Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/4b1b32ca-12d8-30bc-a3ac-1c1d0c1b0263.roa
File:                     4b1b32ca-12d8-30bc-a3ac-1c1d0c1b0263.roa (raw, json)
Hash identifier:          dAxv48udZlY5qMCKhuuDhaAp0mn44o/WoxmsumXMcyU=
Subject key identifier:   22:77:76:E8:7B:EF:5F:9B:49:0E:90:C4:C8:89:19:C3:9E:75:12:3F
Certificate issuer:       /CN=09440a93-986f-41da-8723-7b67f81bdbce
Certificate serial:       010D0C9F4328584F4F07FEDE4823EC2C9545E940
Authority key identifier: 48:4B:81:EB:A9:96:97:3F:B2:DE:E9:DE:8A:DE:E9:5C:42:30:43:83
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/4b1b32ca-12d8-30bc-a3ac-1c1d0c1b0263.roa
Signing time:             Sun 27 Sep 2026 01:00:12 +0000
ROA not before:           Sun 27 Sep 2026 01:00:12 +0000
ROA not after:            Sat 26 Dec 2026 02:00:12 +0000
asID:                     19901
IP address blocks:        2607:6c40:2c00::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/09440a93-986f-41da-8723-7b67f81bdbce.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/09440a93-986f-41da-8723-7b67f81bdbce.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 31 Oct 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:4f:07:fe:de:48:23:ec:2c:95:45:e9:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09440a93-986f-41da-8723-7b67f81bdbce
        Validity
            Not Before: Sep 27 01:00:12 2026 GMT
            Not After : Dec 26 02:00:12 2026 GMT
        Subject: CN=267ca110-e01f-4334-b191-381b5723a667
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:66:c9:db:24:22:2d:4a:ba:78:f7:76:45:fe:
                    8e:77:7e:43:62:21:a3:2b:e4:b4:c6:8b:31:b1:aa:
                    4b:13:21:4a:8e:6e:0d:d9:e1:5e:2f:af:5c:b1:86:
                    71:56:a0:ae:42:67:45:3c:a3:e0:c8:54:66:8a:09:
                    65:f4:22:4e:13:2f:ec:f5:6c:1f:20:39:19:c9:28:
                    d8:16:a2:29:58:9e:4d:3f:5c:9f:da:a8:35:57:33:
                    e4:09:51:68:ac:fb:5d:ce:d7:ab:07:d2:27:42:04:
                    8b:c5:94:16:ea:b2:ae:59:f6:1a:70:65:63:57:35:
                    18:d0:f9:39:b3:28:ee:6e:7f:04:00:ba:7f:43:b7:
                    ab:d0:e3:8a:e1:9f:d5:f1:e0:fd:d3:33:9a:8a:79:
                    a1:ff:68:3a:51:16:a6:7a:ce:f9:90:46:10:7c:bc:
                    f1:fd:04:b7:04:17:d4:86:84:a0:4e:07:a4:fd:c5:
                    b7:66:de:44:e1:a1:c2:f6:da:04:12:43:d7:7d:53:
                    f9:60:39:29:38:2e:0b:e6:50:92:c3:ce:35:21:fa:
                    ff:34:a0:d6:ed:3f:3e:4c:b6:88:63:a6:be:be:47:
                    79:c1:d0:17:bc:b9:0d:11:91:93:dd:23:6d:60:d4:
                    38:6b:15:27:f6:dd:51:97:cb:18:8f:bb:2b:96:64:
                    e2:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:77:76:E8:7B:EF:5F:9B:49:0E:90:C4:C8:89:19:C3:9E:75:12:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/4b1b32ca-12d8-30bc-a3ac-1c1d0c1b0263.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/09440a93-986f-41da-8723-7b67f81bdbce.crl

            X509v3 Authority Key Identifier:
                keyid:48:4B:81:EB:A9:96:97:3F:B2:DE:E9:DE:8A:DE:E9:5C:42:30:43:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:6c40:2c00::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:26:03:42:53:5e:9d:02:4c:0d:90:d0:b5:34:76:fe:f0:1a:
         dc:c7:19:2e:ed:9e:88:12:42:97:e4:06:08:ca:1a:5d:cf:b7:
         2d:f1:ad:52:c4:50:43:ea:bb:e6:92:d1:78:ba:db:ae:27:68:
         c8:13:f5:0e:37:aa:ea:81:4d:b5:99:ac:4b:d8:74:3b:b9:41:
         9e:2d:2c:b8:cc:78:21:e9:f0:f1:90:46:52:80:e9:32:30:41:
         9f:38:f7:51:d8:86:97:5d:6f:60:6a:37:ab:63:6b:93:be:2e:
         f2:16:40:e5:9c:5c:7b:30:76:33:b1:8e:2e:7d:08:c0:8c:fb:
         4a:ff:b4:ea:4d:d2:41:40:a8:b9:fe:5f:6f:e0:28:5c:4e:8c:
         0e:7d:1d:de:d7:79:16:33:78:64:8b:f1:39:dd:a5:0a:92:80:
         c9:bc:6b:03:3f:d1:db:c6:dd:52:51:60:99:13:42:ef:5e:2f:
         fb:da:18:f1:20:d3:5a:0f:bb:09:0e:7d:88:69:a0:36:0e:1b:
         c6:93:a0:3b:88:c7:75:bb:18:16:be:71:66:f1:f3:64:14:02:
         73:39:4a:7d:ef:96:b5:9c:d7:79:54:32:ad:99:b6:45:5c:03:
         f9:4c:ab:4d:e2:83:d1:81:4c:86:05:01:6d:1c:3d:e4:9b:05:
         ab:e0:1c:37
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9PB/7eSCPsLJVF6UAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDk0NDBhOTMtOTg2Zi00MWRhLTg3MjMtN2I2N2Y4MWJk
YmNlMB4XDTI2MDkyNzAxMDAxMloXDTI2MTIyNjAyMDAxMlowLzEtMCsGA1UEAxMk
MjY3Y2ExMTAtZTAxZi00MzM0LWIxOTEtMzgxYjU3MjNhNjY3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1mbJ2yQiLUq6ePd2Rf6Od35DYiGjK+S0xosx
sapLEyFKjm4N2eFeL69csYZxVqCuQmdFPKPgyFRmigll9CJOEy/s9WwfIDkZySjY
FqIpWJ5NP1yf2qg1VzPkCVForPtdzterB9InQgSLxZQW6rKuWfYacGVjVzUY0Pk5
syjubn8EALp/Q7er0OOK4Z/V8eD90zOainmh/2g6URames75kEYQfLzx/QS3BBfU
hoSgTgek/cW3Zt5E4aHC9toEEkPXfVP5YDkpOC4L5lCSw841Ifr/NKDW7T8+TLaI
Y6a+vkd5wdAXvLkNEZGT3SNtYNQ4axUn9t1Rl8sYj7srlmTicwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFCJ3duh771+bSQ6QxMiJGcOedRI/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8wOTQ0
MGE5My05ODZmLTQxZGEtODcyMy03YjY3ZjgxYmRiY2UvNGIxYjMyY2EtMTJkOC0z
MGJjLWEzYWMtMWMxZDBjMWIwMjYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvMDk0NDBhOTMtOTg2Zi00MWRhLTg3
MjMtN2I2N2Y4MWJkYmNlLzA5NDQwYTkzLTk4NmYtNDFkYS04NzIzLTdiNjdmODFi
ZGJjZS5jcmwwHwYDVR0jBBgwFoAUSEuB66mWlz+y3uneit7pXEIwQ4MwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS8wOTQ0MGE5My05ODZmLTQxZGEtODcyMy03YjY3
ZjgxYmRiY2UuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgdsQCwA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAGcmA0JTXp0CTA2Q0LU0dv7wGtzHGS7tnogSQpfkBgjKGl3Pty3x
rVLEUEPqu+aS0Xi6264naMgT9Q43quqBTbWZrEvYdDu5QZ4tLLjMeCHp8PGQRlKA
6TIwQZ8491HYhpddb2BqN6tja5O+LvIWQOWcXHswdjOxji59CMCM+0r/tOpN0kFA
qLn+X2/gKFxOjA59Hd7XeRYzeGSL8TndpQqSgMm8awM/0dvG3VJRYJkTQu9eL/va
GPEg01oPuwkOfYhpoDYOG8aToDuIx3W7GBa+cWbx82QUAnM5Sn3vlrWc13lUMq2Z
tkVcA/lMq03ig9GBTIYFAW0cPeSbBavgHDc=
-----END CERTIFICATE-----
Generated at Fri Oct 30 02:55:33 2026 by rpki-client