Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e347687c-d80d-46e2-b30e-10ae68d8e1ee/00667e32-f613-3f3a-9fd3-0b0bff4c0dd7.roa
File:                     00667e32-f613-3f3a-9fd3-0b0bff4c0dd7.roa (raw, json)
Hash identifier:          7gsX78q1g6MCv3WiHsYjt7v+ie7H7jfJBubyfs5i3lM=
Subject key identifier:   54:1C:42:18:76:E0:18:23:F2:95:06:44:18:EF:FC:0A:35:7A:A1:9D
Certificate issuer:       /CN=e347687c-d80d-46e2-b30e-10ae68d8e1ee
Certificate serial:       010D0C9F4328584E842A36062FEF32A517867200
Authority key identifier: 71:A2:33:D4:28:7E:31:F5:37:E1:22:FA:52:79:C2:EB:06:25:D5:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e347687c-d80d-46e2-b30e-10ae68d8e1ee.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e347687c-d80d-46e2-b30e-10ae68d8e1ee/00667e32-f613-3f3a-9fd3-0b0bff4c0dd7.roa
Signing time:             Thu 16 Jul 2026 09:00:12 +0000
ROA not before:           Thu 16 Jul 2026 09:00:12 +0000
ROA not after:            Wed 14 Oct 2026 09:00:12 +0000
asID:                     400688
IP address blocks:        2602:80f:9008::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e347687c-d80d-46e2-b30e-10ae68d8e1ee/e347687c-d80d-46e2-b30e-10ae68d8e1ee.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e347687c-d80d-46e2-b30e-10ae68d8e1ee/e347687c-d80d-46e2-b30e-10ae68d8e1ee.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e347687c-d80d-46e2-b30e-10ae68d8e1ee.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:84:2a:36:06:2f:ef:32:a5:17:86:72:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e347687c-d80d-46e2-b30e-10ae68d8e1ee
        Validity
            Not Before: Jul 16 09:00:12 2026 GMT
            Not After : Oct 14 09:00:12 2026 GMT
        Subject: CN=7d0db98c-cf43-4a6d-b9ad-54b4164f4f72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:3c:18:1b:70:8f:e8:44:94:3b:32:65:49:98:
                    74:84:1f:69:61:97:5d:f1:83:20:85:c8:5a:81:63:
                    d5:6d:82:5d:ef:30:1c:eb:32:41:b6:1f:74:cf:36:
                    8a:47:a2:43:f7:ed:c0:91:e8:4b:aa:ec:36:24:4a:
                    3b:d0:7d:f8:fb:43:23:b1:7a:2d:ad:99:8e:91:cc:
                    20:b7:7d:e6:5e:b1:ee:fc:4e:30:0f:a3:59:6f:53:
                    12:b1:6a:b6:64:e1:51:ab:ec:c3:be:69:69:af:04:
                    b3:76:29:e7:8c:55:53:7f:22:43:31:87:f0:e8:60:
                    b5:3a:fb:04:33:80:c5:69:d0:60:8a:f6:c2:c7:e5:
                    72:7c:21:96:e7:e2:48:69:29:70:f2:a9:5d:2e:15:
                    ba:e1:25:00:92:a6:b5:27:96:32:d3:42:84:2f:48:
                    68:8e:b4:3f:e0:e4:09:f3:2e:80:5b:dc:8f:65:f3:
                    52:f8:b2:85:e1:03:f7:ef:e7:be:a1:50:83:ec:4e:
                    d6:04:3b:9d:1f:4c:ef:7e:36:5d:e5:ad:cb:9a:95:
                    81:2a:c2:0a:39:29:2d:85:77:2e:8f:98:98:50:69:
                    c2:18:94:21:73:88:ed:fd:0f:98:3f:8e:b6:ea:b1:
                    02:75:8f:9e:5d:83:2d:78:f7:15:f2:26:74:d7:01:
                    76:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:1C:42:18:76:E0:18:23:F2:95:06:44:18:EF:FC:0A:35:7A:A1:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e347687c-d80d-46e2-b30e-10ae68d8e1ee/00667e32-f613-3f3a-9fd3-0b0bff4c0dd7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e347687c-d80d-46e2-b30e-10ae68d8e1ee/e347687c-d80d-46e2-b30e-10ae68d8e1ee.crl

            X509v3 Authority Key Identifier:
                keyid:71:A2:33:D4:28:7E:31:F5:37:E1:22:FA:52:79:C2:EB:06:25:D5:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e347687c-d80d-46e2-b30e-10ae68d8e1ee.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:80f:9008::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:93:ac:ee:75:a9:b8:a3:4f:b8:97:27:8d:79:6c:6e:c2:67:
         38:98:cc:c4:f5:55:70:2d:d1:75:62:e4:ee:e4:72:82:b5:9c:
         af:db:ac:1d:95:3b:94:83:fe:81:28:96:0b:b6:8c:9d:1d:a9:
         6b:b0:cf:7b:90:49:a6:f9:81:8b:e7:37:ea:76:cd:18:ad:13:
         5c:7f:bc:52:5a:f0:d3:41:4f:df:d2:08:da:fd:f1:d9:fa:d4:
         c4:41:d2:a3:92:61:c0:89:52:4c:04:44:d5:df:e0:c5:b6:cd:
         cb:b5:f3:c0:97:5d:16:c8:55:b8:2a:ee:bf:31:4f:ff:af:07:
         d5:5e:5b:3b:f3:78:52:22:af:0c:f2:02:8b:c9:af:ab:fc:7c:
         35:d6:8d:b3:ed:44:71:f6:43:2c:fd:0c:99:cf:e2:8f:bb:5e:
         d5:c5:6a:bb:3f:3d:0c:71:c0:d6:ab:53:3e:be:a4:08:fb:92:
         70:25:2b:f8:c6:ea:1f:13:28:3c:5e:2b:0f:3e:ed:e1:ab:02:
         ab:00:fb:90:34:9e:73:36:2b:fd:83:98:90:ef:72:37:32:44:
         bd:4e:b4:d7:6a:a9:3f:56:a5:e5:f6:12:e3:34:11:95:4c:d4:
         61:db:cc:69:8f:d0:bf:56:60:51:f4:d0:4c:2e:03:64:22:ef:
         d7:5d:8d:e8
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE6EKjYGL+8ypReGcgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTM0NzY4N2MtZDgwZC00NmUyLWIzMGUtMTBhZTY4ZDhl
MWVlMB4XDTI2MDcxNjA5MDAxMloXDTI2MTAxNDA5MDAxMlowLzEtMCsGA1UEAxMk
N2QwZGI5OGMtY2Y0My00YTZkLWI5YWQtNTRiNDE2NGY0ZjcyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqTwYG3CP6ESUOzJlSZh0hB9pYZdd8YMghcha
gWPVbYJd7zAc6zJBth90zzaKR6JD9+3AkehLquw2JEo70H34+0MjsXotrZmOkcwg
t33mXrHu/E4wD6NZb1MSsWq2ZOFRq+zDvmlprwSzdinnjFVTfyJDMYfw6GC1OvsE
M4DFadBgivbCx+VyfCGW5+JIaSlw8qldLhW64SUAkqa1J5Yy00KEL0hojrQ/4OQJ
8y6AW9yPZfNS+LKF4QP37+e+oVCD7E7WBDudH0zvfjZd5a3LmpWBKsIKOSkthXcu
j5iYUGnCGJQhc4jt/Q+YP4626rECdY+eXYMtePcV8iZ01wF2EwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFFQcQhh24Bgj8pUGRBjv/Ao1eqGdMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9lMzQ3
Njg3Yy1kODBkLTQ2ZTItYjMwZS0xMGFlNjhkOGUxZWUvMDA2NjdlMzItZjYxMy0z
ZjNhLTlmZDMtMGIwYmZmNGMwZGQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZTM0NzY4N2MtZDgwZC00NmUyLWIz
MGUtMTBhZTY4ZDhlMWVlL2UzNDc2ODdjLWQ4MGQtNDZlMi1iMzBlLTEwYWU2OGQ4
ZTFlZS5jcmwwHwYDVR0jBBgwFoAUcaIz1Ch+MfU34SL6UnnC6wYl1ZEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9lMzQ3Njg3Yy1kODBkLTQ2ZTItYjMwZS0xMGFl
NjhkOGUxZWUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcBJgIID5AI
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBABSTrO51qbijT7iXJ415bG7CZziYzMT1VXAt0XVi5O7kcoK1nK/b
rB2VO5SD/oEolgu2jJ0dqWuwz3uQSab5gYvnN+p2zRitE1x/vFJa8NNBT9/SCNr9
8dn61MRB0qOSYcCJUkwERNXf4MW2zcu188CXXRbIVbgq7r8xT/+vB9VeWzvzeFIi
rwzyAovJr6v8fDXWjbPtRHH2Qyz9DJnP4o+7XtXFars/PQxxwNarUz6+pAj7knAl
K/jG6h8TKDxeKw8+7eGrAqsA+5A0nnM2K/2DmJDvcjcyRL1OtNdqqT9WpeX2EuM0
EZVM1GHbzGmP0L9WYFH00EwuA2Qi79ddjeg=
-----END CERTIFICATE-----
Generated at Thu Jul 23 22:03:34 2026 by rpki-client