Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/823e9778-e6e3-4d85-a2e2-7e92cbc99f39/9bea7452-63e0-35f4-8552-3d2fb19d0f7c.roa
File:                     9bea7452-63e0-35f4-8552-3d2fb19d0f7c.roa (raw, json)
Hash identifier:          P40F5nsSQmqN2MINHJYdLnuHzhv1Tqe65Suq5/1ZCWY=
Subject key identifier:   A3:A3:FD:B5:3D:7D:C5:76:8E:B6:F3:92:C1:7D:72:48:8F:54:69:B1
Certificate issuer:       /CN=823e9778-e6e3-4d85-a2e2-7e92cbc99f39
Certificate serial:       010D0C9F4328584E54B49AC629B73E33CED0D100
Authority key identifier: 0D:38:03:4E:C1:C3:CE:A7:F1:ED:C0:C2:D6:BE:CF:44:BD:DA:E3:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/823e9778-e6e3-4d85-a2e2-7e92cbc99f39.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/823e9778-e6e3-4d85-a2e2-7e92cbc99f39/9bea7452-63e0-35f4-8552-3d2fb19d0f7c.roa
Signing time:             Mon 29 Jun 2026 09:00:12 +0000
ROA not before:           Mon 29 Jun 2026 09:00:12 +0000
ROA not after:            Sun 27 Sep 2026 09:00:12 +0000
asID:                     984
IP address blocks:        2606:fb40::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/823e9778-e6e3-4d85-a2e2-7e92cbc99f39/823e9778-e6e3-4d85-a2e2-7e92cbc99f39.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/823e9778-e6e3-4d85-a2e2-7e92cbc99f39/823e9778-e6e3-4d85-a2e2-7e92cbc99f39.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/823e9778-e6e3-4d85-a2e2-7e92cbc99f39.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Jul 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:54:b4:9a:c6:29:b7:3e:33:ce:d0:d1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=823e9778-e6e3-4d85-a2e2-7e92cbc99f39
        Validity
            Not Before: Jun 29 09:00:12 2026 GMT
            Not After : Sep 27 09:00:12 2026 GMT
        Subject: CN=c78dd283-9b15-4165-a391-13ae353fbd5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:d0:b2:79:92:95:c5:72:6b:b7:e8:d5:70:7c:
                    bf:2e:69:ae:a5:2e:65:e6:bb:d2:4f:9e:32:cf:60:
                    70:eb:e3:f4:5a:02:dc:59:37:f1:02:6f:52:5c:04:
                    65:18:7f:71:5b:b1:bd:66:9e:c9:60:f5:2b:ab:78:
                    53:63:7c:a8:83:eb:a6:cd:4a:a9:22:18:d4:53:1e:
                    d6:d2:6b:eb:ae:bd:3d:de:8b:38:75:f7:a2:f8:8f:
                    e6:36:c4:db:4f:a6:06:ad:d3:90:b5:44:e7:95:12:
                    9d:34:47:ef:13:ad:0e:40:b1:89:8e:29:35:b0:c5:
                    32:35:40:7a:4e:c0:59:e8:f5:70:f1:2a:9d:9b:bf:
                    31:99:94:96:c8:9b:43:2f:70:02:bb:40:2d:03:08:
                    3e:64:cb:40:ca:9c:6c:0c:19:24:a8:b7:71:5e:b2:
                    c1:45:88:65:69:2f:10:5a:db:14:34:60:14:33:80:
                    ba:ee:04:cf:b5:7f:18:22:20:75:77:ea:a0:ce:ee:
                    74:d4:c7:98:9f:17:ea:ae:15:a4:e2:5c:ec:d6:13:
                    4f:a4:55:96:d7:46:d0:88:ec:36:3a:1d:84:5e:07:
                    e6:95:a1:10:86:76:91:dc:78:19:ee:00:d5:1e:58:
                    1a:94:fd:de:f5:62:92:3b:f8:76:e1:0a:89:fc:74:
                    b0:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:A3:FD:B5:3D:7D:C5:76:8E:B6:F3:92:C1:7D:72:48:8F:54:69:B1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/823e9778-e6e3-4d85-a2e2-7e92cbc99f39/9bea7452-63e0-35f4-8552-3d2fb19d0f7c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/823e9778-e6e3-4d85-a2e2-7e92cbc99f39/823e9778-e6e3-4d85-a2e2-7e92cbc99f39.crl

            X509v3 Authority Key Identifier:
                keyid:0D:38:03:4E:C1:C3:CE:A7:F1:ED:C0:C2:D6:BE:CF:44:BD:DA:E3:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/823e9778-e6e3-4d85-a2e2-7e92cbc99f39.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:fb40::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c6:f8:c7:73:49:41:09:cb:60:be:ac:4b:1a:ee:94:9e:a0:30:
         fd:af:a6:70:f7:06:f8:e4:37:90:cb:63:23:c8:32:e6:fc:a0:
         92:2c:03:94:cf:7a:85:47:f8:2b:79:24:33:b6:2e:6d:46:bd:
         b5:5d:2d:59:23:0a:df:5b:32:ce:9e:1f:fb:70:13:59:72:38:
         06:7b:0f:c3:3a:81:3e:ab:83:7a:45:3b:6d:a1:4e:fb:b9:7f:
         52:2a:4b:82:3c:c3:b7:0d:86:e3:da:c5:10:26:54:62:b9:af:
         e2:bd:45:64:96:f5:a4:d8:fa:cd:3b:d7:21:4d:0f:e0:fe:8e:
         f3:d0:51:a7:71:16:5a:77:86:e1:7b:c7:96:39:99:51:0e:04:
         d7:f0:55:54:86:de:61:ae:ae:82:ad:f7:c4:bf:de:d0:bf:49:
         aa:b3:a4:23:09:63:7f:e5:91:0c:b6:3e:b8:da:d0:f8:41:0e:
         ca:c6:52:64:ae:bd:a3:50:2e:d8:94:1f:30:3f:4b:fd:13:cf:
         06:88:d8:93:db:04:a1:c4:e6:ef:f2:1b:22:01:21:b8:8b:a4:
         a7:bc:8c:6f:41:5b:5b:f1:d2:a0:bd:39:ec:94:e6:2e:4d:17:
         1e:b6:75:9d:18:22:cc:09:68:4e:de:49:96:a4:f7:92:36:aa:
         d8:c0:85:ae
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE5UtJrGKbc+M87Q0QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODIzZTk3NzgtZTZlMy00ZDg1LWEyZTItN2U5MmNiYzk5
ZjM5MB4XDTI2MDYyOTA5MDAxMloXDTI2MDkyNzA5MDAxMlowLzEtMCsGA1UEAxMk
Yzc4ZGQyODMtOWIxNS00MTY1LWEzOTEtMTNhZTM1M2ZiZDVmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAodCyeZKVxXJrt+jVcHy/LmmupS5l5rvST54y
z2Bw6+P0WgLcWTfxAm9SXARlGH9xW7G9Zp7JYPUrq3hTY3yog+umzUqpIhjUUx7W
0mvrrr093os4dfei+I/mNsTbT6YGrdOQtUTnlRKdNEfvE60OQLGJjik1sMUyNUB6
TsBZ6PVw8Sqdm78xmZSWyJtDL3ACu0AtAwg+ZMtAypxsDBkkqLdxXrLBRYhlaS8Q
WtsUNGAUM4C67gTPtX8YIiB1d+qgzu501MeYnxfqrhWk4lzs1hNPpFWW10bQiOw2
Oh2EXgfmlaEQhnaR3HgZ7gDVHlgalP3e9WKSO/h24QqJ/HSwJwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFKOj/bU9fcV2jrbzksF9ckiPVGmxMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi84MjNl
OTc3OC1lNmUzLTRkODUtYTJlMi03ZTkyY2JjOTlmMzkvOWJlYTc0NTItNjNlMC0z
NWY0LTg1NTItM2QyZmIxOWQwZjdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvODIzZTk3NzgtZTZlMy00ZDg1LWEy
ZTItN2U5MmNiYzk5ZjM5LzgyM2U5Nzc4LWU2ZTMtNGQ4NS1hMmUyLTdlOTJjYmM5
OWYzOS5jcmwwHwYDVR0jBBgwFoAUDTgDTsHDzqfx7cDC1r7PRL3a43wwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi84MjNlOTc3OC1lNmUzLTRkODUtYTJlMi03ZTky
Y2JjOTlmMzkuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgb7QDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQDG+MdzSUEJy2C+rEsa7pSeoDD9r6Zw9wb45DeQy2MjyDLm/KCSLAOU
z3qFR/greSQzti5tRr21XS1ZIwrfWzLOnh/7cBNZcjgGew/DOoE+q4N6RTttoU77
uX9SKkuCPMO3DYbj2sUQJlRiua/ivUVklvWk2PrNO9chTQ/g/o7z0FGncRZad4bh
e8eWOZlRDgTX8FVUht5hrq6CrffEv97Qv0mqs6QjCWN/5ZEMtj642tD4QQ7KxlJk
rr2jUC7YlB8wP0v9E88GiNiT2wShxObv8hsiASG4i6SnvIxvQVtb8dKgvTnslOYu
TRcetnWdGCLMCWhO3kmWpPeSNqrYwIWu
-----END CERTIFICATE-----
Generated at Sat Jul 18 01:48:59 2026 by rpki-client