Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/86899cb1-c713-32d8-94e9-eaf44a454b29.roa
File:                     86899cb1-c713-32d8-94e9-eaf44a454b29.roa (raw, json)
Hash identifier:          mUStbA5by+vh3plekKrCJ8xhNgupq6wEooObS1WHFXY=
Subject key identifier:   C4:17:9D:14:E8:96:17:9A:EC:20:BA:BE:C0:40:A9:00:4A:9E:9F:CB
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584EDC9222A56D2725A346E37400
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/86899cb1-c713-32d8-94e9-eaf44a454b29.roa
Signing time:             Mon 17 Aug 2026 01:00:12 +0000
ROA not before:           Mon 17 Aug 2026 01:00:12 +0000
ROA not after:            Sun 15 Nov 2026 02:00:12 +0000
asID:                     15108
IP address blocks:        2001:470:1a4::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 15 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:dc:92:22:a5:6d:27:25:a3:46:e3:74:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Aug 17 01:00:12 2026 GMT
            Not After : Nov 15 02:00:12 2026 GMT
        Subject: CN=b265e271-5bd6-45ea-a3cc-ec2578fd9596
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:d0:ed:ca:54:ee:10:43:7e:d0:7b:cd:f1:2e:
                    25:17:90:2f:41:49:e8:93:13:c2:d2:45:b1:3c:e4:
                    c6:21:59:b6:c6:d4:d8:1b:de:c9:52:d7:9c:27:60:
                    24:0f:2b:f6:4d:b8:bd:00:41:2d:8a:ce:1a:2f:4e:
                    cc:60:38:43:8b:39:f8:2b:e0:12:f4:f0:d2:7a:08:
                    79:4f:4f:8a:47:83:85:c8:e3:f6:50:c5:40:5b:24:
                    9f:07:af:dd:24:1a:38:c6:c3:25:a8:4c:bc:87:11:
                    21:df:21:96:bd:9c:0c:d0:9c:2a:25:bb:20:91:48:
                    c5:ee:16:65:cf:df:74:ea:fe:2f:68:ac:3e:14:1a:
                    9e:b6:4f:a7:78:fd:99:90:97:b5:2b:b7:57:52:8e:
                    2c:71:18:3a:23:84:41:a3:81:f8:24:35:c5:8e:a6:
                    0d:65:d6:f8:29:dd:a8:09:f9:02:f1:a7:b5:4a:f6:
                    1f:ee:73:25:c4:54:eb:1c:71:44:ee:ef:7c:14:66:
                    e9:c2:f3:59:8d:ac:d8:c1:91:ef:e7:73:6b:e4:c5:
                    49:69:09:46:5c:d0:99:e8:e4:6f:9f:64:e8:b7:82:
                    5b:73:77:fe:b2:f9:6f:b9:9f:bb:90:cc:49:6b:20:
                    a7:01:09:e6:79:69:01:74:69:40:4e:ba:f9:31:d6:
                    38:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:17:9D:14:E8:96:17:9A:EC:20:BA:BE:C0:40:A9:00:4A:9E:9F:CB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/86899cb1-c713-32d8-94e9-eaf44a454b29.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:1a4::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:44:df:aa:1c:b1:42:74:ec:3d:e8:ac:1a:97:0d:c0:f9:1b:
         ee:18:9c:de:92:b4:3d:10:42:74:33:5a:a6:df:2f:36:31:b2:
         98:8d:a1:36:e2:bb:1e:69:fc:81:f3:ac:99:11:25:40:ba:34:
         fa:b7:ba:6f:b9:ac:d9:e5:55:76:c1:d4:f2:e6:65:b0:6a:b0:
         a4:d1:03:81:a6:ae:c6:a3:c8:4c:fa:38:98:ee:02:0b:62:1f:
         e0:56:4b:45:57:3b:a4:76:47:14:d4:d4:41:25:a3:51:77:1a:
         4d:e2:73:33:4a:98:95:1a:1e:0f:a8:b7:04:4f:e0:35:f2:fa:
         c7:57:41:e2:36:47:b1:32:4b:23:7b:f5:b9:1e:f6:1e:55:11:
         e3:e0:f3:61:69:48:ec:1a:a6:f1:c7:8b:50:8c:db:24:b9:4d:
         23:8d:af:1d:43:60:6c:1b:bf:64:1d:39:37:85:07:5a:d7:1e:
         69:72:23:b6:47:91:f4:e4:95:e5:a2:e4:df:ae:8f:7b:02:09:
         a3:4b:29:93:4f:4a:5b:90:f7:7e:9b:d2:d2:56:9c:2a:77:92:
         fc:f2:7d:70:d3:02:49:93:ea:6a:78:e0:52:40:5e:e2:6c:ad:
         36:f4:4e:cf:4e:7f:b8:f9:68:64:de:65:22:58:1a:d9:7c:29:
         f0:80:67:bf
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE7ckiKlbSclo0bjdAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI2MDgxNzAxMDAxMloXDTI2MTExNTAyMDAxMlowLzEtMCsGA1UEAxMk
YjI2NWUyNzEtNWJkNi00NWVhLWEzY2MtZWMyNTc4ZmQ5NTk2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx9DtylTuEEN+0HvN8S4lF5AvQUnokxPC0kWx
POTGIVm2xtTYG97JUtecJ2AkDyv2Tbi9AEEtis4aL07MYDhDizn4K+AS9PDSegh5
T0+KR4OFyOP2UMVAWySfB6/dJBo4xsMlqEy8hxEh3yGWvZwM0JwqJbsgkUjF7hZl
z9906v4vaKw+FBqetk+neP2ZkJe1K7dXUo4scRg6I4RBo4H4JDXFjqYNZdb4Kd2o
CfkC8ae1SvYf7nMlxFTrHHFE7u98FGbpwvNZjazYwZHv53Nr5MVJaQlGXNCZ6ORv
n2Tot4Jbc3f+svlvuZ+7kMxJayCnAQnmeWkBdGlATrr5MdY4nQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFMQXnRTolhea7CC6vsBAqQBKnp/LMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvODY4OTljYjEtYzcxMy0z
MmQ4LTk0ZTktZWFmNDRhNDU0YjI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAGk
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAIxE36ocsUJ07D3orBqXDcD5G+4YnN6StD0QQnQzWqbfLzYxspiN
oTbiux5p/IHzrJkRJUC6NPq3um+5rNnlVXbB1PLmZbBqsKTRA4GmrsajyEz6OJju
AgtiH+BWS0VXO6R2RxTU1EElo1F3Gk3iczNKmJUaHg+otwRP4DXy+sdXQeI2R7Ey
SyN79bke9h5VEePg82FpSOwapvHHi1CM2yS5TSONrx1DYGwbv2QdOTeFB1rXHmly
I7ZHkfTkleWi5N+uj3sCCaNLKZNPSluQ936b0tJWnCp3kvzyfXDTAkmT6mp44FJA
XuJsrTb0Ts9Of7j5aGTeZSJYGtl8KfCAZ78=
-----END CERTIFICATE-----
Generated at Sun Sep 13 20:33:47 2026 by rpki-client