Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/785749fa-091c-4978-a918-3238e45d2a1c/fb51aba7-c8b2-3fd1-86de-6f5215306046.roa
File:                     fb51aba7-c8b2-3fd1-86de-6f5215306046.roa (raw, json)
Hash identifier:          JkjJ0OlWIFQGpAdhwmTd3peBL5qGatMsp4mwZ9fXbfk=
Subject key identifier:   B1:3F:26:64:50:68:13:2D:78:6A:BD:C9:54:80:4F:57:4E:40:49:7F
Certificate issuer:       /CN=785749fa-091c-4978-a918-3238e45d2a1c
Certificate serial:       010D0C9F4328584EBDC1E9E33B93C6BF189D1600
Authority key identifier: 33:F0:9A:2E:39:C5:2F:69:00:C8:DB:6A:A8:D7:FF:36:1D:F8:31:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/785749fa-091c-4978-a918-3238e45d2a1c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/785749fa-091c-4978-a918-3238e45d2a1c/fb51aba7-c8b2-3fd1-86de-6f5215306046.roa
Signing time:             Thu 06 Aug 2026 00:07:00 +0000
ROA not before:           Thu 06 Aug 2026 00:07:00 +0000
ROA not after:            Wed 04 Nov 2026 01:07:00 +0000
asID:                     16713
IP address blocks:        2001:5e0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/785749fa-091c-4978-a918-3238e45d2a1c/785749fa-091c-4978-a918-3238e45d2a1c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/785749fa-091c-4978-a918-3238e45d2a1c/785749fa-091c-4978-a918-3238e45d2a1c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/785749fa-091c-4978-a918-3238e45d2a1c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 14 Aug 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:bd:c1:e9:e3:3b:93:c6:bf:18:9d:16:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=785749fa-091c-4978-a918-3238e45d2a1c
        Validity
            Not Before: Aug  6 00:07:00 2026 GMT
            Not After : Nov  4 01:07:00 2026 GMT
        Subject: CN=e776593d-8baf-4557-81eb-93dd94497914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:69:78:62:5a:07:15:3b:49:4b:15:19:bb:24:
                    f2:d2:21:6e:a3:4c:78:55:c5:35:35:b8:07:10:cc:
                    81:06:7b:37:20:6d:50:33:69:cd:e4:03:31:0f:9b:
                    98:15:f4:41:d9:e9:a4:87:73:98:8b:b1:eb:6c:b2:
                    77:37:a9:6d:31:8d:32:b1:18:30:a1:a4:c2:7a:ad:
                    42:51:b5:81:b7:0e:84:a5:8a:de:3c:2f:95:d4:31:
                    2e:d0:54:2d:07:57:6e:4c:b7:50:40:c6:4e:21:40:
                    5e:25:6d:71:06:1e:97:c2:c3:71:25:bc:e5:58:d9:
                    29:7c:44:b2:c8:5f:77:c1:25:66:a6:9f:fd:b0:6e:
                    b4:18:d6:67:4d:f7:aa:30:8d:07:b0:e4:cc:4e:eb:
                    51:55:a7:ea:af:05:d0:d1:ef:c9:3b:24:0e:e2:08:
                    bc:04:19:24:8e:07:5c:9f:ba:55:49:8b:e6:2b:0c:
                    70:ea:21:3c:05:f0:d9:e0:bc:db:3e:ec:f7:c9:e6:
                    18:e6:7f:2f:a8:6b:36:b0:0c:6d:b5:80:ab:48:5f:
                    09:8b:15:20:8a:8f:6d:7d:09:80:9b:1d:52:4c:de:
                    97:4e:5f:a5:f8:14:c0:13:b9:81:e5:ba:e7:31:1b:
                    c6:d2:c0:13:a9:a9:72:94:66:4a:4a:43:54:de:4b:
                    fe:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:3F:26:64:50:68:13:2D:78:6A:BD:C9:54:80:4F:57:4E:40:49:7F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/785749fa-091c-4978-a918-3238e45d2a1c/fb51aba7-c8b2-3fd1-86de-6f5215306046.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/785749fa-091c-4978-a918-3238e45d2a1c/785749fa-091c-4978-a918-3238e45d2a1c.crl

            X509v3 Authority Key Identifier:
                keyid:33:F0:9A:2E:39:C5:2F:69:00:C8:DB:6A:A8:D7:FF:36:1D:F8:31:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/785749fa-091c-4978-a918-3238e45d2a1c.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:5e0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:e3:b2:bf:c7:59:7b:04:6a:91:f5:2b:d5:f8:29:6e:3d:bb:
         ed:3d:76:a0:c0:1d:0b:f4:9e:b1:de:cc:37:01:52:e3:27:79:
         f5:62:5a:bb:e1:a6:26:54:63:73:a2:11:3c:d9:ee:a4:c8:67:
         e8:70:e2:a7:34:83:7b:65:48:31:bb:ca:8c:0a:a7:ce:7a:b5:
         03:56:2c:8e:24:b2:13:68:9b:cd:ab:f8:a8:51:3c:98:8f:2f:
         1f:da:2e:a5:97:10:a6:2c:b4:6f:56:15:f6:79:55:3c:75:c9:
         84:34:ea:9e:cf:f1:4a:fb:ee:b5:f3:3f:d8:a5:e7:52:1d:42:
         4f:f6:bf:55:40:35:e6:00:1d:4d:a3:ff:54:ec:c3:0f:67:35:
         ed:77:b8:54:f9:87:43:a2:d2:b7:08:0a:6d:10:ae:79:ca:69:
         cd:f5:99:52:9a:9f:9a:c8:c3:9e:23:f0:67:b5:e2:07:a5:82:
         7e:90:90:8f:4f:fa:39:f6:b9:0c:eb:68:f4:f2:1a:16:69:df:
         50:81:60:69:e0:ae:97:f7:02:3e:ee:00:cc:26:fa:21:b5:88:
         9f:66:12:0e:e3:b0:8f:ab:18:c4:fa:bc:be:a1:a3:bb:ac:34:
         f9:d9:f4:11:d3:6f:75:d5:77:24:e3:6e:b6:12:e6:87:76:34:
         95:29:e2:02
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE69wenjO5PGvxidFgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzg1NzQ5ZmEtMDkxYy00OTc4LWE5MTgtMzIzOGU0NWQy
YTFjMB4XDTI2MDgwNjAwMDcwMFoXDTI2MTEwNDAxMDcwMFowLzEtMCsGA1UEAxMk
ZTc3NjU5M2QtOGJhZi00NTU3LTgxZWItOTNkZDk0NDk3OTE0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnWl4YloHFTtJSxUZuyTy0iFuo0x4VcU1NbgH
EMyBBns3IG1QM2nN5AMxD5uYFfRB2emkh3OYi7HrbLJ3N6ltMY0ysRgwoaTCeq1C
UbWBtw6EpYrePC+V1DEu0FQtB1duTLdQQMZOIUBeJW1xBh6XwsNxJbzlWNkpfESy
yF93wSVmpp/9sG60GNZnTfeqMI0HsOTMTutRVafqrwXQ0e/JOyQO4gi8BBkkjgdc
n7pVSYvmKwxw6iE8BfDZ4LzbPuz3yeYY5n8vqGs2sAxttYCrSF8JixUgio9tfQmA
mx1STN6XTl+l+BTAE7mB5brnMRvG0sATqalylGZKSkNU3kv+RwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFLE/JmRQaBMteGq9yVSAT1dOQEl/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83ODU3
NDlmYS0wOTFjLTQ5NzgtYTkxOC0zMjM4ZTQ1ZDJhMWMvZmI1MWFiYTctYzhiMi0z
ZmQxLTg2ZGUtNmY1MjE1MzA2MDQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzg1NzQ5ZmEtMDkxYy00OTc4LWE5
MTgtMzIzOGU0NWQyYTFjLzc4NTc0OWZhLTA5MWMtNDk3OC1hOTE4LTMyMzhlNDVk
MmExYy5jcmwwHwYDVR0jBBgwFoAUM/CaLjnFL2kAyNtqqNf/Nh34MRMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC83ODU3NDlmYS0wOTFjLTQ5NzgtYTkxOC0zMjM4
ZTQ1ZDJhMWMuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAIAEF4DBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQAa47K/x1l7BGqR9SvV+CluPbvtPXagwB0L9J6x3sw3AVLjJ3n1Ylq7
4aYmVGNzohE82e6kyGfocOKnNIN7ZUgxu8qMCqfOerUDViyOJLITaJvNq/ioUTyY
jy8f2i6llxCmLLRvVhX2eVU8dcmENOqez/FK++618z/YpedSHUJP9r9VQDXmAB1N
o/9U7MMPZzXtd7hU+YdDotK3CAptEK55ymnN9ZlSmp+ayMOeI/BnteIHpYJ+kJCP
T/o59rkM62j08hoWad9QgWBp4K6X9wI+7gDMJvohtYifZhIO47CPqxjE+ry+oaO7
rDT52fQR02911Xck4262EuaHdjSVKeIC
-----END CERTIFICATE-----
Generated at Thu Aug 13 16:13:15 2026 by rpki-client