Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f13c298e-3179-4f35-9e7d-886ee3f9be0b/5f1bc384-56e0-3814-a3cd-7f5aecd0f4c0.roa
File:                     5f1bc384-56e0-3814-a3cd-7f5aecd0f4c0.roa (raw, json)
Hash identifier:          GhenUNDuYkq7F+DljmKXPyXD+eKxV2KnfCyOJyT9jYo=
Subject key identifier:   CE:BD:EE:C8:7B:31:83:D3:07:1A:C5:D1:4F:DF:25:09:9F:C1:5C:44
Certificate issuer:       /CN=f13c298e-3179-4f35-9e7d-886ee3f9be0b
Certificate serial:       010D0C9F4328584EEA8763D7788A868F82376200
Authority key identifier: 56:56:CF:C5:B4:E3:45:16:37:F9:19:FA:67:97:3D:2E:48:27:E7:42
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f13c298e-3179-4f35-9e7d-886ee3f9be0b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f13c298e-3179-4f35-9e7d-886ee3f9be0b/5f1bc384-56e0-3814-a3cd-7f5aecd0f4c0.roa
Signing time:             Sat 22 Aug 2026 01:00:12 +0000
ROA not before:           Sat 22 Aug 2026 01:00:12 +0000
ROA not after:            Fri 20 Nov 2026 02:00:12 +0000
asID:                     16509
IP address blocks:        2606:7740:2::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f13c298e-3179-4f35-9e7d-886ee3f9be0b/f13c298e-3179-4f35-9e7d-886ee3f9be0b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f13c298e-3179-4f35-9e7d-886ee3f9be0b/f13c298e-3179-4f35-9e7d-886ee3f9be0b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f13c298e-3179-4f35-9e7d-886ee3f9be0b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ea:87:63:d7:78:8a:86:8f:82:37:62:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f13c298e-3179-4f35-9e7d-886ee3f9be0b
        Validity
            Not Before: Aug 22 01:00:12 2026 GMT
            Not After : Nov 20 02:00:12 2026 GMT
        Subject: CN=d022bf28-f507-463f-9d4d-5efffa163d82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:81:f9:48:49:b0:d5:b9:67:54:0c:59:b8:9a:
                    df:a7:1e:ec:64:af:e2:21:82:4b:82:ca:26:6b:36:
                    0b:58:4c:13:e0:25:b5:93:76:32:17:93:dd:9f:59:
                    fe:1d:4e:69:ba:7c:79:0c:de:49:6a:44:a4:1e:dd:
                    84:ba:7e:ee:96:83:a1:48:01:46:8b:73:05:54:32:
                    63:63:5c:08:24:30:55:f3:fd:e2:cd:67:b0:79:01:
                    e9:b6:70:ca:d5:2f:95:82:96:a2:a3:a7:83:e8:ba:
                    ee:53:b2:49:0f:fd:67:1e:0d:1b:d9:49:22:96:8f:
                    db:e5:bc:f5:1e:f1:5d:a8:be:62:d9:6a:c7:79:4c:
                    f6:51:1e:7c:72:85:ec:7b:f4:c0:e4:ea:f1:39:e5:
                    01:92:c6:9b:a9:e9:21:0a:84:9f:c4:6d:74:ad:4e:
                    54:4b:4d:71:b0:be:b7:46:32:70:13:08:76:3a:a0:
                    d8:28:c8:a1:9a:15:c1:56:48:13:13:0d:e6:a4:de:
                    86:bb:0c:85:56:03:bf:30:24:ae:ad:b3:a0:01:88:
                    8a:a8:d2:4a:14:83:e3:fd:ea:59:81:62:c6:d7:e6:
                    16:93:62:93:02:7f:4c:57:55:fe:6a:ed:10:ae:c3:
                    8b:4a:ae:f2:93:05:6e:87:76:be:8e:4b:b9:02:ed:
                    f7:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:BD:EE:C8:7B:31:83:D3:07:1A:C5:D1:4F:DF:25:09:9F:C1:5C:44
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f13c298e-3179-4f35-9e7d-886ee3f9be0b/5f1bc384-56e0-3814-a3cd-7f5aecd0f4c0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f13c298e-3179-4f35-9e7d-886ee3f9be0b/f13c298e-3179-4f35-9e7d-886ee3f9be0b.crl

            X509v3 Authority Key Identifier:
                keyid:56:56:CF:C5:B4:E3:45:16:37:F9:19:FA:67:97:3D:2E:48:27:E7:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f13c298e-3179-4f35-9e7d-886ee3f9be0b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:7740:2::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:c5:8b:10:10:29:a4:9d:1f:a1:0f:17:52:e1:7c:05:66:77:
         4f:32:a7:8d:6f:40:8b:25:9c:fd:84:57:56:d7:1f:00:b0:a6:
         ee:bc:05:a3:03:4f:ac:02:28:4b:5e:e7:52:e0:9c:9b:80:25:
         ac:70:a6:d2:38:6d:b8:75:ec:80:1c:0e:0a:c2:75:96:88:b6:
         74:6e:ca:7b:49:6e:95:fd:a0:8d:1a:28:5b:6a:b0:75:c3:71:
         3b:3d:3b:df:61:87:01:11:e3:92:19:bf:08:cf:32:10:7c:58:
         b0:a3:7a:21:65:32:fd:77:e1:d3:1f:1f:5c:8c:02:2e:42:ab:
         3b:94:17:8e:14:8c:b6:e8:3a:6e:e4:4a:2c:dd:17:af:c8:9b:
         b8:70:84:61:e8:47:6b:81:58:a4:10:ff:b8:dd:35:8b:74:99:
         83:48:b9:e8:d6:6b:c0:cd:1a:5f:e0:96:c1:da:b1:1c:71:af:
         40:50:28:73:83:27:93:67:4e:89:a0:a6:45:4f:af:60:19:34:
         a1:7a:3d:6e:d7:55:64:cd:41:e1:19:56:39:6a:5b:01:f4:d4:
         44:25:58:ae:82:c8:e2:3a:d5:81:da:24:4b:9a:d3:ad:e7:e1:
         51:5a:47:1b:c9:40:74:da:41:46:b7:23:e3:6e:6b:4c:9e:78:
         af:f5:70:8a
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE7qh2PXeIqGj4I3YgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjEzYzI5OGUtMzE3OS00ZjM1LTllN2QtODg2ZWUzZjli
ZTBiMB4XDTI2MDgyMjAxMDAxMloXDTI2MTEyMDAyMDAxMlowLzEtMCsGA1UEAxMk
ZDAyMmJmMjgtZjUwNy00NjNmLTlkNGQtNWVmZmZhMTYzZDgyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAioH5SEmw1blnVAxZuJrfpx7sZK/iIYJLgsom
azYLWEwT4CW1k3YyF5Pdn1n+HU5punx5DN5JakSkHt2Eun7uloOhSAFGi3MFVDJj
Y1wIJDBV8/3izWeweQHptnDK1S+Vgpaio6eD6LruU7JJD/1nHg0b2Ukilo/b5bz1
HvFdqL5i2WrHeUz2UR58coXse/TA5OrxOeUBksabqekhCoSfxG10rU5US01xsL63
RjJwEwh2OqDYKMihmhXBVkgTEw3mpN6GuwyFVgO/MCSurbOgAYiKqNJKFIPj/epZ
gWLG1+YWk2KTAn9MV1X+au0QrsOLSq7ykwVuh3a+jku5Au33QwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFM697sh7MYPTBxrF0U/fJQmfwVxEMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mMTNj
Mjk4ZS0zMTc5LTRmMzUtOWU3ZC04ODZlZTNmOWJlMGIvNWYxYmMzODQtNTZlMC0z
ODE0LWEzY2QtN2Y1YWVjZDBmNGMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZjEzYzI5OGUtMzE3OS00ZjM1LTll
N2QtODg2ZWUzZjliZTBiL2YxM2MyOThlLTMxNzktNGYzNS05ZTdkLTg4NmVlM2Y5
YmUwYi5jcmwwHwYDVR0jBBgwFoAUVlbPxbTjRRY3+Rn6Z5c9Lkgn50IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy9mMTNjMjk4ZS0zMTc5LTRmMzUtOWU3ZC04ODZl
ZTNmOWJlMGIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgZ3QAAC
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBADTFixAQKaSdH6EPF1LhfAVmd08yp41vQIslnP2EV1bXHwCwpu68
BaMDT6wCKEte51LgnJuAJaxwptI4bbh17IAcDgrCdZaItnRuyntJbpX9oI0aKFtq
sHXDcTs9O99hhwER45IZvwjPMhB8WLCjeiFlMv134dMfH1yMAi5CqzuUF44UjLbo
Om7kSizdF6/Im7hwhGHoR2uBWKQQ/7jdNYt0mYNIuejWa8DNGl/glsHasRxxr0BQ
KHODJ5NnTomgpkVPr2AZNKF6PW7XVWTNQeEZVjlqWwH01EQlWK6CyOI61YHaJEua
063n4VFaRxvJQHTaQUa3I+Nua0yeeK/1cIo=
-----END CERTIFICATE-----
Generated at Sat Sep 26 10:29:21 2026 by rpki-client