Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d39e6a1d-b7dc-4b6f-a95a-b5e432cfeae6/6c592d11-a89a-3fc9-b153-3da1d346ca31.roa
File:                     6c592d11-a89a-3fc9-b153-3da1d346ca31.roa (raw, json)
Hash identifier:          6LuhEwCYuF5w6JrJ+6XQexEFIDJ3mPzW/Ufh0ii8Efc=
Subject key identifier:   20:AB:7B:C8:E8:FF:54:29:1A:15:8D:DE:A0:CD:75:BC:F4:81:CB:75
Certificate issuer:       /CN=d39e6a1d-b7dc-4b6f-a95a-b5e432cfeae6
Certificate serial:       010D0C9F4328584D524352F3CB094BD77C121620
Authority key identifier: 19:A3:5D:69:4B:8A:3E:5B:CA:BC:74:49:7C:7E:96:84:84:CE:35:23
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d39e6a1d-b7dc-4b6f-a95a-b5e432cfeae6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d39e6a1d-b7dc-4b6f-a95a-b5e432cfeae6/6c592d11-a89a-3fc9-b153-3da1d346ca31.roa
Signing time:             Sat 28 Mar 2026 19:13:19 +0000
ROA not before:           Sat 28 Mar 2026 19:13:19 +0000
ROA not after:            Fri 26 Jun 2026 19:13:19 +0000
asID:                     401199
IP address blocks:        2620:ca:a000::/48 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d39e6a1d-b7dc-4b6f-a95a-b5e432cfeae6/d39e6a1d-b7dc-4b6f-a95a-b5e432cfeae6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d39e6a1d-b7dc-4b6f-a95a-b5e432cfeae6/d39e6a1d-b7dc-4b6f-a95a-b5e432cfeae6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d39e6a1d-b7dc-4b6f-a95a-b5e432cfeae6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 Apr 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:52:43:52:f3:cb:09:4b:d7:7c:12:16:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d39e6a1d-b7dc-4b6f-a95a-b5e432cfeae6
        Validity
            Not Before: Mar 28 19:13:19 2026 GMT
            Not After : Jun 26 19:13:19 2026 GMT
        Subject: CN=1ace9e13-cd61-47c0-bd1c-461ea7091deb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:e0:91:b1:39:05:be:67:4e:77:ce:6e:de:29:
                    50:72:75:14:02:da:01:6f:ea:fb:95:27:fa:b8:9c:
                    04:ed:7f:38:74:28:4a:50:12:05:82:3e:43:22:b1:
                    83:c8:d1:1f:17:c5:c7:43:83:5c:a9:d6:d0:03:a1:
                    bb:e3:83:03:35:6b:47:66:aa:8c:f7:80:e5:fe:58:
                    8f:e7:83:df:6f:3e:04:77:3c:5b:64:1b:37:bb:eb:
                    6c:10:c1:45:55:70:43:51:eb:3c:7c:e5:b6:a6:fe:
                    10:3b:42:ad:1b:42:62:91:cf:90:3c:17:10:24:a6:
                    00:1a:c2:32:fd:ca:ea:80:b2:d3:37:67:54:40:cb:
                    2c:5c:7e:ca:2b:5d:56:74:d6:19:ca:38:8f:00:5d:
                    b9:b9:33:fd:68:f8:41:06:43:66:32:bf:e6:6f:27:
                    7b:36:61:1a:0f:08:5a:aa:8a:10:8e:df:d3:82:6e:
                    58:43:aa:dd:63:a9:73:51:6f:71:a2:0b:10:18:30:
                    44:8f:8b:f0:0b:a3:d0:6f:34:3e:bf:e6:ee:fa:bd:
                    ac:57:0a:1b:79:40:65:2d:f2:d7:9a:40:da:94:26:
                    e5:40:cc:c5:39:fe:17:88:a5:29:0b:7e:de:da:43:
                    e4:56:34:91:3b:a4:40:87:20:07:15:e9:ee:22:e3:
                    5d:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:AB:7B:C8:E8:FF:54:29:1A:15:8D:DE:A0:CD:75:BC:F4:81:CB:75
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d39e6a1d-b7dc-4b6f-a95a-b5e432cfeae6/6c592d11-a89a-3fc9-b153-3da1d346ca31.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d39e6a1d-b7dc-4b6f-a95a-b5e432cfeae6/d39e6a1d-b7dc-4b6f-a95a-b5e432cfeae6.crl

            X509v3 Authority Key Identifier:
                keyid:19:A3:5D:69:4B:8A:3E:5B:CA:BC:74:49:7C:7E:96:84:84:CE:35:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d39e6a1d-b7dc-4b6f-a95a-b5e432cfeae6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:ca:a000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:a1:51:93:9a:1b:5c:3f:74:3d:9a:d3:49:2a:cb:4a:3f:02:
         26:44:5a:5b:a7:b8:f8:ab:b6:58:6c:2b:1e:29:fc:ae:48:91:
         7e:a4:52:88:ed:eb:c3:5e:c7:70:60:7a:5c:a4:e8:86:77:12:
         b7:5c:90:26:90:61:4b:8c:42:90:08:c5:be:ac:b1:5b:20:d2:
         a0:e8:89:ea:1c:1c:d9:2f:ee:6a:fb:39:25:cd:74:08:0d:58:
         5a:a4:51:91:99:a8:48:0d:47:ee:c5:45:bb:ec:20:07:23:39:
         f3:d9:09:6b:b1:7f:19:37:d6:c2:37:0b:bb:39:eb:6e:27:fd:
         0a:c9:48:8a:6c:0b:87:2a:50:de:5e:27:39:02:b6:b6:ef:e5:
         66:35:8a:f5:da:cf:28:c4:c0:e7:8e:e6:ed:12:bf:06:a2:1e:
         d3:6f:cd:01:99:09:f2:2a:16:ad:44:67:0f:c6:f5:4d:d9:94:
         fc:7f:b9:f8:5c:b6:f2:80:9a:2f:51:59:05:ab:fd:84:4e:b9:
         bf:ae:44:de:6e:af:4d:76:e8:79:f6:1c:75:ff:2c:eb:42:fb:
         f5:da:aa:32:4b:74:bc:ad:98:2f:28:0b:00:81:49:43:07:5a:
         e4:74:c6:31:f0:87:79:03:7c:27:4c:cf:d1:6b:ec:69:f0:55:
         bc:6e:d1:a3
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE1SQ1LzywlL13wSFiAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDM5ZTZhMWQtYjdkYy00YjZmLWE5NWEtYjVlNDMyY2Zl
YWU2MB4XDTI2MDMyODE5MTMxOVoXDTI2MDYyNjE5MTMxOVowLzEtMCsGA1UEAxMk
MWFjZTllMTMtY2Q2MS00N2MwLWJkMWMtNDYxZWE3MDkxZGViMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsuCRsTkFvmdOd85u3ilQcnUUAtoBb+r7lSf6
uJwE7X84dChKUBIFgj5DIrGDyNEfF8XHQ4NcqdbQA6G744MDNWtHZqqM94Dl/liP
54Pfbz4EdzxbZBs3u+tsEMFFVXBDUes8fOW2pv4QO0KtG0Jikc+QPBcQJKYAGsIy
/crqgLLTN2dUQMssXH7KK11WdNYZyjiPAF25uTP9aPhBBkNmMr/mbyd7NmEaDwha
qooQjt/Tgm5YQ6rdY6lzUW9xogsQGDBEj4vwC6PQbzQ+v+bu+r2sVwobeUBlLfLX
mkDalCblQMzFOf4XiKUpC37e2kPkVjSRO6RAhyAHFenuIuNdUwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFCCre8jo/1QpGhWN3qDNdbz0gct1MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9kMzll
NmExZC1iN2RjLTRiNmYtYTk1YS1iNWU0MzJjZmVhZTYvNmM1OTJkMTEtYTg5YS0z
ZmM5LWIxNTMtM2RhMWQzNDZjYTMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvZDM5ZTZhMWQtYjdkYy00YjZmLWE5
NWEtYjVlNDMyY2ZlYWU2L2QzOWU2YTFkLWI3ZGMtNGI2Zi1hOTVhLWI1ZTQzMmNm
ZWFlNi5jcmwwHwYDVR0jBBgwFoAUGaNdaUuKPlvKvHRJfH6WhITONSMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS9kMzllNmExZC1iN2RjLTRiNmYtYTk1YS1iNWU0
MzJjZmVhZTYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAyqAA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAGihUZOaG1w/dD2a00kqy0o/AiZEWlunuPirtlhsKx4p/K5IkX6k
Uojt68Nex3Bgelyk6IZ3ErdckCaQYUuMQpAIxb6ssVsg0qDoieocHNkv7mr7OSXN
dAgNWFqkUZGZqEgNR+7FRbvsIAcjOfPZCWuxfxk31sI3C7s5624n/QrJSIpsC4cq
UN5eJzkCtrbv5WY1ivXazyjEwOeO5u0SvwaiHtNvzQGZCfIqFq1EZw/G9U3ZlPx/
ufhctvKAmi9RWQWr/YROub+uRN5ur0126Hn2HHX/LOtC+/XaqjJLdLytmC8oCwCB
SUMHWuR0xjHwh3kDfCdMz9Fr7GnwVbxu0aM=
-----END CERTIFICATE-----
Generated at Mon Apr 13 11:04:52 2026 by rpki-client