Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/f88964a1-a4c9-3b05-aadc-3eea158ef1e4.roa
File:                     f88964a1-a4c9-3b05-aadc-3eea158ef1e4.roa (raw, json)
Hash identifier:          l1jISeH79RrDPZNMacq1dgf6/NuB4GsW9r66XbgCVw4=
Subject key identifier:   73:4C:A4:A3:79:BE:D5:04:73:7A:53:3B:EA:E4:C4:5F:20:C7:C0:DC
Certificate issuer:       /CN=458edb4b-8474-44dc-8841-30a6c66f33d7
Certificate serial:       010D0C9F4328584E7634CAA69321F2F5AA322A40
Authority key identifier: 24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/f88964a1-a4c9-3b05-aadc-3eea158ef1e4.roa
Signing time:             Sat 11 Jul 2026 09:00:12 +0000
ROA not before:           Sat 11 Jul 2026 09:00:12 +0000
ROA not after:            Fri 09 Oct 2026 09:00:12 +0000
asID:                     14618
IP address blocks:        2606:7bc0:1060::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:76:34:ca:a6:93:21:f2:f5:aa:32:2a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=458edb4b-8474-44dc-8841-30a6c66f33d7
        Validity
            Not Before: Jul 11 09:00:12 2026 GMT
            Not After : Oct  9 09:00:12 2026 GMT
        Subject: CN=5666e199-d266-47c7-8bbc-f2f9e329dbe1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:6b:8f:9f:f3:9f:15:8a:20:1e:d2:47:c0:c5:
                    57:cd:df:dc:e1:c4:a2:fb:7a:fa:8d:f5:6e:87:f3:
                    98:4c:3e:85:85:48:e4:54:e8:89:28:46:f8:b6:fe:
                    e5:4c:99:fa:d1:6d:8f:ab:0d:6e:b3:5c:39:71:0b:
                    41:13:b4:43:73:bc:2a:ac:46:3d:da:b0:78:39:20:
                    ae:9c:11:12:ce:fe:8a:f1:3f:64:9a:e8:bf:25:3d:
                    ac:a6:f6:c2:cf:85:ee:66:82:b1:bb:a6:05:10:12:
                    89:1e:77:58:bc:aa:a2:38:e9:19:20:2d:27:94:b0:
                    68:20:40:ce:59:54:07:f5:17:da:24:0d:80:6f:9d:
                    59:65:d8:a7:ae:72:ba:94:05:de:06:87:37:bd:9e:
                    9b:50:61:7f:3a:70:51:4c:f2:9e:cb:94:6b:19:b5:
                    d6:6d:f0:c8:4a:99:5e:cf:fc:d6:79:1a:4f:47:6a:
                    03:e8:4a:50:8d:5a:82:d3:25:d0:71:75:c9:6b:1b:
                    43:87:fa:5e:75:fc:4c:59:c7:9c:38:3c:eb:6a:37:
                    34:96:21:a6:32:cc:b9:fa:28:bd:65:67:a7:b4:e0:
                    55:d1:3f:c1:09:16:ac:2f:2f:f6:d0:e4:66:e0:69:
                    da:02:b5:ca:8e:ed:86:49:8a:4a:dc:8e:d7:a3:de:
                    31:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:4C:A4:A3:79:BE:D5:04:73:7A:53:3B:EA:E4:C4:5F:20:C7:C0:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/f88964a1-a4c9-3b05-aadc-3eea158ef1e4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl

            X509v3 Authority Key Identifier:
                keyid:24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:7bc0:1060::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:67:e3:f8:2e:d5:73:5e:88:13:d3:67:9b:53:54:d3:de:3b:
         7f:f8:7d:14:06:2c:31:2f:63:91:9f:aa:a9:d0:6d:09:ff:1a:
         c3:d8:59:3b:bd:46:8a:38:9b:75:4b:e6:d9:42:6c:63:65:f1:
         f3:1a:cc:67:b7:19:2b:55:2e:46:31:84:d0:af:46:cc:46:2a:
         04:0a:3b:08:7d:ba:e4:c2:0b:f3:bc:7c:3c:44:7d:c5:1c:29:
         fe:e3:95:b0:0a:0e:13:d2:7e:32:1d:6c:cc:e7:6f:a3:3e:d0:
         3f:8e:22:40:1d:41:7e:22:3b:14:4f:cf:ef:a7:e7:cd:d7:2e:
         81:dc:26:42:9b:a7:b1:57:db:d1:07:62:e6:49:fd:b9:b8:83:
         76:49:a9:e8:93:5f:dd:62:9d:07:e3:08:7a:0d:be:df:ba:38:
         b6:82:80:5c:06:73:57:80:1c:04:10:6b:3f:f6:71:d6:e6:77:
         16:ea:70:7c:35:d0:59:40:f5:d7:78:49:1b:8f:3f:f2:f9:3e:
         3e:64:a7:44:c5:8e:19:11:5e:eb:0e:5c:3e:21:a6:fa:62:d7:
         73:b7:62:5c:80:71:69:ad:0f:cc:14:75:3a:f8:dd:c8:99:0e:
         c9:a8:97:27:db:82:b7:f6:8e:1f:70:94:fd:f5:b6:10:db:91:
         af:2d:84:17
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE52NMqmkyHy9aoyKkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDU4ZWRiNGItODQ3NC00NGRjLTg4NDEtMzBhNmM2NmYz
M2Q3MB4XDTI2MDcxMTA5MDAxMloXDTI2MTAwOTA5MDAxMlowLzEtMCsGA1UEAxMk
NTY2NmUxOTktZDI2Ni00N2M3LThiYmMtZjJmOWUzMjlkYmUxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqWuPn/OfFYogHtJHwMVXzd/c4cSi+3r6jfVu
h/OYTD6FhUjkVOiJKEb4tv7lTJn60W2Pqw1us1w5cQtBE7RDc7wqrEY92rB4OSCu
nBESzv6K8T9kmui/JT2spvbCz4XuZoKxu6YFEBKJHndYvKqiOOkZIC0nlLBoIEDO
WVQH9RfaJA2Ab51ZZdinrnK6lAXeBoc3vZ6bUGF/OnBRTPKey5RrGbXWbfDISple
z/zWeRpPR2oD6EpQjVqC0yXQcXXJaxtDh/pedfxMWcecODzrajc0liGmMsy5+ii9
ZWentOBV0T/BCRasLy/20ORm4GnaArXKju2GSYpK3I7Xo94xhwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFHNMpKN5vtUEc3pTO+rkxF8gx8DcMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80NThl
ZGI0Yi04NDc0LTQ0ZGMtODg0MS0zMGE2YzY2ZjMzZDcvZjg4OTY0YTEtYTRjOS0z
YjA1LWFhZGMtM2VlYTE1OGVmMWU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDU4ZWRiNGItODQ3NC00NGRjLTg4
NDEtMzBhNmM2NmYzM2Q3LzQ1OGVkYjRiLTg0NzQtNDRkYy04ODQxLTMwYTZjNjZm
MzNkNy5jcmwwHwYDVR0jBBgwFoAUJFL4rUm+W1K5pv/CQSmRPufL8ZIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80NThlZGI0Yi04NDc0LTQ0ZGMtODg0MS0zMGE2
YzY2ZjMzZDcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgZ7wBBg
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBADNn4/gu1XNeiBPTZ5tTVNPeO3/4fRQGLDEvY5GfqqnQbQn/GsPY
WTu9Roo4m3VL5tlCbGNl8fMazGe3GStVLkYxhNCvRsxGKgQKOwh9uuTCC/O8fDxE
fcUcKf7jlbAKDhPSfjIdbMznb6M+0D+OIkAdQX4iOxRPz++n583XLoHcJkKbp7FX
29EHYuZJ/bm4g3ZJqeiTX91inQfjCHoNvt+6OLaCgFwGc1eAHAQQaz/2cdbmdxbq
cHw10FlA9dd4SRuPP/L5Pj5kp0TFjhkRXusOXD4hpvpi13O3YlyAcWmtD8wUdTr4
3ciZDsmolyfbgrf2jh9wlP31thDbka8thBc=
-----END CERTIFICATE-----
Generated at Fri Jul 24 18:04:22 2026 by rpki-client