Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/65b88e69-185f-4918-be77-5fca89cf3c16/29ec1ac4-8552-3747-b6af-11d9e96d9683.roa
File:                     29ec1ac4-8552-3747-b6af-11d9e96d9683.roa (raw, json)
Hash identifier:          r80E14UkYPMtgF/Tw8vbKnV56CvhSFYrPzL9xn0fsWk=
Subject key identifier:   3B:B8:0A:80:B1:3E:31:82:4F:FB:D2:5D:4A:54:CE:CA:50:F9:EA:A8
Certificate issuer:       /CN=65b88e69-185f-4918-be77-5fca89cf3c16
Certificate serial:       010D0C9F4328584E3FC471D9AAA8204BC5261180
Authority key identifier: C9:C8:ED:37:AB:AA:F8:A2:6C:2E:F6:9E:99:A0:A3:5F:57:0D:2C:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/65b88e69-185f-4918-be77-5fca89cf3c16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/65b88e69-185f-4918-be77-5fca89cf3c16/29ec1ac4-8552-3747-b6af-11d9e96d9683.roa
Signing time:             Sun 21 Jun 2026 21:00:12 +0000
ROA not before:           Sun 21 Jun 2026 21:00:12 +0000
ROA not after:            Sat 19 Sep 2026 21:00:12 +0000
asID:                     19156
IP address blocks:        2604:77c0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/65b88e69-185f-4918-be77-5fca89cf3c16/65b88e69-185f-4918-be77-5fca89cf3c16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/65b88e69-185f-4918-be77-5fca89cf3c16/65b88e69-185f-4918-be77-5fca89cf3c16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/65b88e69-185f-4918-be77-5fca89cf3c16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:3f:c4:71:d9:aa:a8:20:4b:c5:26:11:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65b88e69-185f-4918-be77-5fca89cf3c16
        Validity
            Not Before: Jun 21 21:00:12 2026 GMT
            Not After : Sep 19 21:00:12 2026 GMT
        Subject: CN=ee01d0ca-7818-494d-87e0-c052d1061ad1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:38:04:e7:e3:6a:a1:0f:86:9b:35:56:e5:dd:
                    a3:72:aa:41:ea:c1:73:85:84:0c:77:87:1b:b3:29:
                    8a:87:2f:cc:02:d5:92:d6:b9:66:01:da:ec:c3:64:
                    3a:9c:af:27:91:fc:e4:d5:89:a3:80:d3:d0:82:c5:
                    8f:28:60:77:14:6b:60:8c:ac:aa:5f:7b:81:ca:81:
                    4c:e8:2c:f4:77:c6:b9:ad:f9:54:be:50:10:fb:ae:
                    9c:38:2e:02:b6:e3:0c:6d:1b:cf:96:a5:9a:27:e8:
                    96:af:41:b5:ea:4f:89:83:6c:e2:e1:90:e4:96:cc:
                    03:21:38:74:f8:53:24:d5:f1:42:2b:bb:e7:e7:cc:
                    75:1f:c9:81:45:1d:7c:99:ba:69:df:a6:f4:8e:56:
                    24:13:fb:a6:4c:c8:31:b5:a1:fd:26:ff:0c:68:c6:
                    1d:85:ef:6c:42:eb:db:20:e9:b8:21:fa:1a:b2:c7:
                    e2:6e:f3:5d:10:6b:63:62:0e:d4:c1:0c:fc:1d:7c:
                    96:f7:b9:be:c4:1a:ca:e3:37:24:e7:b2:dd:f5:54:
                    f2:7b:69:15:f4:10:7f:34:57:e8:26:92:05:ec:a5:
                    28:22:4f:32:c7:01:45:e2:31:37:b8:87:7e:24:5a:
                    2e:8a:0f:75:82:b5:4e:fc:0f:ad:b1:64:4e:56:8d:
                    bf:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:B8:0A:80:B1:3E:31:82:4F:FB:D2:5D:4A:54:CE:CA:50:F9:EA:A8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/65b88e69-185f-4918-be77-5fca89cf3c16/29ec1ac4-8552-3747-b6af-11d9e96d9683.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/65b88e69-185f-4918-be77-5fca89cf3c16/65b88e69-185f-4918-be77-5fca89cf3c16.crl

            X509v3 Authority Key Identifier:
                keyid:C9:C8:ED:37:AB:AA:F8:A2:6C:2E:F6:9E:99:A0:A3:5F:57:0D:2C:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/65b88e69-185f-4918-be77-5fca89cf3c16.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:77c0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:11:30:67:12:c0:05:43:8b:ac:13:6c:ab:4e:d4:37:39:48:
         2b:a7:0f:75:dc:b8:74:8b:c2:c1:02:e8:ef:81:38:00:40:37:
         54:91:09:2d:81:9e:87:04:5b:f8:6d:b1:16:20:40:75:01:b4:
         d9:3f:60:d2:dd:85:2c:48:87:81:3c:3f:3a:56:51:99:0b:24:
         d6:63:52:8f:01:54:25:e3:d1:cd:52:7f:aa:e1:ab:32:8e:2e:
         8c:bb:e3:2b:c7:94:28:67:1f:27:54:36:0f:cc:d2:4e:1f:77:
         52:f7:1a:5c:37:5d:44:fe:0a:dd:45:0b:d1:a3:38:20:59:6a:
         a8:78:55:e4:76:c7:c7:31:96:ac:00:6d:8a:f5:85:5b:2b:d7:
         e8:18:0c:d4:c2:e8:22:e7:6f:0a:0c:34:bc:65:62:b0:7c:b4:
         38:ae:b7:58:b8:bc:92:c0:ee:87:3d:91:bc:22:19:8c:8a:aa:
         3a:b7:aa:af:03:a4:81:ef:a4:21:36:68:f1:34:89:d7:66:cd:
         ec:ac:d4:a7:b2:cb:92:89:a0:6e:3b:ac:ad:1d:dc:cd:07:d7:
         d3:29:5a:7d:55:49:c3:b5:23:15:15:91:59:44:38:bd:85:83:
         59:13:67:d2:c7:13:de:99:84:2d:40:c7:8d:89:b6:b0:12:c3:
         b8:da:1f:a3
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE4/xHHZqqggS8UmEYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjViODhlNjktMTg1Zi00OTE4LWJlNzctNWZjYTg5Y2Yz
YzE2MB4XDTI2MDYyMTIxMDAxMloXDTI2MDkxOTIxMDAxMlowLzEtMCsGA1UEAxMk
ZWUwMWQwY2EtNzgxOC00OTRkLTg3ZTAtYzA1MmQxMDYxYWQxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuDgE5+NqoQ+GmzVW5d2jcqpB6sFzhYQMd4cb
symKhy/MAtWS1rlmAdrsw2Q6nK8nkfzk1YmjgNPQgsWPKGB3FGtgjKyqX3uByoFM
6Cz0d8a5rflUvlAQ+66cOC4CtuMMbRvPlqWaJ+iWr0G16k+Jg2zi4ZDklswDITh0
+FMk1fFCK7vn58x1H8mBRR18mbpp36b0jlYkE/umTMgxtaH9Jv8MaMYdhe9sQuvb
IOm4IfoassfibvNdEGtjYg7UwQz8HXyW97m+xBrK4zck57Ld9VTye2kV9BB/NFfo
JpIF7KUoIk8yxwFF4jE3uId+JFouig91grVO/A+tsWROVo2/FQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFDu4CoCxPjGCT/vSXUpUzspQ+eqoMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi82NWI4
OGU2OS0xODVmLTQ5MTgtYmU3Ny01ZmNhODljZjNjMTYvMjllYzFhYzQtODU1Mi0z
NzQ3LWI2YWYtMTFkOWU5NmQ5NjgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z
N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvNjViODhlNjktMTg1Zi00OTE4LWJl
NzctNWZjYTg5Y2YzYzE2LzY1Yjg4ZTY5LTE4NWYtNDkxOC1iZTc3LTVmY2E4OWNm
M2MxNi5jcmwwHwYDVR0jBBgwFoAUycjtN6uq+KJsLvaemaCjX1cNLHgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4
OC1hYmVhLWU0OTA5ZWYxYjRlMi82NWI4OGU2OS0xODVmLTQ5MTgtYmU3Ny01ZmNh
ODljZjNjMTYuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgR3wDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQBRETBnEsAFQ4usE2yrTtQ3OUgrpw913Lh0i8LBAujvgTgAQDdUkQkt
gZ6HBFv4bbEWIEB1AbTZP2DS3YUsSIeBPD86VlGZCyTWY1KPAVQl49HNUn+q4asy
ji6Mu+Mrx5QoZx8nVDYPzNJOH3dS9xpcN11E/grdRQvRozggWWqoeFXkdsfHMZas
AG2K9YVbK9foGAzUwugi528KDDS8ZWKwfLQ4rrdYuLySwO6HPZG8IhmMiqo6t6qv
A6SB76QhNmjxNInXZs3srNSnssuSiaBuO6ytHdzNB9fTKVp9VUnDtSMVFZFZRDi9
hYNZE2fSxxPemYQtQMeNibawEsO42h+j
-----END CERTIFICATE-----
Generated at Sun Jul 12 23:52:58 2026 by rpki-client