Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d2238b91-c60a-40ab-90ee-a052f20ba0d7/8e497d70-b761-3dab-a3f0-155a828e61ee.roa
File:                     8e497d70-b761-3dab-a3f0-155a828e61ee.roa (raw, json)
Hash identifier:          19nKR4Rlt3rfvTT06ngnI7xzCp/i3XdsckGSOeCOL64=
Subject key identifier:   22:2C:C9:32:8A:6D:6C:09:34:09:E3:21:37:E3:49:97:91:7C:D7:A6
Certificate issuer:       /CN=d2238b91-c60a-40ab-90ee-a052f20ba0d7
Certificate serial:       010D0C9F4328584E4D12218C0E13B7D637D06200
Authority key identifier: 54:16:27:07:AC:96:1B:6D:B0:A5:56:D5:84:45:9E:24:A4:F2:CD:6E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d2238b91-c60a-40ab-90ee-a052f20ba0d7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d2238b91-c60a-40ab-90ee-a052f20ba0d7/8e497d70-b761-3dab-a3f0-155a828e61ee.roa
Signing time:             Fri 26 Jun 2026 15:22:17 +0000
ROA not before:           Fri 26 Jun 2026 15:22:17 +0000
ROA not after:            Thu 24 Sep 2026 15:22:17 +0000
asID:                     64276
IP address blocks:        2607:ab40::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d2238b91-c60a-40ab-90ee-a052f20ba0d7/d2238b91-c60a-40ab-90ee-a052f20ba0d7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d2238b91-c60a-40ab-90ee-a052f20ba0d7/d2238b91-c60a-40ab-90ee-a052f20ba0d7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d2238b91-c60a-40ab-90ee-a052f20ba0d7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:4d:12:21:8c:0e:13:b7:d6:37:d0:62:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d2238b91-c60a-40ab-90ee-a052f20ba0d7
        Validity
            Not Before: Jun 26 15:22:17 2026 GMT
            Not After : Sep 24 15:22:17 2026 GMT
        Subject: CN=d0e5532d-d805-4a1c-bc6f-48a6c608a2c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:38:38:f3:fe:73:7a:2e:a3:19:fb:9c:58:07:
                    1f:6a:c3:0a:d0:17:d5:6c:6a:71:00:0e:18:76:59:
                    8f:93:ac:14:fa:16:9d:45:ec:b7:39:6c:7a:17:f0:
                    52:68:e2:17:7f:4f:94:f9:64:c6:db:61:a6:1e:f2:
                    6e:b7:af:dc:4e:29:fb:40:bb:cf:58:ed:91:f5:7f:
                    5a:57:9d:51:58:32:87:d9:d2:ac:85:6a:18:24:37:
                    7e:fa:0d:08:18:dc:4b:16:bc:ab:c8:f3:f3:0a:1f:
                    01:79:e2:37:ec:09:0f:68:9b:6d:e6:4d:13:1d:d0:
                    48:e2:14:2e:2f:3a:26:44:f7:60:52:b2:ed:a8:90:
                    44:06:39:6a:2c:13:ad:06:aa:e7:f1:9e:4a:1d:b3:
                    68:9c:56:0c:55:61:dd:b5:88:3b:8a:f7:22:d5:28:
                    1a:9e:da:a9:22:7a:e7:b7:6d:b0:c5:10:a4:25:51:
                    7a:7a:0c:fa:94:14:d3:fb:30:d3:28:6e:f1:a2:1e:
                    fe:76:e0:6e:de:40:2e:a6:22:22:37:c6:1b:a2:aa:
                    11:e1:53:f3:e2:6a:c0:e8:85:4e:b6:ed:cd:4a:d2:
                    ab:51:23:f4:7e:76:9c:ab:d4:ef:4a:05:a3:70:74:
                    06:ac:6a:25:4a:19:88:b9:ff:20:1b:eb:e1:82:60:
                    ef:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:2C:C9:32:8A:6D:6C:09:34:09:E3:21:37:E3:49:97:91:7C:D7:A6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d2238b91-c60a-40ab-90ee-a052f20ba0d7/8e497d70-b761-3dab-a3f0-155a828e61ee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d2238b91-c60a-40ab-90ee-a052f20ba0d7/d2238b91-c60a-40ab-90ee-a052f20ba0d7.crl

            X509v3 Authority Key Identifier:
                keyid:54:16:27:07:AC:96:1B:6D:B0:A5:56:D5:84:45:9E:24:A4:F2:CD:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d2238b91-c60a-40ab-90ee-a052f20ba0d7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:ab40::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:25:11:9f:d0:66:a2:16:bf:ab:5f:14:f7:d3:91:a8:89:85:
         4c:7d:4d:13:d8:92:89:57:5c:2b:f6:67:75:78:a2:dc:b5:3c:
         ae:71:28:4e:c7:92:c9:40:d0:c0:d3:44:b0:f9:cc:f4:8f:70:
         a2:e2:fc:9d:f7:96:51:55:17:fd:dd:77:34:83:7b:93:34:f8:
         30:7b:0f:10:63:56:19:69:51:fd:c3:ff:07:c3:d1:a9:3b:1e:
         f5:ea:c0:b1:4d:34:ae:c9:2a:ef:1d:6f:04:5d:8e:9c:e7:61:
         15:f8:3d:f7:b9:65:29:30:2e:d3:83:51:0d:4c:f5:71:d7:5c:
         1e:da:bd:9f:1e:4e:f5:69:60:7b:14:fa:02:65:a1:20:71:f0:
         ca:a0:87:9d:30:b9:23:1e:62:ca:d1:55:bb:63:7a:f7:5a:64:
         f9:8b:b1:01:67:0e:89:4b:77:e1:be:f7:8d:e8:e8:d2:78:7b:
         ee:fc:7f:04:91:25:31:41:19:ef:40:4a:7c:92:80:8d:29:fb:
         bc:4b:26:3a:32:51:cf:bf:eb:91:15:ae:b9:23:68:0d:55:ab:
         d4:a7:49:4a:3f:1d:2e:0a:42:9f:2a:61:f7:d8:20:08:45:d8:
         9c:7f:02:b9:ff:1b:b5:d5:78:52:f2:e6:4f:cd:37:3b:b8:07:
         76:b7:50:09
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE5NEiGMDhO31jfQYgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDIyMzhiOTEtYzYwYS00MGFiLTkwZWUtYTA1MmYyMGJh
MGQ3MB4XDTI2MDYyNjE1MjIxN1oXDTI2MDkyNDE1MjIxN1owLzEtMCsGA1UEAxMk
ZDBlNTUzMmQtZDgwNS00YTFjLWJjNmYtNDhhNmM2MDhhMmM5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiTg48/5zei6jGfucWAcfasMK0BfVbGpxAA4Y
dlmPk6wU+hadRey3OWx6F/BSaOIXf0+U+WTG22GmHvJut6/cTin7QLvPWO2R9X9a
V51RWDKH2dKshWoYJDd++g0IGNxLFryryPPzCh8BeeI37AkPaJtt5k0THdBI4hQu
LzomRPdgUrLtqJBEBjlqLBOtBqrn8Z5KHbNonFYMVWHdtYg7ivci1SgantqpInrn
t22wxRCkJVF6egz6lBTT+zDTKG7xoh7+duBu3kAupiIiN8YboqoR4VPz4mrA6IVO
tu3NStKrUSP0fnacq9TvSgWjcHQGrGolShmIuf8gG+vhgmDv1wIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFCIsyTKKbWwJNAnjITfjSZeRfNemMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9kMjIz
OGI5MS1jNjBhLTQwYWItOTBlZS1hMDUyZjIwYmEwZDcvOGU0OTdkNzAtYjc2MS0z
ZGFiLWEzZjAtMTU1YTgyOGU2MWVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZDIyMzhiOTEtYzYwYS00MGFiLTkw
ZWUtYTA1MmYyMGJhMGQ3L2QyMjM4YjkxLWM2MGEtNDBhYi05MGVlLWEwNTJmMjBi
YTBkNy5jcmwwHwYDVR0jBBgwFoAUVBYnB6yWG22wpVbVhEWeJKTyzW4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9kMjIzOGI5MS1jNjBhLTQwYWItOTBlZS1hMDUy
ZjIwYmEwZDcuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgerQDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQALJRGf0GaiFr+rXxT305GoiYVMfU0T2JKJV1wr9md1eKLctTyucShO
x5LJQNDA00Sw+cz0j3Ci4vyd95ZRVRf93Xc0g3uTNPgwew8QY1YZaVH9w/8Hw9Gp
Ox716sCxTTSuySrvHW8EXY6c52EV+D33uWUpMC7Tg1ENTPVx11we2r2fHk71aWB7
FPoCZaEgcfDKoIedMLkjHmLK0VW7Y3r3WmT5i7EBZw6JS3fhvveN6OjSeHvu/H8E
kSUxQRnvQEp8koCNKfu8SyY6MlHPv+uRFa65I2gNVavUp0lKPx0uCkKfKmH32CAI
RdicfwK5/xu11XhS8uZPzTc7uAd2t1AJ
-----END CERTIFICATE-----
Generated at Thu Jul 2 20:48:46 2026 by rpki-client