Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/1f6e6277-8ea3-393e-ba00-44d1e44496de.roa
File:                     1f6e6277-8ea3-393e-ba00-44d1e44496de.roa (raw, json)
Hash identifier:          Yse1oxDPP6r6j0IMKxFP+C3xHWeSLPl8xtcyxRiMHbw=
Subject key identifier:   F9:E6:65:04:56:42:48:12:64:7B:15:14:A5:0D:93:7D:C2:64:5C:B9
Certificate issuer:       /CN=a71ff392-dd33-4ea8-9c1b-8afdd429977f
Certificate serial:       010D0C9F4328584F189796969CF2414E63FE01B0
Authority key identifier: AE:49:C9:50:6D:AE:50:96:F3:EB:6A:26:99:EA:18:3D:74:70:F1:C5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/1f6e6277-8ea3-393e-ba00-44d1e44496de.roa
Signing time:             Mon 07 Sep 2026 13:00:12 +0000
ROA not before:           Mon 07 Sep 2026 13:00:12 +0000
ROA not after:            Sun 06 Dec 2026 14:00:12 +0000
asID:                     10747
IP address blocks:        2607:9a80::/32 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/a71ff392-dd33-4ea8-9c1b-8afdd429977f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/a71ff392-dd33-4ea8-9c1b-8afdd429977f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:18:97:96:96:9c:f2:41:4e:63:fe:01:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a71ff392-dd33-4ea8-9c1b-8afdd429977f
        Validity
            Not Before: Sep  7 13:00:12 2026 GMT
            Not After : Dec  6 14:00:12 2026 GMT
        Subject: CN=7156a9b3-2ba7-4a6b-b051-0cfc4607fab1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:a8:35:31:c3:82:05:92:11:31:cb:d6:cd:e7:
                    cb:cb:3b:ca:3a:af:11:50:75:c1:d7:13:de:47:28:
                    6b:7d:88:55:72:2c:72:fb:94:72:ad:d2:e6:4e:af:
                    83:20:1f:3b:11:bb:eb:fd:44:ba:d4:01:ae:98:a5:
                    a1:f3:cf:95:8b:f7:bb:0a:60:fb:7e:25:24:53:20:
                    d7:cf:24:d2:e1:64:cc:08:79:4b:2a:a4:76:e6:8d:
                    20:b8:45:f7:aa:c2:5d:90:c4:8b:4a:3c:de:14:60:
                    ff:03:24:83:31:33:b3:d5:2d:23:5b:4b:e3:3d:32:
                    2b:34:fa:8e:fa:d2:97:b1:4a:03:dd:73:3b:44:f1:
                    df:fd:ad:1b:4b:8e:4c:1f:b1:3d:dd:a4:dc:84:96:
                    f9:f2:83:a3:cb:6d:b4:ea:8e:bd:ec:85:fe:e1:0c:
                    7f:2e:d9:f1:31:18:ca:bf:e6:a4:81:6b:da:21:7c:
                    6d:a7:db:fe:84:32:e2:16:50:8a:44:dc:24:07:33:
                    8d:ce:d0:05:bb:52:f8:0b:08:63:c4:14:26:ea:a9:
                    dd:6f:42:63:49:81:38:d5:77:a3:4f:d9:19:cd:c3:
                    d6:87:9a:b2:2b:40:7a:69:68:8c:14:87:e0:d3:e2:
                    9a:2e:0b:aa:03:ad:48:83:6f:a4:77:9f:53:bd:c3:
                    43:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:E6:65:04:56:42:48:12:64:7B:15:14:A5:0D:93:7D:C2:64:5C:B9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/1f6e6277-8ea3-393e-ba00-44d1e44496de.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/a71ff392-dd33-4ea8-9c1b-8afdd429977f.crl

            X509v3 Authority Key Identifier:
                keyid:AE:49:C9:50:6D:AE:50:96:F3:EB:6A:26:99:EA:18:3D:74:70:F1:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:9a80::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:63:f5:43:38:cd:b8:c7:67:d7:6d:8c:a7:f3:1e:60:7c:76:
         0f:31:73:84:07:1c:4c:aa:d9:02:b2:54:42:6e:42:96:83:4b:
         1e:aa:cc:38:59:6b:94:b5:91:8d:83:87:fb:70:54:fa:d3:30:
         88:e4:20:9c:fb:2a:57:02:c0:d1:b9:53:82:f5:63:b3:31:c5:
         6d:c2:84:6c:60:9d:79:3f:48:6c:6a:cf:eb:2d:ea:aa:d8:a8:
         ea:63:89:d6:70:ca:18:8b:5a:eb:83:c0:c8:e2:a7:59:ff:3e:
         d3:1d:1d:0e:62:f6:b6:b1:c0:06:15:20:5d:06:c4:6f:0b:1c:
         02:6d:da:45:c9:a4:56:e2:9c:dd:21:c4:27:74:c9:63:e2:b6:
         8d:ff:07:eb:22:3b:54:56:f3:17:6d:d9:2f:b2:a3:9e:24:e8:
         cf:5a:73:dc:33:59:f3:3d:ba:d7:74:e5:83:c7:a0:0d:aa:13:
         13:30:e9:66:c9:fd:bc:1a:03:d8:4c:ac:7a:20:b8:f2:eb:f7:
         d7:6e:ee:77:2d:f2:0d:0a:5a:46:62:ae:a3:20:9a:04:69:bb:
         fe:32:d5:b3:44:a3:03:61:f2:84:be:09:18:c5:cc:1f:5f:8a:
         4d:93:46:2c:82:57:de:04:c6:b8:e4:3f:0d:cf:6f:d0:25:b8:
         54:3e:1c:84
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE8Yl5aWnPJBTmP+AbAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTcxZmYzOTItZGQzMy00ZWE4LTljMWItOGFmZGQ0Mjk5
NzdmMB4XDTI2MDkwNzEzMDAxMloXDTI2MTIwNjE0MDAxMlowLzEtMCsGA1UEAxMk
NzE1NmE5YjMtMmJhNy00YTZiLWIwNTEtMGNmYzQ2MDdmYWIxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoag1McOCBZIRMcvWzefLyzvKOq8RUHXB1xPe
RyhrfYhVcixy+5RyrdLmTq+DIB87Ebvr/US61AGumKWh88+Vi/e7CmD7fiUkUyDX
zyTS4WTMCHlLKqR25o0guEX3qsJdkMSLSjzeFGD/AySDMTOz1S0jW0vjPTIrNPqO
+tKXsUoD3XM7RPHf/a0bS45MH7E93aTchJb58oOjy2206o697IX+4Qx/LtnxMRjK
v+akgWvaIXxtp9v+hDLiFlCKRNwkBzONztAFu1L4CwhjxBQm6qndb0JjSYE41Xej
T9kZzcPWh5qyK0B6aWiMFIfg0+KaLguqA61Ig2+kd59TvcNDzQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFPnmZQRWQkgSZHsVFKUNk33CZFy5MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9hNzFm
ZjM5Mi1kZDMzLTRlYTgtOWMxYi04YWZkZDQyOTk3N2YvMWY2ZTYyNzctOGVhMy0z
OTNlLWJhMDAtNDRkMWU0NDQ5NmRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvYTcxZmYzOTItZGQzMy00ZWE4LTlj
MWItOGFmZGQ0Mjk5NzdmL2E3MWZmMzkyLWRkMzMtNGVhOC05YzFiLThhZmRkNDI5
OTc3Zi5jcmwwHwYDVR0jBBgwFoAUrknJUG2uUJbz62ommeoYPXRw8cUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9hNzFmZjM5Mi1kZDMzLTRlYTgtOWMxYi04YWZk
ZDQyOTk3N2YuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgeagDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQAhY/VDOM24x2fXbYyn8x5gfHYPMXOEBxxMqtkCslRCbkKWg0seqsw4
WWuUtZGNg4f7cFT60zCI5CCc+ypXAsDRuVOC9WOzMcVtwoRsYJ15P0hsas/rLeqq
2KjqY4nWcMoYi1rrg8DI4qdZ/z7THR0OYva2scAGFSBdBsRvCxwCbdpFyaRW4pzd
IcQndMlj4raN/wfrIjtUVvMXbdkvsqOeJOjPWnPcM1nzPbrXdOWDx6ANqhMTMOlm
yf28GgPYTKx6ILjy6/fXbu53LfINClpGYq6jIJoEabv+MtWzRKMDYfKEvgkYxcwf
X4pNk0YsglfeBMa45D8Nz2/QJbhUPhyE
-----END CERTIFICATE-----
Generated at Mon Sep 28 21:17:21 2026 by rpki-client