Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0575435f-d6e9-4d29-9519-fff0e513c74e/0d8ac99f-834b-392d-8de0-99e74008bf17.roa
File:                     0d8ac99f-834b-392d-8de0-99e74008bf17.roa (raw, json)
Hash identifier:          UZjz0Ng+nGyssih5si55cHna2/n/4PC+WhB1Pdyw8dg=
Subject key identifier:   D2:1F:1E:88:66:D1:0D:06:FB:61:DB:A0:CC:81:0A:8F:3B:0A:69:12
Certificate issuer:       /CN=0575435f-d6e9-4d29-9519-fff0e513c74e
Certificate serial:       010D0C9F4328584DC565942E43E1CF1726906CE0
Authority key identifier: 41:C9:F1:A1:D4:C8:09:6A:B2:CC:4B:35:7E:06:B0:CE:91:7E:EE:2D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0575435f-d6e9-4d29-9519-fff0e513c74e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0575435f-d6e9-4d29-9519-fff0e513c74e/0d8ac99f-834b-392d-8de0-99e74008bf17.roa
Signing time:             Sat 09 May 2026 01:00:25 +0000
ROA not before:           Sat 09 May 2026 01:00:25 +0000
ROA not after:            Fri 07 Aug 2026 01:00:25 +0000
asID:                     396319
IP address blocks:        2601:1300::/28 maxlen: 28
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0575435f-d6e9-4d29-9519-fff0e513c74e/0575435f-d6e9-4d29-9519-fff0e513c74e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0575435f-d6e9-4d29-9519-fff0e513c74e/0575435f-d6e9-4d29-9519-fff0e513c74e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0575435f-d6e9-4d29-9519-fff0e513c74e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:c5:65:94:2e:43:e1:cf:17:26:90:6c:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0575435f-d6e9-4d29-9519-fff0e513c74e
        Validity
            Not Before: May  9 01:00:25 2026 GMT
            Not After : Aug  7 01:00:25 2026 GMT
        Subject: CN=5519a1a2-b31f-4e4a-9d96-8cd8122ad606
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:82:a8:57:ff:7b:88:56:3f:dd:98:9c:e8:3d:
                    73:d9:d7:4e:b4:2e:73:39:55:c6:35:b7:03:76:8e:
                    75:5e:ad:0e:f3:33:af:45:33:78:79:60:23:15:e5:
                    0b:92:1b:10:25:74:86:81:20:c9:2c:37:f2:30:37:
                    5c:52:23:f5:f1:f6:a8:05:63:ba:09:71:01:37:c7:
                    b2:5f:34:48:df:ea:45:05:57:27:5a:ff:e7:00:e9:
                    0b:04:0c:a6:eb:29:a0:d5:26:a2:df:c5:43:73:43:
                    14:d8:af:8a:cc:2e:58:76:cb:16:ee:1f:66:bc:1b:
                    ed:54:7b:b1:17:d3:81:24:0b:94:df:42:51:a8:87:
                    dc:32:3e:be:b8:43:91:9c:6e:6d:8a:8c:63:dc:cf:
                    ba:ad:56:74:9b:91:74:9e:65:cd:b1:cb:5c:59:f8:
                    5d:97:42:4e:44:fe:a5:66:c3:1e:4a:3d:33:3d:bf:
                    0a:6f:b2:ef:f1:28:09:6b:ac:47:df:7c:63:f3:d5:
                    e4:47:0e:76:eb:ef:8a:54:38:a0:b1:b1:61:ad:13:
                    37:e9:56:02:00:b0:8d:25:6c:83:cc:05:01:90:61:
                    55:86:c5:e1:2e:8c:1d:ba:4d:4c:c0:fb:aa:be:5e:
                    f1:fb:c8:8f:d4:15:4a:33:ac:35:16:88:16:95:7f:
                    b1:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:1F:1E:88:66:D1:0D:06:FB:61:DB:A0:CC:81:0A:8F:3B:0A:69:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0575435f-d6e9-4d29-9519-fff0e513c74e/0d8ac99f-834b-392d-8de0-99e74008bf17.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0575435f-d6e9-4d29-9519-fff0e513c74e/0575435f-d6e9-4d29-9519-fff0e513c74e.crl

            X509v3 Authority Key Identifier:
                keyid:41:C9:F1:A1:D4:C8:09:6A:B2:CC:4B:35:7E:06:B0:CE:91:7E:EE:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0575435f-d6e9-4d29-9519-fff0e513c74e.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2601:1300::/28

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:63:60:a5:b3:7c:e9:1e:13:22:27:38:bd:f9:c9:62:f2:74:
         2a:09:58:42:29:05:9a:3e:ef:9d:f8:87:71:ca:40:e0:d1:f9:
         6a:6c:f1:9f:69:ce:77:30:ce:bc:22:cb:14:69:78:bf:b0:cf:
         9e:56:14:29:b2:32:90:08:c8:e7:89:23:7c:ba:36:ce:7d:c2:
         66:6f:24:31:a9:2f:7e:f0:97:01:28:ab:7c:f6:95:71:12:30:
         a2:cd:14:e1:10:12:51:dd:1b:f0:35:7c:98:b8:8e:11:72:41:
         81:e1:38:62:ff:3c:d9:cf:f6:42:70:4f:4c:7c:10:cf:1c:c7:
         09:49:ca:3c:47:f6:66:05:12:c0:63:3d:06:06:b5:60:37:93:
         77:7e:67:fd:93:2c:5b:f8:00:35:2a:58:cd:ad:01:94:2f:30:
         84:f1:53:02:99:21:b6:a6:99:ee:91:76:6c:b2:24:f7:86:5a:
         26:6f:cb:62:8c:b2:af:3b:e3:45:2f:c1:e1:fc:d6:de:98:a0:
         7c:fa:74:a1:7f:2f:01:9f:4b:df:f0:25:6d:a9:33:5c:3d:c3:
         d9:4f:20:0c:4b:58:dc:c2:c9:7f:9c:21:a7:df:b6:08:c4:7d:
         c2:f4:1b:3b:35:a7:f0:e6:cd:4f:03:8f:60:93:0f:0f:1b:df:
         3e:dc:8f:93
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE3FZZQuQ+HPFyaQbOAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDU3NTQzNWYtZDZlOS00ZDI5LTk1MTktZmZmMGU1MTNj
NzRlMB4XDTI2MDUwOTAxMDAyNVoXDTI2MDgwNzAxMDAyNVowLzEtMCsGA1UEAxMk
NTUxOWExYTItYjMxZi00ZTRhLTlkOTYtOGNkODEyMmFkNjA2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAloKoV/97iFY/3Zic6D1z2ddOtC5zOVXGNbcD
do51Xq0O8zOvRTN4eWAjFeULkhsQJXSGgSDJLDfyMDdcUiP18faoBWO6CXEBN8ey
XzRI3+pFBVcnWv/nAOkLBAym6ymg1Sai38VDc0MU2K+KzC5YdssW7h9mvBvtVHux
F9OBJAuU30JRqIfcMj6+uEORnG5tioxj3M+6rVZ0m5F0nmXNsctcWfhdl0JORP6l
ZsMeSj0zPb8Kb7Lv8SgJa6xH33xj89XkRw526++KVDigsbFhrRM36VYCALCNJWyD
zAUBkGFVhsXhLowduk1MwPuqvl7x+8iP1BVKM6w1FogWlX+xtwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFNIfHohm0Q0G+2HboMyBCo87CmkSMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wNTc1
NDM1Zi1kNmU5LTRkMjktOTUxOS1mZmYwZTUxM2M3NGUvMGQ4YWM5OWYtODM0Yi0z
OTJkLThkZTAtOTllNzQwMDhiZjE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMDU3NTQzNWYtZDZlOS00ZDI5LTk1
MTktZmZmMGU1MTNjNzRlLzA1NzU0MzVmLWQ2ZTktNGQyOS05NTE5LWZmZjBlNTEz
Yzc0ZS5jcmwwHwYDVR0jBBgwFoAUQcnxodTICWqyzEs1fgawzpF+7i0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8wNTc1NDM1Zi1kNmU5LTRkMjktOTUxOS1mZmYw
ZTUxM2M3NGUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUEJgETADBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQBCY2Cls3zpHhMiJzi9+cli8nQqCVhCKQWaPu+d+IdxykDg0flqbPGf
ac53MM68IssUaXi/sM+eVhQpsjKQCMjniSN8ujbOfcJmbyQxqS9+8JcBKKt89pVx
EjCizRThEBJR3RvwNXyYuI4RckGB4Thi/zzZz/ZCcE9MfBDPHMcJSco8R/ZmBRLA
Yz0GBrVgN5N3fmf9kyxb+AA1KljNrQGULzCE8VMCmSG2ppnukXZssiT3hlomb8ti
jLKvO+NFL8Hh/NbemKB8+nShfy8Bn0vf8CVtqTNcPcPZTyAMS1jcwsl/nCGn37YI
xH3C9Bs7Nafw5s1PA49gkw8PG98+3I+T
-----END CERTIFICATE-----
Generated at Wed May 13 15:52:27 2026 by rpki-client