Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5bac54b9-66dc-4956-863d-1804cfb9e853/98c4a59e-53eb-33ab-9815-5c2ca32e9e9b.roa
File:                     98c4a59e-53eb-33ab-9815-5c2ca32e9e9b.roa (raw, json)
Hash identifier:          NjZgH1rMJDuv/DyZmCBAbkaFmEAOk1yLdovQAB2E1ew=
Subject key identifier:   EE:8E:AB:73:78:DA:38:06:28:1A:D0:8F:59:D6:C2:86:A5:76:F6:40
Certificate issuer:       /CN=5bac54b9-66dc-4956-863d-1804cfb9e853
Certificate serial:       010D0C9F4328584E4129D9EEA8202A0070030C80
Authority key identifier: 7F:4A:9A:A7:40:62:CD:6D:BF:70:19:16:CE:FD:9B:2A:27:E6:2E:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5bac54b9-66dc-4956-863d-1804cfb9e853.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5bac54b9-66dc-4956-863d-1804cfb9e853/98c4a59e-53eb-33ab-9815-5c2ca32e9e9b.roa
Signing time:             Mon 22 Jun 2026 09:00:11 +0000
ROA not before:           Mon 22 Jun 2026 09:00:11 +0000
ROA not after:            Sun 20 Sep 2026 09:00:11 +0000
asID:                     399077
IP address blocks:        2606:4dc0:6::/48 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5bac54b9-66dc-4956-863d-1804cfb9e853/5bac54b9-66dc-4956-863d-1804cfb9e853.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5bac54b9-66dc-4956-863d-1804cfb9e853/5bac54b9-66dc-4956-863d-1804cfb9e853.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5bac54b9-66dc-4956-863d-1804cfb9e853.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 25 Jun 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:41:29:d9:ee:a8:20:2a:00:70:03:0c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5bac54b9-66dc-4956-863d-1804cfb9e853
        Validity
            Not Before: Jun 22 09:00:11 2026 GMT
            Not After : Sep 20 09:00:11 2026 GMT
        Subject: CN=a688ca56-7502-4d7c-bfda-fafebf4e7528
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:26:b8:3c:9c:b7:42:bd:d6:96:8b:36:dc:72:
                    3b:25:53:df:ca:c4:ba:d7:7d:37:59:cb:a2:5e:7d:
                    35:44:ef:05:ff:b4:e9:63:71:59:98:12:e4:61:4d:
                    ac:9f:99:dc:59:2b:95:4d:55:62:d5:d8:fd:55:6e:
                    62:41:99:81:b4:05:ea:01:ff:bc:74:5e:8c:89:fa:
                    9f:45:e3:15:96:c1:7d:68:39:fc:a5:3a:7f:7f:07:
                    c8:32:b5:79:b5:4f:38:65:55:d0:d4:ec:81:2c:b3:
                    1e:7d:2f:65:f2:fb:da:8c:09:55:cb:57:d0:3f:8c:
                    f4:b6:b8:ab:74:3b:87:ef:fe:fd:e8:ad:aa:e8:c8:
                    8d:6d:1a:ae:27:bf:32:f4:37:1d:41:f5:17:6c:2a:
                    ea:8c:0e:86:0a:7f:70:04:92:12:02:4d:ed:1e:58:
                    f7:a8:27:14:42:ad:8a:90:92:7f:c8:84:ff:31:cd:
                    15:e9:9b:98:26:f4:7a:d2:34:1e:5e:b8:54:d2:21:
                    9e:18:19:25:db:6f:c9:98:04:5f:dc:d3:04:44:8e:
                    9b:02:02:33:32:0e:bd:9d:26:a3:4d:82:42:48:de:
                    51:11:35:7d:2c:20:1a:69:fa:0a:2e:f0:86:57:f0:
                    03:dc:53:a2:1a:ec:48:75:53:7c:e2:f8:d0:a6:c2:
                    30:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:8E:AB:73:78:DA:38:06:28:1A:D0:8F:59:D6:C2:86:A5:76:F6:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5bac54b9-66dc-4956-863d-1804cfb9e853/98c4a59e-53eb-33ab-9815-5c2ca32e9e9b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5bac54b9-66dc-4956-863d-1804cfb9e853/5bac54b9-66dc-4956-863d-1804cfb9e853.crl

            X509v3 Authority Key Identifier:
                keyid:7F:4A:9A:A7:40:62:CD:6D:BF:70:19:16:CE:FD:9B:2A:27:E6:2E:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5bac54b9-66dc-4956-863d-1804cfb9e853.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:4dc0:6::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b5:23:d2:35:7d:17:ff:60:31:73:dc:34:b0:ea:9f:3b:b9:10:
         50:80:8f:23:1d:d2:2f:50:19:6a:69:da:ee:66:3a:b5:f3:e4:
         f2:8a:69:41:99:57:32:93:a2:24:6b:8b:82:ea:57:e1:35:37:
         07:c3:10:01:ad:a7:4a:66:2a:91:ea:e7:92:5c:57:47:37:65:
         b6:12:ab:9e:33:5a:8a:db:41:a7:30:4f:76:22:65:1d:90:a2:
         91:b2:f7:10:e3:0b:c6:96:10:7b:40:c1:c0:14:e6:88:c3:89:
         db:11:d4:b4:a9:cd:e5:00:e4:0b:0b:0d:1e:09:0d:70:71:0b:
         25:3a:e3:14:ea:9f:23:65:ff:07:10:c1:48:b2:24:b5:01:5a:
         57:90:d2:5e:35:95:5f:2a:e8:79:0a:58:40:d5:09:e1:d8:77:
         a4:25:56:3e:05:75:f6:b7:cf:e8:38:94:c9:a2:ab:24:e7:95:
         a3:50:e0:07:2f:77:79:6e:50:71:d0:5b:40:51:ff:59:bc:d6:
         fc:6c:7d:5d:a0:39:91:cd:67:08:f0:d6:1b:66:75:5b:80:0d:
         5e:ca:f6:d9:4c:78:0f:af:55:d4:03:99:f8:6c:b1:03:b7:53:
         48:48:57:eb:fe:87:f6:f2:b7:aa:b1:a2:0b:68:c1:5a:47:19:
         96:93:83:43
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE5BKdnuqCAqAHADDIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWJhYzU0YjktNjZkYy00OTU2LTg2M2QtMTgwNGNmYjll
ODUzMB4XDTI2MDYyMjA5MDAxMVoXDTI2MDkyMDA5MDAxMVowLzEtMCsGA1UEAxMk
YTY4OGNhNTYtNzUwMi00ZDdjLWJmZGEtZmFmZWJmNGU3NTI4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzSa4PJy3Qr3Wlos23HI7JVPfysS61303Wcui
Xn01RO8F/7TpY3FZmBLkYU2sn5ncWSuVTVVi1dj9VW5iQZmBtAXqAf+8dF6Mifqf
ReMVlsF9aDn8pTp/fwfIMrV5tU84ZVXQ1OyBLLMefS9l8vvajAlVy1fQP4z0trir
dDuH7/796K2q6MiNbRquJ78y9DcdQfUXbCrqjA6GCn9wBJISAk3tHlj3qCcUQq2K
kJJ/yIT/Mc0V6ZuYJvR60jQeXrhU0iGeGBkl22/JmARf3NMERI6bAgIzMg69nSaj
TYJCSN5RETV9LCAaafoKLvCGV/AD3FOiGuxIdVN84vjQpsIw9wIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFO6Oq3N42jgGKBrQj1nWwoaldvZAMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC81YmFj
NTRiOS02NmRjLTQ5NTYtODYzZC0xODA0Y2ZiOWU4NTMvOThjNGE1OWUtNTNlYi0z
M2FiLTk4MTUtNWMyY2EzMmU5ZTliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNWJhYzU0YjktNjZkYy00OTU2LTg2
M2QtMTgwNGNmYjllODUzLzViYWM1NGI5LTY2ZGMtNDk1Ni04NjNkLTE4MDRjZmI5
ZTg1My5jcmwwHwYDVR0jBBgwFoAUf0qap0BizW2/cBkWzv2bKifmLp4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC81YmFjNTRiOS02NmRjLTQ5NTYtODYzZC0xODA0
Y2ZiOWU4NTMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgZNwAAG
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBALUj0jV9F/9gMXPcNLDqnzu5EFCAjyMd0i9QGWpp2u5mOrXz5PKK
aUGZVzKToiRri4LqV+E1NwfDEAGtp0pmKpHq55JcV0c3ZbYSq54zWorbQacwT3Yi
ZR2QopGy9xDjC8aWEHtAwcAU5ojDidsR1LSpzeUA5AsLDR4JDXBxCyU64xTqnyNl
/wcQwUiyJLUBWleQ0l41lV8q6HkKWEDVCeHYd6QlVj4Fdfa3z+g4lMmiqyTnlaNQ
4Acvd3luUHHQW0BR/1m81vxsfV2gOZHNZwjw1htmdVuADV7K9tlMeA+vVdQDmfhs
sQO3U0hIV+v+h/byt6qxogtowVpHGZaTg0M=
-----END CERTIFICATE-----
Generated at Wed Jun 24 00:06:59 2026 by rpki-client