Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a5c98c94-6f4a-3d54-a9fa-84396ed462ac.roa
File:                     a5c98c94-6f4a-3d54-a9fa-84396ed462ac.roa (raw, json)
Hash identifier:          jX45/1c5qlCQzJlOsTAevi8eXEz0dhJvOc3DraSh4p4=
Subject key identifier:   27:60:1E:7B:10:4A:7C:34:69:B1:D8:DC:6E:AC:71:11:0F:D0:33:CB
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584E4824861C1D2FAA50202726C0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a5c98c94-6f4a-3d54-a9fa-84396ed462ac.roa
Signing time:             Wed 24 Jun 2026 21:00:12 +0000
ROA not before:           Wed 24 Jun 2026 21:00:12 +0000
ROA not after:            Tue 22 Sep 2026 21:00:12 +0000
asID:                     212755
IP address blocks:        2001:470:257::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 27 Jun 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:48:24:86:1c:1d:2f:aa:50:20:27:26:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Jun 24 21:00:12 2026 GMT
            Not After : Sep 22 21:00:12 2026 GMT
        Subject: CN=3b7ccc02-1ac3-4c72-8444-e849ef605181
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:97:16:08:de:47:6c:73:1d:96:8b:01:fa:e2:
                    c0:c7:29:09:11:28:f6:94:8d:41:51:19:6c:02:2a:
                    eb:12:18:b9:15:63:29:a7:94:ad:10:fe:b8:72:40:
                    6a:90:08:eb:4a:ac:bd:bd:c5:d3:cd:4d:6a:94:18:
                    f2:63:a7:8b:bb:c4:d2:dd:1d:ca:ce:7a:7d:cf:df:
                    d6:c4:5a:7d:72:3d:6f:71:f7:8c:7d:9a:f8:d2:3e:
                    f4:5c:48:e5:d2:7b:89:9e:f3:0f:f6:c7:36:b8:3c:
                    ca:09:83:0b:02:ff:4a:38:c5:3a:09:ca:34:58:1e:
                    f2:85:73:9c:e7:df:3d:55:1b:e0:4b:f8:8b:49:bd:
                    17:c5:89:1e:47:aa:a3:c5:28:a1:cb:b9:97:70:8c:
                    b5:64:07:e1:ff:4b:c2:1b:e0:2e:96:e3:ad:1d:9f:
                    cd:29:18:ff:fa:be:77:ca:71:dd:60:58:b2:e2:9b:
                    5d:5e:26:07:94:98:4e:f7:51:91:4e:c0:be:d8:d2:
                    36:3e:cf:77:d6:74:f2:fe:fd:76:a3:28:3b:4e:08:
                    b0:be:cc:bb:ce:52:be:7c:a4:b0:61:db:75:70:19:
                    1b:52:fa:ef:66:b9:a4:a1:e7:1b:75:b0:b4:61:18:
                    08:78:a7:f5:c4:e9:05:92:f6:f4:54:78:21:bc:61:
                    cf:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:60:1E:7B:10:4A:7C:34:69:B1:D8:DC:6E:AC:71:11:0F:D0:33:CB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a5c98c94-6f4a-3d54-a9fa-84396ed462ac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:257::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:66:9a:88:f4:5d:bc:24:80:ea:f7:45:f3:fb:f8:6a:8d:be:
         43:96:26:bb:57:8d:fe:55:31:d6:5b:42:9a:55:73:ce:d7:68:
         d7:d2:55:9f:9b:43:59:00:08:69:a9:53:1b:14:51:07:49:76:
         c6:69:8a:f7:96:32:ea:e3:6b:bd:4b:0a:3a:64:a4:60:45:d9:
         39:80:92:d1:03:bb:5e:98:e2:b2:4d:5e:30:86:c1:b5:40:ad:
         44:c4:e6:b9:ca:49:39:ea:1e:d9:8d:37:23:c1:e7:07:14:8b:
         a8:f8:9f:48:4c:3a:b5:8a:0d:8a:74:5e:b4:bc:29:65:8c:1f:
         9e:c5:97:af:cb:8a:9f:8f:74:df:40:db:2c:71:43:a8:e5:46:
         97:8b:bd:67:0d:3b:5c:e4:fd:65:10:09:d9:f4:b0:9a:d7:e4:
         8c:c2:fd:fe:60:d8:2f:54:83:55:9a:f6:e3:b5:0d:a2:70:c8:
         f0:bf:d0:41:f4:5a:95:b6:81:f1:a0:56:05:02:03:37:79:0a:
         fb:6d:2a:3d:40:d1:29:f6:22:b2:59:b8:66:45:d3:2d:a2:9f:
         97:b9:31:fd:10:25:10:44:0c:e1:83:39:09:81:6a:38:b5:b5:
         33:77:9f:b2:45:e1:f1:41:78:31:86:04:22:10:7c:8e:4f:3d:
         05:a0:ab:6d
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE5IJIYcHS+qUCAnJsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI2MDYyNDIxMDAxMloXDTI2MDkyMjIxMDAxMlowLzEtMCsGA1UEAxMk
M2I3Y2NjMDItMWFjMy00YzcyLTg0NDQtZTg0OWVmNjA1MTgxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzZcWCN5HbHMdlosB+uLAxykJESj2lI1BURls
AirrEhi5FWMpp5StEP64ckBqkAjrSqy9vcXTzU1qlBjyY6eLu8TS3R3Kznp9z9/W
xFp9cj1vcfeMfZr40j70XEjl0nuJnvMP9sc2uDzKCYMLAv9KOMU6Cco0WB7yhXOc
5989VRvgS/iLSb0XxYkeR6qjxSihy7mXcIy1ZAfh/0vCG+AuluOtHZ/NKRj/+r53
ynHdYFiy4ptdXiYHlJhO91GRTsC+2NI2Ps931nTy/v12oyg7Tgiwvsy7zlK+fKSw
Ydt1cBkbUvrvZrmkoecbdbC0YRgIeKf1xOkFkvb0VHghvGHPbwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFCdgHnsQSnw0abHY3G6scREP0DPLMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvYTVjOThjOTQtNmY0YS0z
ZDU0LWE5ZmEtODQzOTZlZDQ2MmFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAJX
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAHxmmoj0XbwkgOr3RfP7+GqNvkOWJrtXjf5VMdZbQppVc87XaNfS
VZ+bQ1kACGmpUxsUUQdJdsZpiveWMurja71LCjpkpGBF2TmAktEDu16Y4rJNXjCG
wbVArUTE5rnKSTnqHtmNNyPB5wcUi6j4n0hMOrWKDYp0XrS8KWWMH57Fl6/Lip+P
dN9A2yxxQ6jlRpeLvWcNO1zk/WUQCdn0sJrX5IzC/f5g2C9Ug1Wa9uO1DaJwyPC/
0EH0WpW2gfGgVgUCAzd5CvttKj1A0Sn2IrJZuGZF0y2in5e5Mf0QJRBEDOGDOQmB
aji1tTN3n7JF4fFBeDGGBCIQfI5PPQWgq20=
-----END CERTIFICATE-----
Generated at Fri Jun 26 19:43:07 2026 by rpki-client