Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/354ab3de-b6cb-3de7-8b9e-b1aa2dc079f6.roa
File:                     354ab3de-b6cb-3de7-8b9e-b1aa2dc079f6.roa (raw, json)
Hash identifier:          WfDwGTqY51a8L7xgoeG+or8UGMJJc3JqSLasEmL4SsA=
Subject key identifier:   92:68:6F:D9:CC:39:9F:BC:4B:1D:00:DC:23:D5:D2:D1:39:A0:64:3C
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584D0912AA209CA275A7E6766B80
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/354ab3de-b6cb-3de7-8b9e-b1aa2dc079f6.roa
Signing time:             Mon 02 Mar 2026 14:00:41 +0000
ROA not before:           Mon 02 Mar 2026 14:00:41 +0000
ROA not after:            Sun 31 May 2026 13:00:41 +0000
asID:                     20940
IP address blocks:        2600:1488:6420::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 08 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:09:12:aa:20:9c:a2:75:a7:e6:76:6b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Mar  2 14:00:41 2026 GMT
            Not After : May 31 13:00:41 2026 GMT
        Subject: CN=bcb9df93-0e76-4800-9394-1249f6685e9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:a6:ac:9c:43:4f:e9:db:5f:ec:10:19:6b:f2:
                    95:61:cd:89:0a:73:a5:9d:25:40:25:67:63:a6:37:
                    88:38:8b:6d:38:b1:84:04:35:20:ad:86:bc:81:e0:
                    53:6c:a2:9f:4f:f0:92:07:f1:8e:88:d4:2f:67:f5:
                    9e:f8:75:e2:d7:d1:b7:36:d1:d3:95:47:7e:23:75:
                    34:3f:89:f9:22:14:51:ce:3d:28:f9:ea:3b:f8:a6:
                    be:76:c3:70:8c:a6:a0:4a:f9:76:71:19:dd:fc:6d:
                    d2:ac:c5:f5:30:3c:12:cc:55:1a:7d:a5:7b:29:99:
                    15:71:64:cc:34:47:07:88:3b:24:1f:d7:dc:37:de:
                    f6:14:21:18:d0:8e:35:b4:2b:8f:0f:74:a4:a9:1a:
                    bb:30:09:5e:e7:64:02:ac:92:51:15:b9:e9:c5:95:
                    3d:9e:81:37:09:a9:e9:5c:06:6e:f5:fd:e9:7d:a6:
                    6b:43:37:1b:a8:0e:77:47:4a:f4:7c:96:42:7d:55:
                    d7:f2:d7:08:06:2b:0a:9c:db:1a:da:98:01:56:95:
                    9d:2f:f5:66:7f:c5:44:fa:42:15:15:26:83:39:4e:
                    32:73:e4:7f:46:b2:bb:d9:c4:33:e0:ff:a5:a2:9a:
                    bf:60:b5:21:ba:bd:ab:1e:14:b9:2d:cd:f1:a7:62:
                    d9:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:68:6F:D9:CC:39:9F:BC:4B:1D:00:DC:23:D5:D2:D1:39:A0:64:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/354ab3de-b6cb-3de7-8b9e-b1aa2dc079f6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1488:6420::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:f4:ec:93:ea:05:bc:84:9e:26:26:b0:4e:9f:6a:5d:77:b4:
         17:8c:1b:56:27:e7:7e:ff:fd:2e:b6:a3:21:92:89:60:19:11:
         63:fb:f7:e2:17:c6:d0:52:91:e0:f0:b7:f1:52:42:25:d8:43:
         5c:d0:a5:c8:78:94:04:cd:6b:86:65:4f:0e:fa:c4:55:3a:67:
         75:ab:80:d0:a8:41:59:53:45:c2:a0:39:6f:3a:b2:87:df:ae:
         9e:49:10:27:23:a7:a0:42:5e:af:a4:ab:9a:2b:44:57:9d:68:
         f2:7b:c5:2a:07:6e:23:7a:6f:fe:e9:5b:18:7a:a1:76:d3:6a:
         a9:53:bd:a7:63:44:3a:de:09:73:69:bb:c4:df:22:ea:f4:3d:
         e5:82:d6:c7:87:6d:9f:6a:19:91:5b:7b:fa:7c:68:81:b3:b2:
         fb:6d:66:04:5a:d9:b6:70:42:ae:0c:11:c5:d8:22:96:08:ba:
         dc:bd:2c:15:bd:9f:8a:2a:68:6e:02:68:a7:71:85:58:eb:f2:
         51:b5:dc:20:db:ee:f5:06:8e:a0:9e:aa:46:5e:04:da:79:53:
         1b:e1:01:88:d1:c0:8a:cf:43:f5:45:a6:e9:bc:41:ba:10:8a:
         ec:c9:47:b3:6a:09:e4:58:27:6e:eb:b9:a6:20:fe:23:1f:08:
         c3:a4:e3:c2
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0JEqognKJ1p+Z2a4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI2MDMwMjE0MDA0MVoXDTI2MDUzMTEzMDA0MVowLzEtMCsGA1UEAxMk
YmNiOWRmOTMtMGU3Ni00ODAwLTkzOTQtMTI0OWY2Njg1ZTliMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj6asnENP6dtf7BAZa/KVYc2JCnOlnSVAJWdj
pjeIOIttOLGEBDUgrYa8geBTbKKfT/CSB/GOiNQvZ/We+HXi19G3NtHTlUd+I3U0
P4n5IhRRzj0o+eo7+Ka+dsNwjKagSvl2cRnd/G3SrMX1MDwSzFUafaV7KZkVcWTM
NEcHiDskH9fcN972FCEY0I41tCuPD3SkqRq7MAle52QCrJJRFbnpxZU9noE3Canp
XAZu9f3pfaZrQzcbqA53R0r0fJZCfVXX8tcIBisKnNsa2pgBVpWdL/Vmf8VE+kIV
FSaDOU4yc+R/RrK72cQz4P+lopq/YLUhur2rHhS5Lc3xp2LZOQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFJJob9nMOZ+8Sx0A3CPV0tE5oGQ8MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMzU0YWIzZGUtYjZjYi0z
ZGU3LThiOWUtYjFhYTJkYzA3OWY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAUiGQg
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAEH07JPqBbyEniYmsE6fal13tBeMG1Yn537//S62oyGSiWAZEWP7
9+IXxtBSkeDwt/FSQiXYQ1zQpch4lATNa4ZlTw76xFU6Z3WrgNCoQVlTRcKgOW86
soffrp5JECcjp6BCXq+kq5orRFedaPJ7xSoHbiN6b/7pWxh6oXbTaqlTvadjRDre
CXNpu8TfIur0PeWC1seHbZ9qGZFbe/p8aIGzsvttZgRa2bZwQq4MEcXYIpYIuty9
LBW9n4oqaG4CaKdxhVjr8lG13CDb7vUGjqCeqkZeBNp5UxvhAYjRwIrPQ/VFpum8
QboQiuzJR7NqCeRYJ27ruaYg/iMfCMOk48I=
-----END CERTIFICATE-----
Generated at Sat Mar 7 08:39:00 2026 by rpki-client