Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/87a3c9bd-9a46-3bfe-a2d1-1472c9ff7cf5.roa
File:                     87a3c9bd-9a46-3bfe-a2d1-1472c9ff7cf5.roa (raw, json)
Hash identifier:          idgadcU2x7xUOJLfJPrubEF9fE5WD+Q3zon2LGjbmKc=
Subject key identifier:   45:33:8B:08:D6:40:A9:73:FA:57:93:C2:FA:9B:A6:6B:D6:E6:A4:43
Certificate issuer:       /CN=6e9c5894-f794-4209-a00d-cf232363d7c6
Certificate serial:       010D0C9F4328584DFA70868467CA1B32887392C0
Authority key identifier: EB:6D:3E:D4:C8:21:B9:96:11:9E:0C:09:FF:5D:B7:88:80:52:94:85
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/87a3c9bd-9a46-3bfe-a2d1-1472c9ff7cf5.roa
Signing time:             Thu 28 May 2026 01:00:10 +0000
ROA not before:           Thu 28 May 2026 01:00:10 +0000
ROA not after:            Wed 26 Aug 2026 01:00:10 +0000
asID:                     16509
IP address blocks:        2605:b040:1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/6e9c5894-f794-4209-a00d-cf232363d7c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/6e9c5894-f794-4209-a00d-cf232363d7c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 05 Jun 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:fa:70:86:84:67:ca:1b:32:88:73:92:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e9c5894-f794-4209-a00d-cf232363d7c6
        Validity
            Not Before: May 28 01:00:10 2026 GMT
            Not After : Aug 26 01:00:10 2026 GMT
        Subject: CN=ee9015aa-7216-4480-b377-1b39df79b2cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:ef:dd:b9:ca:59:f2:51:8c:b5:81:05:47:ac:
                    d3:d4:ac:f7:42:c6:69:45:d4:a4:db:34:30:6c:3b:
                    5e:6a:34:c1:39:af:5d:b1:24:4f:ad:ef:93:7e:f8:
                    01:b9:b8:67:57:49:3e:e1:cf:11:2d:56:ae:51:73:
                    9d:fc:2e:2b:96:06:5f:64:dd:1d:2c:c8:37:65:5b:
                    32:4b:4a:be:2c:b2:76:ca:f5:d2:06:49:48:a9:1d:
                    19:2a:26:d0:90:de:b1:51:67:21:31:7e:f9:76:1e:
                    cc:3e:e4:30:7f:9f:dc:f4:9f:1a:ff:ef:d8:3e:76:
                    94:a9:93:63:2d:cd:ec:88:26:33:bb:7a:25:56:e6:
                    33:81:75:4b:5a:30:d2:ce:f3:10:31:a4:1e:49:9d:
                    5e:e1:2e:00:bd:0f:3f:65:46:44:d6:99:f0:28:5e:
                    7b:ec:57:5e:46:98:83:db:85:74:19:a4:c0:42:75:
                    28:86:61:6a:4c:9f:41:e9:f4:b9:06:aa:bf:2c:6b:
                    19:37:ea:d2:15:8b:76:1a:6b:b3:5e:0d:50:cc:94:
                    e7:27:06:84:73:19:47:3d:7e:bb:cf:3d:fe:0c:99:
                    0e:f8:f0:66:9c:56:9e:03:ef:b3:3c:72:25:d5:47:
                    c7:00:f5:c5:7e:17:11:e4:51:05:c4:b6:6d:4e:f9:
                    8c:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:33:8B:08:D6:40:A9:73:FA:57:93:C2:FA:9B:A6:6B:D6:E6:A4:43
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/87a3c9bd-9a46-3bfe-a2d1-1472c9ff7cf5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/6e9c5894-f794-4209-a00d-cf232363d7c6.crl

            X509v3 Authority Key Identifier:
                keyid:EB:6D:3E:D4:C8:21:B9:96:11:9E:0C:09:FF:5D:B7:88:80:52:94:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:b040:1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:1d:51:3f:05:96:2e:df:7c:37:63:8b:fa:aa:d5:e5:b2:44:
         6e:74:f5:cc:df:cb:20:55:19:b8:70:a3:b9:ba:fd:84:72:25:
         de:25:e3:c2:ec:fa:c6:fd:88:f7:59:8b:f3:f0:70:d4:17:ac:
         db:6f:66:4b:91:04:ac:09:0b:64:0e:e4:12:10:86:a3:6e:d5:
         d6:49:38:2e:24:15:93:07:4b:b9:1f:93:d4:97:a4:55:e3:0b:
         77:ec:9b:42:c1:12:5a:60:ed:e8:92:6d:f7:ce:b7:c9:9e:f1:
         dc:2a:87:a2:3a:05:2b:a3:15:a3:f5:05:29:e1:c9:0e:4e:a5:
         72:f9:75:d3:eb:63:c3:85:ce:5e:db:ce:36:f2:c0:89:13:c4:
         ff:1c:24:de:0e:a5:26:00:47:6a:3f:b2:13:37:f7:a1:b2:3b:
         8a:7c:26:6c:b2:b1:1e:5b:d5:94:38:f7:89:fd:15:af:d0:4e:
         e8:5d:a2:58:48:c8:f6:5e:d8:b8:a4:a0:42:96:37:a2:35:77:
         a6:b6:58:f7:9b:dc:7a:3f:79:55:84:08:54:ed:da:04:c0:cc:
         02:d3:65:35:3c:dc:e6:ca:41:82:82:2a:6a:2f:f2:3e:dc:9b:
         c8:a9:60:f8:c0:cd:d4:8b:e4:16:51:f7:3f:d2:00:3a:2e:bb:
         73:1d:6a:30
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE36cIaEZ8obMohzksAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNmU5YzU4OTQtZjc5NC00MjA5LWEwMGQtY2YyMzIzNjNk
N2M2MB4XDTI2MDUyODAxMDAxMFoXDTI2MDgyNjAxMDAxMFowLzEtMCsGA1UEAxMk
ZWU5MDE1YWEtNzIxNi00NDgwLWIzNzctMWIzOWRmNzliMmNjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr+/ducpZ8lGMtYEFR6zT1Kz3QsZpRdSk2zQw
bDteajTBOa9dsSRPre+TfvgBubhnV0k+4c8RLVauUXOd/C4rlgZfZN0dLMg3ZVsy
S0q+LLJ2yvXSBklIqR0ZKibQkN6xUWchMX75dh7MPuQwf5/c9J8a/+/YPnaUqZNj
Lc3siCYzu3olVuYzgXVLWjDSzvMQMaQeSZ1e4S4AvQ8/ZUZE1pnwKF577FdeRpiD
24V0GaTAQnUohmFqTJ9B6fS5Bqq/LGsZN+rSFYt2GmuzXg1QzJTnJwaEcxlHPX67
zz3+DJkO+PBmnFaeA++zPHIl1UfHAPXFfhcR5FEFxLZtTvmMMQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFEUziwjWQKlz+leTwvqbpmvW5qRDMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82ZTlj
NTg5NC1mNzk0LTQyMDktYTAwZC1jZjIzMjM2M2Q3YzYvODdhM2M5YmQtOWE0Ni0z
YmZlLWEyZDEtMTQ3MmM5ZmY3Y2Y1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNmU5YzU4OTQtZjc5NC00MjA5LWEw
MGQtY2YyMzIzNjNkN2M2LzZlOWM1ODk0LWY3OTQtNDIwOS1hMDBkLWNmMjMyMzYz
ZDdjNi5jcmwwHwYDVR0jBBgwFoAU620+1MghuZYRngwJ/123iIBSlIUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82ZTljNTg5NC1mNzk0LTQyMDktYTAwZC1jZjIz
MjM2M2Q3YzYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgWwQAAB
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAFkdUT8Fli7ffDdji/qq1eWyRG509czfyyBVGbhwo7m6/YRyJd4l
48Ls+sb9iPdZi/PwcNQXrNtvZkuRBKwJC2QO5BIQhqNu1dZJOC4kFZMHS7kfk9SX
pFXjC3fsm0LBElpg7eiSbffOt8me8dwqh6I6BSujFaP1BSnhyQ5OpXL5ddPrY8OF
zl7bzjbywIkTxP8cJN4OpSYAR2o/shM396GyO4p8JmyysR5b1ZQ494n9Fa/QTuhd
olhIyPZe2LikoEKWN6I1d6a2WPeb3Ho/eVWECFTt2gTAzALTZTU83ObKQYKCKmov
8j7cm8ipYPjAzdSL5BZR9z/SADouu3MdajA=
-----END CERTIFICATE-----
Generated at Wed Jun 3 21:09:15 2026 by rpki-client