Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a86eb3e-d142-4cb9-ad4d-d7f60bac2d26/a8bce116-f9c1-3ab1-a05b-f6475a01916a.roa
File:                     a8bce116-f9c1-3ab1-a05b-f6475a01916a.roa (raw, json)
Hash identifier:          hn+43QuneibykISNZm7ULVh4BrrFHYxVN+lr7byzmrQ=
Subject key identifier:   75:C0:9C:4B:B8:68:DF:BC:76:8F:03:52:AD:1E:CA:D7:0F:FC:2C:54
Certificate issuer:       /CN=9a86eb3e-d142-4cb9-ad4d-d7f60bac2d26
Certificate serial:       010D0C9F4328584DC56597B93651D17D941903E0
Authority key identifier: 74:72:3E:BF:C2:5D:67:28:C0:C1:10:60:A7:68:80:8F:9E:BA:5C:50
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a86eb3e-d142-4cb9-ad4d-d7f60bac2d26.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a86eb3e-d142-4cb9-ad4d-d7f60bac2d26/a8bce116-f9c1-3ab1-a05b-f6475a01916a.roa
Signing time:             Sat 09 May 2026 01:00:25 +0000
ROA not before:           Sat 09 May 2026 01:00:25 +0000
ROA not after:            Fri 07 Aug 2026 01:00:25 +0000
asID:                     54098
IP address blocks:        2607:2740::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a86eb3e-d142-4cb9-ad4d-d7f60bac2d26/9a86eb3e-d142-4cb9-ad4d-d7f60bac2d26.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a86eb3e-d142-4cb9-ad4d-d7f60bac2d26/9a86eb3e-d142-4cb9-ad4d-d7f60bac2d26.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a86eb3e-d142-4cb9-ad4d-d7f60bac2d26.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:c5:65:97:b9:36:51:d1:7d:94:19:03:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a86eb3e-d142-4cb9-ad4d-d7f60bac2d26
        Validity
            Not Before: May  9 01:00:25 2026 GMT
            Not After : Aug  7 01:00:25 2026 GMT
        Subject: CN=19d783ff-dfac-40b5-9994-9ce1edd77994
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:a1:d5:5c:41:4e:00:2f:14:89:2e:92:ed:28:
                    6e:0f:fd:5c:ed:dc:e9:1f:ab:95:7c:14:cf:2a:b2:
                    27:00:d6:b6:35:33:68:77:79:6c:9f:4a:9b:7a:3b:
                    d2:fa:0b:c4:22:f3:2b:42:bc:81:fa:46:3d:e8:07:
                    88:90:b5:e9:d2:51:7e:29:b2:28:e8:2a:f0:e0:cd:
                    60:7d:4f:f2:cd:95:3f:3a:ea:1a:50:a7:5f:a6:e1:
                    82:3b:99:bb:d2:db:ae:82:34:e8:41:bc:ce:60:68:
                    db:70:31:5d:fd:28:a2:75:21:d5:0a:1c:58:34:8d:
                    cf:bd:32:5e:05:12:80:05:d4:62:98:0a:92:44:0b:
                    48:2c:2e:71:3a:1a:db:c9:a8:da:c5:87:04:e1:c4:
                    3b:08:7e:62:f1:b7:33:f6:74:ee:08:f8:bc:97:4a:
                    00:26:b8:fe:a1:67:a9:a0:c9:86:d1:8f:dc:ec:7c:
                    60:7b:aa:88:22:8d:99:5b:90:cb:7a:73:35:16:1c:
                    b3:eb:57:dd:79:2e:7d:64:71:e0:0d:be:89:6f:39:
                    64:fe:49:c3:fb:d5:3c:3f:33:b2:68:91:4d:28:36:
                    ff:59:d7:92:1a:8e:d5:38:25:c6:87:84:8c:a3:54:
                    d8:17:5c:f6:91:c3:01:01:27:2a:93:b8:77:49:d9:
                    59:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:C0:9C:4B:B8:68:DF:BC:76:8F:03:52:AD:1E:CA:D7:0F:FC:2C:54
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a86eb3e-d142-4cb9-ad4d-d7f60bac2d26/a8bce116-f9c1-3ab1-a05b-f6475a01916a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a86eb3e-d142-4cb9-ad4d-d7f60bac2d26/9a86eb3e-d142-4cb9-ad4d-d7f60bac2d26.crl

            X509v3 Authority Key Identifier:
                keyid:74:72:3E:BF:C2:5D:67:28:C0:C1:10:60:A7:68:80:8F:9E:BA:5C:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a86eb3e-d142-4cb9-ad4d-d7f60bac2d26.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:2740::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:a8:f6:cc:20:7d:bc:66:27:fd:be:87:48:00:a6:e6:f9:e0:
         30:ae:80:dc:f7:f6:8c:32:1f:e8:02:5b:fe:a8:1b:d0:df:ec:
         f9:78:c2:68:f2:fd:1b:ae:92:b6:43:a6:f5:42:ae:6e:29:03:
         7b:5b:8e:c1:ea:d6:f5:14:e5:ad:ef:99:f6:f9:5d:22:f1:0d:
         a9:f4:c8:9d:fd:d4:0e:5d:7a:f4:44:23:dd:fd:12:fa:86:48:
         89:dd:02:bc:52:54:85:f2:1a:d5:da:ab:1c:1e:a6:cb:98:2b:
         d3:27:eb:96:22:32:d3:89:07:bb:11:64:58:38:0e:19:81:39:
         06:7e:5a:84:95:e2:e8:62:3f:6b:eb:76:18:65:92:b9:4b:af:
         23:ac:55:f5:db:94:b4:14:82:b6:4b:42:3d:19:94:6f:5f:40:
         14:32:72:fd:10:64:e5:e8:ce:ff:68:c1:9f:3f:a7:2c:a4:80:
         e1:46:c7:9f:51:56:11:16:54:95:cf:09:db:33:ba:e3:89:93:
         4b:db:0c:e3:86:48:5e:f8:1e:fe:2c:20:e3:b6:21:68:db:9d:
         29:bb:55:20:cc:c9:3d:91:5d:93:e3:1c:84:19:0c:72:ea:51:
         7a:0d:18:97:eb:bb:4a:c4:17:78:b4:94:0c:b3:9b:85:1f:ed:
         ea:d3:8f:8f
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE3FZZe5NlHRfZQZA+AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOWE4NmViM2UtZDE0Mi00Y2I5LWFkNGQtZDdmNjBiYWMy
ZDI2MB4XDTI2MDUwOTAxMDAyNVoXDTI2MDgwNzAxMDAyNVowLzEtMCsGA1UEAxMk
MTlkNzgzZmYtZGZhYy00MGI1LTk5OTQtOWNlMWVkZDc3OTk0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkqHVXEFOAC8UiS6S7ShuD/1c7dzpH6uVfBTP
KrInANa2NTNod3lsn0qbejvS+gvEIvMrQryB+kY96AeIkLXp0lF+KbIo6Crw4M1g
fU/yzZU/OuoaUKdfpuGCO5m70tuugjToQbzOYGjbcDFd/SiidSHVChxYNI3PvTJe
BRKABdRimAqSRAtILC5xOhrbyajaxYcE4cQ7CH5i8bcz9nTuCPi8l0oAJrj+oWep
oMmG0Y/c7Hxge6qIIo2ZW5DLenM1Fhyz61fdeS59ZHHgDb6Jbzlk/knD+9U8PzOy
aJFNKDb/WdeSGo7VOCXGh4SMo1TYF1z2kcMBAScqk7h3SdlZRQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFHXAnEu4aN+8do8DUq0eytcP/CxUMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS85YTg2
ZWIzZS1kMTQyLTRjYjktYWQ0ZC1kN2Y2MGJhYzJkMjYvYThiY2UxMTYtZjljMS0z
YWIxLWEwNWItZjY0NzVhMDE5MTZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOWE4NmViM2UtZDE0Mi00Y2I5LWFk
NGQtZDdmNjBiYWMyZDI2LzlhODZlYjNlLWQxNDItNGNiOS1hZDRkLWQ3ZjYwYmFj
MmQyNi5jcmwwHwYDVR0jBBgwFoAUdHI+v8JdZyjAwRBgp2iAj566XFAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS85YTg2ZWIzZS1kMTQyLTRjYjktYWQ0ZC1kN2Y2
MGJhYzJkMjYuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgcnQDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQAZqPbMIH28Zif9vodIAKbm+eAwroDc9/aMMh/oAlv+qBvQ3+z5eMJo
8v0brpK2Q6b1Qq5uKQN7W47B6tb1FOWt75n2+V0i8Q2p9Mid/dQOXXr0RCPd/RL6
hkiJ3QK8UlSF8hrV2qscHqbLmCvTJ+uWIjLTiQe7EWRYOA4ZgTkGflqEleLoYj9r
63YYZZK5S68jrFX125S0FIK2S0I9GZRvX0AUMnL9EGTl6M7/aMGfP6cspIDhRsef
UVYRFlSVzwnbM7rjiZNL2wzjhkhe+B7+LCDjtiFo250pu1UgzMk9kV2T4xyEGQxy
6lF6DRiX67tKxBd4tJQMs5uFH+3q04+P
-----END CERTIFICATE-----
Generated at Wed May 13 14:38:26 2026 by rpki-client