Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eb3726d7-0f8c-4949-99b6-eecda94a0675/7d953117-b801-39c8-bdc0-8c591fbe9cf8.roa
File:                     7d953117-b801-39c8-bdc0-8c591fbe9cf8.roa (raw, json)
Hash identifier:          vcHbbBKyjdYEeeAXMzNYN0IIXS/3xZ6vVii3Ni82SN4=
Subject key identifier:   5D:75:C7:1F:32:71:57:28:A4:9C:AF:E3:F9:8E:3E:34:F0:6C:58:30
Certificate issuer:       /CN=eb3726d7-0f8c-4949-99b6-eecda94a0675
Certificate serial:       010D0C9F4328584E35FF2205D228DF37C37822C0
Authority key identifier: 9E:F0:8D:44:A7:A6:26:F4:A9:17:81:5E:EA:26:57:FC:D8:00:89:E1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eb3726d7-0f8c-4949-99b6-eecda94a0675.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eb3726d7-0f8c-4949-99b6-eecda94a0675/7d953117-b801-39c8-bdc0-8c591fbe9cf8.roa
Signing time:             Thu 18 Jun 2026 09:00:12 +0000
ROA not before:           Thu 18 Jun 2026 09:00:12 +0000
ROA not after:            Wed 16 Sep 2026 09:00:12 +0000
asID:                     194
IP address blocks:        2620:117:20f1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eb3726d7-0f8c-4949-99b6-eecda94a0675/eb3726d7-0f8c-4949-99b6-eecda94a0675.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eb3726d7-0f8c-4949-99b6-eecda94a0675/eb3726d7-0f8c-4949-99b6-eecda94a0675.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eb3726d7-0f8c-4949-99b6-eecda94a0675.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 26 Jun 2026 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:35:ff:22:05:d2:28:df:37:c3:78:22:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb3726d7-0f8c-4949-99b6-eecda94a0675
        Validity
            Not Before: Jun 18 09:00:12 2026 GMT
            Not After : Sep 16 09:00:12 2026 GMT
        Subject: CN=d3e02d23-cdc7-40a5-9861-94a8a270b19c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:28:08:82:5c:13:3f:e6:ec:d7:09:73:24:38:
                    d9:fe:1b:fc:e5:0c:3d:12:90:56:15:a0:c6:88:d1:
                    97:04:56:5e:ed:34:5d:28:54:b4:07:52:b4:ba:e4:
                    32:48:39:b1:0b:da:b8:2e:e0:5b:94:2f:62:02:5d:
                    ab:b8:25:13:24:b8:b9:4b:9d:06:c9:b8:5e:b5:10:
                    42:c0:42:f9:69:cb:38:8d:8a:9f:dc:cf:45:b9:83:
                    ea:2e:09:b9:82:34:45:9f:76:26:a3:09:f6:23:59:
                    e5:c5:e7:8d:f2:b4:38:d2:f9:6f:c4:6a:cb:ce:f9:
                    9d:ad:cc:9a:fa:8d:f2:70:a6:fd:44:87:98:88:9c:
                    58:f2:62:36:05:f2:e6:50:04:ed:31:74:71:82:fc:
                    27:6d:7b:e2:b5:07:66:d2:80:9b:dc:f1:4e:30:b1:
                    88:dd:ee:ae:c0:fd:48:67:93:19:3a:51:43:2d:10:
                    ec:64:df:ba:34:d1:3f:d5:8a:59:eb:49:76:9a:7f:
                    70:5a:92:e0:54:b6:ef:12:6c:02:32:08:7e:9b:a3:
                    0c:83:2d:ef:af:cd:6f:3e:a3:8d:e2:f8:89:3d:60:
                    85:cf:a1:67:db:c5:74:01:63:0f:ee:9b:56:04:e2:
                    bd:36:1d:4c:47:29:15:eb:a5:54:19:e2:9e:4c:6b:
                    82:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:75:C7:1F:32:71:57:28:A4:9C:AF:E3:F9:8E:3E:34:F0:6C:58:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eb3726d7-0f8c-4949-99b6-eecda94a0675/7d953117-b801-39c8-bdc0-8c591fbe9cf8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eb3726d7-0f8c-4949-99b6-eecda94a0675/eb3726d7-0f8c-4949-99b6-eecda94a0675.crl

            X509v3 Authority Key Identifier:
                keyid:9E:F0:8D:44:A7:A6:26:F4:A9:17:81:5E:EA:26:57:FC:D8:00:89:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eb3726d7-0f8c-4949-99b6-eecda94a0675.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:117:20f1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:7e:a6:f8:2b:b1:3d:37:31:d1:65:e9:0b:2e:fe:11:9d:94:
         f4:31:e2:76:45:9f:f3:6a:28:36:b5:d8:28:af:7a:53:c6:ed:
         9d:17:f3:fd:d2:14:4a:77:2d:f6:86:0b:15:19:3b:93:8c:5e:
         8c:47:cd:46:9e:a1:f7:33:f1:75:c3:27:41:a8:d4:a8:2a:c5:
         eb:fb:b5:a8:58:7e:a6:7e:ee:45:ad:8b:6b:ea:c7:74:ce:74:
         8e:19:e9:ac:be:00:63:5f:9e:14:79:8f:a8:82:6e:6b:ff:5a:
         73:9f:f6:a2:70:ab:e4:cf:a3:1c:92:47:2d:a5:59:25:44:02:
         5d:db:20:1d:ae:c4:3d:98:02:7c:52:7e:df:bf:81:99:d8:b0:
         e5:a6:cb:38:6c:7f:17:8b:71:74:e9:02:cb:cd:63:7b:a5:1c:
         2d:67:6e:4b:51:12:bc:f0:39:dc:27:cb:1b:99:b9:ba:25:8a:
         78:f3:32:5f:1f:2a:ff:4c:80:d2:d4:7f:4d:01:34:d3:29:5b:
         e2:b1:ca:f3:05:5c:e5:1e:b8:51:3d:81:ab:b1:9e:56:16:db:
         77:60:0d:9f:59:80:2e:2c:5f:af:c5:84:bc:9c:8c:b7:13:1a:
         72:47:3e:6e:08:bf:b9:af:05:78:35:ef:87:61:08:49:f3:9c:
         2b:7b:12:b6
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE41/yIF0ijfN8N4IsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZWIzNzI2ZDctMGY4Yy00OTQ5LTk5YjYtZWVjZGE5NGEw
Njc1MB4XDTI2MDYxODA5MDAxMloXDTI2MDkxNjA5MDAxMlowLzEtMCsGA1UEAxMk
ZDNlMDJkMjMtY2RjNy00MGE1LTk4NjEtOTRhOGEyNzBiMTljMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoygIglwTP+bs1wlzJDjZ/hv85Qw9EpBWFaDG
iNGXBFZe7TRdKFS0B1K0uuQySDmxC9q4LuBblC9iAl2ruCUTJLi5S50GybhetRBC
wEL5acs4jYqf3M9FuYPqLgm5gjRFn3Ymown2I1nlxeeN8rQ40vlvxGrLzvmdrcya
+o3ycKb9RIeYiJxY8mI2BfLmUATtMXRxgvwnbXvitQdm0oCb3PFOMLGI3e6uwP1I
Z5MZOlFDLRDsZN+6NNE/1YpZ60l2mn9wWpLgVLbvEmwCMgh+m6MMgy3vr81vPqON
4viJPWCFz6Fn28V0AWMP7ptWBOK9Nh1MRykV66VUGeKeTGuCGwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFF11xx8ycVcopJyv4/mOPjTwbFgwMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9lYjM3
MjZkNy0wZjhjLTQ5NDktOTliNi1lZWNkYTk0YTA2NzUvN2Q5NTMxMTctYjgwMS0z
OWM4LWJkYzAtOGM1OTFmYmU5Y2Y4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZWIzNzI2ZDctMGY4Yy00OTQ5LTk5
YjYtZWVjZGE5NGEwNjc1L2ViMzcyNmQ3LTBmOGMtNDk0OS05OWI2LWVlY2RhOTRh
MDY3NS5jcmwwHwYDVR0jBBgwFoAUnvCNRKemJvSpF4Fe6iZX/NgAieEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy9lYjM3MjZkNy0wZjhjLTQ5NDktOTliNi1lZWNk
YTk0YTA2NzUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiABFyDx
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAHZ+pvgrsT03MdFl6Qsu/hGdlPQx4nZFn/NqKDa12CivelPG7Z0X
8/3SFEp3LfaGCxUZO5OMXoxHzUaeofcz8XXDJ0Go1Kgqxev7tahYfqZ+7kWti2vq
x3TOdI4Z6ay+AGNfnhR5j6iCbmv/WnOf9qJwq+TPoxySRy2lWSVEAl3bIB2uxD2Y
AnxSft+/gZnYsOWmyzhsfxeLcXTpAsvNY3ulHC1nbktRErzwOdwnyxuZubolinjz
Ml8fKv9MgNLUf00BNNMpW+KxyvMFXOUeuFE9gauxnlYW23dgDZ9ZgC4sX6/FhLyc
jLcTGnJHPm4Iv7mvBXg174dhCEnznCt7ErY=
-----END CERTIFICATE-----
Generated at Wed Jun 24 10:58:17 2026 by rpki-client