Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/970b7e04-01f1-3927-90a0-79d7a904fce7.roa
File:                     970b7e04-01f1-3927-90a0-79d7a904fce7.roa (raw, json)
Hash identifier:          ya/hnnQRLrZG1VPfy2WOmFyJpNZ0YVZPAceAxX7+/PM=
Subject key identifier:   B6:A5:32:D9:DE:BA:C2:B2:29:60:D4:C6:48:77:47:6E:70:7D:54:CF
Certificate issuer:       /CN=28aeee72-bc9c-4a01-a9f5-38a80ac84d52
Certificate serial:       010D0C9F4328584D2A74E5E6C8EA3D57B1377880
Authority key identifier: 06:58:3B:EA:57:D6:D4:77:3A:5F:F1:0D:74:EF:6D:9A:EC:76:41:F5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/970b7e04-01f1-3927-90a0-79d7a904fce7.roa
Signing time:             Sat 14 Mar 2026 13:00:40 +0000
ROA not before:           Sat 14 Mar 2026 13:00:40 +0000
ROA not after:            Fri 12 Jun 2026 13:00:40 +0000
asID:                     10390
IP address blocks:        2620:10f:400e::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:2a:74:e5:e6:c8:ea:3d:57:b1:37:78:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28aeee72-bc9c-4a01-a9f5-38a80ac84d52
        Validity
            Not Before: Mar 14 13:00:40 2026 GMT
            Not After : Jun 12 13:00:40 2026 GMT
        Subject: CN=3b3b5410-a90c-472a-881a-19e01a4c7c2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:7e:ef:6c:5f:aa:ff:e0:f6:f6:46:5b:9d:09:
                    8b:fd:93:49:67:d7:bb:cf:bc:6c:99:6a:ad:f3:61:
                    27:fd:12:df:b1:7b:a7:8f:cc:46:a6:6a:4f:12:0f:
                    0a:89:81:db:14:0c:31:0d:31:9c:c3:b6:a2:c6:a3:
                    16:5b:12:a8:e9:8a:e4:ff:f1:4e:5f:7b:83:ec:03:
                    c7:13:e8:6c:93:86:27:9d:c4:29:bf:38:fb:df:a1:
                    49:33:c4:89:d0:8b:d7:13:2e:b0:8a:49:5e:f0:d1:
                    6f:29:07:2d:a6:99:e5:b2:b9:94:76:6d:f6:1e:7c:
                    3a:66:fe:34:ab:39:88:24:3c:7c:da:50:85:d0:35:
                    89:2a:cd:79:f2:2c:b1:02:61:fc:86:96:f3:47:6f:
                    3f:d9:2c:70:2b:74:5e:68:f3:d2:2a:bf:70:38:32:
                    ef:c2:21:63:68:54:1e:4f:21:2b:c6:44:4e:27:23:
                    fb:8e:1b:ae:c6:df:d0:61:1e:20:a8:eb:44:bf:ef:
                    7e:3e:e1:41:0d:64:1b:6d:ec:4f:43:79:6e:c6:6b:
                    5a:35:7b:c8:41:58:e3:9d:4f:ab:fe:52:ff:44:5b:
                    54:ae:88:30:73:c8:61:4c:70:ff:71:3d:3e:61:bc:
                    46:3f:5c:c1:d0:07:49:d9:7d:81:24:86:64:c9:0d:
                    8b:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:A5:32:D9:DE:BA:C2:B2:29:60:D4:C6:48:77:47:6E:70:7D:54:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/970b7e04-01f1-3927-90a0-79d7a904fce7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.crl

            X509v3 Authority Key Identifier:
                keyid:06:58:3B:EA:57:D6:D4:77:3A:5F:F1:0D:74:EF:6D:9A:EC:76:41:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:10f:400e::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:16:fc:86:4d:cb:67:e2:d7:6f:41:b1:3f:5b:17:8f:22:26:
         a8:92:85:0f:25:fa:09:f8:07:d8:dd:56:08:92:1b:5a:b0:90:
         53:ba:a4:4a:49:34:49:ae:a4:9e:74:4e:47:ff:be:60:9e:a3:
         cb:91:1b:06:83:96:9c:4f:c7:be:47:c7:9e:79:23:d0:1b:e9:
         9d:f4:5b:c1:bf:11:c2:4b:45:ac:b1:f4:b0:f2:ef:57:cd:a2:
         d1:a2:1b:e7:11:55:6d:45:2b:b9:3c:a9:51:46:db:b8:ce:9a:
         bc:06:10:94:c2:69:65:ac:33:70:71:c5:be:e0:02:d5:b2:72:
         0f:c0:72:bf:62:15:47:74:15:87:ae:fa:c8:3d:d3:a3:67:4a:
         db:43:81:eb:2a:9b:8c:0e:e2:c3:19:e9:22:2e:6b:9a:15:5d:
         fb:98:a8:98:c3:91:6a:00:b4:a4:2c:7d:e1:02:ef:6f:87:a7:
         59:38:59:c6:dd:07:b0:c3:3a:09:69:23:79:02:4b:3d:ac:48:
         2e:65:58:de:b9:0f:ef:2f:21:42:f3:94:d8:45:d7:e3:da:97:
         96:9c:af:c3:23:79:3c:24:d1:22:20:7b:c9:94:db:17:7d:bf:
         17:5b:38:fe:86:f5:d1:f8:6c:c3:a8:40:d3:70:b3:88:d5:9a:
         13:6d:c3:3c
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0qdOXmyOo9V7E3eIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjhhZWVlNzItYmM5Yy00YTAxLWE5ZjUtMzhhODBhYzg0
ZDUyMB4XDTI2MDMxNDEzMDA0MFoXDTI2MDYxMjEzMDA0MFowLzEtMCsGA1UEAxMk
M2IzYjU0MTAtYTkwYy00NzJhLTg4MWEtMTllMDFhNGM3YzJhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnH7vbF+q/+D29kZbnQmL/ZNJZ9e7z7xsmWqt
82En/RLfsXunj8xGpmpPEg8KiYHbFAwxDTGcw7aixqMWWxKo6Yrk//FOX3uD7APH
E+hsk4YnncQpvzj736FJM8SJ0IvXEy6wikle8NFvKQctppnlsrmUdm32Hnw6Zv40
qzmIJDx82lCF0DWJKs158iyxAmH8hpbzR28/2SxwK3ReaPPSKr9wODLvwiFjaFQe
TyErxkROJyP7jhuuxt/QYR4gqOtEv+9+PuFBDWQbbexPQ3luxmtaNXvIQVjjnU+r
/lL/RFtUrogwc8hhTHD/cT0+YbxGP1zB0AdJ2X2BJIZkyQ2L2wIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFLalMtneusKyKWDUxkh3R25wfVTPMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yOGFl
ZWU3Mi1iYzljLTRhMDEtYTlmNS0zOGE4MGFjODRkNTIvOTcwYjdlMDQtMDFmMS0z
OTI3LTkwYTAtNzlkN2E5MDRmY2U3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjhhZWVlNzItYmM5Yy00YTAxLWE5
ZjUtMzhhODBhYzg0ZDUyLzI4YWVlZTcyLWJjOWMtNGEwMS1hOWY1LTM4YTgwYWM4
NGQ1Mi5jcmwwHwYDVR0jBBgwFoAUBlg76lfW1Hc6X/ENdO9tmux2QfUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8yOGFlZWU3Mi1iYzljLTRhMDEtYTlmNS0zOGE4
MGFjODRkNTIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiABD0AO
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAJUW/IZNy2fi129BsT9bF48iJqiShQ8l+gn4B9jdVgiSG1qwkFO6
pEpJNEmupJ50Tkf/vmCeo8uRGwaDlpxPx75Hx555I9Ab6Z30W8G/EcJLRayx9LDy
71fNotGiG+cRVW1FK7k8qVFG27jOmrwGEJTCaWWsM3Bxxb7gAtWycg/Acr9iFUd0
FYeu+sg906NnSttDgesqm4wO4sMZ6SIua5oVXfuYqJjDkWoAtKQsfeEC72+Hp1k4
WcbdB7DDOglpI3kCSz2sSC5lWN65D+8vIULzlNhF1+Pal5acr8MjeTwk0SIge8mU
2xd9vxdbOP6G9dH4bMOoQNNws4jVmhNtwzw=
-----END CERTIFICATE-----
Generated at Thu Mar 26 03:57:29 2026 by rpki-client