Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f7e210a1-7b8a-4256-a4d2-c01234095c68/95a84b4d-a674-3f52-b01a-deae8cc47d84.roa
File:                     95a84b4d-a674-3f52-b01a-deae8cc47d84.roa (raw, json)
Hash identifier:          zhmvSVe7HuoBjTknK+HiE2V8WUuHqcFaAqfpw5G0LuI=
Subject key identifier:   02:56:B7:5A:71:31:B0:AD:CF:BA:3A:CA:92:98:AD:0B:EA:1F:C3:A4
Certificate issuer:       /CN=f7e210a1-7b8a-4256-a4d2-c01234095c68
Certificate serial:       010D0C9F4328584E4824BAB561AEC0A856504300
Authority key identifier: 70:64:A6:51:04:91:5D:5C:1A:88:70:D7:6F:6C:54:2D:27:AB:63:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f7e210a1-7b8a-4256-a4d2-c01234095c68.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f7e210a1-7b8a-4256-a4d2-c01234095c68/95a84b4d-a674-3f52-b01a-deae8cc47d84.roa
Signing time:             Wed 24 Jun 2026 21:00:12 +0000
ROA not before:           Wed 24 Jun 2026 21:00:12 +0000
ROA not after:            Tue 22 Sep 2026 21:00:12 +0000
asID:                     14450
IP address blocks:        2620:111:84::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f7e210a1-7b8a-4256-a4d2-c01234095c68/f7e210a1-7b8a-4256-a4d2-c01234095c68.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f7e210a1-7b8a-4256-a4d2-c01234095c68/f7e210a1-7b8a-4256-a4d2-c01234095c68.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f7e210a1-7b8a-4256-a4d2-c01234095c68.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:48:24:ba:b5:61:ae:c0:a8:56:50:43:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f7e210a1-7b8a-4256-a4d2-c01234095c68
        Validity
            Not Before: Jun 24 21:00:12 2026 GMT
            Not After : Sep 22 21:00:12 2026 GMT
        Subject: CN=1a4c9217-2dbf-41c2-a533-7555dc0dbb21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:34:a5:65:df:f1:38:ed:51:77:dd:5d:d5:d1:
                    b0:88:cb:41:be:e1:f3:3a:3e:75:38:64:86:7a:59:
                    be:e9:3f:99:e9:1b:2e:9e:66:1a:67:61:51:24:90:
                    9a:01:85:e3:a1:90:1b:a0:dc:e5:84:52:f1:c7:21:
                    55:f8:39:f6:8b:d3:68:7b:58:a6:b4:c9:f9:e9:ed:
                    69:5b:2c:12:9c:c7:b3:fb:65:54:1d:40:b0:d2:85:
                    7e:cd:3b:af:e4:a2:ca:06:d8:57:f2:ff:dc:c1:65:
                    2c:dc:f1:c7:13:5c:e7:cc:5b:0d:a4:12:e9:84:f3:
                    af:a6:61:36:26:e9:bf:d2:bc:14:83:0f:67:ed:ce:
                    f3:33:8f:1e:2f:0f:79:94:6a:e9:fe:5a:36:86:32:
                    de:9b:dd:5b:bc:fd:55:aa:54:d1:aa:70:f1:00:62:
                    0f:a1:af:ae:e3:4b:2e:d1:1d:38:b7:a5:85:e0:e0:
                    e4:5b:91:21:8a:c9:58:1f:5b:73:76:d1:b2:61:b0:
                    a6:ca:91:05:18:f2:5c:39:ba:bc:13:54:db:2d:2b:
                    1b:68:4a:45:61:cb:0c:71:f4:a4:07:e2:99:58:fb:
                    2d:21:88:e1:b3:ed:82:d9:35:04:e4:00:98:00:8d:
                    34:a1:a2:10:d7:5c:1a:e6:c8:ef:c8:be:cd:09:bc:
                    c3:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:56:B7:5A:71:31:B0:AD:CF:BA:3A:CA:92:98:AD:0B:EA:1F:C3:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f7e210a1-7b8a-4256-a4d2-c01234095c68/95a84b4d-a674-3f52-b01a-deae8cc47d84.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f7e210a1-7b8a-4256-a4d2-c01234095c68/f7e210a1-7b8a-4256-a4d2-c01234095c68.crl

            X509v3 Authority Key Identifier:
                keyid:70:64:A6:51:04:91:5D:5C:1A:88:70:D7:6F:6C:54:2D:27:AB:63:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f7e210a1-7b8a-4256-a4d2-c01234095c68.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:111:84::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:09:38:91:ea:cd:08:41:c3:6c:df:67:08:68:ef:54:0c:4e:
         da:32:90:88:02:51:ae:7c:df:c0:b7:79:cd:66:cf:1e:bd:61:
         43:80:7d:9c:ea:2b:4f:e7:33:eb:7e:15:3b:b9:11:95:e7:52:
         e4:80:92:1d:13:93:b5:46:1c:68:68:8d:51:60:7b:e8:46:1f:
         39:69:2d:66:86:47:1e:73:5c:2d:31:56:ee:3c:d1:af:a9:74:
         70:b8:43:c8:36:83:33:a6:74:d4:34:1b:8a:db:69:b9:1a:c5:
         16:2d:48:db:19:d5:c8:81:56:d6:04:15:18:a5:d6:4b:eb:f0:
         1b:83:27:79:d8:60:d5:64:97:14:c9:94:3f:a8:22:5e:33:94:
         20:9f:5f:c8:e3:8d:92:1f:d9:68:35:5f:5c:5c:8a:5a:92:26:
         b1:34:27:78:7d:28:e1:78:3f:00:e3:06:3e:a5:d1:18:f5:41:
         cb:95:89:ac:fc:c8:93:8e:fa:40:cf:a6:2d:9a:64:a0:9a:2d:
         b1:f0:03:f6:82:15:16:95:8a:22:1a:29:db:16:95:39:14:1b:
         1c:1e:8b:ea:58:d3:30:53:4c:63:68:18:80:47:17:5b:76:14:
         09:e9:14:0d:4b:77:e0:c8:96:c9:9f:5d:fa:64:02:d7:c3:59:
         ba:9e:02:10
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE5IJLq1Ya7AqFZQQwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjdlMjEwYTEtN2I4YS00MjU2LWE0ZDItYzAxMjM0MDk1
YzY4MB4XDTI2MDYyNDIxMDAxMloXDTI2MDkyMjIxMDAxMlowLzEtMCsGA1UEAxMk
MWE0YzkyMTctMmRiZi00MWMyLWE1MzMtNzU1NWRjMGRiYjIxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgzSlZd/xOO1Rd91d1dGwiMtBvuHzOj51OGSG
elm+6T+Z6RsunmYaZ2FRJJCaAYXjoZAboNzlhFLxxyFV+Dn2i9Noe1imtMn56e1p
WywSnMez+2VUHUCw0oV+zTuv5KLKBthX8v/cwWUs3PHHE1znzFsNpBLphPOvpmE2
Jum/0rwUgw9n7c7zM48eLw95lGrp/lo2hjLem91bvP1VqlTRqnDxAGIPoa+u40su
0R04t6WF4ODkW5EhislYH1tzdtGyYbCmypEFGPJcObq8E1TbLSsbaEpFYcsMcfSk
B+KZWPstIYjhs+2C2TUE5ACYAI00oaIQ11wa5sjvyL7NCbzDMwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFAJWt1pxMbCtz7o6ypKYrQvqH8OkMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mN2Uy
MTBhMS03YjhhLTQyNTYtYTRkMi1jMDEyMzQwOTVjNjgvOTVhODRiNGQtYTY3NC0z
ZjUyLWIwMWEtZGVhZThjYzQ3ZDg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZjdlMjEwYTEtN2I4YS00MjU2LWE0
ZDItYzAxMjM0MDk1YzY4L2Y3ZTIxMGExLTdiOGEtNDI1Ni1hNGQyLWMwMTIzNDA5
NWM2OC5jcmwwHwYDVR0jBBgwFoAUcGSmUQSRXVwaiHDXb2xULSerY3wwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mN2UyMTBhMS03YjhhLTQyNTYtYTRkMi1jMDEy
MzQwOTVjNjguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiABEQCE
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAFwJOJHqzQhBw2zfZwho71QMTtoykIgCUa5838C3ec1mzx69YUOA
fZzqK0/nM+t+FTu5EZXnUuSAkh0Tk7VGHGhojVFge+hGHzlpLWaGRx5zXC0xVu48
0a+pdHC4Q8g2gzOmdNQ0G4rbabkaxRYtSNsZ1ciBVtYEFRil1kvr8BuDJ3nYYNVk
lxTJlD+oIl4zlCCfX8jjjZIf2Wg1X1xcilqSJrE0J3h9KOF4PwDjBj6l0Rj1QcuV
iaz8yJOO+kDPpi2aZKCaLbHwA/aCFRaViiIaKdsWlTkUGxwei+pY0zBTTGNoGIBH
F1t2FAnpFA1Ld+DIlsmfXfpkAtfDWbqeAhA=
-----END CERTIFICATE-----
Generated at Fri Jul 24 11:26:52 2026 by rpki-client