Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/9d5d2efc-27d6-3076-8cf6-92b644351617.roa
File:                     9d5d2efc-27d6-3076-8cf6-92b644351617.roa (raw, json)
Hash identifier:          eOpjZuUB5h31HI6wcGeXeY6i4gTQYhrUUN9Ha0tUOXc=
Subject key identifier:   E0:A9:0D:D4:DE:44:09:DE:79:15:83:95:A4:64:43:B4:70:F7:48:9E
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584D3DFFFD26BDD6CA8C1A1E87A0
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/9d5d2efc-27d6-3076-8cf6-92b644351617.roa
Signing time:             Sat 21 Mar 2026 13:00:39 +0000
ROA not before:           Sat 21 Mar 2026 13:00:39 +0000
ROA not after:            Fri 19 Jun 2026 13:00:39 +0000
asID:                     33363
IP address blocks:        2605:a401:807a::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:3d:ff:fd:26:bd:d6:ca:8c:1a:1e:87:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Mar 21 13:00:39 2026 GMT
            Not After : Jun 19 13:00:39 2026 GMT
        Subject: CN=ec8e25f7-e718-4069-8801-4f0aae3929e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:75:5d:60:bd:98:38:1e:84:a9:fe:cd:db:8c:
                    c1:34:e9:68:3d:57:6e:3c:ae:f0:f3:f3:bc:68:b8:
                    e7:c8:e6:85:91:64:4b:a5:5e:79:4b:71:0e:23:bf:
                    e3:49:d4:b3:e9:05:16:06:9b:7a:65:90:8b:16:1a:
                    a8:65:d8:7b:a3:30:f5:f9:ab:59:7e:d8:f5:79:74:
                    9d:05:13:07:30:e1:aa:66:16:ad:54:91:8f:60:d1:
                    84:b8:88:96:07:10:81:fe:71:94:c1:29:db:92:e1:
                    41:a9:a9:09:83:a7:36:81:81:a9:27:43:0a:43:b0:
                    5f:ce:80:54:79:76:39:e8:5d:a3:70:9c:5e:7a:96:
                    77:56:f9:91:be:36:71:ad:90:36:33:9b:ae:1b:66:
                    6d:9b:5e:14:c8:a8:fb:36:6f:c0:b1:66:96:dc:83:
                    7f:de:3c:0c:d5:52:bc:3c:85:70:79:98:55:1a:1f:
                    51:7d:a8:82:05:f5:31:13:c1:c2:a8:6e:30:a8:af:
                    86:8a:55:44:71:72:9e:a5:21:19:d8:f1:73:e6:3c:
                    c4:b6:3b:d5:38:29:0a:4a:48:b6:87:5a:9b:47:70:
                    b2:76:92:f4:93:3b:38:69:c4:6e:e0:dd:eb:b3:4f:
                    68:de:e2:2c:40:db:ba:37:5d:5d:6e:d0:86:59:c9:
                    92:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:A9:0D:D4:DE:44:09:DE:79:15:83:95:A4:64:43:B4:70:F7:48:9E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/9d5d2efc-27d6-3076-8cf6-92b644351617.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a401:807a::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:fc:57:f2:7c:8b:46:ac:0d:18:12:97:cf:6d:cb:c6:b8:b1:
         e9:4a:bc:4a:1f:94:32:72:42:20:29:01:94:06:1c:44:53:f1:
         45:a2:ed:b8:5f:b1:94:46:87:62:94:05:25:15:8b:05:66:1e:
         94:61:29:13:a9:f4:bd:40:d5:f5:a2:9d:2d:7c:a4:64:fc:68:
         cf:a9:73:7f:25:91:ad:ec:a8:ab:76:cb:5c:71:53:64:ca:be:
         89:ef:45:5c:50:15:58:97:c8:d3:b3:1c:07:3a:01:b4:43:38:
         d9:94:0c:da:df:62:90:74:1a:35:82:cc:9a:8c:68:57:c1:d1:
         83:c2:a1:4a:71:30:2f:77:82:90:3a:3a:ad:e5:c0:b1:c4:53:
         51:43:d2:74:7f:d5:6b:f4:2d:5a:d1:c6:ca:c5:21:f1:52:a6:
         66:90:cb:94:d6:23:0b:4a:fa:1c:d0:25:aa:b1:70:1f:8a:1c:
         6c:32:d2:ec:60:9f:6b:8b:35:fa:2e:54:a0:2f:f1:34:42:9f:
         ab:7d:40:99:23:da:43:28:34:68:8e:24:95:73:2f:9c:9f:de:
         e7:99:03:8a:a1:4c:a9:e6:52:b8:5a:99:62:1e:52:8d:f6:41:
         40:16:a9:17:2f:fc:bb:9a:95:96:b5:9b:27:06:4b:e0:94:d5:
         b7:b1:a7:66
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE09//0mvdbKjBoeh6AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDdjNWYyNzItYTJhZS00NThhLWE3NWYtM2NmNDFmMTli
NjAzMB4XDTI2MDMyMTEzMDAzOVoXDTI2MDYxOTEzMDAzOVowLzEtMCsGA1UEAxMk
ZWM4ZTI1ZjctZTcxOC00MDY5LTg4MDEtNGYwYWFlMzkyOWU4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwXVdYL2YOB6Eqf7N24zBNOloPVduPK7w8/O8
aLjnyOaFkWRLpV55S3EOI7/jSdSz6QUWBpt6ZZCLFhqoZdh7ozD1+atZftj1eXSd
BRMHMOGqZhatVJGPYNGEuIiWBxCB/nGUwSnbkuFBqakJg6c2gYGpJ0MKQ7BfzoBU
eXY56F2jcJxeepZ3VvmRvjZxrZA2M5uuG2Ztm14UyKj7Nm/AsWaW3IN/3jwM1VK8
PIVweZhVGh9RfaiCBfUxE8HCqG4wqK+GilVEcXKepSEZ2PFz5jzEtjvVOCkKSki2
h1qbR3CydpL0kzs4acRu4N3rs09o3uIsQNu6N11dbtCGWcmSJQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFOCpDdTeRAneeRWDlaRkQ7Rw90ieMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1
ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0MWYxOWI2MDMvOWQ1ZDJlZmMtMjdkNi0z
MDc2LThjZjYtOTJiNjQ0MzUxNjE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdjNWYyNzItYTJhZS00NThhLWE3
NWYtM2NmNDFmMTliNjAzL2Q3YzVmMjcyLWEyYWUtNDU4YS1hNzVmLTNjZjQxZjE5
YjYwMy5jcmwwHwYDVR0jBBgwFoAU9FxHsj2QKs0/IK7kFt39gA/M8p8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0
MWYxOWI2MDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgWkAYB6
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAGj8V/J8i0asDRgSl89ty8a4selKvEoflDJyQiApAZQGHERT8UWi
7bhfsZRGh2KUBSUViwVmHpRhKROp9L1A1fWinS18pGT8aM+pc38lka3sqKt2y1xx
U2TKvonvRVxQFViXyNOzHAc6AbRDONmUDNrfYpB0GjWCzJqMaFfB0YPCoUpxMC93
gpA6Oq3lwLHEU1FD0nR/1Wv0LVrRxsrFIfFSpmaQy5TWIwtK+hzQJaqxcB+KHGwy
0uxgn2uLNfouVKAv8TRCn6t9QJkj2kMoNGiOJJVzL5yf3ueZA4qhTKnmUrhamWIe
Uo32QUAWqRcv/LualZa1mycGS+CU1bexp2Y=
-----END CERTIFICATE-----
Generated at Thu Mar 26 14:42:28 2026 by rpki-client