Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ca8f0bbc-8cc4-4514-874a-407f328f3893/c665f46b-83a0-3159-8392-368a8eda0dad.roa
File:                     c665f46b-83a0-3159-8392-368a8eda0dad.roa (raw, json)
Hash identifier:          XFxvT1fivJKzPaMRLi7rH7MMQvortXolXReSBzB0RUA=
Subject key identifier:   70:E8:88:44:B1:76:10:92:88:12:9A:3D:4D:F1:73:2E:23:F7:5A:5A
Certificate issuer:       /CN=ca8f0bbc-8cc4-4514-874a-407f328f3893
Certificate serial:       010D0C9F4328584E78FF822A6A8DB521CE69C680
Authority key identifier: 4F:36:51:94:5C:EF:74:40:B9:E9:66:B2:64:9B:33:57:70:E7:72:0C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ca8f0bbc-8cc4-4514-874a-407f328f3893.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ca8f0bbc-8cc4-4514-874a-407f328f3893/c665f46b-83a0-3159-8392-368a8eda0dad.roa
Signing time:             Sun 12 Jul 2026 09:00:11 +0000
ROA not before:           Sun 12 Jul 2026 09:00:11 +0000
ROA not after:            Sat 10 Oct 2026 09:00:11 +0000
asID:                     46757
IP address blocks:        2620:123:7000::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ca8f0bbc-8cc4-4514-874a-407f328f3893/ca8f0bbc-8cc4-4514-874a-407f328f3893.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ca8f0bbc-8cc4-4514-874a-407f328f3893/ca8f0bbc-8cc4-4514-874a-407f328f3893.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ca8f0bbc-8cc4-4514-874a-407f328f3893.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:78:ff:82:2a:6a:8d:b5:21:ce:69:c6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ca8f0bbc-8cc4-4514-874a-407f328f3893
        Validity
            Not Before: Jul 12 09:00:11 2026 GMT
            Not After : Oct 10 09:00:11 2026 GMT
        Subject: CN=e62b9a22-b50c-4cce-92b5-67423de7dd1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:b7:9f:8e:a6:49:d2:9c:a8:2b:ee:84:75:25:
                    d3:c7:ae:4e:b7:1c:78:44:83:c7:9e:c8:4e:3d:ef:
                    4c:46:55:8f:ba:3c:92:0b:d1:71:7d:11:a8:e2:20:
                    38:53:43:33:4f:5f:e3:d2:ca:18:a0:45:4e:6b:a4:
                    73:3b:7f:4b:c1:d8:d2:42:15:9b:49:9d:f3:5a:6e:
                    79:ff:e3:85:7b:d5:90:8a:e4:24:2c:13:c7:d9:eb:
                    c4:9d:fc:7f:0f:16:45:09:e1:c5:37:1b:c0:73:10:
                    92:e4:57:58:67:4e:28:15:ea:0f:50:22:1c:5f:fa:
                    f9:46:49:f7:6c:ee:3b:34:ef:e6:9b:95:7b:2e:a0:
                    f5:4f:f6:d1:35:1d:7a:a1:77:95:df:d9:ab:3d:4b:
                    3d:bb:30:cd:68:81:9b:5b:c6:0e:33:1f:ff:2a:e3:
                    c7:bf:8c:ae:6b:03:56:49:b7:03:9a:91:b8:37:97:
                    b5:3e:14:6d:0c:5c:8c:f0:fb:32:f4:70:2c:eb:41:
                    76:b0:f4:ec:fa:fe:39:f8:26:11:13:65:01:a1:f3:
                    41:af:a3:36:61:6b:40:75:e2:cb:62:ff:4b:e0:28:
                    3f:95:0c:a7:35:f8:c1:cd:20:0d:d9:bb:da:26:d5:
                    eb:a1:64:97:f4:d9:21:61:94:b6:db:02:01:ea:b1:
                    e8:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:E8:88:44:B1:76:10:92:88:12:9A:3D:4D:F1:73:2E:23:F7:5A:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ca8f0bbc-8cc4-4514-874a-407f328f3893/c665f46b-83a0-3159-8392-368a8eda0dad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ca8f0bbc-8cc4-4514-874a-407f328f3893/ca8f0bbc-8cc4-4514-874a-407f328f3893.crl

            X509v3 Authority Key Identifier:
                keyid:4F:36:51:94:5C:EF:74:40:B9:E9:66:B2:64:9B:33:57:70:E7:72:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ca8f0bbc-8cc4-4514-874a-407f328f3893.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:123:7000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:ea:ae:23:1c:d5:53:95:9e:3c:83:1c:af:26:57:ed:38:2e:
         0b:1b:ee:db:b4:d7:3c:fd:be:a1:34:f8:e4:b0:47:e3:08:23:
         df:b7:99:fd:37:6b:d3:fb:5f:25:ab:76:14:af:62:ec:d5:90:
         3d:3b:96:eb:72:8e:bd:16:02:a3:6f:23:3f:de:ac:b9:21:c8:
         47:4b:90:c0:ca:35:08:24:7c:4a:bc:20:dc:e2:4a:8b:9b:60:
         52:ea:fc:46:9b:8b:e7:0e:1f:89:95:e4:3d:6e:b4:9b:40:8a:
         38:f6:9c:81:fd:50:8f:5d:5d:0e:74:1a:7c:ab:0e:b2:a0:84:
         22:20:5e:4b:7a:93:93:fc:0c:cf:ba:4e:c2:24:f1:5e:47:0d:
         c6:61:b2:89:80:d3:a0:af:75:7b:9a:c1:4c:b6:56:8d:16:bd:
         e9:c4:f9:0d:ca:f7:9d:24:c8:7f:24:ad:e1:fc:1d:76:14:8f:
         7d:92:6b:78:56:37:00:2e:d4:88:1e:9f:67:77:c3:37:5f:b5:
         7e:75:9c:49:2a:67:a5:a5:96:c4:5f:50:ec:ca:7a:d4:b2:08:
         55:09:ae:65:28:28:fb:ec:a0:37:38:a0:19:89:00:b6:e7:65:
         6e:b9:c9:6c:6a:cc:c6:c5:08:ff:20:20:94:ac:65:85:30:21:
         54:5d:3d:2f
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE54/4Iqao21Ic5pxoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2E4ZjBiYmMtOGNjNC00NTE0LTg3NGEtNDA3ZjMyOGYz
ODkzMB4XDTI2MDcxMjA5MDAxMVoXDTI2MTAxMDA5MDAxMVowLzEtMCsGA1UEAxMk
ZTYyYjlhMjItYjUwYy00Y2NlLTkyYjUtNjc0MjNkZTdkZDFlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArrefjqZJ0pyoK+6EdSXTx65Otxx4RIPHnshO
Pe9MRlWPujySC9FxfRGo4iA4U0MzT1/j0soYoEVOa6RzO39LwdjSQhWbSZ3zWm55
/+OFe9WQiuQkLBPH2evEnfx/DxZFCeHFNxvAcxCS5FdYZ04oFeoPUCIcX/r5Rkn3
bO47NO/mm5V7LqD1T/bRNR16oXeV39mrPUs9uzDNaIGbW8YOMx//KuPHv4yuawNW
SbcDmpG4N5e1PhRtDFyM8Psy9HAs60F2sPTs+v45+CYRE2UBofNBr6M2YWtAdeLL
Yv9L4Cg/lQynNfjBzSAN2bvaJtXroWSX9NkhYZS22wIB6rHoewIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFHDoiESxdhCSiBKaPU3xcy4j91paMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9jYThm
MGJiYy04Y2M0LTQ1MTQtODc0YS00MDdmMzI4ZjM4OTMvYzY2NWY0NmItODNhMC0z
MTU5LTgzOTItMzY4YThlZGEwZGFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvY2E4ZjBiYmMtOGNjNC00NTE0LTg3
NGEtNDA3ZjMyOGYzODkzL2NhOGYwYmJjLThjYzQtNDUxNC04NzRhLTQwN2YzMjhm
Mzg5My5jcmwwHwYDVR0jBBgwFoAUTzZRlFzvdEC56WayZJszV3DncgwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9jYThmMGJiYy04Y2M0LTQ1MTQtODc0YS00MDdm
MzI4ZjM4OTMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJiABI3AA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBABnqriMc1VOVnjyDHK8mV+04Lgsb7tu01zz9vqE0+OSwR+MII9+3
mf03a9P7XyWrdhSvYuzVkD07lutyjr0WAqNvIz/erLkhyEdLkMDKNQgkfEq8INzi
SoubYFLq/Eabi+cOH4mV5D1utJtAijj2nIH9UI9dXQ50GnyrDrKghCIgXkt6k5P8
DM+6TsIk8V5HDcZhsomA06CvdXuawUy2Vo0WvenE+Q3K950kyH8kreH8HXYUj32S
a3hWNwAu1Igen2d3wzdftX51nEkqZ6WllsRfUOzKetSyCFUJrmUoKPvsoDc4oBmJ
ALbnZW65yWxqzMbFCP8gIJSsZYUwIVRdPS8=
-----END CERTIFICATE-----
Generated at Fri Jul 24 17:36:53 2026 by rpki-client