Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a9e2c1ac-e255-40fe-8dc8-36750b569bfc/449d62aa-147d-3cc1-b6d1-096ce2461a6d.roa
File:                     449d62aa-147d-3cc1-b6d1-096ce2461a6d.roa (raw, json)
Hash identifier:          KBbncEMdqEzykKpoCryV60p5pRSCiV9G3ti1pTMn66g=
Subject key identifier:   17:D6:F2:4F:85:56:44:D1:7B:C2:E6:DB:53:0E:EA:0D:C7:58:A5:67
Certificate issuer:       /CN=a9e2c1ac-e255-40fe-8dc8-36750b569bfc
Certificate serial:       010D0C9F4328584DD09051037C39AD6F06DB3E80
Authority key identifier: 43:5E:A0:A6:2A:BD:2A:B3:E0:0F:1E:76:5B:BD:7E:8E:F9:80:D7:1D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a9e2c1ac-e255-40fe-8dc8-36750b569bfc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a9e2c1ac-e255-40fe-8dc8-36750b569bfc/449d62aa-147d-3cc1-b6d1-096ce2461a6d.roa
Signing time:             Wed 13 May 2026 01:00:24 +0000
ROA not before:           Wed 13 May 2026 01:00:24 +0000
ROA not after:            Tue 11 Aug 2026 01:00:24 +0000
asID:                     14041
IP address blocks:        2620:11f:5000::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a9e2c1ac-e255-40fe-8dc8-36750b569bfc/a9e2c1ac-e255-40fe-8dc8-36750b569bfc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a9e2c1ac-e255-40fe-8dc8-36750b569bfc/a9e2c1ac-e255-40fe-8dc8-36750b569bfc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a9e2c1ac-e255-40fe-8dc8-36750b569bfc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:d0:90:51:03:7c:39:ad:6f:06:db:3e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a9e2c1ac-e255-40fe-8dc8-36750b569bfc
        Validity
            Not Before: May 13 01:00:24 2026 GMT
            Not After : Aug 11 01:00:24 2026 GMT
        Subject: CN=2ce14e9c-0688-4f9c-8596-172de070b767
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:2a:ef:10:21:59:47:80:35:24:4b:3a:47:18:
                    2a:c3:ad:36:c8:08:ef:e0:aa:f1:33:51:82:d3:d5:
                    f8:4b:56:62:4a:51:9f:41:39:39:28:40:d9:9b:da:
                    1c:00:ac:a4:6a:48:f9:14:5e:49:b4:62:cf:57:32:
                    65:16:b8:75:2b:34:a0:d2:e8:a3:6f:78:1f:97:ff:
                    83:05:60:71:eb:50:53:b4:5a:cb:5e:e6:25:97:0b:
                    61:69:fd:8f:f1:03:f8:47:8e:8d:2d:5e:a2:11:a7:
                    10:3e:d6:6b:5a:76:d4:5e:b4:97:57:c0:43:a2:c9:
                    9c:5f:47:45:e0:40:16:bd:f2:23:bd:94:87:12:7f:
                    ae:41:23:de:9d:56:8d:c7:df:22:ef:a8:ba:de:4a:
                    d5:a1:e2:86:90:f6:00:aa:6b:da:8d:ee:5c:e8:85:
                    72:19:92:ad:d2:ef:a7:a5:04:9d:ac:70:d5:fb:8a:
                    74:93:6c:b2:af:44:35:e5:32:ca:22:71:98:32:97:
                    bb:ac:88:a9:d3:05:0e:4e:87:3e:6f:64:fa:f1:56:
                    bf:e6:7b:6e:34:7e:a0:20:14:3a:ed:0d:94:63:f7:
                    bc:c0:5e:57:5d:22:68:9b:44:83:af:3b:18:b5:5d:
                    ec:1d:be:a3:fe:3b:4e:40:d6:a4:85:48:14:3f:b4:
                    2d:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:D6:F2:4F:85:56:44:D1:7B:C2:E6:DB:53:0E:EA:0D:C7:58:A5:67
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a9e2c1ac-e255-40fe-8dc8-36750b569bfc/449d62aa-147d-3cc1-b6d1-096ce2461a6d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a9e2c1ac-e255-40fe-8dc8-36750b569bfc/a9e2c1ac-e255-40fe-8dc8-36750b569bfc.crl

            X509v3 Authority Key Identifier:
                keyid:43:5E:A0:A6:2A:BD:2A:B3:E0:0F:1E:76:5B:BD:7E:8E:F9:80:D7:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a9e2c1ac-e255-40fe-8dc8-36750b569bfc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:11f:5000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:c5:02:84:92:eb:e5:ee:dc:6a:a7:96:34:b8:90:65:9e:99:
         a1:39:a8:0c:98:89:46:c1:cf:b2:96:d3:97:91:ab:85:11:f0:
         18:c6:35:19:2a:d3:c7:1d:6b:bc:9e:a1:ac:25:5d:d9:ae:b4:
         eb:1b:b0:bf:fc:8e:3a:23:06:65:4b:5c:af:c2:ea:24:e2:41:
         8a:26:8f:45:3c:41:32:70:60:54:a6:a8:fe:69:21:d5:d3:90:
         82:ad:a7:f9:69:f2:d5:6d:c6:25:35:26:72:ea:de:5e:e6:fd:
         80:8c:4a:f5:a6:54:e8:de:7c:71:6e:63:fb:5b:6d:d6:71:f7:
         8d:cf:11:ee:1e:88:45:9b:fa:e3:be:10:e9:bc:35:5b:28:e6:
         cd:a5:76:25:b5:66:f0:6a:1b:1a:05:8c:7a:aa:e2:3a:21:f9:
         c0:14:87:fb:05:26:b4:10:37:33:26:bc:49:30:32:53:b9:f1:
         cd:91:a0:9a:e3:a1:bb:2e:7f:ab:0d:91:8c:e8:ca:93:a9:22:
         c3:f4:0b:1b:2a:38:4a:a5:f6:14:25:68:0a:c6:4c:a7:de:84:
         bd:98:9c:41:4b:13:c9:3d:10:63:d2:82:e3:1c:78:70:45:f8:
         48:16:90:01:c3:31:f9:c2:c1:72:51:12:87:36:97:fb:b5:4e:
         00:8f:e7:6b
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE3QkFEDfDmtbwbbPoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTllMmMxYWMtZTI1NS00MGZlLThkYzgtMzY3NTBiNTY5
YmZjMB4XDTI2MDUxMzAxMDAyNFoXDTI2MDgxMTAxMDAyNFowLzEtMCsGA1UEAxMk
MmNlMTRlOWMtMDY4OC00ZjljLTg1OTYtMTcyZGUwNzBiNzY3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnyrvECFZR4A1JEs6Rxgqw602yAjv4KrxM1GC
09X4S1ZiSlGfQTk5KEDZm9ocAKykakj5FF5JtGLPVzJlFrh1KzSg0uijb3gfl/+D
BWBx61BTtFrLXuYllwthaf2P8QP4R46NLV6iEacQPtZrWnbUXrSXV8BDosmcX0dF
4EAWvfIjvZSHEn+uQSPenVaNx98i76i63krVoeKGkPYAqmvaje5c6IVyGZKt0u+n
pQSdrHDV+4p0k2yyr0Q15TLKInGYMpe7rIip0wUOToc+b2T68Va/5ntuNH6gIBQ6
7Q2UY/e8wF5XXSJom0SDrzsYtV3sHb6j/jtOQNakhUgUP7QtqQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFBfW8k+FVkTRe8Lm21MO6g3HWKVnMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9hOWUy
YzFhYy1lMjU1LTQwZmUtOGRjOC0zNjc1MGI1NjliZmMvNDQ5ZDYyYWEtMTQ3ZC0z
Y2MxLWI2ZDEtMDk2Y2UyNDYxYTZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYTllMmMxYWMtZTI1NS00MGZlLThk
YzgtMzY3NTBiNTY5YmZjL2E5ZTJjMWFjLWUyNTUtNDBmZS04ZGM4LTM2NzUwYjU2
OWJmYy5jcmwwHwYDVR0jBBgwFoAUQ16gpiq9KrPgDx52W71+jvmA1x0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9hOWUyYzFhYy1lMjU1LTQwZmUtOGRjOC0zNjc1
MGI1NjliZmMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJiABH1Aw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAAsUChJLr5e7caqeWNLiQZZ6ZoTmoDJiJRsHPspbTl5GrhRHwGMY1
GSrTxx1rvJ6hrCVd2a606xuwv/yOOiMGZUtcr8LqJOJBiiaPRTxBMnBgVKao/mkh
1dOQgq2n+Wny1W3GJTUmcureXub9gIxK9aZU6N58cW5j+1tt1nH3jc8R7h6IRZv6
474Q6bw1WyjmzaV2JbVm8GobGgWMeqriOiH5wBSH+wUmtBA3Mya8STAyU7nxzZGg
muOhuy5/qw2RjOjKk6kiw/QLGyo4SqX2FCVoCsZMp96EvZicQUsTyT0QY9KC4xx4
cEX4SBaQAcMx+cLBclEShzaX+7VOAI/naw==
-----END CERTIFICATE-----
Generated at Wed May 13 11:17:59 2026 by rpki-client