Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/badf1586-901d-41a7-b0f3-521998d53931/963a6036-d518-33f5-9050-74210816b478.roa
File:                     963a6036-d518-33f5-9050-74210816b478.roa (raw, json)
Hash identifier:          cSQhc7yVV21MkmT9eXeLqULya6qOSQEFWsG97ayWqto=
Subject key identifier:   F2:6D:B6:1C:C2:95:B7:DA:65:D8:E0:C0:43:D3:DA:75:37:69:8D:BB
Certificate issuer:       /CN=badf1586-901d-41a7-b0f3-521998d53931
Certificate serial:       010D0C9F4328584E38C9C11FCA80C9CB7A86CB80
Authority key identifier: 17:DD:BE:D5:1B:27:91:56:B0:48:C7:7E:3D:0E:D9:4F:FA:37:AB:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/badf1586-901d-41a7-b0f3-521998d53931.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/badf1586-901d-41a7-b0f3-521998d53931/963a6036-d518-33f5-9050-74210816b478.roa
Signing time:             Fri 19 Jun 2026 09:00:12 +0000
ROA not before:           Fri 19 Jun 2026 09:00:12 +0000
ROA not after:            Thu 17 Sep 2026 09:00:12 +0000
asID:                     209630
IP address blocks:        2604:be0:ffe0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/badf1586-901d-41a7-b0f3-521998d53931/badf1586-901d-41a7-b0f3-521998d53931.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/badf1586-901d-41a7-b0f3-521998d53931/badf1586-901d-41a7-b0f3-521998d53931.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/badf1586-901d-41a7-b0f3-521998d53931.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 Jul 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:38:c9:c1:1f:ca:80:c9:cb:7a:86:cb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=badf1586-901d-41a7-b0f3-521998d53931
        Validity
            Not Before: Jun 19 09:00:12 2026 GMT
            Not After : Sep 17 09:00:12 2026 GMT
        Subject: CN=ba00647b-e293-42fc-b5da-4056f9b1ade8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:a8:14:b8:32:2a:50:4b:ab:4f:2c:5d:6e:99:
                    12:c7:1b:3f:11:f2:c7:38:8e:9e:16:bc:d3:01:e8:
                    40:17:d9:af:7a:9a:6d:2b:93:62:fe:47:d0:40:0e:
                    de:30:13:5e:31:d5:c5:2e:b8:02:fa:7b:43:25:81:
                    c9:2f:be:04:ae:63:ae:1d:2c:b8:2e:1b:88:59:b6:
                    1e:ac:bb:ab:aa:03:0f:f2:8a:47:f0:78:e7:7c:2a:
                    09:ef:76:3f:56:4a:ba:b5:58:50:a3:ad:5e:82:2c:
                    7b:d9:7d:96:2d:12:d4:2c:b0:02:6e:0d:8e:e8:18:
                    09:1d:aa:ae:7e:a2:5b:54:2a:08:3c:f4:33:28:50:
                    cb:23:60:fd:bd:bf:d6:07:0a:56:fb:9a:9b:16:f9:
                    1c:0e:4a:39:4f:bc:56:54:f3:51:2c:cd:cf:5d:c3:
                    67:2a:63:b3:58:7a:fd:c0:50:98:9f:0f:5f:b6:ff:
                    d1:d5:4b:b7:42:17:c6:f4:ff:2e:c0:f7:73:1b:7a:
                    c7:7a:20:5b:06:9e:dd:65:45:92:ba:df:17:1c:0f:
                    ce:8c:f1:58:42:d4:a5:f9:29:1d:b5:26:b1:54:19:
                    ff:5e:90:c2:2b:e0:63:8a:01:ce:0f:bd:f4:4e:06:
                    5f:a6:11:06:6f:55:74:a5:34:0b:3b:32:a0:cf:be:
                    b3:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:6D:B6:1C:C2:95:B7:DA:65:D8:E0:C0:43:D3:DA:75:37:69:8D:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/badf1586-901d-41a7-b0f3-521998d53931/963a6036-d518-33f5-9050-74210816b478.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/badf1586-901d-41a7-b0f3-521998d53931/badf1586-901d-41a7-b0f3-521998d53931.crl

            X509v3 Authority Key Identifier:
                keyid:17:DD:BE:D5:1B:27:91:56:B0:48:C7:7E:3D:0E:D9:4F:FA:37:AB:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/badf1586-901d-41a7-b0f3-521998d53931.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:be0:ffe0::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:65:ab:b1:60:b7:a2:7f:e3:e1:4f:77:29:c6:60:eb:66:0b:
         c4:34:07:63:f7:8f:66:05:5e:0c:a7:95:af:ca:55:56:69:e5:
         16:cb:00:85:e1:79:24:9c:b8:f9:de:8a:df:77:2e:63:b1:03:
         59:64:7f:b7:15:9f:6e:a3:9f:cf:3d:62:b1:2c:bd:30:93:df:
         15:82:d2:eb:9c:6d:af:08:a5:4e:cc:27:8e:2a:37:03:dd:e0:
         c2:6b:b6:85:0c:c9:29:a2:85:c4:96:75:6e:aa:d8:51:6f:06:
         e2:f0:8a:cd:aa:26:ce:47:1f:14:88:d6:5c:e3:b5:23:ca:40:
         3d:a9:21:17:f0:20:85:10:5a:0f:0e:30:46:8f:4a:a7:22:3c:
         10:16:d5:db:b6:21:62:9d:7b:93:f8:f5:30:0a:eb:1b:b8:b8:
         98:8a:bc:68:47:da:f8:a3:38:d4:25:af:a4:1e:5f:9d:ff:11:
         c0:e8:a5:e6:63:8a:e0:70:90:f8:f4:a1:e9:6b:bb:93:fc:df:
         b4:4f:94:86:89:ca:ad:33:a5:ea:c5:7c:70:65:37:b8:48:a3:
         95:9b:90:b6:fe:3e:14:ec:02:86:5a:7a:e7:86:b8:ff:c1:5d:
         c4:f9:be:2e:ff:b4:84:c6:4e:14:32:26:dd:aa:0c:aa:8b:e6:
         26:8a:45:24
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE44ycEfyoDJy3qGy4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYmFkZjE1ODYtOTAxZC00MWE3LWIwZjMtNTIxOTk4ZDUz
OTMxMB4XDTI2MDYxOTA5MDAxMloXDTI2MDkxNzA5MDAxMlowLzEtMCsGA1UEAxMk
YmEwMDY0N2ItZTI5My00MmZjLWI1ZGEtNDA1NmY5YjFhZGU4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlKgUuDIqUEurTyxdbpkSxxs/EfLHOI6eFrzT
AehAF9mvepptK5Ni/kfQQA7eMBNeMdXFLrgC+ntDJYHJL74ErmOuHSy4LhuIWbYe
rLurqgMP8opH8HjnfCoJ73Y/Vkq6tVhQo61egix72X2WLRLULLACbg2O6BgJHaqu
fqJbVCoIPPQzKFDLI2D9vb/WBwpW+5qbFvkcDko5T7xWVPNRLM3PXcNnKmOzWHr9
wFCYnw9ftv/R1Uu3QhfG9P8uwPdzG3rHeiBbBp7dZUWSut8XHA/OjPFYQtSl+Skd
tSaxVBn/XpDCK+BjigHOD730TgZfphEGb1V0pTQLOzKgz76zDwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFPJtthzClbfaZdjgwEPT2nU3aY27MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9iYWRm
MTU4Ni05MDFkLTQxYTctYjBmMy01MjE5OThkNTM5MzEvOTYzYTYwMzYtZDUxOC0z
M2Y1LTkwNTAtNzQyMTA4MTZiNDc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvYmFkZjE1ODYtOTAxZC00MWE3LWIw
ZjMtNTIxOTk4ZDUzOTMxL2JhZGYxNTg2LTkwMWQtNDFhNy1iMGYzLTUyMTk5OGQ1
MzkzMS5jcmwwHwYDVR0jBBgwFoAUF92+1RsnkVawSMd+PQ7ZT/o3q54wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy9iYWRmMTU4Ni05MDFkLTQxYTctYjBmMy01MjE5
OThkNTM5MzEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgQL4P/g
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAGdlq7Fgt6J/4+FPdynGYOtmC8Q0B2P3j2YFXgynla/KVVZp5RbL
AIXheSScuPneit93LmOxA1lkf7cVn26jn889YrEsvTCT3xWC0uucba8IpU7MJ44q
NwPd4MJrtoUMySmihcSWdW6q2FFvBuLwis2qJs5HHxSI1lzjtSPKQD2pIRfwIIUQ
Wg8OMEaPSqciPBAW1du2IWKde5P49TAK6xu4uJiKvGhH2vijONQlr6QeX53/EcDo
peZjiuBwkPj0oelru5P837RPlIaJyq0zperFfHBlN7hIo5WbkLb+PhTsAoZaeueG
uP/BXcT5vi7/tITGThQyJt2qDKqL5iaKRSQ=
-----END CERTIFICATE-----
Generated at Fri Jul 3 16:58:16 2026 by rpki-client