Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/ffdf5012-2d06-3fc2-8e1a-21edbc4b1f1e.roa
File:                     ffdf5012-2d06-3fc2-8e1a-21edbc4b1f1e.roa (raw, json)
Hash identifier:          Lm+wi6e1GwAp0utlVMMjvtnk3QFKZ7zr2CR0isu1xx4=
Subject key identifier:   E1:56:B8:83:57:84:9D:2D:40:80:12:8A:61:E5:1B:F6:86:1F:35:E0
Certificate issuer:       /CN=84ee337c-42c7-4207-b916-5028c8c62f82
Certificate serial:       010D0C9F4328584D40CA454CEBC340312E76C8D0
Authority key identifier: A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/ffdf5012-2d06-3fc2-8e1a-21edbc4b1f1e.roa
Signing time:             Sun 22 Mar 2026 13:00:41 +0000
ROA not before:           Sun 22 Mar 2026 13:00:41 +0000
ROA not after:            Sat 20 Jun 2026 13:00:41 +0000
asID:                     11537
IP address blocks:        2001:468:1f11::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 26 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:40:ca:45:4c:eb:c3:40:31:2e:76:c8:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84ee337c-42c7-4207-b916-5028c8c62f82
        Validity
            Not Before: Mar 22 13:00:41 2026 GMT
            Not After : Jun 20 13:00:41 2026 GMT
        Subject: CN=4d0ab3c4-6880-4d92-90ff-1f5a1a4f5b53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:a4:c7:17:d6:6f:38:0e:d3:d1:91:d5:fc:be:
                    e0:c6:10:f9:94:2f:f4:9a:a4:55:03:2d:4e:50:3a:
                    fa:66:73:27:5e:65:3b:dd:61:fa:58:77:a5:3e:0c:
                    a7:d5:30:3e:54:ec:44:30:5c:e3:07:0a:0f:6c:c8:
                    e1:24:23:4c:c0:fd:7a:54:2c:23:9d:08:a2:99:ea:
                    98:36:4d:1e:56:80:fb:19:d4:a2:93:d8:74:53:34:
                    25:90:e6:6c:9c:4f:8c:a1:4a:8d:4b:cf:5f:ca:81:
                    ad:1a:bd:ee:d1:38:eb:af:45:a8:3c:96:e1:42:42:
                    9e:cd:48:d1:e9:12:26:4a:0f:27:5e:34:3d:8e:d1:
                    ec:50:06:9f:5c:21:70:5b:06:3d:55:6f:13:5e:d9:
                    74:41:49:80:a6:59:73:50:be:d6:9a:19:df:b0:23:
                    29:a2:e4:6e:52:c6:06:8b:72:9c:c7:e4:01:e2:7c:
                    0e:b0:ad:6b:3b:a9:5b:04:15:b8:1c:12:13:7f:7b:
                    70:07:7c:1e:17:76:09:06:15:7f:a3:b1:f3:1f:53:
                    9f:23:c7:80:d9:e9:d5:6f:cc:ea:e0:91:db:ef:7d:
                    ea:02:de:c9:d7:af:3b:c6:1a:55:52:96:d6:5c:ac:
                    3e:4d:bb:6d:bf:b5:56:c9:0d:0a:14:e6:ef:bc:6c:
                    12:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:56:B8:83:57:84:9D:2D:40:80:12:8A:61:E5:1B:F6:86:1F:35:E0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/ffdf5012-2d06-3fc2-8e1a-21edbc4b1f1e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl

            X509v3 Authority Key Identifier:
                keyid:A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:468:1f11::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:df:f4:e1:85:18:75:4e:c2:12:b7:6e:96:bf:c4:4a:85:93:
         4c:ca:7c:45:01:84:d2:f7:d2:95:1a:a0:4d:fe:4c:ed:e9:ca:
         28:c5:fb:c5:72:96:60:c0:da:f1:34:7e:f0:26:41:21:85:ed:
         54:4e:3f:6e:d1:22:ea:b8:b9:3a:30:fa:46:ae:17:8a:84:98:
         e2:82:d5:29:f1:bd:fd:cb:78:52:82:2a:93:8b:e5:ff:35:ca:
         f9:55:f8:d3:7e:be:e8:9e:6e:d4:6b:c6:46:6f:66:7d:fb:70:
         00:d3:ff:d4:c0:a7:9c:2b:46:4b:94:98:34:3d:8f:cf:e6:b4:
         4a:ba:01:24:94:c3:3c:0f:e7:80:48:9d:c8:bc:32:56:04:43:
         ab:35:39:b9:8c:2b:eb:63:94:84:31:77:6e:98:4d:e8:82:e0:
         14:76:f2:0d:a8:03:e2:cc:c6:85:ff:87:51:ae:23:56:62:f3:
         3c:46:1f:64:3c:9a:42:43:a6:aa:9b:41:d2:e8:54:71:64:0e:
         68:15:00:b9:ac:7d:62:a4:22:e4:04:97:eb:da:39:ea:0d:8c:
         11:43:0b:d9:a6:7b:c2:01:58:72:e1:0d:cb:c2:7f:ad:fd:b8:
         68:86:52:aa:80:6b:ed:f7:78:cf:a1:b7:0a:3a:a5:1e:72:9b:
         0d:2c:43:21
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE1AykVM68NAMS52yNAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODRlZTMzN2MtNDJjNy00MjA3LWI5MTYtNTAyOGM4YzYy
ZjgyMB4XDTI2MDMyMjEzMDA0MVoXDTI2MDYyMDEzMDA0MVowLzEtMCsGA1UEAxMk
NGQwYWIzYzQtNjg4MC00ZDkyLTkwZmYtMWY1YTFhNGY1YjUzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyaTHF9ZvOA7T0ZHV/L7gxhD5lC/0mqRVAy1O
UDr6ZnMnXmU73WH6WHelPgyn1TA+VOxEMFzjBwoPbMjhJCNMwP16VCwjnQiimeqY
Nk0eVoD7GdSik9h0UzQlkOZsnE+MoUqNS89fyoGtGr3u0Tjrr0WoPJbhQkKezUjR
6RImSg8nXjQ9jtHsUAafXCFwWwY9VW8TXtl0QUmApllzUL7WmhnfsCMpouRuUsYG
i3Kcx+QB4nwOsK1rO6lbBBW4HBITf3twB3weF3YJBhV/o7HzH1OfI8eA2enVb8zq
4JHb733qAt7J1687xhpVUpbWXKw+Tbttv7VWyQ0KFObvvGwSsQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFOFWuINXhJ0tQIASimHlG/aGHzXgMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NGVl
MzM3Yy00MmM3LTQyMDctYjkxNi01MDI4YzhjNjJmODIvZmZkZjUwMTItMmQwNi0z
ZmMyLThlMWEtMjFlZGJjNGIxZjFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvODRlZTMzN2MtNDJjNy00MjA3LWI5
MTYtNTAyOGM4YzYyZjgyLzg0ZWUzMzdjLTQyYzctNDIwNy1iOTE2LTUwMjhjOGM2
MmY4Mi5jcmwwHwYDVR0jBBgwFoAUocWrpVSDlo0zNHR8acBfKZbeJfgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi84NGVlMzM3Yy00MmM3LTQyMDctYjkxNi01MDI4
YzhjNjJmODIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEaB8R
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAJDf9OGFGHVOwhK3bpa/xEqFk0zKfEUBhNL30pUaoE3+TO3pyijF
+8VylmDA2vE0fvAmQSGF7VROP27RIuq4uTow+kauF4qEmOKC1Snxvf3LeFKCKpOL
5f81yvlV+NN+vuiebtRrxkZvZn37cADT/9TAp5wrRkuUmDQ9j8/mtEq6ASSUwzwP
54BInci8MlYEQ6s1ObmMK+tjlIQxd26YTeiC4BR28g2oA+LMxoX/h1GuI1Zi8zxG
H2Q8mkJDpqqbQdLoVHFkDmgVALmsfWKkIuQEl+vaOeoNjBFDC9mme8IBWHLhDcvC
f639uGiGUqqAa+33eM+htwo6pR5ymw0sQyE=
-----END CERTIFICATE-----
Generated at Tue Mar 24 22:14:09 2026 by rpki-client