Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8451ed63-cb69-4202-bd4e-4bb93315e13c/4b2a583a-6b61-387f-899a-c6889db9dd80.roa
File:                     4b2a583a-6b61-387f-899a-c6889db9dd80.roa (raw, json)
Hash identifier:          EWognAw/WR0uunMKUUtxfDTCk+wD1mbVIdXmgMEWgrA=
Subject key identifier:   82:DB:86:08:0F:85:CB:60:F9:DD:24:50:08:A3:2D:24:70:BE:84:C2
Certificate issuer:       /CN=8451ed63-cb69-4202-bd4e-4bb93315e13c
Certificate serial:       010D0C9F4328584F612D5EC55FA72F8FB312C8A0
Authority key identifier: 7A:6F:8A:09:0C:6A:CF:D9:BE:D5:8B:59:FE:96:32:84:E9:3E:1B:11
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8451ed63-cb69-4202-bd4e-4bb93315e13c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8451ed63-cb69-4202-bd4e-4bb93315e13c/4b2a583a-6b61-387f-899a-c6889db9dd80.roa
Signing time:             Sat 03 Oct 2026 13:00:13 +0000
ROA not before:           Sat 03 Oct 2026 13:00:13 +0000
ROA not after:            Fri 01 Jan 2027 14:00:13 +0000
asID:                     8987
IP address blocks:        2620:31:8008::/46 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8451ed63-cb69-4202-bd4e-4bb93315e13c/8451ed63-cb69-4202-bd4e-4bb93315e13c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8451ed63-cb69-4202-bd4e-4bb93315e13c/8451ed63-cb69-4202-bd4e-4bb93315e13c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8451ed63-cb69-4202-bd4e-4bb93315e13c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 08 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:61:2d:5e:c5:5f:a7:2f:8f:b3:12:c8:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8451ed63-cb69-4202-bd4e-4bb93315e13c
        Validity
            Not Before: Oct  3 13:00:13 2026 GMT
            Not After : Jan  1 14:00:13 2027 GMT
        Subject: CN=faac4565-b76a-4b48-a7f7-257521fdf4c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:34:f9:08:4a:c0:8d:1d:8a:03:6d:3d:6c:af:
                    b9:c5:c9:01:cd:91:36:ea:09:29:25:a8:62:4d:12:
                    31:15:64:d0:a3:08:9b:c8:06:69:c7:9c:ec:03:fd:
                    5c:f9:24:78:8a:72:e9:7c:5b:34:dd:c7:2b:5e:99:
                    e6:ed:fd:a9:80:61:46:ee:f7:e3:11:69:68:be:45:
                    46:bc:7d:a3:4b:8a:ed:43:1a:82:d5:09:e5:18:a1:
                    9c:07:7c:05:f0:c4:7c:2c:41:8b:40:25:11:0c:dd:
                    1d:e3:c2:27:f3:12:dd:9a:90:a0:12:70:80:76:d0:
                    a2:e1:d6:39:63:e0:c5:48:05:9a:17:30:bf:4f:79:
                    1f:2e:f2:0d:89:36:01:32:60:8b:14:94:6f:22:a8:
                    fe:b7:c4:20:bb:06:55:93:11:bf:58:ef:52:b1:1b:
                    1e:f8:2d:53:16:e2:65:14:c0:af:4e:22:d5:3e:d6:
                    35:7e:f9:80:ef:a4:d2:a5:b0:84:44:7e:30:17:89:
                    da:7c:64:3d:f4:4b:0d:da:25:40:46:db:9b:06:0e:
                    36:7f:c4:d3:ab:a0:81:17:b1:72:cd:af:47:91:74:
                    91:67:ca:da:81:1e:46:ac:78:09:75:d8:9a:ca:61:
                    16:43:49:96:4c:7e:3b:77:21:56:1d:47:25:f7:81:
                    8c:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:DB:86:08:0F:85:CB:60:F9:DD:24:50:08:A3:2D:24:70:BE:84:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8451ed63-cb69-4202-bd4e-4bb93315e13c/4b2a583a-6b61-387f-899a-c6889db9dd80.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8451ed63-cb69-4202-bd4e-4bb93315e13c/8451ed63-cb69-4202-bd4e-4bb93315e13c.crl

            X509v3 Authority Key Identifier:
                keyid:7A:6F:8A:09:0C:6A:CF:D9:BE:D5:8B:59:FE:96:32:84:E9:3E:1B:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8451ed63-cb69-4202-bd4e-4bb93315e13c.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:31:8008::/46

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:19:7f:68:8f:55:70:e2:c5:4d:37:41:4a:c4:d0:2d:07:ce:
         17:0c:69:00:e6:7d:6c:6d:5e:0e:1d:c9:0c:21:fe:bf:36:8e:
         59:e4:df:44:6e:d7:f1:a5:c8:03:fa:d7:e1:de:cc:72:f0:64:
         07:35:62:e4:91:75:27:69:40:f6:a9:0f:ed:15:67:fe:f6:d2:
         54:01:c1:ca:8d:a7:5c:f7:3b:2b:bc:63:3e:17:65:a8:c3:a2:
         d1:e9:c6:6f:45:a4:3e:bf:72:3d:19:83:22:bc:77:32:d1:5e:
         4c:eb:bf:ca:c1:98:c8:6b:a9:fb:77:f3:08:5f:9d:a9:1a:27:
         c9:ed:47:ac:60:cf:8c:69:9e:d0:4b:cc:99:a4:ab:32:e7:16:
         a1:56:cb:14:ca:7c:86:e8:3b:de:03:87:16:f9:c5:0f:dd:93:
         43:e2:33:ae:74:89:57:fe:f4:c6:60:41:4b:9e:5f:0c:0d:91:
         0e:c7:45:62:79:11:db:0f:18:ba:ea:69:4c:da:41:a9:41:3c:
         57:e5:cb:71:18:40:9d:03:0c:62:50:be:cd:a7:34:55:cf:6d:
         52:0d:35:dd:e0:0f:fc:9d:67:33:7e:23:b5:88:ba:71:6c:36:
         43:6e:31:c9:07:1b:db:b2:7d:08:49:b5:31:df:e5:69:8b:cb:
         20:1e:b1:9c
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9hLV7FX6cvj7MSyKAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODQ1MWVkNjMtY2I2OS00MjAyLWJkNGUtNGJiOTMzMTVl
MTNjMB4XDTI2MTAwMzEzMDAxM1oXDTI3MDEwMTE0MDAxM1owLzEtMCsGA1UEAxMk
ZmFhYzQ1NjUtYjc2YS00YjQ4LWE3ZjctMjU3NTIxZmRmNGM2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhDT5CErAjR2KA209bK+5xckBzZE26gkpJahi
TRIxFWTQowibyAZpx5zsA/1c+SR4inLpfFs03ccrXpnm7f2pgGFG7vfjEWlovkVG
vH2jS4rtQxqC1QnlGKGcB3wF8MR8LEGLQCURDN0d48In8xLdmpCgEnCAdtCi4dY5
Y+DFSAWaFzC/T3kfLvINiTYBMmCLFJRvIqj+t8QguwZVkxG/WO9SsRse+C1TFuJl
FMCvTiLVPtY1fvmA76TSpbCERH4wF4nafGQ99EsN2iVARtubBg42f8TTq6CBF7Fy
za9HkXSRZ8ragR5GrHgJddiaymEWQ0mWTH47dyFWHUcl94GMtQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFILbhggPhctg+d0kUAijLSRwvoTCMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84NDUx
ZWQ2My1jYjY5LTQyMDItYmQ0ZS00YmI5MzMxNWUxM2MvNGIyYTU4M2EtNmI2MS0z
ODdmLTg5OWEtYzY4ODlkYjlkZDgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvODQ1MWVkNjMtY2I2OS00MjAyLWJk
NGUtNGJiOTMzMTVlMTNjLzg0NTFlZDYzLWNiNjktNDIwMi1iZDRlLTRiYjkzMzE1
ZTEzYy5jcmwwHwYDVR0jBBgwFoAUem+KCQxqz9m+1YtZ/pYyhOk+GxEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS84NDUxZWQ2My1jYjY5LTQyMDItYmQ0ZS00YmI5
MzMxNWUxM2MuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcCJiAAMYAI
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBADIZf2iPVXDixU03QUrE0C0HzhcMaQDmfWxtXg4dyQwh/r82jlnk
30Ru1/GlyAP61+HezHLwZAc1YuSRdSdpQPapD+0VZ/720lQBwcqNp1z3Oyu8Yz4X
ZajDotHpxm9FpD6/cj0ZgyK8dzLRXkzrv8rBmMhrqft38whfnakaJ8ntR6xgz4xp
ntBLzJmkqzLnFqFWyxTKfIboO94Dhxb5xQ/dk0PiM650iVf+9MZgQUueXwwNkQ7H
RWJ5EdsPGLrqaUzaQalBPFfly3EYQJ0DDGJQvs2nNFXPbVINNd3gD/ydZzN+I7WI
unFsNkNuMckHG9uyfQhJtTHf5WmLyyAesZw=
-----END CERTIFICATE-----
Generated at Wed Oct 7 07:44:25 2026 by rpki-client