Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/3526d53a-51ac-37b2-9014-a3209df5c50b.roa
File:                     3526d53a-51ac-37b2-9014-a3209df5c50b.roa (raw, json)
Hash identifier:          u/SfN91QOduuc7opsy9hcnKhAm24B/7M95n985nkVVo=
Subject key identifier:   EA:B5:AA:5F:D6:36:A7:B8:B3:03:EC:5C:02:BD:64:ED:35:29:C0:B1
Certificate issuer:       /CN=934f4dde-b680-46f3-8723-45f78b94fd80
Certificate serial:       010D0C9F4328584DF0AB3D6703EE2E91740FF700
Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/3526d53a-51ac-37b2-9014-a3209df5c50b.roa
Signing time:             Sun 24 May 2026 13:00:30 +0000
ROA not before:           Sun 24 May 2026 13:00:30 +0000
ROA not after:            Sat 22 Aug 2026 13:00:30 +0000
asID:                     174
IP address blocks:        2001:49f0:d0ad::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Jun 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:f0:ab:3d:67:03:ee:2e:91:74:0f:f7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80
        Validity
            Not Before: May 24 13:00:30 2026 GMT
            Not After : Aug 22 13:00:30 2026 GMT
        Subject: CN=2915bcea-66fc-46db-a67f-40aa00b502b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:da:b0:54:6b:d6:f6:a2:7d:5d:76:9c:d2:d7:
                    e5:3d:e0:a3:36:b9:6b:26:7b:91:af:b5:16:6e:ae:
                    37:91:f4:d0:d7:65:a1:63:71:64:dc:1b:e0:e6:4f:
                    1e:b8:7e:e5:77:d8:f2:cb:57:4b:07:7e:e3:16:7e:
                    76:62:3b:b9:c4:c6:7b:83:13:82:aa:fb:0f:ba:02:
                    a3:f4:83:00:3a:d2:a8:ff:dd:37:64:ff:42:2d:a6:
                    56:75:2b:6a:8d:94:59:ad:36:39:b8:cc:6e:57:f8:
                    eb:52:65:f4:b9:fb:fc:e1:82:2b:70:36:29:42:c0:
                    86:2c:f3:6a:4b:f9:c7:00:68:82:72:21:fc:d1:90:
                    24:86:d2:64:da:63:80:d6:fa:e3:9e:f1:9e:e1:1b:
                    e7:4f:22:98:bd:0e:34:33:98:16:7e:f2:d0:6a:96:
                    44:90:23:d4:d2:ba:7b:9b:29:42:1a:f1:8f:aa:5b:
                    76:ff:4b:4b:be:d8:c3:40:db:52:27:50:0a:7e:65:
                    df:01:b6:7a:e2:83:6c:21:8c:e3:be:b0:b4:6a:46:
                    57:0c:c5:b0:f0:82:45:ed:78:ed:7a:46:a0:4d:1c:
                    06:16:8b:6d:4e:df:fb:5a:d0:7e:84:d3:79:aa:6c:
                    ff:31:26:ee:a8:40:ad:19:e9:f6:8b:0b:94:e9:ad:
                    90:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:B5:AA:5F:D6:36:A7:B8:B3:03:EC:5C:02:BD:64:ED:35:29:C0:B1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/3526d53a-51ac-37b2-9014-a3209df5c50b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl

            X509v3 Authority Key Identifier:
                keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:49f0:d0ad::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:d4:1b:04:2c:b7:61:93:c8:0d:78:15:c0:c8:4a:0e:77:20:
         c6:f1:f2:b0:6e:68:e4:b9:04:b8:72:d4:75:9f:e8:3d:f5:cf:
         04:72:87:ed:94:5c:95:d8:4f:5a:8e:01:5c:98:d8:e7:4c:e8:
         78:60:82:09:e3:1c:01:24:3c:e8:cf:45:29:e7:47:36:6a:d5:
         24:4b:31:40:eb:65:77:91:8b:00:23:43:7e:8f:2d:18:14:c3:
         f0:cc:ae:e7:9d:95:a7:21:df:15:a0:fa:bd:5d:c8:b4:c7:2a:
         4e:ce:05:84:60:0d:99:5f:e6:59:8c:28:c8:7e:98:9c:b0:b7:
         a5:0d:95:3a:0f:e7:94:22:a6:04:85:f2:65:eb:f4:38:af:a8:
         2c:ab:51:31:c8:eb:31:32:e6:3e:93:ad:f9:43:dc:bd:6a:98:
         19:1d:72:99:ba:96:ab:c3:df:52:cd:8b:a4:b9:4c:95:10:99:
         fc:65:42:d1:1d:a8:3b:87:61:20:98:b3:71:18:a4:52:1d:aa:
         f9:47:c1:99:da:ef:25:32:fd:d6:c8:34:07:ab:b5:3a:0b:df:
         e6:3c:b4:ce:c6:39:de:b9:1a:84:73:6a:31:96:7b:9b:f9:bc:
         b1:4d:ca:5d:60:71:a8:e7:40:c0:fb:af:ef:47:6d:a5:94:0b:
         a6:6a:2d:69
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE3wqz1nA+4ukXQP9wAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTM0ZjRkZGUtYjY4MC00NmYzLTg3MjMtNDVmNzhiOTRm
ZDgwMB4XDTI2MDUyNDEzMDAzMFoXDTI2MDgyMjEzMDAzMFowLzEtMCsGA1UEAxMk
MjkxNWJjZWEtNjZmYy00NmRiLWE2N2YtNDBhYTAwYjUwMmI1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArdqwVGvW9qJ9XXac0tflPeCjNrlrJnuRr7UW
bq43kfTQ12WhY3Fk3Bvg5k8euH7ld9jyy1dLB37jFn52Yju5xMZ7gxOCqvsPugKj
9IMAOtKo/903ZP9CLaZWdStqjZRZrTY5uMxuV/jrUmX0ufv84YIrcDYpQsCGLPNq
S/nHAGiCciH80ZAkhtJk2mOA1vrjnvGe4RvnTyKYvQ40M5gWfvLQapZEkCPU0rp7
mylCGvGPqlt2/0tLvtjDQNtSJ1AKfmXfAbZ64oNsIYzjvrC0akZXDMWw8IJF7Xjt
ekagTRwGFottTt/7WtB+hNN5qmz/MSbuqECtGen2iwuU6a2QOQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFOq1ql/WNqe4swPsXAK9ZO01KcCxMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85MzRm
NGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3OGI5NGZkODAvMzUyNmQ1M2EtNTFhYy0z
N2IyLTkwMTQtYTMyMDlkZjVjNTBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOTM0ZjRkZGUtYjY4MC00NmYzLTg3
MjMtNDVmNzhiOTRmZDgwLzkzNGY0ZGRlLWI2ODAtNDZmMy04NzIzLTQ1Zjc4Yjk0
ZmQ4MC5jcmwwHwYDVR0jBBgwFoAUFrTicYdMN4sVe0h2QNI2FtEnExIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS85MzRmNGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3
OGI5NGZkODAuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAFJ8NCt
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBACTUGwQst2GTyA14FcDISg53IMbx8rBuaOS5BLhy1HWf6D31zwRy
h+2UXJXYT1qOAVyY2OdM6HhgggnjHAEkPOjPRSnnRzZq1SRLMUDrZXeRiwAjQ36P
LRgUw/DMruedlach3xWg+r1dyLTHKk7OBYRgDZlf5lmMKMh+mJywt6UNlToP55Qi
pgSF8mXr9DivqCyrUTHI6zEy5j6TrflD3L1qmBkdcpm6lqvD31LNi6S5TJUQmfxl
QtEdqDuHYSCYs3EYpFIdqvlHwZna7yUy/dbINAertToL3+Y8tM7GOd65GoRzajGW
e5v5vLFNyl1gcajnQMD7r+9HbaWUC6ZqLWk=
-----END CERTIFICATE-----
Generated at Sat Jun 6 02:37:47 2026 by rpki-client