Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5df6ebd7-0ccd-4c06-80a0-45fd76077f54/2f5530ed-15f5-3da6-baf0-335815c4d026.roa
File:                     2f5530ed-15f5-3da6-baf0-335815c4d026.roa (raw, json)
Hash identifier:          NH444cZsUyG+n9GsfhkqEIpKn1Nhs5XIYBwRnATKaIo=
Subject key identifier:   B7:94:91:F6:85:BE:83:5B:2E:7F:B3:3C:B1:91:3E:07:7E:52:C7:E9
Certificate issuer:       /CN=5df6ebd7-0ccd-4c06-80a0-45fd76077f54
Certificate serial:       010D0C9F4328584D8EF5647C18F44D8FB9DF2B18
Authority key identifier: F9:95:F2:99:32:98:E6:4A:40:C8:BC:48:CF:27:49:EC:AD:5E:FE:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5df6ebd7-0ccd-4c06-80a0-45fd76077f54.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5df6ebd7-0ccd-4c06-80a0-45fd76077f54/2f5530ed-15f5-3da6-baf0-335815c4d026.roa
Signing time:             Sun 19 Apr 2026 13:00:31 +0000
ROA not before:           Sun 19 Apr 2026 13:00:31 +0000
ROA not after:            Sat 18 Jul 2026 13:00:31 +0000
asID:                     16552
IP address blocks:        2600:1800::/28 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5df6ebd7-0ccd-4c06-80a0-45fd76077f54/5df6ebd7-0ccd-4c06-80a0-45fd76077f54.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5df6ebd7-0ccd-4c06-80a0-45fd76077f54/5df6ebd7-0ccd-4c06-80a0-45fd76077f54.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5df6ebd7-0ccd-4c06-80a0-45fd76077f54.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 29 Apr 2026 04:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:8e:f5:64:7c:18:f4:4d:8f:b9:df:2b:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5df6ebd7-0ccd-4c06-80a0-45fd76077f54
        Validity
            Not Before: Apr 19 13:00:31 2026 GMT
            Not After : Jul 18 13:00:31 2026 GMT
        Subject: CN=df63360a-bef0-471c-a736-e2536c538596
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:47:31:84:24:3b:de:81:12:a7:7f:90:6b:20:
                    13:53:93:17:67:f5:8c:0c:37:1e:f0:5a:00:6f:09:
                    e8:84:8b:f3:41:a1:3c:99:62:a4:7f:95:f7:d7:55:
                    ab:cd:27:fa:76:5b:34:5e:50:68:71:8f:b2:2f:fe:
                    86:0c:35:13:07:4f:0a:5c:f4:ad:65:b2:68:a7:7b:
                    1b:37:c8:26:da:8a:32:6a:ec:13:61:48:e3:7d:7a:
                    4a:ad:1e:29:e0:da:63:8e:d0:82:92:84:dc:0c:22:
                    7e:70:1a:a7:1e:0f:3c:71:a6:bf:e5:2a:f3:57:2c:
                    7b:87:52:fd:7e:6a:8e:bb:ff:da:82:75:51:27:cd:
                    74:a2:24:37:be:5e:8a:68:86:a1:79:cc:c2:4c:78:
                    4e:a7:5e:01:ad:cd:29:1e:b7:25:43:cb:94:6d:a4:
                    5b:8a:44:0b:72:69:23:02:bb:bc:f6:b2:6e:90:62:
                    13:72:f8:b2:e9:d8:10:37:05:89:e9:b7:5b:37:6d:
                    a7:6f:2c:29:64:3d:1c:a7:40:b1:07:8a:ee:c4:dc:
                    e4:f1:16:fb:a6:fe:25:8f:d2:da:51:f4:ee:fb:3f:
                    b4:66:5b:5a:1b:19:82:28:9a:c9:4e:b6:01:a2:24:
                    1f:ed:34:a9:5b:6f:04:7f:f2:d7:c2:97:34:6e:02:
                    f2:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:94:91:F6:85:BE:83:5B:2E:7F:B3:3C:B1:91:3E:07:7E:52:C7:E9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5df6ebd7-0ccd-4c06-80a0-45fd76077f54/2f5530ed-15f5-3da6-baf0-335815c4d026.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5df6ebd7-0ccd-4c06-80a0-45fd76077f54/5df6ebd7-0ccd-4c06-80a0-45fd76077f54.crl

            X509v3 Authority Key Identifier:
                keyid:F9:95:F2:99:32:98:E6:4A:40:C8:BC:48:CF:27:49:EC:AD:5E:FE:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5df6ebd7-0ccd-4c06-80a0-45fd76077f54.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1800::/28

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:c4:25:da:fe:be:e4:0e:51:1b:a6:5c:60:a8:23:bb:13:5e:
         4c:e1:ec:4e:2d:8e:10:52:7e:75:20:b6:b6:f7:99:52:c3:47:
         d7:b4:9b:2b:ca:7e:35:89:37:32:26:f0:aa:8d:6c:f1:c1:0c:
         f4:38:d0:d5:5f:fb:9e:85:4b:f7:d6:8e:3d:f1:49:d0:fe:9a:
         5b:8f:14:9d:c4:83:2e:af:75:3c:5e:ae:0c:98:fd:20:5d:91:
         a7:74:f6:75:35:4e:dc:29:80:58:12:2c:02:33:82:f1:e7:e9:
         dd:a2:c8:61:57:59:ec:8a:7b:c3:33:eb:48:2c:f8:0a:7b:c8:
         05:57:07:e9:55:d1:c6:66:74:5d:ff:97:b2:ff:c6:3b:a9:d6:
         04:70:cb:b0:19:6a:85:93:2d:73:9e:e1:48:8d:a6:00:ee:e1:
         51:d6:96:d2:71:e3:38:cb:43:6c:73:f5:29:96:26:4a:43:6b:
         5d:45:a1:47:cf:cd:de:e8:5d:3b:a2:7e:6b:eb:b9:16:39:f2:
         65:85:95:8e:e9:ad:b8:83:e6:7d:be:6a:05:6e:99:ee:cc:cb:
         ad:d7:e3:27:de:1c:ca:d0:a4:ec:2f:4a:8f:c3:10:fc:45:1c:
         9e:1f:19:19:81:47:0a:10:a2:a0:f9:7f:4e:89:f4:7d:7f:88:
         5f:bc:ed:c2
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE2O9WR8GPRNj7nfKxgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWRmNmViZDctMGNjZC00YzA2LTgwYTAtNDVmZDc2MDc3
ZjU0MB4XDTI2MDQxOTEzMDAzMVoXDTI2MDcxODEzMDAzMVowLzEtMCsGA1UEAxMk
ZGY2MzM2MGEtYmVmMC00NzFjLWE3MzYtZTI1MzZjNTM4NTk2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0kcxhCQ73oESp3+QayATU5MXZ/WMDDce8FoA
bwnohIvzQaE8mWKkf5X311WrzSf6dls0XlBocY+yL/6GDDUTB08KXPStZbJop3sb
N8gm2ooyauwTYUjjfXpKrR4p4NpjjtCCkoTcDCJ+cBqnHg88caa/5SrzVyx7h1L9
fmqOu//agnVRJ810oiQ3vl6KaIaheczCTHhOp14Brc0pHrclQ8uUbaRbikQLcmkj
Aru89rJukGITcviy6dgQNwWJ6bdbN22nbywpZD0cp0CxB4ruxNzk8Rb7pv4lj9La
UfTu+z+0ZltaGxmCKJrJTrYBoiQf7TSpW28Ef/LXwpc0bgLyxwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFLeUkfaFvoNbLn+zPLGRPgd+UsfpMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC81ZGY2
ZWJkNy0wY2NkLTRjMDYtODBhMC00NWZkNzYwNzdmNTQvMmY1NTMwZWQtMTVmNS0z
ZGE2LWJhZjAtMzM1ODE1YzRkMDI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNWRmNmViZDctMGNjZC00YzA2LTgw
YTAtNDVmZDc2MDc3ZjU0LzVkZjZlYmQ3LTBjY2QtNGMwNi04MGEwLTQ1ZmQ3NjA3
N2Y1NC5jcmwwHwYDVR0jBBgwFoAU+ZXymTKY5kpAyLxIzydJ7K1e/qcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC81ZGY2ZWJkNy0wY2NkLTRjMDYtODBhMC00NWZk
NzYwNzdmNTQuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUEJgAYADBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQA2xCXa/r7kDlEbplxgqCO7E15M4exOLY4QUn51ILa295lSw0fXtJsr
yn41iTcyJvCqjWzxwQz0ONDVX/uehUv31o498UnQ/ppbjxSdxIMur3U8Xq4MmP0g
XZGndPZ1NU7cKYBYEiwCM4Lx5+ndoshhV1nsinvDM+tILPgKe8gFVwfpVdHGZnRd
/5ey/8Y7qdYEcMuwGWqFky1znuFIjaYA7uFR1pbSceM4y0Nsc/UpliZKQ2tdRaFH
z83e6F07on5r67kWOfJlhZWO6a24g+Z9vmoFbpnuzMut1+Mn3hzK0KTsL0qPwxD8
RRyeHxkZgUcKEKKg+X9OifR9f4hfvO3C
-----END CERTIFICATE-----
Generated at Mon Apr 27 22:25:23 2026 by rpki-client