Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7e973645-1380-30c4-81fe-401e74f683e8.roa
File:                     7e973645-1380-30c4-81fe-401e74f683e8.roa (raw, json)
Hash identifier:          PaEQjBgntsAUGzf2o6vBSyyB9Cm8/kjmcMudHS2Cxl0=
Subject key identifier:   AC:3C:33:9C:E1:66:57:36:D1:5D:7A:A8:C4:7E:04:AF:BA:4C:C9:2A
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584E3E5F29C9DB5E85F758DBD2C0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7e973645-1380-30c4-81fe-401e74f683e8.roa
Signing time:             Sun 21 Jun 2026 09:00:12 +0000
ROA not before:           Sun 21 Jun 2026 09:00:12 +0000
ROA not after:            Sat 19 Sep 2026 09:00:12 +0000
asID:                     12222
IP address blocks:        2001:4878:2048::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Jul 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:3e:5f:29:c9:db:5e:85:f7:58:db:d2:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jun 21 09:00:12 2026 GMT
            Not After : Sep 19 09:00:12 2026 GMT
        Subject: CN=d05e001f-35ca-4fdb-9a46-af5c1aaf66d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:aa:47:c2:03:ef:b1:48:35:9a:6f:02:fc:ac:
                    c4:74:5e:d1:be:90:d3:7d:f3:da:dd:0a:df:dc:ac:
                    05:13:6e:2f:2e:1e:93:38:0c:8a:d4:35:61:2b:18:
                    cf:56:1e:6e:25:18:8a:83:9c:ad:82:51:14:40:49:
                    1d:44:29:a0:67:46:ae:c9:e4:87:86:77:2e:c9:ba:
                    e4:1a:dd:19:26:28:df:5f:09:27:ae:51:0b:3a:86:
                    d5:b4:5d:69:f0:c4:42:cc:f7:db:be:43:40:a4:35:
                    2c:0c:b3:2d:9c:ec:62:df:df:a9:d4:17:24:a8:26:
                    b0:87:dc:c1:76:27:74:46:6e:80:d0:f5:31:ef:2d:
                    78:a2:9f:77:a9:ed:d2:ac:92:2b:92:f7:33:23:b8:
                    c4:a9:93:a5:b7:6d:dc:ae:9b:fe:49:38:01:dc:ee:
                    43:97:fa:f3:0f:38:6b:a3:5e:42:b7:98:0c:95:9d:
                    14:db:11:0f:93:c1:62:52:09:89:8d:e8:2a:ae:d3:
                    e9:2e:f7:5d:c7:81:26:76:a5:d2:eb:ec:a3:14:4f:
                    fb:ed:97:2e:75:ce:1d:53:95:19:17:a4:35:d1:0e:
                    9c:8b:89:fe:a6:9c:fd:a8:e0:3b:ca:de:fa:fe:27:
                    7f:9b:25:b6:ab:51:18:e5:bf:d7:44:45:6b:e1:33:
                    74:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:3C:33:9C:E1:66:57:36:D1:5D:7A:A8:C4:7E:04:AF:BA:4C:C9:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7e973645-1380-30c4-81fe-401e74f683e8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:4878:2048::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:f0:87:b8:16:5e:e5:23:80:b8:33:91:70:42:6f:35:2a:fb:
         5a:83:61:62:c3:af:99:37:06:b6:55:0b:ba:42:44:31:8b:0e:
         39:82:15:a4:cd:51:7f:eb:51:9e:d6:38:e8:be:ac:7d:77:9f:
         1e:94:fc:75:d9:92:21:32:7b:93:aa:83:98:7e:2f:59:dd:d6:
         29:fe:d7:35:33:2b:29:48:7c:6d:5d:c8:76:79:cc:00:a3:30:
         8a:3b:c6:4e:e6:e7:77:b8:96:b3:54:0f:73:f6:1a:a2:88:f3:
         3e:e7:aa:9f:67:33:d5:dc:09:d9:6f:3f:ef:8a:60:43:d5:f1:
         28:6d:45:a9:69:70:63:20:1c:aa:4b:d1:89:26:a6:e0:36:10:
         92:56:b7:2c:5c:0d:00:d3:f6:fd:54:e0:1a:3c:0c:15:6e:82:
         ea:0e:68:02:c6:c9:1e:a7:87:89:c7:34:f3:c6:b8:09:1c:03:
         e1:63:01:90:8e:a5:95:bc:ba:00:38:cd:05:bb:8e:85:ed:7a:
         26:62:d9:20:93:21:ce:3e:80:22:24:5a:ac:46:29:f3:cb:ec:
         1c:96:68:15:d7:76:94:60:9b:44:2c:eb:fc:7f:90:72:3a:e4:
         fa:5f:1d:ca:79:77:35:98:f7:1e:7f:16:a8:ef:23:c4:d6:5c:
         b1:e7:11:55
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE4+XynJ216F91jb0sAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI2MDYyMTA5MDAxMloXDTI2MDkxOTA5MDAxMlowLzEtMCsGA1UEAxMk
ZDA1ZTAwMWYtMzVjYS00ZmRiLTlhNDYtYWY1YzFhYWY2NmQxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6qpHwgPvsUg1mm8C/KzEdF7RvpDTffPa3Qrf
3KwFE24vLh6TOAyK1DVhKxjPVh5uJRiKg5ytglEUQEkdRCmgZ0auyeSHhncuybrk
Gt0ZJijfXwknrlELOobVtF1p8MRCzPfbvkNApDUsDLMtnOxi39+p1BckqCawh9zB
did0Rm6A0PUx7y14op93qe3SrJIrkvczI7jEqZOlt23crpv+STgB3O5Dl/rzDzhr
o15Ct5gMlZ0U2xEPk8FiUgmJjegqrtPpLvddx4EmdqXS6+yjFE/77Zcudc4dU5UZ
F6Q10Q6ci4n+ppz9qOA7yt76/id/myW2q1EY5b/XREVr4TN0mQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFKw8M5zhZlc20V16qMR+BK+6TMkqMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvN2U5NzM2NDUtMTM4MC0z
MGM0LTgxZmUtNDAxZTc0ZjY4M2U4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAFIeCBI
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBABbwh7gWXuUjgLgzkXBCbzUq+1qDYWLDr5k3BrZVC7pCRDGLDjmC
FaTNUX/rUZ7WOOi+rH13nx6U/HXZkiEye5Oqg5h+L1nd1in+1zUzKylIfG1dyHZ5
zACjMIo7xk7m53e4lrNUD3P2GqKI8z7nqp9nM9XcCdlvP++KYEPV8ShtRalpcGMg
HKpL0YkmpuA2EJJWtyxcDQDT9v1U4Bo8DBVuguoOaALGyR6nh4nHNPPGuAkcA+Fj
AZCOpZW8ugA4zQW7joXteiZi2SCTIc4+gCIkWqxGKfPL7ByWaBXXdpRgm0Qs6/x/
kHI65PpfHcp5dzWY9x5/FqjvI8TWXLHnEVU=
-----END CERTIFICATE-----
Generated at Tue Jul 21 20:01:38 2026 by rpki-client