Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/91e9778d-f638-3eeb-a6f5-de96b89b8997.roa
File:                     91e9778d-f638-3eeb-a6f5-de96b89b8997.roa (raw, json)
Hash identifier:          ds2FZ42jWYCJDIeMQanPxOCutawGUl6pWjCtG8OaFuY=
Subject key identifier:   D8:ED:FC:AF:33:00:BA:81:1A:A2:8E:D3:0D:A0:CB:D3:F2:D1:E9:93
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584DD625BE5CAE4B9FEFCAFC5DE0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/91e9778d-f638-3eeb-a6f5-de96b89b8997.roa
Signing time:             Fri 15 May 2026 01:00:24 +0000
ROA not before:           Fri 15 May 2026 01:00:24 +0000
ROA not after:            Thu 13 Aug 2026 01:00:24 +0000
asID:                     20940
IP address blocks:        2600:1410:1000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Jun 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:d6:25:be:5c:ae:4b:9f:ef:ca:fc:5d:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: May 15 01:00:24 2026 GMT
            Not After : Aug 13 01:00:24 2026 GMT
        Subject: CN=9183128a-72a5-4228-83f8-d1a69f5b0b4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:ec:92:9c:79:e3:f8:f2:ca:d8:2e:58:d1:96:
                    7c:45:73:59:a4:d2:7c:77:85:ca:28:97:72:7e:67:
                    d9:85:b4:37:33:59:33:2f:d5:e9:9a:2a:a3:96:20:
                    28:3c:73:8b:cd:e4:90:92:c4:1f:c6:c4:63:53:75:
                    8a:59:d8:b9:9d:42:96:b6:c9:51:b0:9d:d3:15:84:
                    7a:7b:64:e6:a0:e6:a2:3b:1c:cb:24:8d:de:05:54:
                    ed:11:c1:81:ce:c0:b7:41:39:b3:ac:17:ac:36:20:
                    3a:03:e3:96:2f:5c:06:29:1a:9e:6a:89:3b:39:4b:
                    35:90:f1:0d:a1:e3:91:da:64:bb:3d:75:f3:2e:3c:
                    5e:71:82:c2:d4:91:d5:7e:0f:f6:ff:0f:ff:4c:3c:
                    95:cb:ca:4c:25:27:e1:d7:f6:7f:7f:73:ec:81:23:
                    0f:37:9d:32:2d:39:d0:bc:c3:d9:1f:2d:c1:2d:71:
                    ad:30:7c:d0:d7:9f:0e:5c:2b:2f:37:15:5a:af:5c:
                    98:96:ca:0d:c3:e0:1a:ec:f4:d3:f2:99:c2:b5:70:
                    e3:89:ff:7a:d3:f8:3a:37:a9:6a:f7:6c:57:43:e5:
                    30:2f:d7:23:d1:9a:73:0c:40:40:b5:6a:59:19:88:
                    88:1e:05:49:63:f6:10:41:2a:94:28:96:18:49:39:
                    f4:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:ED:FC:AF:33:00:BA:81:1A:A2:8E:D3:0D:A0:CB:D3:F2:D1:E9:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/91e9778d-f638-3eeb-a6f5-de96b89b8997.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1410:1000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:50:9e:5a:35:2d:85:08:30:6c:f2:dd:e2:63:35:65:0e:56:
         9a:7a:3b:7f:7d:ca:86:fd:a5:c5:e0:01:82:6e:68:ad:b8:c6:
         e0:3e:04:32:fb:d2:51:17:c9:dd:c3:bd:e8:55:76:5c:7a:2f:
         56:64:09:93:0c:25:80:a4:a7:f9:7d:87:31:a7:d4:51:60:fc:
         6d:08:b6:59:cf:aa:5c:2d:65:98:18:ef:54:24:c5:46:8e:b3:
         87:64:29:44:29:16:7c:06:63:cd:d2:c3:8b:03:5d:6f:02:cd:
         26:4f:7e:e5:2f:bf:f7:c6:21:f3:89:d7:ad:33:6a:bf:bb:30:
         47:42:e2:a5:76:b3:01:63:6a:b6:68:b7:3c:fe:05:3d:a1:a7:
         77:dd:d7:29:84:98:a1:1a:f2:fd:66:fe:e2:85:6f:2a:26:62:
         4a:12:d5:f2:7d:a0:0d:12:29:e1:e8:90:7d:c6:96:73:b7:75:
         89:eb:56:72:00:d3:ae:09:85:7e:3d:51:e3:2b:5e:e7:f6:f5:
         c6:31:56:d3:3c:3f:fb:4a:de:a1:84:22:7e:1e:1a:7a:a5:cc:
         c3:8a:e7:76:17:29:cf:46:6b:f8:83:c7:55:5d:8f:cc:e0:2c:
         31:4a:cc:70:0a:bb:f0:e5:77:0f:51:53:78:3a:43:53:f1:60:
         76:e5:0a:c0
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE3WJb5crkuf78r8XeAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI2MDUxNTAxMDAyNFoXDTI2MDgxMzAxMDAyNFowLzEtMCsGA1UEAxMk
OTE4MzEyOGEtNzJhNS00MjI4LTgzZjgtZDFhNjlmNWIwYjRkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoeySnHnj+PLK2C5Y0ZZ8RXNZpNJ8d4XKKJdy
fmfZhbQ3M1kzL9XpmiqjliAoPHOLzeSQksQfxsRjU3WKWdi5nUKWtslRsJ3TFYR6
e2TmoOaiOxzLJI3eBVTtEcGBzsC3QTmzrBesNiA6A+OWL1wGKRqeaok7OUs1kPEN
oeOR2mS7PXXzLjxecYLC1JHVfg/2/w//TDyVy8pMJSfh1/Z/f3PsgSMPN50yLTnQ
vMPZHy3BLXGtMHzQ158OXCsvNxVar1yYlsoNw+Aa7PTT8pnCtXDjif960/g6N6lq
92xXQ+UwL9cj0ZpzDEBAtWpZGYiIHgVJY/YQQSqUKJYYSTn0jQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFNjt/K8zALqBGqKO0w2gy9Py0emTMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOTFlOTc3OGQtZjYzOC0z
ZWViLWE2ZjUtZGU5NmI4OWI4OTk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAUEBAA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAGpQnlo1LYUIMGzy3eJjNWUOVpp6O399yob9pcXgAYJuaK24xuA+
BDL70lEXyd3DvehVdlx6L1ZkCZMMJYCkp/l9hzGn1FFg/G0ItlnPqlwtZZgY71Qk
xUaOs4dkKUQpFnwGY83Sw4sDXW8CzSZPfuUvv/fGIfOJ160zar+7MEdC4qV2swFj
arZotzz+BT2hp3fd1ymEmKEa8v1m/uKFbyomYkoS1fJ9oA0SKeHokH3GlnO3dYnr
VnIA064JhX49UeMrXuf29cYxVtM8P/tK3qGEIn4eGnqlzMOK53YXKc9Ga/iDx1Vd
j8zgLDFKzHAKu/Dldw9RU3g6Q1PxYHblCsA=
-----END CERTIFICATE-----
Generated at Sat Jun 6 10:58:10 2026 by rpki-client