Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e08deb7-db4d-4298-bfe7-8df00db48dc3/b29d47c1-1362-3bba-aee8-054302b4d174.roa
File:                     b29d47c1-1362-3bba-aee8-054302b4d174.roa (raw, json)
Hash identifier:          X3MgdkhaFC+L4ICwM5Z1Tofb9ARhH61tx50QZ2z2ag4=
Subject key identifier:   54:24:6F:E4:61:FA:06:12:F8:E7:97:81:67:E2:9D:8B:5A:8C:07:61
Certificate issuer:       /CN=0e08deb7-db4d-4298-bfe7-8df00db48dc3
Certificate serial:       010D0C9F4328584E7FFA2AC07DCB250C1A243D40
Authority key identifier: 75:29:E0:2C:22:9F:1A:8D:00:71:EC:92:B2:35:02:2E:62:59:30:4A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e08deb7-db4d-4298-bfe7-8df00db48dc3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e08deb7-db4d-4298-bfe7-8df00db48dc3/b29d47c1-1362-3bba-aee8-054302b4d174.roa
Signing time:             Tue 14 Jul 2026 21:00:12 +0000
ROA not before:           Tue 14 Jul 2026 21:00:12 +0000
ROA not after:            Mon 12 Oct 2026 21:00:12 +0000
asID:                     395250
IP address blocks:        2620:197:d4::/46 maxlen: 48
                          2620:197:d8::/45 maxlen: 48
                          2620:197:e0::/45 maxlen: 48
                          2620:197:e8::/46 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e08deb7-db4d-4298-bfe7-8df00db48dc3/0e08deb7-db4d-4298-bfe7-8df00db48dc3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e08deb7-db4d-4298-bfe7-8df00db48dc3/0e08deb7-db4d-4298-bfe7-8df00db48dc3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e08deb7-db4d-4298-bfe7-8df00db48dc3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:7f:fa:2a:c0:7d:cb:25:0c:1a:24:3d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e08deb7-db4d-4298-bfe7-8df00db48dc3
        Validity
            Not Before: Jul 14 21:00:12 2026 GMT
            Not After : Oct 12 21:00:12 2026 GMT
        Subject: CN=8482d99f-43cf-4890-875a-91a9f01802c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:ae:aa:e8:da:1a:0a:cb:41:82:8f:54:91:6b:
                    07:38:98:f3:ea:d4:0d:51:46:33:ed:6c:e6:ed:4c:
                    99:8a:30:80:9f:78:ff:64:1d:8b:31:4b:c6:1d:80:
                    29:b4:42:4e:56:c0:d1:ae:e7:b2:57:66:8f:55:5f:
                    18:5f:79:b4:a0:75:fd:b5:c5:67:17:8b:bb:ea:1e:
                    41:a7:cf:79:28:61:e0:4a:28:53:35:86:d3:56:f7:
                    17:89:40:db:1b:55:26:38:f4:19:8e:67:78:22:cb:
                    58:67:52:c1:e4:ab:f2:27:66:d4:de:c2:ab:fc:d0:
                    0d:d8:0b:b8:6d:b3:87:9e:c2:5d:19:28:29:1c:0e:
                    79:19:fb:ea:7b:11:26:e4:42:8e:44:68:b7:30:ee:
                    ec:83:5f:10:f9:82:eb:5b:6e:45:f7:e8:65:f4:79:
                    5c:2a:fa:3b:27:69:57:5c:79:97:3a:52:d0:50:bc:
                    bf:96:a7:1d:11:c3:68:e5:1b:62:80:33:94:ad:06:
                    8b:76:d9:d3:94:6f:9b:1d:02:21:e6:68:0d:26:b9:
                    12:40:a9:3a:2c:10:88:9b:b7:03:51:a8:44:11:00:
                    7a:c3:08:aa:1c:70:5a:b1:cd:4b:f6:f3:c9:4c:c7:
                    2b:ad:27:a1:98:f6:e5:40:c4:22:34:d9:cf:44:f9:
                    4c:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:24:6F:E4:61:FA:06:12:F8:E7:97:81:67:E2:9D:8B:5A:8C:07:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e08deb7-db4d-4298-bfe7-8df00db48dc3/b29d47c1-1362-3bba-aee8-054302b4d174.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e08deb7-db4d-4298-bfe7-8df00db48dc3/0e08deb7-db4d-4298-bfe7-8df00db48dc3.crl

            X509v3 Authority Key Identifier:
                keyid:75:29:E0:2C:22:9F:1A:8D:00:71:EC:92:B2:35:02:2E:62:59:30:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e08deb7-db4d-4298-bfe7-8df00db48dc3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:197:d4::-2620:197:eb:ffff:ffff:ffff:ffff:ffff

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:d4:20:6e:ac:a2:8f:ea:a0:d8:0c:44:c6:ce:c7:93:d0:f1:
         91:6e:90:76:c0:26:e6:80:cd:23:55:f2:5f:68:c4:14:ed:bf:
         f2:15:42:46:1a:82:79:e3:05:0b:d7:cb:05:3c:92:71:58:5c:
         0e:0c:dc:1f:7a:f8:47:f1:0d:7d:fc:b8:8f:36:0b:31:9a:32:
         ab:a2:c5:a6:21:02:24:68:f4:b1:7a:38:67:59:75:09:e7:1b:
         df:07:d7:7b:54:2f:d9:b3:2c:33:53:6d:3a:06:ba:9b:3a:c0:
         20:9a:78:1d:72:d9:ed:7a:3b:d9:a6:39:4a:e0:cd:c1:1b:bf:
         89:68:8f:cf:4d:39:ae:b7:08:4f:ca:d4:33:7e:bd:46:0a:69:
         15:00:79:f1:cb:b9:57:49:83:58:cf:7d:56:64:e3:22:36:59:
         c5:8f:28:8a:f8:4a:d0:b8:8c:be:90:02:5c:f7:f2:e7:cc:1a:
         72:14:09:b7:a3:c0:3a:0e:9d:42:ac:0f:87:8d:4e:4d:1f:73:
         d4:5b:97:75:b2:2d:62:3e:01:8b:fa:75:90:4d:e7:5d:ff:9e:
         c5:0b:c8:91:53:0c:44:1f:04:93:41:02:ac:a6:0b:14:e0:91:
         7a:82:3d:45:d6:e1:c2:e8:8e:5a:a1:c4:3c:51:37:b9:98:a7:
         b3:ff:d0:ff
-----BEGIN CERTIFICATE-----
MIIGUTCCBTmgAwIBAgIUAQ0Mn0MoWE5/+irAfcslDBokPUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGUwOGRlYjctZGI0ZC00Mjk4LWJmZTctOGRmMDBkYjQ4
ZGMzMB4XDTI2MDcxNDIxMDAxMloXDTI2MTAxMjIxMDAxMlowLzEtMCsGA1UEAxMk
ODQ4MmQ5OWYtNDNjZi00ODkwLTg3NWEtOTFhOWYwMTgwMmMyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo66q6NoaCstBgo9UkWsHOJjz6tQNUUYz7Wzm
7UyZijCAn3j/ZB2LMUvGHYAptEJOVsDRrueyV2aPVV8YX3m0oHX9tcVnF4u76h5B
p895KGHgSihTNYbTVvcXiUDbG1UmOPQZjmd4IstYZ1LB5KvyJ2bU3sKr/NAN2Au4
bbOHnsJdGSgpHA55GfvqexEm5EKORGi3MO7sg18Q+YLrW25F9+hl9HlcKvo7J2lX
XHmXOlLQULy/lqcdEcNo5RtigDOUrQaLdtnTlG+bHQIh5mgNJrkSQKk6LBCIm7cD
UahEEQB6wwiqHHBasc1L9vPJTMcrrSehmPblQMQiNNnPRPlMNQIDAQABo4IDYzCC
A18wHQYDVR0OBBYEFFQkb+Rh+gYS+OeXgWfinYtajAdhMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8wZTA4
ZGViNy1kYjRkLTQyOTgtYmZlNy04ZGYwMGRiNDhkYzMvYjI5ZDQ3YzEtMTM2Mi0z
YmJhLWFlZTgtMDU0MzAyYjRkMTc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMGUwOGRlYjctZGI0ZC00Mjk4LWJm
ZTctOGRmMDBkYjQ4ZGMzLzBlMDhkZWI3LWRiNGQtNDI5OC1iZmU3LThkZjAwZGI0
OGRjMy5jcmwwHwYDVR0jBBgwFoAUdSngLCKfGo0AceySsjUCLmJZMEowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy8wZTA4ZGViNy1kYjRkLTQyOTgtYmZlNy04ZGYw
MGRiNDhkYzMuY2VyMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAAjAUMBIDBwImIAGX
ANQDBwImIAGXAOgwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUF
BwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRt
bDANBgkqhkiG9w0BAQsFAAOCAQEAVNQgbqyij+qg2AxExs7Hk9DxkW6QdsAm5oDN
I1XyX2jEFO2/8hVCRhqCeeMFC9fLBTyScVhcDgzcH3r4R/ENffy4jzYLMZoyq6LF
piECJGj0sXo4Z1l1Cecb3wfXe1Qv2bMsM1NtOga6mzrAIJp4HXLZ7Xo72aY5SuDN
wRu/iWiPz005rrcIT8rUM369RgppFQB58cu5V0mDWM99VmTjIjZZxY8oivhK0LiM
vpACXPfy58wachQJt6PAOg6dQqwPh41OTR9z1FuXdbItYj4Bi/p1kE3nXf+exQvI
kVMMRB8Ek0ECrKYLFOCReoI9RdbhwuiOWqHEPFE3uZins//Q/w==
-----END CERTIFICATE-----
Generated at Fri Jul 24 02:10:55 2026 by rpki-client