Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/70e81ed9-f5e7-37fc-8cc1-bf89c2d05efa.roa
File:                     70e81ed9-f5e7-37fc-8cc1-bf89c2d05efa.roa (raw, json)
Hash identifier:          zhmuDzH428jpHNo80BR8j+vigfnLWl6EMVB9HjXbrJg=
Subject key identifier:   17:F8:B4:FA:BE:22:61:30:FA:C2:9C:A9:55:D5:C2:3A:D5:A7:F6:6D
Certificate issuer:       /CN=9906748d-5823-4cd3-9a11-f3dc69a3e751
Certificate serial:       010D0C9F4328584DA6B02EC60BE82BE5E58BA100
Authority key identifier: A7:31:13:DA:A8:C2:6D:D3:40:47:B6:C3:2B:BA:78:43:31:2F:01:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/70e81ed9-f5e7-37fc-8cc1-bf89c2d05efa.roa
Signing time:             Tue 28 Apr 2026 01:00:24 +0000
ROA not before:           Tue 28 Apr 2026 01:00:24 +0000
ROA not after:            Mon 27 Jul 2026 01:00:24 +0000
asID:                     13778
IP address blocks:        2620:147:110::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:a6:b0:2e:c6:0b:e8:2b:e5:e5:8b:a1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9906748d-5823-4cd3-9a11-f3dc69a3e751
        Validity
            Not Before: Apr 28 01:00:24 2026 GMT
            Not After : Jul 27 01:00:24 2026 GMT
        Subject: CN=b13f2e60-05dd-456c-9805-18c6e6a7126c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:f7:cc:31:86:ac:fd:15:52:1e:2e:c6:84:20:
                    23:9d:4b:bb:01:8f:fd:83:eb:f0:f4:a7:24:d3:90:
                    a0:22:40:de:db:d2:7b:4a:97:27:ad:be:e5:9a:3c:
                    d1:27:c1:aa:9d:04:57:66:c4:b3:ef:5f:81:ff:83:
                    d0:e4:7f:fe:c8:41:ce:84:1c:50:41:85:f3:24:fb:
                    70:ce:79:67:a9:a6:fd:03:c2:dc:c0:4c:41:b9:41:
                    a1:7a:38:ac:4f:d2:28:76:5c:ae:0f:53:16:c0:8f:
                    a7:f5:32:60:24:b5:47:5a:bf:af:0a:96:a2:16:67:
                    71:1b:91:28:3d:12:4a:5f:62:44:d9:c8:51:ad:eb:
                    6a:8b:ac:8f:ec:dc:88:eb:03:5a:63:0e:e6:4b:aa:
                    b9:1a:e6:24:9b:97:47:9f:d4:21:0b:d6:c8:09:aa:
                    7b:47:f5:29:65:bc:ed:62:66:cd:18:dd:31:8e:17:
                    00:e2:18:fc:f3:ed:d7:49:00:ba:a2:7c:eb:63:b3:
                    d2:d7:b3:ca:c8:11:3a:d0:aa:2b:a1:f6:bc:cb:d8:
                    f0:d2:37:16:5c:59:b2:ee:d8:dc:47:98:85:99:20:
                    c3:20:86:a8:49:d5:04:a7:28:aa:8c:48:e3:5b:dc:
                    ec:81:95:38:f3:a4:ed:f6:03:96:55:51:c2:07:7c:
                    76:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:F8:B4:FA:BE:22:61:30:FA:C2:9C:A9:55:D5:C2:3A:D5:A7:F6:6D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/70e81ed9-f5e7-37fc-8cc1-bf89c2d05efa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.crl

            X509v3 Authority Key Identifier:
                keyid:A7:31:13:DA:A8:C2:6D:D3:40:47:B6:C3:2B:BA:78:43:31:2F:01:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:147:110::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:23:87:aa:ef:04:a7:7a:6e:ff:a9:ec:83:bd:1b:91:ba:83:
         32:11:eb:57:e2:08:51:f8:0c:f2:9d:8f:bf:9d:c4:0b:b4:ed:
         89:eb:94:27:4c:18:a9:d6:6d:a4:55:b3:c2:dd:99:b1:5a:16:
         60:ea:27:0d:2c:e4:f0:87:27:57:d3:4b:30:81:33:27:e5:bd:
         4d:77:42:82:40:de:bb:af:aa:37:44:2b:ca:57:0d:ca:a8:c4:
         a4:76:b0:a9:41:06:55:fb:88:5f:2c:de:28:91:fe:cb:ee:29:
         77:1a:eb:74:18:51:05:3f:02:85:d7:f3:a2:18:61:21:ee:dc:
         5b:e6:49:b7:12:f4:26:8c:4e:8b:c1:1e:dd:0a:02:2d:1d:17:
         72:bd:2b:9c:1d:fd:a3:40:27:a3:d8:9c:5c:3c:19:4d:9c:50:
         6d:dd:23:88:4d:08:d2:20:45:4f:a6:e3:6a:66:c4:b7:47:68:
         e6:b5:41:1c:ee:ec:0d:ee:a5:5a:43:27:75:21:81:04:1b:b7:
         3b:ce:b3:66:53:97:41:82:ea:52:ef:df:f6:8d:e5:3b:83:01:
         c0:7a:d6:42:d9:44:72:0e:8b:3c:1a:d7:6a:a1:30:97:dd:45:
         b3:85:d1:fd:6e:5a:17:ca:e9:15:1c:72:d8:90:7c:01:1d:21:
         d7:d1:b1:d2
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE2msC7GC+gr5eWLoQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTkwNjc0OGQtNTgyMy00Y2QzLTlhMTEtZjNkYzY5YTNl
NzUxMB4XDTI2MDQyODAxMDAyNFoXDTI2MDcyNzAxMDAyNFowLzEtMCsGA1UEAxMk
YjEzZjJlNjAtMDVkZC00NTZjLTk4MDUtMThjNmU2YTcxMjZjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg/fMMYas/RVSHi7GhCAjnUu7AY/9g+vw9Kck
05CgIkDe29J7Spcnrb7lmjzRJ8GqnQRXZsSz71+B/4PQ5H/+yEHOhBxQQYXzJPtw
znlnqab9A8LcwExBuUGhejisT9IodlyuD1MWwI+n9TJgJLVHWr+vCpaiFmdxG5Eo
PRJKX2JE2chRretqi6yP7NyI6wNaYw7mS6q5GuYkm5dHn9QhC9bICap7R/UpZbzt
YmbNGN0xjhcA4hj88+3XSQC6onzrY7PS17PKyBE60Korofa8y9jw0jcWXFmy7tjc
R5iFmSDDIIaoSdUEpyiqjEjjW9zsgZU486Tt9gOWVVHCB3x25wIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFBf4tPq+ImEw+sKcqVXVwjrVp/ZtMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85OTA2
NzQ4ZC01ODIzLTRjZDMtOWExMS1mM2RjNjlhM2U3NTEvNzBlODFlZDktZjVlNy0z
N2ZjLThjYzEtYmY4OWMyZDA1ZWZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTkwNjc0OGQtNTgyMy00Y2QzLTlh
MTEtZjNkYzY5YTNlNzUxLzk5MDY3NDhkLTU4MjMtNGNkMy05YTExLWYzZGM2OWEz
ZTc1MS5jcmwwHwYDVR0jBBgwFoAUpzET2qjCbdNAR7bDK7p4QzEvAYAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85OTA2NzQ4ZC01ODIzLTRjZDMtOWExMS1mM2Rj
NjlhM2U3NTEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJiABRwEQ
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBACAjh6rvBKd6bv+p7IO9G5G6gzIR61fiCFH4DPKdj7+dxAu07Ynr
lCdMGKnWbaRVs8LdmbFaFmDqJw0s5PCHJ1fTSzCBMyflvU13QoJA3ruvqjdEK8pX
DcqoxKR2sKlBBlX7iF8s3iiR/svuKXca63QYUQU/AoXX86IYYSHu3FvmSbcS9CaM
TovBHt0KAi0dF3K9K5wd/aNAJ6PYnFw8GU2cUG3dI4hNCNIgRU+m42pmxLdHaOa1
QRzu7A3upVpDJ3UhgQQbtzvOs2ZTl0GC6lLv3/aN5TuDAcB61kLZRHIOizwa12qh
MJfdRbOF0f1uWhfK6RUcctiQfAEdIdfRsdI=
-----END CERTIFICATE-----
Generated at Wed May 13 16:45:04 2026 by rpki-client