Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/8cf600b5-a78c-31ad-9585-1136957f1b31.roa
File:                     8cf600b5-a78c-31ad-9585-1136957f1b31.roa (raw, json)
Hash identifier:          rOpRXYXbuFTKlxXrZQ5xb3+YZGzGy+40W1Pu7Id8Y10=
Subject key identifier:   76:EF:E5:D8:55:81:F4:84:92:92:15:03:64:A8:BA:26:0C:A8:D3:90
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584EC0A74F428C4733964E97ABC0
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/8cf600b5-a78c-31ad-9585-1136957f1b31.roa
Signing time:             Fri 07 Aug 2026 01:00:12 +0000
ROA not before:           Fri 07 Aug 2026 01:00:12 +0000
ROA not after:            Thu 05 Nov 2026 02:00:12 +0000
asID:                     33363
IP address blocks:        2603:9031:60::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c0:a7:4f:42:8c:47:33:96:4e:97:ab:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Aug  7 01:00:12 2026 GMT
            Not After : Nov  5 02:00:12 2026 GMT
        Subject: CN=64c24d37-fccb-4d54-ab29-cfdcf68b73e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:b6:96:bf:27:b6:c3:9d:dd:34:08:9e:c0:a8:
                    af:9f:60:72:09:ba:91:0d:d4:45:73:e2:29:ad:01:
                    3b:da:eb:6e:b2:b3:ff:c1:32:5d:a3:5f:17:fc:35:
                    41:0e:f0:a2:5a:1e:f2:d0:f0:c5:b0:a3:3d:15:4d:
                    60:6d:ef:c2:3d:23:79:cb:54:0e:0d:1b:d5:0a:9c:
                    ca:a2:7e:b9:53:ea:79:cf:f2:14:4c:0c:5e:63:4d:
                    84:1e:10:7a:03:2a:dc:f9:20:8e:9f:6c:81:ed:5e:
                    86:36:3d:e3:9b:b0:47:c2:2d:bd:3a:1b:54:b2:a0:
                    44:3c:40:62:08:45:62:72:94:ae:e6:cf:e3:0e:aa:
                    b9:24:77:90:11:80:d0:94:7a:db:5d:89:c4:46:19:
                    b4:5b:b9:39:33:ea:8f:cf:47:25:48:29:95:6a:02:
                    54:3d:68:b6:03:bb:6b:5e:5f:d3:1b:95:8b:0f:b1:
                    12:0e:b5:5a:fd:84:6d:6c:d8:0d:78:01:1f:24:22:
                    27:8d:30:85:70:81:e9:fd:6f:0a:72:85:2d:fa:d8:
                    13:f2:2a:ef:48:15:71:1e:c5:99:04:8b:3c:cd:47:
                    53:5d:5b:7b:a8:aa:16:aa:89:d7:23:de:18:a4:f1:
                    78:d5:55:3f:32:ac:e0:39:c0:97:90:2f:25:f4:88:
                    a2:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:EF:E5:D8:55:81:F4:84:92:92:15:03:64:A8:BA:26:0C:A8:D3:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/8cf600b5-a78c-31ad-9585-1136957f1b31.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:9031:60::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:8a:e1:62:17:b5:b2:15:40:7c:d6:14:5e:c5:a1:10:4e:9f:
         b7:ad:d7:c4:19:82:ad:f8:2f:e7:58:5b:84:b5:dd:36:aa:8d:
         00:f5:6a:f2:61:f7:90:17:25:eb:48:b6:b3:b5:25:43:00:6d:
         55:87:03:cc:47:23:36:a0:19:9e:1d:a6:72:de:b1:d5:a3:de:
         48:5e:4c:07:77:9f:36:0a:f8:5c:6b:65:ea:ec:d0:fc:50:4b:
         36:a1:6a:74:74:36:32:c4:e5:a9:bc:a7:46:6c:ea:70:5d:29:
         13:09:d2:7e:d9:3b:6c:d8:3b:0d:21:ca:c0:49:8e:56:08:13:
         43:49:3e:f3:dc:f7:68:1d:dd:e2:54:22:92:c5:19:8d:25:c7:
         ab:3f:73:22:19:54:b7:48:6b:92:e5:c1:ab:cb:84:95:61:5a:
         4e:8a:5d:12:2a:9a:08:c7:fe:da:b3:d8:04:6f:0a:11:c5:1a:
         be:9d:bf:df:83:11:c8:d7:85:01:ec:97:32:81:5c:4f:40:88:
         29:0d:6b:47:41:55:2b:71:5f:66:01:d4:5e:9f:97:cc:a6:ce:
         05:f6:7b:57:9c:bd:ae:5e:03:d9:73:ed:a3:93:75:df:8c:4e:
         48:a9:b5:02:80:13:c4:7d:27:2f:ec:b3:03:2f:69:70:77:36:
         c3:af:3f:17
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE7Ap09CjEczlk6Xq8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDdjNWYyNzItYTJhZS00NThhLWE3NWYtM2NmNDFmMTli
NjAzMB4XDTI2MDgwNzAxMDAxMloXDTI2MTEwNTAyMDAxMlowLzEtMCsGA1UEAxMk
NjRjMjRkMzctZmNjYi00ZDU0LWFiMjktY2ZkY2Y2OGI3M2UyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmLaWvye2w53dNAiewKivn2ByCbqRDdRFc+Ip
rQE72utusrP/wTJdo18X/DVBDvCiWh7y0PDFsKM9FU1gbe/CPSN5y1QODRvVCpzK
on65U+p5z/IUTAxeY02EHhB6Ayrc+SCOn2yB7V6GNj3jm7BHwi29OhtUsqBEPEBi
CEVicpSu5s/jDqq5JHeQEYDQlHrbXYnERhm0W7k5M+qPz0clSCmVagJUPWi2A7tr
Xl/TG5WLD7ESDrVa/YRtbNgNeAEfJCInjTCFcIHp/W8KcoUt+tgT8irvSBVxHsWZ
BIs8zUdTXVt7qKoWqonXI94YpPF41VU/MqzgOcCXkC8l9IiiSQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFHbv5dhVgfSEkpIVA2SouiYMqNOQMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1
ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0MWYxOWI2MDMvOGNmNjAwYjUtYTc4Yy0z
MWFkLTk1ODUtMTEzNjk1N2YxYjMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdjNWYyNzItYTJhZS00NThhLWE3
NWYtM2NmNDFmMTliNjAzL2Q3YzVmMjcyLWEyYWUtNDU4YS1hNzVmLTNjZjQxZjE5
YjYwMy5jcmwwHwYDVR0jBBgwFoAU9FxHsj2QKs0/IK7kFt39gA/M8p8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0
MWYxOWI2MDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgOQMQBg
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBABiK4WIXtbIVQHzWFF7FoRBOn7et18QZgq34L+dYW4S13TaqjQD1
avJh95AXJetItrO1JUMAbVWHA8xHIzagGZ4dpnLesdWj3kheTAd3nzYK+FxrZers
0PxQSzahanR0NjLE5am8p0Zs6nBdKRMJ0n7ZO2zYOw0hysBJjlYIE0NJPvPc92gd
3eJUIpLFGY0lx6s/cyIZVLdIa5LlwavLhJVhWk6KXRIqmgjH/tqz2ARvChHFGr6d
v9+DEcjXhQHslzKBXE9AiCkNa0dBVStxX2YB1F6fl8ymzgX2e1ecva5eA9lz7aOT
dd+MTkiptQKAE8R9Jy/sswMvaXB3NsOvPxc=
-----END CERTIFICATE-----
Generated at Fri Sep 4 23:42:35 2026 by rpki-client