Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7937b76-1401-4a19-86ef-2351fd0198a6/da2e9540-f106-3fef-a518-3a2aa9b1fed1.roa
File:                     da2e9540-f106-3fef-a518-3a2aa9b1fed1.roa (raw, json)
Hash identifier:          SQzBdZhp9LbzeSnn2ffzcJfwn5yBMmmmwNKhBtwMWkE=
Subject key identifier:   3E:A2:50:33:1F:6C:BB:44:D1:02:18:3B:CC:3E:EC:59:B0:46:33:B3
Certificate issuer:       /CN=d7937b76-1401-4a19-86ef-2351fd0198a6
Certificate serial:       010D0C9F4328584F146793E2D9C33300155D0500
Authority key identifier: CC:29:98:03:99:C6:45:C4:E0:A5:4F:46:59:49:0C:A5:8F:E7:CF:C3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7937b76-1401-4a19-86ef-2351fd0198a6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7937b76-1401-4a19-86ef-2351fd0198a6/da2e9540-f106-3fef-a518-3a2aa9b1fed1.roa
Signing time:             Sun 06 Sep 2026 01:00:11 +0000
ROA not before:           Sun 06 Sep 2026 01:00:11 +0000
ROA not after:            Sat 05 Dec 2026 02:00:11 +0000
asID:                     14263
IP address blocks:        2607:f578::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7937b76-1401-4a19-86ef-2351fd0198a6/d7937b76-1401-4a19-86ef-2351fd0198a6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7937b76-1401-4a19-86ef-2351fd0198a6/d7937b76-1401-4a19-86ef-2351fd0198a6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7937b76-1401-4a19-86ef-2351fd0198a6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:14:67:93:e2:d9:c3:33:00:15:5d:05:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7937b76-1401-4a19-86ef-2351fd0198a6
        Validity
            Not Before: Sep  6 01:00:11 2026 GMT
            Not After : Dec  5 02:00:11 2026 GMT
        Subject: CN=0660f74c-3145-47a6-92a6-911611adcb7e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:50:74:fa:c2:1c:8a:77:84:3b:71:6b:f3:00:
                    ff:4b:4e:bb:93:e0:21:74:b4:e6:50:d6:b7:59:78:
                    23:79:59:61:28:3e:35:02:12:c1:f5:81:69:bf:31:
                    32:67:97:5e:46:d4:c8:01:31:3e:1e:15:4e:81:a4:
                    51:d8:94:65:91:bb:54:ce:1f:d6:28:f0:5e:22:64:
                    8c:78:3e:2c:9f:ad:df:bc:58:7f:ed:bb:71:ab:54:
                    af:bd:bd:2f:f4:dd:46:ae:90:f2:ef:66:cf:20:53:
                    99:ad:0f:bb:5b:b1:50:37:f8:0c:f5:39:c6:76:30:
                    dc:35:de:38:46:93:36:da:26:d7:3a:1c:69:a5:5a:
                    f7:b9:4e:c8:2d:58:cd:f1:8b:2b:f0:35:c6:67:f1:
                    2b:a9:05:cb:e6:85:5b:1a:5f:b3:8d:53:53:77:a4:
                    79:58:27:93:d8:1a:1b:3f:54:f1:56:46:35:94:c4:
                    80:b4:d5:e8:d0:0a:55:1e:b9:fc:52:5a:54:4f:84:
                    25:6d:fd:59:ca:a5:76:79:86:f7:08:29:7e:9a:21:
                    ec:55:7f:67:24:cc:08:e3:66:3b:8f:c4:d2:54:d0:
                    06:05:ea:83:b0:f6:63:6e:eb:ca:90:79:e7:4a:79:
                    d9:8c:88:e6:fe:f4:11:aa:cb:7b:03:e6:99:a0:78:
                    e9:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:A2:50:33:1F:6C:BB:44:D1:02:18:3B:CC:3E:EC:59:B0:46:33:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7937b76-1401-4a19-86ef-2351fd0198a6/da2e9540-f106-3fef-a518-3a2aa9b1fed1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7937b76-1401-4a19-86ef-2351fd0198a6/d7937b76-1401-4a19-86ef-2351fd0198a6.crl

            X509v3 Authority Key Identifier:
                keyid:CC:29:98:03:99:C6:45:C4:E0:A5:4F:46:59:49:0C:A5:8F:E7:CF:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7937b76-1401-4a19-86ef-2351fd0198a6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f578::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:34:1b:91:2f:e7:15:93:76:98:77:21:55:9c:28:a7:df:53:
         eb:82:34:e3:0d:ad:ee:22:3d:ea:d9:fe:cd:fd:0c:35:82:d7:
         9a:0d:ec:64:9c:f9:93:a1:ea:17:02:60:ab:ad:1d:39:d7:25:
         45:f5:61:c5:31:b1:6d:92:61:bf:00:1f:54:20:df:5d:cc:d7:
         59:35:80:1c:1c:67:a1:62:9e:88:c3:c8:09:ad:34:19:fb:08:
         72:b1:95:e3:65:26:53:14:4b:de:ea:07:30:d9:bc:32:a1:ff:
         be:5f:7d:90:63:70:4a:f6:3e:ab:bb:40:5d:26:c0:f3:16:9b:
         29:96:8d:8e:6e:85:9c:db:1d:b4:7c:d1:0a:4c:64:99:a8:f1:
         be:b4:17:03:38:60:a3:0c:83:b6:28:02:cc:dd:d8:ce:7c:f3:
         d3:ff:88:29:be:10:9a:45:4a:09:0e:87:0c:b0:b5:70:f4:5c:
         d7:46:a7:9a:a7:79:63:97:a8:5e:fd:ff:a0:24:12:c6:d8:bf:
         33:0e:c3:37:44:0f:81:05:7d:3c:55:ee:b0:ec:6d:b1:e1:69:
         ae:ab:c1:a2:39:54:72:18:b6:17:a5:17:f1:e7:74:35:1f:91:
         ee:ea:5e:52:a3:04:bc:10:96:48:69:d8:88:85:ee:d9:43:7d:
         e8:ef:e7:9b
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE8UZ5Pi2cMzABVdBQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDc5MzdiNzYtMTQwMS00YTE5LTg2ZWYtMjM1MWZkMDE5
OGE2MB4XDTI2MDkwNjAxMDAxMVoXDTI2MTIwNTAyMDAxMVowLzEtMCsGA1UEAxMk
MDY2MGY3NGMtMzE0NS00N2E2LTkyYTYtOTExNjExYWRjYjdlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAglB0+sIcineEO3Fr8wD/S067k+AhdLTmUNa3
WXgjeVlhKD41AhLB9YFpvzEyZ5deRtTIATE+HhVOgaRR2JRlkbtUzh/WKPBeImSM
eD4sn63fvFh/7btxq1Svvb0v9N1GrpDy72bPIFOZrQ+7W7FQN/gM9TnGdjDcNd44
RpM22ibXOhxppVr3uU7ILVjN8Ysr8DXGZ/ErqQXL5oVbGl+zjVNTd6R5WCeT2Bob
P1TxVkY1lMSAtNXo0ApVHrn8UlpUT4Qlbf1ZyqV2eYb3CCl+miHsVX9nJMwI42Y7
j8TSVNAGBeqDsPZjbuvKkHnnSnnZjIjm/vQRqst7A+aZoHjp5wIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFD6iUDMfbLtE0QIYO8w+7FmwRjOzMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kNzkz
N2I3Ni0xNDAxLTRhMTktODZlZi0yMzUxZmQwMTk4YTYvZGEyZTk1NDAtZjEwNi0z
ZmVmLWE1MTgtM2EyYWE5YjFmZWQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDc5MzdiNzYtMTQwMS00YTE5LTg2
ZWYtMjM1MWZkMDE5OGE2L2Q3OTM3Yjc2LTE0MDEtNGExOS04NmVmLTIzNTFmZDAx
OThhNi5jcmwwHwYDVR0jBBgwFoAUzCmYA5nGRcTgpU9GWUkMpY/nz8MwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy9kNzkzN2I3Ni0xNDAxLTRhMTktODZlZi0yMzUx
ZmQwMTk4YTYuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgf1eDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQBENBuRL+cVk3aYdyFVnCin31PrgjTjDa3uIj3q2f7N/Qw1gteaDexk
nPmToeoXAmCrrR051yVF9WHFMbFtkmG/AB9UIN9dzNdZNYAcHGehYp6Iw8gJrTQZ
+whysZXjZSZTFEve6gcw2bwyof++X32QY3BK9j6ru0BdJsDzFpsplo2OboWc2x20
fNEKTGSZqPG+tBcDOGCjDIO2KALM3djOfPPT/4gpvhCaRUoJDocMsLVw9FzXRqea
p3ljl6he/f+gJBLG2L8zDsM3RA+BBX08Ve6w7G2x4Wmuq8GiOVRyGLYXpRfx53Q1
H5Hu6l5SowS8EJZIadiIhe7ZQ33o7+eb
-----END CERTIFICATE-----
Generated at Sat Sep 26 22:27:58 2026 by rpki-client