: Mar 26 01:00:32 2026 GMT
            Not After : Jun 24 01:00:32 2026 GMT
        Subject: CN=9689c45b-03b1-4e3d-9c97-ba7222ed4e29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:72:fb:2e:94:a8:56:9b:80:aa:14:e4:ce:81:
                    b7:d7:b2:2a:41:24:64:76:30:3a:ad:90:2a:cb:7d:
                    65:55:d6:8a:cb:51:ab:4e:02:6c:4e:50:da:68:97:
                    37:89:d4:7b:3f:87:78:fa:a6:c5:2b:30:48:19:a4:
                    89:64:a9:fa:a6:86:87:39:bb:f6:ac:c9:47:7b:34:
                    b2:21:d0:07:66:0e:6b:12:ee:59:c3:e0:45:de:05:
                    5f:56:1a:88:e0:79:34:83:a0:98:75:92:68:5a:12:
                    f1:f1:25:ba:5e:5f:7b:71:c1:cb:a5:63:6b:15:aa:
                    28:af:9a:be:74:7d:c5:5d:cd:b1:4e:d5:59:93:7b:
                    ab:a2:9b:b0:ac:13:49:7e:5b:c7:5a:90:b7:6d:26:
                    0d:ce:b8:4b:e0:60:da:ea:6d:32:ef:8b:5b:eb:c3:
                    8d:88:2b:6d:64:70:08:59:cb:df:b4:07:b2:33:7d:
                    a2:b5:89:97:f2:0f:ca:59:9a:9a:3f:bd:3a:c9:07:
                    fd:1d:56:37:a3:e9:e5:e9:08:5a:1f:6e:af:db:4d:
                    40:9e:27:50:f3:8e:bd:4f:ac:d6:17:32:2a:b5:62:
                    ab:cc:76:12:a4:f8:9e:13:9f:cd:2c:e4:8f:04:ee:
                    d5:ec:d3:5f:bc:1e:d7:6b:da:a2:3d:fc:2d:dd:85:
                    01:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:71:A5:93:D3:25:55:77:CE:AE:DB:DD:C0:DE:8C:7D:06:8D:8C:67
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4ee5141e-a069-4955-8c55-4da5dfd36fa7/8c417310-1190-3606-a87a-59e4951b567e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4ee5141e-a069-4955-8c55-4da5dfd36fa7/4ee5141e-a069-4955-8c55-4da5dfd36fa7.crl

            X509v3 Authority Key Identifier:
                keyid:65:C9:42:6B:A0:76:47:52:56:27:29:98:79:48:05:81:BE:B5:AE:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4ee5141e-a069-4955-8c55-4da5dfd36fa7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:504:13f::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:b7:cc:1b:06:95:62:65:0e:ed:f2:de:61:e9:2c:93:d0:a5:
         8e:17:28:c3:0d:6b:e9:a8:df:61:ac:af:b8:3c:3e:ca:e5:e9:
         b5:f5:8e:52:95:b4:c9:38:38:06:09:c8:f7:0d:d9:7d:c3:c1:
         8c:1b:14:ee:15:a4:fa:e8:73:fe:22:cc:f8:4d:61:c5:bb:c2:
         1a:23:af:35:26:76:05:01:1a:36:d5:da:8c:9f:1c:e4:c5:c4:
         02:97:0c:b8:17:55:5c:91:ff:59:10:91:7d:6b:29:ec:b5:ea:
         c6:0a:96:e9:20:c0:db:36:6f:01:f2:5d:48:59:e8:63:be:60:
         14:e0:02:f7:66:4e:89:61:4e:f0:e7:3f:46:b9:af:cb:8e:a2:
         f3:ea:ac:09:41:3d:a7:58:53:30:de:e7:dd:33:ac:ff:45:9f:
         44:60:4a:79:59:1d:6c:b2:f2:ae:a6:e7:31:e2:8e:af:71:73:
         24:f5:a0:94:5b:aa:f4:db:8a:8b:cb:9b:3d:88:55:54:e4:26:
         13:cf:93:43:1a:78:cd:c4:fe:2c:ad:95:72:87:df:51:89:3a:
         9c:fe:b1:99:42:a9:01:90:18:e5:5c:de:2e:13:05:57:fe:70:
         a9:8c:0b:c4:78:23:a4:7e:67:fb:c9:8e:cd:b6:48:eb:e4:a1:
         14:39:4a:7e
-----BEGIN CERTIFICATE-----
MIIGSDCCBTCgAwIBAgIUAQ0Mn0MoWE1Kj7taz0Hpw7ycRUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGVlNTE0MWUtYTA2OS00OTU1LThjNTUtNGRhNWRmZDM2
ZmE3MB4XDTI2MDMyNjAxMDAzMloXDTI2MDYyNDAxMDAzMlowLzEtMCsGA1UEAxMk
OTY4OWM0NWItMDNiMS00ZTNkLTljOTctYmE3MjIyZWQ0ZTI5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvXL7LpSoVpuAqhTkzoG317IqQSRkdjA6rZAq
y31lVdaKy1GrTgJsTlDaaJc3idR7P4d4+qbFKzBIGaSJZKn6poaHObv2rMlHezSy
IdAHZg5rEu5Zw+BF3gVfVhqI4Hk0g6CYdZJoWhLx8SW6Xl97ccHLpWNrFaoor5q+
dH3FXc2xTtVZk3uropuwrBNJflvHWpC3bSYNzrhL4GDa6m0y74tb68ONiCttZHAI
WcvftAeyM32itYmX8g/KWZqaP706yQf9HVY3o+nl6QhaH26v201AnidQ8469T6zW
FzIqtWKrzHYSpPieE5/NLOSPBO7V7NNfvB7Xa9qiPfwt3YUBJwIDAQABo4IDWjCC
A1YwHQYDVR0OBBYEFMlxpZPTJVV3zq7b3cDejH0GjYxnMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZWU1
MTQxZS1hMDY5LTQ5NTUtOGM1NS00ZGE1ZGZkMzZmYTcvOGM0MTczMTAtMTE5MC0z
NjA2LWE4N2EtNTllNDk1MWI1NjdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGVlNTE0MWUtYTA2OS00OTU1LThj
NTUtNGRhNWRmZDM2ZmE3LzRlZTUxNDFlLWEwNjktNDk1NS04YzU1LTRkYTVkZmQz
NmZhNy5jcmwwHwYDVR0jBBgwFoAUZclCa6B2R1JWJymYeUgFgb61rrswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZWU1MTQxZS1hMDY5LTQ5NTUtOGM1NS00ZGE1
ZGZkMzZmYTcuY2VyMCQGCCsGAQUFBwEHAQH/BBUwEzARBAIAAjALAwkAIAEFBAE/
AAAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw
czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG
9w0BAQsFAAOCAQEADrfMGwaVYmUO7fLeYeksk9Cljhcoww1r6ajfYayvuDw+yuXp
tfWOUpW0yTg4BgnI9w3ZfcPBjBsU7hWk+uhz/iLM+E1hxbvCGiOvNSZ2BQEaNtXa
jJ8c5MXEApcMuBdVXJH/WRCRfWsp7LXqxgqW6SDA2zZvAfJdSFnoY75gFOAC92ZO
iWFO8Oc/Rrmvy46i8+qsCUE9p1hTMN7n3TOs/0WfRGBKeVkdbLLyrqbnMeKOr3Fz
JPWglFuq9NuKi8ubPYhVVOQmE8+TQxp4zcT+LK2VcoffUYk6nP6xmUKpAZAY5Vze
LhMFV/5wqYwLxHgjpH5n+8mOzbZI6+ShFDlKfg==
-----END CERTIFICATE-----
Generated at Tue Apr 7 19:42:35 2026 by rpki-client