Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168/815ab228-9852-3ed0-9895-370b10b598b0.roa
File:                     815ab228-9852-3ed0-9895-370b10b598b0.roa (raw, json)
Hash identifier:          epadN3eaTRzzFCmIL+K+5fA8/B2oceuDMIWqyz7CEqI=
Subject key identifier:   E9:22:EF:D4:CC:1E:47:42:DB:1B:9C:D4:C2:1E:D8:8D:85:27:34:40
Certificate issuer:       /CN=2de5d746-3402-4263-b880-ea4d7ecfc168
Certificate serial:       010D0C9F4328584F66C2C0E693C69D5232ABC200
Authority key identifier: 6B:BB:D0:04:79:CD:D6:C4:66:C1:FB:C0:6A:58:3A:2A:15:6D:48:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168/815ab228-9852-3ed0-9895-370b10b598b0.roa
Signing time:             Mon 05 Oct 2026 13:00:13 +0000
ROA not before:           Mon 05 Oct 2026 13:00:13 +0000
ROA not after:            Sun 03 Jan 2027 14:00:13 +0000
asID:                     400196
IP address blocks:        2607:8240:f11a::/48 maxlen: 56
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168/2de5d746-3402-4263-b880-ea4d7ecfc168.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168/2de5d746-3402-4263-b880-ea4d7ecfc168.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:66:c2:c0:e6:93:c6:9d:52:32:ab:c2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2de5d746-3402-4263-b880-ea4d7ecfc168
        Validity
            Not Before: Oct  5 13:00:13 2026 GMT
            Not After : Jan  3 14:00:13 2027 GMT
        Subject: CN=60db1d48-4246-4570-a020-c103ef08aa94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:e8:db:2c:16:60:af:ba:2e:47:ab:60:21:2f:
                    c3:46:1d:a1:a3:61:80:6d:89:ce:92:c7:cf:9c:03:
                    fe:b1:a8:13:6e:77:3b:0c:a7:c2:9a:9b:8b:af:29:
                    15:42:9e:3c:2d:a0:60:61:c8:4d:cf:9e:ec:60:1e:
                    cd:44:bd:ea:cc:b5:59:b5:63:9e:5a:46:33:8d:d5:
                    48:52:4a:c3:70:5d:54:85:04:fc:d2:a1:f2:d0:cc:
                    b8:3f:77:e1:3a:14:ab:bd:8f:09:2a:52:3c:d1:9a:
                    c4:10:4c:d5:24:dc:ef:4c:38:d4:ea:84:b8:ab:d1:
                    85:6b:65:ca:83:61:7e:c9:da:91:61:82:09:46:44:
                    4a:e5:27:85:17:08:f5:83:7b:e2:9d:d9:b8:bd:cf:
                    81:92:2e:ec:4c:b6:ad:ae:2a:82:88:88:0f:22:1d:
                    91:fc:59:25:0a:26:6b:60:01:c1:3c:a0:07:45:90:
                    44:4c:f8:43:7f:97:4f:20:e2:58:80:1c:00:a9:e8:
                    53:4e:63:ea:96:d3:9f:be:8e:46:80:12:c7:1c:36:
                    80:2b:39:67:85:52:a9:5d:e5:4b:90:5d:91:be:29:
                    d1:55:48:8a:df:d0:a2:43:72:e2:45:bf:ed:a6:70:
                    b6:19:b0:b7:89:d0:42:c8:ac:e6:45:b0:68:2e:40:
                    9e:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:22:EF:D4:CC:1E:47:42:DB:1B:9C:D4:C2:1E:D8:8D:85:27:34:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168/815ab228-9852-3ed0-9895-370b10b598b0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168/2de5d746-3402-4263-b880-ea4d7ecfc168.crl

            X509v3 Authority Key Identifier:
                keyid:6B:BB:D0:04:79:CD:D6:C4:66:C1:FB:C0:6A:58:3A:2A:15:6D:48:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8240:f11a::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:dc:34:6c:d4:19:63:30:ea:58:80:8f:71:dc:a4:06:89:5a:
         31:f1:c6:01:70:f8:d1:58:6d:28:58:2d:4e:3b:22:5b:9d:a5:
         8f:16:e1:87:c9:bd:35:a5:a2:bb:6a:09:42:b8:a5:3d:ba:c7:
         44:28:39:96:18:37:e1:40:b2:b8:7a:48:d8:43:6d:fe:c8:5f:
         7f:67:11:8a:3b:a4:f7:fb:a6:90:8a:1c:42:18:a7:d4:e1:65:
         36:bd:21:33:cc:83:76:60:96:83:95:f9:7a:ea:c6:26:b7:3f:
         36:e4:6b:af:00:4f:a8:a0:d8:41:6d:d6:86:9a:b7:71:64:df:
         5e:b3:91:7b:11:88:7a:78:09:a3:57:1f:42:13:d8:a7:64:00:
         be:ba:38:67:d6:78:c8:02:ee:5a:5f:b3:8e:84:ee:5a:69:4c:
         39:ed:4d:bc:94:be:21:04:b5:3a:f0:cd:5a:2d:c1:c8:05:e9:
         ae:a0:e0:88:e1:e0:14:e2:fd:d8:0c:82:02:c8:38:1a:c7:6d:
         29:56:3b:6a:b9:95:6c:df:a7:76:16:c7:ba:2c:0e:31:5c:25:
         6d:06:b7:3e:35:4c:5e:44:f1:61:b6:4e:84:a4:be:6a:3a:74:
         e4:42:12:b2:72:30:d7:07:67:7e:b1:90:e0:41:6e:47:16:de:
         87:28:5d:d1
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9mwsDmk8adUjKrwgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmRlNWQ3NDYtMzQwMi00MjYzLWI4ODAtZWE0ZDdlY2Zj
MTY4MB4XDTI2MTAwNTEzMDAxM1oXDTI3MDEwMzE0MDAxM1owLzEtMCsGA1UEAxMk
NjBkYjFkNDgtNDI0Ni00NTcwLWEwMjAtYzEwM2VmMDhhYTk0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4ejbLBZgr7ouR6tgIS/DRh2ho2GAbYnOksfP
nAP+sagTbnc7DKfCmpuLrykVQp48LaBgYchNz57sYB7NRL3qzLVZtWOeWkYzjdVI
UkrDcF1UhQT80qHy0My4P3fhOhSrvY8JKlI80ZrEEEzVJNzvTDjU6oS4q9GFa2XK
g2F+ydqRYYIJRkRK5SeFFwj1g3vindm4vc+Bki7sTLatriqCiIgPIh2R/FklCiZr
YAHBPKAHRZBETPhDf5dPIOJYgBwAqehTTmPqltOfvo5GgBLHHDaAKzlnhVKpXeVL
kF2RvinRVUiK39CiQ3LiRb/tpnC2GbC3idBCyKzmRbBoLkCeAQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFOki79TMHkdC2xuc1MIe2I2FJzRAMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8yZGU1
ZDc0Ni0zNDAyLTQyNjMtYjg4MC1lYTRkN2VjZmMxNjgvODE1YWIyMjgtOTg1Mi0z
ZWQwLTk4OTUtMzcwYjEwYjU5OGIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMmRlNWQ3NDYtMzQwMi00MjYzLWI4
ODAtZWE0ZDdlY2ZjMTY4LzJkZTVkNzQ2LTM0MDItNDI2My1iODgwLWVhNGQ3ZWNm
YzE2OC5jcmwwHwYDVR0jBBgwFoAUa7vQBHnN1sRmwfvAalg6KhVtSHwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy8yZGU1ZDc0Ni0zNDAyLTQyNjMtYjg4MC1lYTRk
N2VjZmMxNjguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgeCQPEa
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBACvcNGzUGWMw6liAj3HcpAaJWjHxxgFw+NFYbShYLU47IludpY8W
4YfJvTWlortqCUK4pT26x0QoOZYYN+FAsrh6SNhDbf7IX39nEYo7pPf7ppCKHEIY
p9ThZTa9ITPMg3ZgloOV+Xrqxia3Pzbka68AT6ig2EFt1oaat3Fk316zkXsRiHp4
CaNXH0IT2KdkAL66OGfWeMgC7lpfs46E7lppTDntTbyUviEEtTrwzVotwcgF6a6g
4Ijh4BTi/dgMggLIOBrHbSlWO2q5lWzfp3YWx7osDjFcJW0Gtz41TF5E8WG2ToSk
vmo6dORCErJyMNcHZ36xkOBBbkcW3ocoXdE=
-----END CERTIFICATE-----
Generated at Sun Oct 11 07:03:43 2026 by rpki-client