Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0c1e8465-4b2c-3ed0-87f9-c0cb37e79115.roa
File:                     0c1e8465-4b2c-3ed0-87f9-c0cb37e79115.roa (raw, json)
Hash identifier:          ZkjsxUhmpXCDwZPj4cWqlvM4z896cK8k/LJZjRUx414=
Subject key identifier:   E9:8B:E4:1C:B8:7B:45:92:CD:3E:AA:F7:52:1F:43:35:33:7D:95:2C
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584F82ADA008F9D96DF4435EBD50
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0c1e8465-4b2c-3ed0-87f9-c0cb37e79115.roa
Signing time:             Thu 15 Oct 2026 13:00:13 +0000
ROA not before:           Thu 15 Oct 2026 13:00:13 +0000
ROA not after:            Wed 13 Jan 2027 14:00:13 +0000
asID:                     12222
IP address blocks:        2001:4878:242::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 25 Oct 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:82:ad:a0:08:f9:d9:6d:f4:43:5e:bd:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Oct 15 13:00:13 2026 GMT
            Not After : Jan 13 14:00:13 2027 GMT
        Subject: CN=7a5ad705-1251-4174-a578-24555bb56f68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:1f:85:f2:1d:bb:5b:fc:5a:7f:80:2b:17:18:
                    16:0b:7b:3f:5f:e9:4d:03:35:01:b3:21:e0:0d:58:
                    f0:db:9c:49:05:d8:78:57:87:18:f6:23:b8:94:fb:
                    c1:39:b5:72:27:7a:37:03:ef:21:c2:ad:6e:3c:a1:
                    be:76:62:dd:d9:82:77:5d:7c:a0:0d:c4:21:b9:a3:
                    b4:e5:f3:2c:b1:1d:93:84:81:e5:94:bb:a4:26:51:
                    ae:33:e7:b4:bc:4e:af:8c:ab:9f:2f:37:41:33:a3:
                    9a:ef:eb:99:97:54:6c:e4:91:1c:05:5e:9a:26:a9:
                    c0:fc:87:11:d9:21:be:c9:fe:7d:1f:8e:79:8c:a7:
                    08:13:30:f4:ac:89:9c:b9:1c:e6:1d:a3:7f:02:d4:
                    e8:11:a0:56:93:e1:bb:61:c8:7c:fb:3a:ca:c6:b1:
                    09:11:76:ad:bf:2f:8d:2c:d1:ec:d8:bc:81:50:cc:
                    64:7e:42:5d:70:24:15:43:41:2e:be:46:b4:67:f3:
                    32:1e:6c:c5:77:90:2a:4c:a9:5f:31:43:68:0d:01:
                    7f:67:e4:3c:70:a0:3d:3f:48:f4:ae:67:ca:30:59:
                    e2:98:d3:f1:1a:eb:26:da:6d:c2:43:7e:2e:cc:dd:
                    7a:ef:ed:56:a9:2c:57:46:d3:7d:b8:01:c2:f2:85:
                    a4:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:8B:E4:1C:B8:7B:45:92:CD:3E:AA:F7:52:1F:43:35:33:7D:95:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0c1e8465-4b2c-3ed0-87f9-c0cb37e79115.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:4878:242::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:fc:3b:23:7b:a9:53:e0:57:a8:25:4e:3f:ad:e1:7b:76:2d:
         33:d5:7e:c2:bf:d8:49:6f:13:b3:1b:28:e1:2b:a5:67:ca:94:
         6c:44:af:25:f7:8d:f3:b4:49:5b:5a:3c:b9:79:51:b0:a5:2f:
         c6:85:7e:af:a6:dc:47:d4:5f:f9:13:9e:c3:83:ce:b4:87:86:
         1a:ea:41:0d:66:d3:72:fc:97:dc:41:c6:cf:15:09:55:fa:5f:
         d9:a7:c5:89:aa:18:ac:5e:2e:5c:b5:e3:9a:6a:e7:62:44:ae:
         ca:75:14:d1:b3:e7:4f:4d:c6:ce:f2:fe:30:33:62:61:54:5c:
         49:d5:56:97:5b:61:d8:13:9a:4a:4a:aa:80:b6:e8:ac:ad:60:
         0c:b1:c8:f8:f5:70:29:f2:4f:0c:44:e1:90:93:92:88:11:f0:
         6c:95:11:77:fc:5a:61:04:2f:c1:18:7a:a6:44:d5:4f:48:ef:
         44:22:d3:52:b5:ba:d4:d2:73:20:51:2f:ae:f4:c9:02:df:cc:
         3e:f0:9c:f6:f0:c0:ca:cd:17:7e:ce:a4:d9:43:d2:19:a0:65:
         6a:45:ef:16:67:c6:2e:dd:03:25:df:0b:a0:61:c4:05:00:8d:
         85:62:02:2f:6f:6c:57:06:f6:8f:1f:55:66:6a:6d:ca:48:c8:
         8e:51:0f:a4
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE+CraAI+dlt9ENevVAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI2MTAxNTEzMDAxM1oXDTI3MDExMzE0MDAxM1owLzEtMCsGA1UEAxMk
N2E1YWQ3MDUtMTI1MS00MTc0LWE1NzgtMjQ1NTViYjU2ZjY4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArx+F8h27W/xaf4ArFxgWC3s/X+lNAzUBsyHg
DVjw25xJBdh4V4cY9iO4lPvBObVyJ3o3A+8hwq1uPKG+dmLd2YJ3XXygDcQhuaO0
5fMssR2ThIHllLukJlGuM+e0vE6vjKufLzdBM6Oa7+uZl1Rs5JEcBV6aJqnA/IcR
2SG+yf59H455jKcIEzD0rImcuRzmHaN/AtToEaBWk+G7Ych8+zrKxrEJEXatvy+N
LNHs2LyBUMxkfkJdcCQVQ0Euvka0Z/MyHmzFd5AqTKlfMUNoDQF/Z+Q8cKA9P0j0
rmfKMFnimNPxGusm2m3CQ34uzN167+1WqSxXRtN9uAHC8oWktwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFOmL5By4e0WSzT6q91IfQzUzfZUsMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMGMxZTg0NjUtNGIyYy0z
ZWQwLTg3ZjktYzBjYjM3ZTc5MTE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAFIeAJC
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAH/8OyN7qVPgV6glTj+t4Xt2LTPVfsK/2ElvE7MbKOErpWfKlGxE
ryX3jfO0SVtaPLl5UbClL8aFfq+m3EfUX/kTnsODzrSHhhrqQQ1m03L8l9xBxs8V
CVX6X9mnxYmqGKxeLly145pq52JErsp1FNGz509Nxs7y/jAzYmFUXEnVVpdbYdgT
mkpKqoC26KytYAyxyPj1cCnyTwxE4ZCTkogR8GyVEXf8WmEEL8EYeqZE1U9I70Qi
01K1utTScyBRL670yQLfzD7wnPbwwMrNF37OpNlD0hmgZWpF7xZnxi7dAyXfC6Bh
xAUAjYViAi9vbFcG9o8fVWZqbcpIyI5RD6Q=
-----END CERTIFICATE-----
Generated at Sat Oct 24 07:09:44 2026 by rpki-client