Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/ed047f78-91b2-3688-b497-fc1002caae62.roa
File:                     ed047f78-91b2-3688-b497-fc1002caae62.roa (raw, json)
Hash identifier:          rc5IS9M2lPgh5qk6q43fpzsjTW0EogsC1U0ZD4f3bt8=
Subject key identifier:   7D:64:1E:5E:46:75:22:AF:2C:4A:05:2A:BA:0A:FA:8C:9C:61:81:07
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584E3A2F6B1122710FDF93413A00
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/ed047f78-91b2-3688-b497-fc1002caae62.roa
Signing time:             Fri 19 Jun 2026 21:00:12 +0000
ROA not before:           Fri 19 Jun 2026 21:00:12 +0000
ROA not after:            Thu 17 Sep 2026 21:00:12 +0000
asID:                     57332
IP address blocks:        2001:470:23d::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 01 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:3a:2f:6b:11:22:71:0f:df:93:41:3a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Jun 19 21:00:12 2026 GMT
            Not After : Sep 17 21:00:12 2026 GMT
        Subject: CN=6e20e530-00fb-40ba-b0a4-795196d436c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:34:a8:fe:24:38:df:ed:b8:d9:ce:04:50:a8:
                    04:ca:e5:0d:30:80:9e:a9:06:13:48:be:e0:b5:fb:
                    79:47:86:3b:c8:42:f4:58:e8:c8:3d:84:82:c2:ea:
                    cf:e2:3a:a1:63:a1:e7:9a:aa:a0:8c:c6:89:99:1a:
                    bf:24:20:ec:05:e3:36:13:ae:1d:a0:97:b4:16:d7:
                    62:60:c2:ab:c3:26:66:bb:92:0f:d1:fa:ed:fe:02:
                    41:9b:cc:7d:62:42:ed:5e:dd:46:6e:f1:c4:ab:f0:
                    45:98:df:f3:73:31:be:56:d3:1a:1d:cf:ea:fa:af:
                    9f:4b:7e:14:51:c9:6c:3b:76:92:0a:a5:39:86:e1:
                    12:65:df:61:8b:0a:f3:b0:50:b3:ab:3f:21:43:fe:
                    3b:f2:08:d5:2f:bb:d5:69:21:ce:cf:c2:9f:e0:ed:
                    5e:52:9c:42:15:f6:bb:71:fa:21:30:e6:6f:a0:c6:
                    f1:f9:3f:9c:27:58:cc:4a:22:54:80:e3:d0:5f:e4:
                    69:aa:d2:07:a4:21:36:ea:6f:d2:ef:ab:32:9c:73:
                    db:72:b5:28:a4:4d:f3:a1:a4:36:f6:eb:45:b4:32:
                    0d:5a:cb:ca:9e:1a:16:88:ec:20:5c:f1:72:df:3a:
                    65:e3:58:2d:d5:e6:c9:43:22:90:e1:20:0e:36:7f:
                    90:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:64:1E:5E:46:75:22:AF:2C:4A:05:2A:BA:0A:FA:8C:9C:61:81:07
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/ed047f78-91b2-3688-b497-fc1002caae62.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:23d::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:fb:2a:d1:82:bf:6a:22:45:bb:5b:c1:6d:14:93:c6:87:5b:
         b9:37:ed:af:66:94:f6:68:63:d9:98:16:f9:93:44:60:a0:65:
         82:76:bf:aa:33:f8:ab:bd:44:42:04:87:25:31:25:07:23:51:
         52:4b:3a:98:49:81:08:4a:9d:64:a3:19:41:a2:f9:f7:ba:57:
         7d:ba:d0:2a:21:d0:96:fe:05:2f:35:9a:55:51:4a:78:7a:7c:
         b0:50:46:e3:54:55:41:29:11:04:4d:f7:d3:83:23:7e:2a:62:
         e7:ab:bc:26:c2:18:eb:6e:e7:11:b9:6d:0a:21:7b:fb:46:d1:
         18:c0:e8:e4:92:10:23:fc:d2:d4:f0:1f:18:e3:d2:a0:63:c1:
         70:b0:49:1c:3f:bb:1b:9c:1a:6c:b3:ed:7d:f1:2c:1d:ec:55:
         39:3d:4c:7a:64:11:f5:a4:40:61:51:77:77:63:e5:0f:fc:be:
         7b:f7:ad:56:c5:f7:d9:2d:23:f3:02:63:70:e4:b8:9a:b3:f0:
         6f:f9:39:81:08:a1:ae:4a:81:57:b2:df:e6:4d:e4:03:6d:96:
         ec:2c:fe:a2:8e:52:df:a0:b3:47:ab:c6:82:29:2e:35:21:45:
         a0:66:b1:37:5f:e6:95:6b:1b:58:78:80:b0:65:62:3c:73:d7:
         74:3b:7b:c8
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE46L2sRInEP35NBOgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI2MDYxOTIxMDAxMloXDTI2MDkxNzIxMDAxMlowLzEtMCsGA1UEAxMk
NmUyMGU1MzAtMDBmYi00MGJhLWIwYTQtNzk1MTk2ZDQzNmMyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1DSo/iQ43+242c4EUKgEyuUNMICeqQYTSL7g
tft5R4Y7yEL0WOjIPYSCwurP4jqhY6HnmqqgjMaJmRq/JCDsBeM2E64doJe0Ftdi
YMKrwyZmu5IP0frt/gJBm8x9YkLtXt1GbvHEq/BFmN/zczG+VtMaHc/q+q+fS34U
UclsO3aSCqU5huESZd9hiwrzsFCzqz8hQ/478gjVL7vVaSHOz8Kf4O1eUpxCFfa7
cfohMOZvoMbx+T+cJ1jMSiJUgOPQX+RpqtIHpCE26m/S76synHPbcrUopE3zoaQ2
9utFtDINWsvKnhoWiOwgXPFy3zpl41gt1ebJQyKQ4SAONn+QtwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFH1kHl5GdSKvLEoFKroK+oycYYEHMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvZWQwNDdmNzgtOTFiMi0z
Njg4LWI0OTctZmMxMDAyY2FhZTYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAI9
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBABn7KtGCv2oiRbtbwW0Uk8aHW7k37a9mlPZoY9mYFvmTRGCgZYJ2
v6oz+Ku9REIEhyUxJQcjUVJLOphJgQhKnWSjGUGi+fe6V3260Coh0Jb+BS81mlVR
Snh6fLBQRuNUVUEpEQRN99ODI34qYuervCbCGOtu5xG5bQohe/tG0RjA6OSSECP8
0tTwHxjj0qBjwXCwSRw/uxucGmyz7X3xLB3sVTk9THpkEfWkQGFRd3dj5Q/8vnv3
rVbF99ktI/MCY3DkuJqz8G/5OYEIoa5KgVey3+ZN5ANtluws/qKOUt+gs0erxoIp
LjUhRaBmsTdf5pVrG1h4gLBlYjxz13Q7e8g=
-----END CERTIFICATE-----
Generated at Tue Jun 30 21:40:51 2026 by rpki-client