Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c/62e51151-f56c-3a38-b24e-40421c70b31d.roa
File:                     62e51151-f56c-3a38-b24e-40421c70b31d.roa (raw, json)
Hash identifier:          32n/MizbWUcRIzA3OTUzX8e2FJAH2QJ81K+QS/hWJxs=
Subject key identifier:   24:F5:21:DF:B8:7E:1E:04:EF:41:38:2A:CD:A8:D5:DD:86:D3:4A:CF
Certificate issuer:       /CN=9c3739a8-4c8d-47b0-8413-77e27a96700c
Certificate serial:       010D0C9F4328584ED001DEE396C8E880DB312A00
Authority key identifier: FB:02:1D:81:3F:23:FE:12:9B:83:93:BE:B4:14:A5:27:A5:BD:59:79
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c/62e51151-f56c-3a38-b24e-40421c70b31d.roa
Signing time:             Wed 12 Aug 2026 13:00:12 +0000
ROA not before:           Wed 12 Aug 2026 13:00:12 +0000
ROA not after:            Tue 10 Nov 2026 14:00:12 +0000
asID:                     16509
IP address blocks:        2605:84c0:cc2::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c/9c3739a8-4c8d-47b0-8413-77e27a96700c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c/9c3739a8-4c8d-47b0-8413-77e27a96700c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 22 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d0:01:de:e3:96:c8:e8:80:db:31:2a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c3739a8-4c8d-47b0-8413-77e27a96700c
        Validity
            Not Before: Aug 12 13:00:12 2026 GMT
            Not After : Nov 10 14:00:12 2026 GMT
        Subject: CN=4ed3e60c-d7b3-4793-9a3e-e3002f0c7aa9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:ed:de:4b:08:ad:09:46:ec:90:6d:4a:6b:be:
                    1e:34:f0:0a:dd:fa:7a:26:2f:7c:82:cd:f6:cc:4d:
                    cd:06:a9:b1:5a:68:7f:fb:af:8d:88:1f:00:a7:b3:
                    05:7e:a4:81:9f:4b:7b:b3:5c:5a:e6:66:ac:da:be:
                    0a:c9:df:b0:62:a3:55:5f:0e:aa:bf:a0:bf:f9:a1:
                    34:cc:b5:20:14:d7:4a:32:f0:06:a0:d4:59:94:70:
                    d0:2f:63:a5:c9:88:49:37:46:af:32:c7:ce:27:2c:
                    7c:97:e7:28:93:c4:33:9a:a0:15:cf:42:6f:b9:15:
                    d0:34:01:a9:06:07:a9:de:7d:59:27:d0:0e:a4:85:
                    14:99:3c:c0:67:dc:8c:dd:0a:f6:4b:be:8d:ce:f8:
                    9e:ef:f1:2d:98:2e:90:6f:f0:42:0c:ec:7e:e7:f2:
                    38:ce:3e:f9:78:e4:0c:54:e3:00:78:79:b3:ba:83:
                    c6:b4:7f:be:50:ab:16:2a:c2:f9:a9:5d:11:0c:58:
                    02:ee:f8:dc:6c:2c:25:fe:bf:22:14:94:c2:30:4c:
                    b3:be:b8:bd:e6:39:82:31:42:4d:02:bc:d0:bf:2e:
                    85:df:4d:f1:bb:41:21:e6:5e:5c:37:da:9f:bf:90:
                    05:09:00:06:9c:b3:55:c5:a5:27:1a:cc:c7:93:d6:
                    32:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:F5:21:DF:B8:7E:1E:04:EF:41:38:2A:CD:A8:D5:DD:86:D3:4A:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c/62e51151-f56c-3a38-b24e-40421c70b31d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c/9c3739a8-4c8d-47b0-8413-77e27a96700c.crl

            X509v3 Authority Key Identifier:
                keyid:FB:02:1D:81:3F:23:FE:12:9B:83:93:BE:B4:14:A5:27:A5:BD:59:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:84c0:cc2::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:ba:25:26:10:e0:6f:2e:b3:30:36:87:c7:0d:82:53:d4:f4:
         91:2f:29:cd:2e:33:ff:d6:d8:ca:8e:4c:1c:7f:42:93:1a:bd:
         a3:53:aa:f3:a9:51:79:65:fb:8c:4e:54:5a:0e:1a:27:87:6d:
         b8:57:7b:c4:93:e7:01:b2:10:43:dc:08:dd:b6:b9:e7:fe:9a:
         3a:29:d7:8e:77:64:d9:e9:22:1d:5e:8a:01:3e:f7:45:27:de:
         3d:76:18:66:64:f0:e1:99:39:25:6b:17:ac:f1:52:b1:f1:2f:
         09:33:e2:1b:5d:5f:44:a4:e0:12:40:fa:db:ec:ef:6d:c0:df:
         f9:74:29:2d:db:09:d6:9b:55:f5:4d:32:78:26:c5:08:e3:93:
         0f:37:70:61:c0:02:25:2b:3d:1e:83:cf:43:58:b4:37:b4:bf:
         a5:03:30:60:55:79:6c:cb:b0:81:8c:ab:6d:ad:6f:7a:d6:1a:
         0a:77:46:eb:68:fc:96:8e:35:7b:88:5c:0a:07:35:22:da:5f:
         61:ec:0b:a0:b3:e9:e8:f5:9d:9b:10:17:74:a3:bd:8f:4c:55:
         c5:e8:42:e4:96:d2:6f:f9:10:81:2f:8c:0b:45:1a:d0:eb:3f:
         4d:0a:ba:bf:4f:3e:28:34:fb:8c:e2:a9:12:86:53:12:9d:9a:
         59:d1:b1:60
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE7QAd7jlsjogNsxKgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOWMzNzM5YTgtNGM4ZC00N2IwLTg0MTMtNzdlMjdhOTY3
MDBjMB4XDTI2MDgxMjEzMDAxMloXDTI2MTExMDE0MDAxMlowLzEtMCsGA1UEAxMk
NGVkM2U2MGMtZDdiMy00NzkzLTlhM2UtZTMwMDJmMGM3YWE5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAue3eSwitCUbskG1Ka74eNPAK3fp6Ji98gs32
zE3NBqmxWmh/+6+NiB8Ap7MFfqSBn0t7s1xa5mas2r4Kyd+wYqNVXw6qv6C/+aE0
zLUgFNdKMvAGoNRZlHDQL2OlyYhJN0avMsfOJyx8l+cok8QzmqAVz0JvuRXQNAGp
Bgep3n1ZJ9AOpIUUmTzAZ9yM3Qr2S76Nzvie7/EtmC6Qb/BCDOx+5/I4zj75eOQM
VOMAeHmzuoPGtH++UKsWKsL5qV0RDFgC7vjcbCwl/r8iFJTCMEyzvri95jmCMUJN
ArzQvy6F303xu0Eh5l5cN9qfv5AFCQAGnLNVxaUnGszHk9Yy1QIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFCT1Id+4fh4E70E4Ks2o1d2G00rPMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85YzM3
MzlhOC00YzhkLTQ3YjAtODQxMy03N2UyN2E5NjcwMGMvNjJlNTExNTEtZjU2Yy0z
YTM4LWIyNGUtNDA0MjFjNzBiMzFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOWMzNzM5YTgtNGM4ZC00N2IwLTg0
MTMtNzdlMjdhOTY3MDBjLzljMzczOWE4LTRjOGQtNDdiMC04NDEzLTc3ZTI3YTk2
NzAwYy5jcmwwHwYDVR0jBBgwFoAU+wIdgT8j/hKbg5O+tBSlJ6W9WXkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS85YzM3MzlhOC00YzhkLTQ3YjAtODQxMy03N2Uy
N2E5NjcwMGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgWEwAzC
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAIW6JSYQ4G8uszA2h8cNglPU9JEvKc0uM//W2MqOTBx/QpMavaNT
qvOpUXll+4xOVFoOGieHbbhXe8ST5wGyEEPcCN22uef+mjop1453ZNnpIh1eigE+
90Un3j12GGZk8OGZOSVrF6zxUrHxLwkz4htdX0Sk4BJA+tvs723A3/l0KS3bCdab
VfVNMngmxQjjkw83cGHAAiUrPR6Dz0NYtDe0v6UDMGBVeWzLsIGMq22tb3rWGgp3
Ruto/JaONXuIXAoHNSLaX2HsC6Cz6ej1nZsQF3SjvY9MVcXoQuSW0m/5EIEvjAtF
GtDrP00Kur9PPig0+4ziqRKGUxKdmlnRsWA=
-----END CERTIFICATE-----
Generated at Thu Aug 20 23:38:34 2026 by rpki-client