Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d169cca5-b6c2-41f4-a92f-e74d5713d2c1/d5daf9f5-1db5-37fb-be60-626d8a02b645.roa
File:                     d5daf9f5-1db5-37fb-be60-626d8a02b645.roa (raw, json)
Hash identifier:          IN0Ho4XzKEao+f1pnN0q/7k7Foa1xuQ+Kxeel/tVQeM=
Subject key identifier:   7E:35:35:03:6E:9A:8C:5B:73:C3:F0:C5:B6:0B:91:D9:46:D7:03:9A
Certificate issuer:       /CN=d169cca5-b6c2-41f4-a92f-e74d5713d2c1
Certificate serial:       010D0C9F4328584F49764F229399556BAD8DB800
Authority key identifier: BD:39:CD:79:F4:8B:24:EF:8F:69:8D:DC:3F:98:CD:0C:AB:81:F8:9A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d169cca5-b6c2-41f4-a92f-e74d5713d2c1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d169cca5-b6c2-41f4-a92f-e74d5713d2c1/d5daf9f5-1db5-37fb-be60-626d8a02b645.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     395660
IP address blocks:        2620:133:b000::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d169cca5-b6c2-41f4-a92f-e74d5713d2c1/d169cca5-b6c2-41f4-a92f-e74d5713d2c1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d169cca5-b6c2-41f4-a92f-e74d5713d2c1/d169cca5-b6c2-41f4-a92f-e74d5713d2c1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d169cca5-b6c2-41f4-a92f-e74d5713d2c1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:76:4f:22:93:99:55:6b:ad:8d:b8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d169cca5-b6c2-41f4-a92f-e74d5713d2c1
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=cb962c58-2357-4013-890c-7c7df2bfed69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:19:19:89:2b:cd:1e:6a:8b:00:ae:01:64:68:
                    fc:a8:d8:47:6b:8e:88:b0:38:57:fb:dc:84:e3:07:
                    f7:29:fa:9c:c6:b6:12:45:44:49:59:72:ff:d2:1e:
                    cb:f3:fc:26:72:2c:83:6d:03:c5:47:91:51:18:f2:
                    0f:20:d2:fd:bf:be:17:f3:31:70:6c:e7:50:2d:a1:
                    b9:b0:42:5d:39:66:45:b4:88:5f:4f:f6:17:51:18:
                    e9:97:8b:8f:ac:e4:64:4e:67:b2:0a:6e:8e:88:0d:
                    f0:5f:da:e2:6e:e6:ab:64:7a:07:16:cd:b8:87:50:
                    f5:8f:da:0f:9e:c4:08:f3:a2:f6:4c:14:d6:dd:c8:
                    84:03:01:18:d6:cf:2a:62:24:3f:f8:a3:15:25:c9:
                    45:d6:5b:fc:c7:20:a3:43:64:d9:21:4b:88:99:a5:
                    c8:16:f6:7a:e8:18:4d:ae:14:4d:c5:9f:42:2b:64:
                    5f:e0:8f:ed:19:8f:96:05:24:d7:c4:a6:92:1c:0d:
                    ff:a8:e7:09:c0:89:20:a1:54:17:d9:64:79:a9:6f:
                    15:90:3d:03:30:df:ae:cf:a7:91:bf:58:f1:3f:c4:
                    73:c6:e7:32:a5:dd:28:a4:5d:62:a5:ba:99:ef:6a:
                    7f:db:68:00:d4:08:46:37:2c:e7:c1:76:12:37:2d:
                    75:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:35:35:03:6E:9A:8C:5B:73:C3:F0:C5:B6:0B:91:D9:46:D7:03:9A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d169cca5-b6c2-41f4-a92f-e74d5713d2c1/d5daf9f5-1db5-37fb-be60-626d8a02b645.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d169cca5-b6c2-41f4-a92f-e74d5713d2c1/d169cca5-b6c2-41f4-a92f-e74d5713d2c1.crl

            X509v3 Authority Key Identifier:
                keyid:BD:39:CD:79:F4:8B:24:EF:8F:69:8D:DC:3F:98:CD:0C:AB:81:F8:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d169cca5-b6c2-41f4-a92f-e74d5713d2c1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:133:b000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:ce:16:13:12:7d:e4:85:64:56:74:ed:f8:5f:db:af:90:08:
         98:93:a0:92:98:59:be:27:cf:4c:a6:8e:de:08:97:63:67:e4:
         a6:06:ac:5b:63:8d:3c:65:30:fb:a6:82:a7:f8:bd:94:d1:8c:
         b9:2d:6e:b6:50:14:ca:69:42:c7:7a:3e:dc:f6:9f:d2:c3:ce:
         7c:39:03:8f:8d:77:43:38:2a:18:8c:a1:1c:5c:9f:30:47:37:
         2d:d6:be:d3:a7:b9:08:31:74:19:e0:ea:28:e2:3c:99:1f:62:
         de:1e:71:c2:69:a1:2f:e3:a3:8e:24:0f:7f:cc:54:1a:ba:26:
         4d:86:36:96:c0:65:49:bc:c9:bb:cb:53:ce:e8:5a:60:e1:1e:
         0f:45:17:9d:aa:86:03:b3:71:70:be:92:22:b8:4b:3b:b3:ba:
         c6:58:f6:84:21:ff:c5:cd:0c:46:03:02:48:40:c0:45:b0:c1:
         d7:32:dc:5e:9e:23:36:82:a2:90:9d:ff:d5:fb:1a:fe:0c:d5:
         8b:ca:ca:72:2f:6d:90:78:8f:cc:80:12:37:b7:2f:ae:7f:0b:
         c0:e0:61:ad:77:9d:db:8e:84:4a:5c:7f:16:d7:53:9c:a1:86:
         5b:de:5a:c0:91:d8:f5:7a:cf:1e:ef:9f:bd:71:ae:9f:ba:f9:
         62:8d:d4:3e
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE9Jdk8ik5lVa62NuAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDE2OWNjYTUtYjZjMi00MWY0LWE5MmYtZTc0ZDU3MTNk
MmMxMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
Y2I5NjJjNTgtMjM1Ny00MDEzLTg5MGMtN2M3ZGYyYmZlZDY5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAphkZiSvNHmqLAK4BZGj8qNhHa46IsDhX+9yE
4wf3KfqcxrYSRURJWXL/0h7L8/wmciyDbQPFR5FRGPIPINL9v74X8zFwbOdQLaG5
sEJdOWZFtIhfT/YXURjpl4uPrORkTmeyCm6OiA3wX9ribuarZHoHFs24h1D1j9oP
nsQI86L2TBTW3ciEAwEY1s8qYiQ/+KMVJclF1lv8xyCjQ2TZIUuImaXIFvZ66BhN
rhRNxZ9CK2Rf4I/tGY+WBSTXxKaSHA3/qOcJwIkgoVQX2WR5qW8VkD0DMN+uz6eR
v1jxP8Rzxucypd0opF1ipbqZ72p/22gA1AhGNyznwXYSNy11DQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFH41NQNumoxbc8PwxbYLkdlG1wOaMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9kMTY5
Y2NhNS1iNmMyLTQxZjQtYTkyZi1lNzRkNTcxM2QyYzEvZDVkYWY5ZjUtMWRiNS0z
N2ZiLWJlNjAtNjI2ZDhhMDJiNjQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZDE2OWNjYTUtYjZjMi00MWY0LWE5
MmYtZTc0ZDU3MTNkMmMxL2QxNjljY2E1LWI2YzItNDFmNC1hOTJmLWU3NGQ1NzEz
ZDJjMS5jcmwwHwYDVR0jBBgwFoAUvTnNefSLJO+PaY3cP5jNDKuB+JowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy9kMTY5Y2NhNS1iNmMyLTQxZjQtYTkyZi1lNzRk
NTcxM2QyYzEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJiABM7Aw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAL84WExJ95IVkVnTt+F/br5AImJOgkphZvifPTKaO3giXY2fkpgas
W2ONPGUw+6aCp/i9lNGMuS1utlAUymlCx3o+3Paf0sPOfDkDj413QzgqGIyhHFyf
MEc3Lda+06e5CDF0GeDqKOI8mR9i3h5xwmmhL+OjjiQPf8xUGromTYY2lsBlSbzJ
u8tTzuhaYOEeD0UXnaqGA7NxcL6SIrhLO7O6xlj2hCH/xc0MRgMCSEDARbDB1zLc
Xp4jNoKikJ3/1fsa/gzVi8rKci9tkHiPzIASN7cvrn8LwOBhrXed246ESlx/FtdT
nKGGW95awJHY9XrPHu+fvXGun7r5Yo3UPg==
-----END CERTIFICATE-----
Generated at Sun Sep 27 12:30:54 2026 by rpki-client