Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/49cc28f1-8920-3e70-8e62-82ee6613410c.roa
File:                     49cc28f1-8920-3e70-8e62-82ee6613410c.roa (raw, json)
Hash identifier:          9hTGK8wW9IzP1qeHhRWdeU4uxqea/pJSX1ZbLnahPxM=
Subject key identifier:   F6:6B:DF:C5:26:54:12:AE:7B:99:41:76:4E:A7:93:41:F0:42:58:0C
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584D3DFFFD05245E29A7E4444740
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/49cc28f1-8920-3e70-8e62-82ee6613410c.roa
Signing time:             Sat 21 Mar 2026 13:00:39 +0000
ROA not before:           Sat 21 Mar 2026 13:00:39 +0000
ROA not after:            Fri 19 Jun 2026 13:00:39 +0000
asID:                     33363
IP address blocks:        2605:a401:8069::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:3d:ff:fd:05:24:5e:29:a7:e4:44:47:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Mar 21 13:00:39 2026 GMT
            Not After : Jun 19 13:00:39 2026 GMT
        Subject: CN=1ee258cf-dd8d-49e4-bc41-81ee06ed0511
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:de:95:e6:02:49:2d:1c:7c:cb:aa:4a:58:ec:
                    01:4a:0a:74:e6:58:35:8b:58:06:96:35:1f:e1:c7:
                    3a:e2:cc:99:8f:45:38:dc:c4:72:83:bf:d8:af:a5:
                    c4:0d:96:5c:a9:8f:8f:b0:d1:33:a3:e1:da:43:f7:
                    08:ae:bc:9f:88:ca:a5:53:db:83:65:00:01:69:23:
                    d6:40:bd:3d:8e:d1:c5:e1:0d:a6:f0:dc:45:77:9d:
                    1f:6d:31:12:98:38:68:10:ba:aa:e9:3e:42:3a:4b:
                    d9:88:7d:67:da:93:a2:e3:35:de:ae:74:e4:22:05:
                    56:ee:3f:6b:85:bc:56:1c:ea:dd:70:d1:7a:7b:02:
                    ab:02:c3:25:86:61:ea:fb:d9:29:8e:06:64:04:6a:
                    8c:a5:5d:e9:4e:71:b6:89:e2:16:f9:42:a5:b3:f8:
                    19:2d:dc:74:fe:ab:d6:d1:ab:43:ba:d5:ac:41:43:
                    b6:d9:c3:f7:6f:b8:9e:17:70:5f:af:9c:15:43:9c:
                    44:71:41:57:3b:91:7b:b6:55:85:f7:a2:52:52:4a:
                    ca:af:ce:3a:9c:7f:a1:4b:45:99:57:2d:bd:72:cc:
                    e0:5a:f9:cf:4c:37:bc:0d:2b:df:1d:5c:30:fd:b2:
                    ad:bd:a4:04:51:56:e0:d8:c9:17:3c:bf:51:45:a5:
                    42:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:6B:DF:C5:26:54:12:AE:7B:99:41:76:4E:A7:93:41:F0:42:58:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/49cc28f1-8920-3e70-8e62-82ee6613410c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a401:8069::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:33:50:a3:87:6d:4c:6d:d6:ed:1e:da:e6:9e:81:97:61:d2:
         f5:93:9f:b6:b7:61:c7:5f:a0:54:6b:fc:dd:91:4f:c3:bd:a0:
         9e:3c:99:76:84:30:e3:90:bb:b6:c1:dd:12:87:d9:01:9b:a9:
         04:85:30:91:87:61:a3:42:4d:9f:b0:54:98:bc:61:34:24:4d:
         7f:77:4a:77:f3:ee:f5:65:33:cb:6e:84:d4:73:cf:db:4c:a3:
         32:9a:b9:11:d7:ca:f3:59:71:7a:3a:a0:b1:1d:cf:01:28:15:
         64:fa:18:f9:16:f2:db:3c:81:f8:a3:e1:b7:50:e9:91:94:00:
         0b:db:5c:68:c1:1d:2e:36:ae:53:2d:69:49:52:de:f1:e7:7e:
         65:51:83:b4:1b:aa:b9:8b:9d:3d:e0:df:22:f8:bc:a6:6c:24:
         30:6a:c0:ee:18:10:c5:55:1c:a1:99:01:28:c7:2d:9b:4c:67:
         82:53:43:46:c0:46:30:5a:7f:d9:25:25:02:58:b2:ad:ee:4a:
         fd:e3:35:b8:ff:0f:da:35:77:94:af:77:df:de:33:2d:0b:c4:
         ac:bb:76:c6:0a:4d:1b:a4:a4:c8:e2:cc:e1:ad:8f:89:61:80:
         45:f1:04:c7:39:08:c9:6b:b7:d1:8d:57:d8:3a:62:0b:5e:7c:
         3c:a2:16:3e
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE09//0FJF4pp+RER0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDdjNWYyNzItYTJhZS00NThhLWE3NWYtM2NmNDFmMTli
NjAzMB4XDTI2MDMyMTEzMDAzOVoXDTI2MDYxOTEzMDAzOVowLzEtMCsGA1UEAxMk
MWVlMjU4Y2YtZGQ4ZC00OWU0LWJjNDEtODFlZTA2ZWQwNTExMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxN6V5gJJLRx8y6pKWOwBSgp05lg1i1gGljUf
4cc64syZj0U43MRyg7/Yr6XEDZZcqY+PsNEzo+HaQ/cIrryfiMqlU9uDZQABaSPW
QL09jtHF4Q2m8NxFd50fbTESmDhoELqq6T5COkvZiH1n2pOi4zXernTkIgVW7j9r
hbxWHOrdcNF6ewKrAsMlhmHq+9kpjgZkBGqMpV3pTnG2ieIW+UKls/gZLdx0/qvW
0atDutWsQUO22cP3b7ieF3Bfr5wVQ5xEcUFXO5F7tlWF96JSUkrKr846nH+hS0WZ
Vy29cszgWvnPTDe8DSvfHVww/bKtvaQEUVbg2MkXPL9RRaVCbQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFPZr38UmVBKue5lBdk6nk0HwQlgMMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1
ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0MWYxOWI2MDMvNDljYzI4ZjEtODkyMC0z
ZTcwLThlNjItODJlZTY2MTM0MTBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdjNWYyNzItYTJhZS00NThhLWE3
NWYtM2NmNDFmMTliNjAzL2Q3YzVmMjcyLWEyYWUtNDU4YS1hNzVmLTNjZjQxZjE5
YjYwMy5jcmwwHwYDVR0jBBgwFoAU9FxHsj2QKs0/IK7kFt39gA/M8p8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0
MWYxOWI2MDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgWkAYBp
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAHYzUKOHbUxt1u0e2uaegZdh0vWTn7a3YcdfoFRr/N2RT8O9oJ48
mXaEMOOQu7bB3RKH2QGbqQSFMJGHYaNCTZ+wVJi8YTQkTX93Snfz7vVlM8tuhNRz
z9tMozKauRHXyvNZcXo6oLEdzwEoFWT6GPkW8ts8gfij4bdQ6ZGUAAvbXGjBHS42
rlMtaUlS3vHnfmVRg7QbqrmLnT3g3yL4vKZsJDBqwO4YEMVVHKGZASjHLZtMZ4JT
Q0bARjBaf9klJQJYsq3uSv3jNbj/D9o1d5Svd9/eMy0LxKy7dsYKTRukpMjizOGt
j4lhgEXxBMc5CMlrt9GNV9g6YgtefDyiFj4=
-----END CERTIFICATE-----
Generated at Thu Mar 26 18:20:51 2026 by rpki-client