Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/f6385968-12a1-3173-93d4-e8afce25cbd4.roa
File:                     f6385968-12a1-3173-93d4-e8afce25cbd4.roa (raw, json)
Hash identifier:          4/9sYCfgJ0gVU1oKvL7ew8JpE99WUq5szVJLaoJ0beo=
Subject key identifier:   69:A8:4D:CF:64:05:C5:EB:90:26:B7:93:85:D7:EB:B2:33:A6:48:1E
Certificate issuer:       /CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
Certificate serial:       010D0C9F4328584D1F4A3E2383D6C433EF76A180
Authority key identifier: 80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/f6385968-12a1-3173-93d4-e8afce25cbd4.roa
Signing time:             Tue 10 Mar 2026 13:00:41 +0000
ROA not before:           Tue 10 Mar 2026 13:00:41 +0000
ROA not after:            Mon 08 Jun 2026 13:00:41 +0000
asID:                     62610
IP address blocks:        2604:980:e01f::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:1f:4a:3e:23:83:d6:c4:33:ef:76:a1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
        Validity
            Not Before: Mar 10 13:00:41 2026 GMT
            Not After : Jun  8 13:00:41 2026 GMT
        Subject: CN=a52db987-e377-46f0-9c50-b8bea26e71e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:6b:d6:63:4e:9e:df:18:fe:71:3c:84:af:a7:
                    8b:b1:b7:52:68:03:d1:99:38:52:e4:e1:47:43:5b:
                    3d:5c:a8:96:a8:d7:51:ba:eb:93:ee:3b:b8:cc:7c:
                    ab:f2:f9:3c:1b:ec:7e:c9:e2:58:71:48:29:33:90:
                    d2:6b:01:4b:b9:06:fb:04:e7:e9:98:61:de:c4:ea:
                    74:25:9d:92:86:de:9e:b5:16:24:e0:fd:ff:4a:d5:
                    b6:90:40:a4:1c:8f:12:9a:80:47:7f:68:a2:f7:f1:
                    52:c0:f2:0e:0d:82:d3:73:d6:47:24:2b:5c:3c:e5:
                    23:a6:90:e9:eb:6a:b6:35:e9:6b:69:7b:d0:38:8c:
                    d7:25:f4:da:85:16:aa:90:80:dc:a9:57:df:77:05:
                    8e:f7:ed:21:7b:d8:19:e1:6b:26:dc:18:45:33:94:
                    05:57:f1:6e:f1:cc:56:7c:79:84:4a:56:58:09:5c:
                    1a:e6:a2:c7:b0:1c:25:e0:05:ad:37:f0:89:e2:40:
                    ac:4f:ee:e6:97:0b:07:9a:a2:3b:99:fe:8c:7b:af:
                    b8:b1:d2:49:5f:5b:77:15:aa:6d:d6:d8:31:e8:eb:
                    5e:0c:e1:fd:25:91:eb:05:00:5b:2b:a9:ef:15:be:
                    b2:d5:e4:e0:d4:bb:ff:fd:64:25:48:b8:83:ac:f8:
                    45:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:A8:4D:CF:64:05:C5:EB:90:26:B7:93:85:D7:EB:B2:33:A6:48:1E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/f6385968-12a1-3173-93d4-e8afce25cbd4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl

            X509v3 Authority Key Identifier:
                keyid:80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:980:e01f::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:65:8d:f0:ff:8a:b5:47:37:8e:27:eb:35:b5:e4:27:27:f7:
         68:e4:d6:11:25:1a:8f:87:2d:10:6c:95:96:07:1a:48:fc:0f:
         50:a1:00:d6:c8:1a:06:94:f4:6b:3e:cc:c6:7a:22:d4:8d:e1:
         c6:e8:71:bc:a8:a8:61:a1:2d:f4:3c:49:33:ad:22:8a:10:19:
         d7:bd:d8:8f:30:43:03:7c:d7:01:aa:97:2b:cb:9d:ec:ac:06:
         c9:65:b1:5a:74:f1:92:f3:d5:31:77:df:7f:87:d3:db:d9:8b:
         36:77:4c:5b:e8:64:9c:c8:0b:bf:c1:2a:02:82:30:b3:22:05:
         cb:bf:37:ed:12:09:19:d5:10:c8:fc:0b:e5:21:37:9f:4b:6c:
         83:1b:a4:32:fc:88:64:eb:d7:e2:fc:f5:87:e4:2d:a9:59:43:
         dc:76:6b:82:4c:00:5d:f1:af:b1:9d:51:7d:86:75:41:c3:cc:
         35:17:24:49:af:4b:5b:4f:a9:bc:6a:c5:21:79:7a:f4:38:2f:
         07:eb:47:0b:0b:24:21:f8:2a:c2:a9:0b:b5:55:7f:59:d1:5f:
         fa:b7:af:f9:06:8e:b1:e5:1a:c5:c2:c7:6b:68:d1:79:67:ac:
         76:ce:7d:71:74:b3:87:2e:9c:62:cb:7c:20:39:75:91:a4:09:
         12:81:f9:ab
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0fSj4jg9bEM+92oYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGQ3MjI1MmMtZTAyNC00MmM1LTljNTctODlmYzRmMWFm
M2E1MB4XDTI2MDMxMDEzMDA0MVoXDTI2MDYwODEzMDA0MVowLzEtMCsGA1UEAxMk
YTUyZGI5ODctZTM3Ny00NmYwLTljNTAtYjhiZWEyNmU3MWU5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyWvWY06e3xj+cTyEr6eLsbdSaAPRmThS5OFH
Q1s9XKiWqNdRuuuT7ju4zHyr8vk8G+x+yeJYcUgpM5DSawFLuQb7BOfpmGHexOp0
JZ2Sht6etRYk4P3/StW2kECkHI8SmoBHf2ii9/FSwPIODYLTc9ZHJCtcPOUjppDp
62q2NelraXvQOIzXJfTahRaqkIDcqVffdwWO9+0he9gZ4Wsm3BhFM5QFV/Fu8cxW
fHmESlZYCVwa5qLHsBwl4AWtN/CJ4kCsT+7mlwsHmqI7mf6Me6+4sdJJX1t3Fapt
1tgx6OteDOH9JZHrBQBbK6nvFb6y1eTg1Lv//WQlSLiDrPhFTwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFGmoTc9kBcXrkCa3k4XX67IzpkgeMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wZDcy
MjUyYy1lMDI0LTQyYzUtOWM1Ny04OWZjNGYxYWYzYTUvZjYzODU5NjgtMTJhMS0z
MTczLTkzZDQtZThhZmNlMjVjYmQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMGQ3MjI1MmMtZTAyNC00MmM1LTlj
NTctODlmYzRmMWFmM2E1LzBkNzIyNTJjLWUwMjQtNDJjNS05YzU3LTg5ZmM0ZjFh
ZjNhNS5jcmwwHwYDVR0jBBgwFoAUgDkIx1kQPtrj7fdhAQpEfi2CyX4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8wZDcyMjUyYy1lMDI0LTQyYzUtOWM1Ny04OWZj
NGYxYWYzYTUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgQJgOAf
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAERljfD/irVHN44n6zW15Ccn92jk1hElGo+HLRBslZYHGkj8D1Ch
ANbIGgaU9Gs+zMZ6ItSN4cbocbyoqGGhLfQ8STOtIooQGde92I8wQwN81wGqlyvL
neysBsllsVp08ZLz1TF333+H09vZizZ3TFvoZJzIC7/BKgKCMLMiBcu/N+0SCRnV
EMj8C+UhN59LbIMbpDL8iGTr1+L89YfkLalZQ9x2a4JMAF3xr7GdUX2GdUHDzDUX
JEmvS1tPqbxqxSF5evQ4LwfrRwsLJCH4KsKpC7VVf1nRX/q3r/kGjrHlGsXCx2to
0XlnrHbOfXF0s4cunGLLfCA5dZGkCRKB+as=
-----END CERTIFICATE-----
Generated at Thu Mar 26 08:03:03 2026 by rpki-client