Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b2d9b16a-e15f-46c2-a578-0677307787a3/3d87e764-6ebd-3b46-879a-c50c7cfdc1c2.roa
File:                     3d87e764-6ebd-3b46-879a-c50c7cfdc1c2.roa (raw, json)
Hash identifier:          KD30y/KPIWs0ihJTeIeFhJj1649EhxqgLvgGy8e5wdI=
Subject key identifier:   4A:DC:D4:51:0B:20:08:F5:CA:3C:E6:AF:47:13:2B:95:16:C4:5F:B8
Certificate issuer:       /CN=b2d9b16a-e15f-46c2-a578-0677307787a3
Certificate serial:       010D0C9F4328584F23C25298EC6EEE9B30501358
Authority key identifier: 20:4A:40:E3:31:B9:38:43:3F:08:46:33:45:10:16:A6:84:B1:83:68
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b2d9b16a-e15f-46c2-a578-0677307787a3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b2d9b16a-e15f-46c2-a578-0677307787a3/3d87e764-6ebd-3b46-879a-c50c7cfdc1c2.roa
Signing time:             Fri 11 Sep 2026 13:00:12 +0000
ROA not before:           Fri 11 Sep 2026 13:00:12 +0000
ROA not after:            Thu 10 Dec 2026 14:00:12 +0000
asID:                     399686
IP address blocks:        2606:62c0:1000::/36 maxlen: 36
                          2606:62c0:2000::/36 maxlen: 36
                          2606:62c0:3000::/36 maxlen: 36
                          2606:62c0:7000::/36 maxlen: 36
                          2606:62c0:8000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b2d9b16a-e15f-46c2-a578-0677307787a3/b2d9b16a-e15f-46c2-a578-0677307787a3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b2d9b16a-e15f-46c2-a578-0677307787a3/b2d9b16a-e15f-46c2-a578-0677307787a3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b2d9b16a-e15f-46c2-a578-0677307787a3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Sep 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:23:c2:52:98:ec:6e:ee:9b:30:50:13:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2d9b16a-e15f-46c2-a578-0677307787a3
        Validity
            Not Before: Sep 11 13:00:12 2026 GMT
            Not After : Dec 10 14:00:12 2026 GMT
        Subject: CN=372b63ac-d726-46c9-8dc2-ebb964f1827f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:cc:e4:82:bd:7b:c9:7f:6b:3d:67:2d:2f:43:
                    32:19:9d:d9:b9:ef:fd:86:f3:0d:bd:c1:a2:6e:a4:
                    c7:43:ff:ad:1a:d4:f2:9d:e0:3c:2f:c0:eb:f1:7d:
                    49:f1:81:6d:2c:1b:b1:72:ab:9a:02:47:bc:e1:79:
                    73:0f:4f:8e:9b:56:0f:9a:fa:39:18:30:c9:1d:42:
                    e7:39:8d:21:1e:1c:3c:aa:93:1d:d4:4f:25:7e:cc:
                    a4:86:d2:2b:39:b7:3e:10:34:eb:5e:55:89:20:bf:
                    ff:08:0c:e5:21:0d:bc:c9:20:2f:65:b6:a2:02:36:
                    3c:ac:14:5b:ce:61:9b:6d:ea:32:99:6c:a9:25:91:
                    97:e8:06:f9:13:90:ec:21:ec:8b:ba:f2:5b:95:a3:
                    5c:49:ad:67:32:65:61:4e:ce:36:de:45:28:4c:25:
                    f4:00:78:c0:c6:e6:80:6c:1c:1a:f2:12:d5:f2:71:
                    0a:bb:5a:8b:c6:89:8f:47:9b:83:30:47:f8:12:a8:
                    7e:d2:2d:6d:4e:c1:bc:93:db:fe:ce:8f:ca:c4:ba:
                    fb:cc:86:86:bb:ec:d7:14:da:6c:94:31:59:fd:65:
                    97:b2:20:71:7b:63:17:2b:53:fb:6f:27:67:f0:4a:
                    bf:91:b6:8b:81:1b:f6:29:70:8a:07:6f:f8:3c:de:
                    1b:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:DC:D4:51:0B:20:08:F5:CA:3C:E6:AF:47:13:2B:95:16:C4:5F:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b2d9b16a-e15f-46c2-a578-0677307787a3/3d87e764-6ebd-3b46-879a-c50c7cfdc1c2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b2d9b16a-e15f-46c2-a578-0677307787a3/b2d9b16a-e15f-46c2-a578-0677307787a3.crl

            X509v3 Authority Key Identifier:
                keyid:20:4A:40:E3:31:B9:38:43:3F:08:46:33:45:10:16:A6:84:B1:83:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b2d9b16a-e15f-46c2-a578-0677307787a3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:62c0:1000::-2606:62c0:3fff:ffff:ffff:ffff:ffff:ffff
                  2606:62c0:7000::-2606:62c0:8fff:ffff:ffff:ffff:ffff:ffff

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:9a:c0:cf:79:66:a8:9f:37:60:59:a3:90:58:5d:ee:02:d5:
         49:1e:86:fe:68:4f:98:09:98:68:e3:19:7e:bb:d1:a3:50:7c:
         de:22:fe:e9:c5:e5:2a:9d:c7:56:bd:97:08:0f:c6:aa:d0:4b:
         53:49:ed:33:1b:3b:19:83:8b:7c:cc:b1:76:89:69:e1:5e:ec:
         28:9d:ba:fe:2e:84:df:31:52:96:8a:25:d3:82:da:09:80:87:
         51:77:b2:05:28:a4:54:82:4d:5d:06:0e:72:dc:54:57:db:6d:
         34:b8:40:b9:59:32:dd:0f:ba:c4:05:f6:56:1b:96:ed:21:fc:
         d9:00:52:7b:2e:2a:63:9b:83:0d:d6:5f:d1:c3:96:3d:3d:ac:
         d7:53:0f:14:ca:83:de:74:93:3d:f1:c8:45:6b:12:90:33:57:
         b0:83:58:e9:a8:0d:5e:fe:9c:d4:cb:a6:92:cc:fd:00:be:93:
         89:28:ad:ae:6b:9e:58:7b:c7:7b:32:a1:b7:e0:54:60:d3:fa:
         7f:f4:57:36:42:63:af:41:e2:06:fe:e6:e8:a8:14:40:d6:5a:
         e9:92:f0:37:31:71:15:56:49:88:e6:ef:fd:4e:72:19:98:e1:
         34:15:46:66:de:1c:22:9a:37:5a:eb:cc:49:26:1f:a9:92:53:
         4f:c2:42:61
-----BEGIN CERTIFICATE-----
MIIGYTCCBUmgAwIBAgIUAQ0Mn0MoWE8jwlKY7G7umzBQE1gwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJkOWIxNmEtZTE1Zi00NmMyLWE1NzgtMDY3NzMwNzc4
N2EzMB4XDTI2MDkxMTEzMDAxMloXDTI2MTIxMDE0MDAxMlowLzEtMCsGA1UEAxMk
MzcyYjYzYWMtZDcyNi00NmM5LThkYzItZWJiOTY0ZjE4MjdmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhszkgr17yX9rPWctL0MyGZ3Zue/9hvMNvcGi
bqTHQ/+tGtTyneA8L8Dr8X1J8YFtLBuxcquaAke84XlzD0+Om1YPmvo5GDDJHULn
OY0hHhw8qpMd1E8lfsykhtIrObc+EDTrXlWJIL//CAzlIQ28ySAvZbaiAjY8rBRb
zmGbbeoymWypJZGX6Ab5E5DsIeyLuvJblaNcSa1nMmVhTs423kUoTCX0AHjAxuaA
bBwa8hLV8nEKu1qLxomPR5uDMEf4Eqh+0i1tTsG8k9v+zo/KxLr7zIaGu+zXFNps
lDFZ/WWXsiBxe2MXK1P7bydn8Eq/kbaLgRv2KXCKB2/4PN4b0wIDAQABo4IDczCC
A28wHQYDVR0OBBYEFErc1FELIAj1yjzmr0cTK5UWxF+4MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9iMmQ5
YjE2YS1lMTVmLTQ2YzItYTU3OC0wNjc3MzA3Nzg3YTMvM2Q4N2U3NjQtNmViZC0z
YjQ2LTg3OWEtYzUwYzdjZmRjMWMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYjJkOWIxNmEtZTE1Zi00NmMyLWE1
NzgtMDY3NzMwNzc4N2EzL2IyZDliMTZhLWUxNWYtNDZjMi1hNTc4LTA2NzczMDc3
ODdhMy5jcmwwHwYDVR0jBBgwFoAUIEpA4zG5OEM/CEYzRRAWpoSxg2gwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9iMmQ5YjE2YS1lMTVmLTQ2YzItYTU3OC0wNjc3
MzA3Nzg3YTMuY2VyMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAAjAkMBADBgQmBmLA
EAMGBiYGYsAAMBADBgQmBmLAcAMGBCYGYsCAMFQGA1UdIAEB/wRKMEgwRgYIKwYB
BQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3Vy
Y2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAHiawM95ZqifN2BZ
o5BYXe4C1Ukehv5oT5gJmGjjGX670aNQfN4i/unF5Sqdx1a9lwgPxqrQS1NJ7TMb
OxmDi3zMsXaJaeFe7Ciduv4uhN8xUpaKJdOC2gmAh1F3sgUopFSCTV0GDnLcVFfb
bTS4QLlZMt0PusQF9lYblu0h/NkAUnsuKmObgw3WX9HDlj09rNdTDxTKg950kz3x
yEVrEpAzV7CDWOmoDV7+nNTLppLM/QC+k4kora5rnlh7x3syobfgVGDT+n/0VzZC
Y69B4gb+5uioFEDWWumS8DcxcRVWSYjm7/1OchmY4TQVRmbeHCKaN1rrzEkmH6mS
U0/CQmE=
-----END CERTIFICATE-----
Generated at Sat Sep 12 08:29:00 2026 by rpki-client