Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/60a936c7-4a19-44a9-b75d-cc22c274db26/be165f07-6e8e-3144-8e98-8df39d6dd4ab.roa
File:                     be165f07-6e8e-3144-8e98-8df39d6dd4ab.roa (raw, json)
Hash identifier:          9rIxYkYqHqCj1f17gjyC8t9EVXffHAUKivHqKUStS2w=
Subject key identifier:   93:D2:3B:E1:CA:B7:32:2F:CF:0A:0A:93:7E:1C:9E:08:3A:C9:E8:AB
Certificate issuer:       /CN=60a936c7-4a19-44a9-b75d-cc22c274db26
Certificate serial:       010D0C9F4328584EE0C1ED2DFFCAEFD5CAF19780
Authority key identifier: 5E:C1:B1:FA:49:CE:BF:BA:D8:5A:0C:DE:2A:61:2C:3B:EE:72:33:E1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/60a936c7-4a19-44a9-b75d-cc22c274db26.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/60a936c7-4a19-44a9-b75d-cc22c274db26/be165f07-6e8e-3144-8e98-8df39d6dd4ab.roa
Signing time:             Tue 18 Aug 2026 13:00:12 +0000
ROA not before:           Tue 18 Aug 2026 13:00:12 +0000
ROA not after:            Mon 16 Nov 2026 14:00:12 +0000
asID:                     18875
IP address blocks:        2607:d880::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/60a936c7-4a19-44a9-b75d-cc22c274db26/60a936c7-4a19-44a9-b75d-cc22c274db26.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/60a936c7-4a19-44a9-b75d-cc22c274db26/60a936c7-4a19-44a9-b75d-cc22c274db26.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/60a936c7-4a19-44a9-b75d-cc22c274db26.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 24 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e0:c1:ed:2d:ff:ca:ef:d5:ca:f1:97:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60a936c7-4a19-44a9-b75d-cc22c274db26
        Validity
            Not Before: Aug 18 13:00:12 2026 GMT
            Not After : Nov 16 14:00:12 2026 GMT
        Subject: CN=47ff9b97-e1fa-44f3-81b3-f10728902842
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:5a:f7:a0:2b:d7:3d:51:bf:37:1d:61:94:2f:
                    a5:f5:5a:ae:6a:d3:cf:3a:0f:27:92:3e:42:a0:73:
                    27:14:2d:b4:bf:7b:71:b6:6d:6f:eb:8c:33:0c:9a:
                    20:17:94:7f:8c:2b:3d:4e:1f:f4:a5:fb:ee:63:cd:
                    14:fa:1e:38:5a:b8:d1:b7:5f:83:49:05:71:e1:e0:
                    38:84:65:b7:fd:cb:a4:c2:a0:91:fc:3b:e6:fb:f7:
                    15:29:ba:56:9d:5e:9c:6c:54:89:b7:16:84:50:e3:
                    fd:aa:c3:a6:50:c1:7b:b9:b9:75:67:16:34:55:b9:
                    31:50:26:22:ad:ba:0b:5d:91:76:00:62:8f:7c:70:
                    29:64:51:e6:30:00:87:97:c8:d9:59:1a:fd:e8:94:
                    d7:d3:0d:98:78:6f:66:e3:fb:94:4c:b9:28:a6:5f:
                    0b:36:37:77:55:8e:b9:ab:52:50:98:f3:4e:40:fb:
                    49:1f:8f:2e:da:99:23:ef:9b:1b:3f:16:9b:14:0b:
                    40:59:cf:06:82:e1:4e:ab:8b:ec:56:8f:54:f7:9c:
                    08:f0:be:2a:f3:fd:b9:26:78:7f:20:77:a9:d1:b8:
                    af:99:e4:02:b3:a3:5c:a5:be:01:7c:e8:c4:8f:9e:
                    7f:9b:4c:47:00:4a:1b:41:fb:9c:57:e3:40:21:07:
                    3b:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:D2:3B:E1:CA:B7:32:2F:CF:0A:0A:93:7E:1C:9E:08:3A:C9:E8:AB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/60a936c7-4a19-44a9-b75d-cc22c274db26/be165f07-6e8e-3144-8e98-8df39d6dd4ab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/60a936c7-4a19-44a9-b75d-cc22c274db26/60a936c7-4a19-44a9-b75d-cc22c274db26.crl

            X509v3 Authority Key Identifier:
                keyid:5E:C1:B1:FA:49:CE:BF:BA:D8:5A:0C:DE:2A:61:2C:3B:EE:72:33:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/60a936c7-4a19-44a9-b75d-cc22c274db26.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:d880::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:65:1c:e5:32:8c:2a:30:7f:56:9d:c0:b6:cc:e9:35:c2:6a:
         dc:44:c7:d9:a8:1f:b2:eb:36:48:d8:f2:de:32:1b:64:99:f7:
         db:c2:e6:9e:ef:ba:65:ab:bf:50:cb:47:66:bb:58:5d:d0:ae:
         3e:4a:ac:55:95:73:00:d0:03:c4:f8:15:d3:5e:3a:9d:d9:ec:
         94:39:29:87:1a:fc:41:75:e2:9f:45:14:d9:91:cb:e7:0c:e8:
         cd:8c:c0:d5:52:4a:76:db:3b:7f:e0:0b:3a:11:85:69:cb:ac:
         66:9f:b6:53:b7:1d:52:5c:eb:d4:e1:9e:00:14:c3:24:65:da:
         41:c7:58:5e:f7:6e:cb:cd:f1:41:fb:9f:e6:81:26:f5:60:82:
         69:1f:54:a4:30:8e:6c:68:80:e0:aa:92:43:1d:75:9e:0f:26:
         47:79:6e:32:22:01:90:4a:11:ee:08:2d:bc:b6:55:24:55:95:
         d1:34:12:2a:6e:a3:73:4f:1b:d2:07:66:76:e1:e1:b4:cf:a9:
         54:9a:fc:85:b1:c5:5a:0b:30:29:0d:85:4f:40:2f:9a:00:8f:
         ee:7b:58:3c:69:1e:c0:1a:90:94:99:e9:a1:88:1a:71:40:0b:
         29:ab:7d:a2:82:e7:e8:55:ff:16:16:48:c1:4d:1e:86:d4:9f:
         fa:a9:78:54
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE7gwe0t/8rv1crxl4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjBhOTM2YzctNGExOS00NGE5LWI3NWQtY2MyMmMyNzRk
YjI2MB4XDTI2MDgxODEzMDAxMloXDTI2MTExNjE0MDAxMlowLzEtMCsGA1UEAxMk
NDdmZjliOTctZTFmYS00NGYzLTgxYjMtZjEwNzI4OTAyODQyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi1r3oCvXPVG/Nx1hlC+l9VquatPPOg8nkj5C
oHMnFC20v3txtm1v64wzDJogF5R/jCs9Th/0pfvuY80U+h44WrjRt1+DSQVx4eA4
hGW3/cukwqCR/Dvm+/cVKbpWnV6cbFSJtxaEUOP9qsOmUMF7ubl1ZxY0VbkxUCYi
rboLXZF2AGKPfHApZFHmMACHl8jZWRr96JTX0w2YeG9m4/uUTLkopl8LNjd3VY65
q1JQmPNOQPtJH48u2pkj75sbPxabFAtAWc8GguFOq4vsVo9U95wI8L4q8/25Jnh/
IHep0bivmeQCs6Ncpb4BfOjEj55/m0xHAEobQfucV+NAIQc79QIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFJPSO+HKtzIvzwoKk34cngg6yeirMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82MGE5
MzZjNy00YTE5LTQ0YTktYjc1ZC1jYzIyYzI3NGRiMjYvYmUxNjVmMDctNmU4ZS0z
MTQ0LThlOTgtOGRmMzlkNmRkNGFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNjBhOTM2YzctNGExOS00NGE5LWI3
NWQtY2MyMmMyNzRkYjI2LzYwYTkzNmM3LTRhMTktNDRhOS1iNzVkLWNjMjJjMjc0
ZGIyNi5jcmwwHwYDVR0jBBgwFoAUXsGx+knOv7rYWgzeKmEsO+5yM+EwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS82MGE5MzZjNy00YTE5LTQ0YTktYjc1ZC1jYzIy
YzI3NGRiMjYuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgfYgDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQAsZRzlMowqMH9WncC2zOk1wmrcRMfZqB+y6zZI2PLeMhtkmffbwuae
77plq79Qy0dmu1hd0K4+SqxVlXMA0APE+BXTXjqd2eyUOSmHGvxBdeKfRRTZkcvn
DOjNjMDVUkp22zt/4As6EYVpy6xmn7ZTtx1SXOvU4Z4AFMMkZdpBx1he927LzfFB
+5/mgSb1YIJpH1SkMI5saIDgqpJDHXWeDyZHeW4yIgGQShHuCC28tlUkVZXRNBIq
bqNzTxvSB2Z24eG0z6lUmvyFscVaCzApDYVPQC+aAI/ue1g8aR7AGpCUmemhiBpx
QAspq32igufoVf8WFkjBTR6G1J/6qXhU
-----END CERTIFICATE-----
Generated at Sat Aug 22 18:11:34 2026 by rpki-client