Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/4b2e88af-7f81-348d-bb58-5ae1a543b386.roa
File:                     4b2e88af-7f81-348d-bb58-5ae1a543b386.roa (raw, json)
Hash identifier:          X4jQWyy9MgzxlqE4hLeBNJFSkq8NgLGlo5LB7aURLjc=
Subject key identifier:   33:52:CA:1A:0F:B3:0F:21:4A:13:55:A5:85:90:FE:54:3C:5C:AC:BD
Certificate issuer:       /CN=65dae2a0-0cb7-46e8-ae17-abeb06007e1a
Certificate serial:       010D0C9F4328584DBA3B01791B5B3618F7F2EB60
Authority key identifier: 1A:49:9D:8B:77:A3:3A:DF:1F:CD:4E:BA:51:CC:1A:A3:FA:A3:F6:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/4b2e88af-7f81-348d-bb58-5ae1a543b386.roa
Signing time:             Tue 05 May 2026 01:00:23 +0000
ROA not before:           Tue 05 May 2026 01:00:23 +0000
ROA not after:            Mon 03 Aug 2026 01:00:23 +0000
asID:                     9009
IP address blocks:        2607:6b80:58::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ba:3b:01:79:1b:5b:36:18:f7:f2:eb:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65dae2a0-0cb7-46e8-ae17-abeb06007e1a
        Validity
            Not Before: May  5 01:00:23 2026 GMT
            Not After : Aug  3 01:00:23 2026 GMT
        Subject: CN=65a67acf-adfa-4060-8be4-2c7062ac93f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:86:cb:0d:29:55:11:b3:6b:0a:03:bc:26:53:
                    38:7d:6d:73:db:40:90:bc:a1:57:fd:0d:98:17:a9:
                    67:77:0b:75:c3:51:73:b6:8b:a8:d9:22:88:3e:12:
                    8e:8c:ca:1b:6e:d6:c0:17:7a:b7:f9:4d:3d:2f:6d:
                    1b:d0:79:85:e6:a4:c3:d0:11:b4:21:2b:c4:8b:09:
                    4e:29:bb:4e:b3:b2:c2:bd:19:f9:80:47:33:e2:c1:
                    88:90:0f:19:42:c5:43:79:66:7c:d8:f4:54:0f:34:
                    09:b9:c8:98:40:00:a6:27:a7:f9:89:73:9f:64:3d:
                    88:94:6c:0e:1c:d2:00:b1:45:f5:22:6a:fc:9d:9e:
                    c1:7b:e4:04:6a:6e:02:e8:f5:16:83:98:d9:c0:61:
                    85:9d:65:91:7f:b1:e2:fd:45:8b:77:8e:ac:1f:fb:
                    8a:12:01:7b:36:61:77:d5:a8:bd:7a:16:70:40:9c:
                    77:61:30:25:e3:aa:db:a5:53:84:aa:0a:cd:27:3a:
                    d8:52:c4:50:55:19:dd:25:6a:b7:14:f3:b4:df:05:
                    2a:de:13:6c:67:8c:08:40:43:c1:8b:18:8b:0f:34:
                    b7:ba:9b:fe:67:d8:9d:09:1b:0f:4c:3a:ef:2e:d2:
                    44:73:51:ac:f4:b6:a7:48:7e:4e:87:e9:ae:1e:a6:
                    2f:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:52:CA:1A:0F:B3:0F:21:4A:13:55:A5:85:90:FE:54:3C:5C:AC:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/4b2e88af-7f81-348d-bb58-5ae1a543b386.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.crl

            X509v3 Authority Key Identifier:
                keyid:1A:49:9D:8B:77:A3:3A:DF:1F:CD:4E:BA:51:CC:1A:A3:FA:A3:F6:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:6b80:58::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:6f:78:05:c6:e2:3f:d0:c3:de:21:8c:41:ae:a3:13:de:6f:
         7a:26:88:4b:cd:ae:23:ff:19:0c:fe:8e:13:e3:2f:f8:a8:42:
         f6:e6:c8:71:b2:44:11:83:e9:ab:d3:e4:c0:0e:9a:c7:ef:01:
         e4:72:ee:37:de:2e:03:b7:2a:4a:43:e0:e6:36:94:65:9c:96:
         32:f4:a2:78:a6:81:ca:14:73:8b:58:47:63:15:fb:fb:1f:d3:
         99:dc:b8:b8:b9:e4:52:1a:b0:58:b2:a4:05:74:48:a6:38:ab:
         be:ec:9a:54:75:47:d7:8a:1c:59:30:8b:20:78:b9:49:f6:c6:
         b5:fb:5b:5e:f6:3d:20:c5:5c:5a:0a:d2:e3:d5:9e:8e:a9:05:
         7e:ec:fa:c7:a4:07:b5:76:57:d8:91:0d:88:5e:59:ef:dd:d6:
         cc:2f:a5:4b:05:92:42:f7:ad:2f:d8:4c:60:67:7c:e0:8c:0b:
         60:6e:8b:e6:a3:df:5f:43:14:6c:1b:00:7b:54:c6:b2:1c:06:
         1a:74:ef:a5:00:e0:e2:af:8a:11:2d:d1:27:26:ee:70:35:2c:
         bc:b4:59:65:bf:e4:2f:0a:6b:a5:e6:e7:17:b4:1d:2d:fe:fc:
         95:8c:ad:bf:04:8d:40:95:93:b7:78:08:e6:3a:e0:16:fb:bc:
         33:66:66:55
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE26OwF5G1s2GPfy62AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjVkYWUyYTAtMGNiNy00NmU4LWFlMTctYWJlYjA2MDA3
ZTFhMB4XDTI2MDUwNTAxMDAyM1oXDTI2MDgwMzAxMDAyM1owLzEtMCsGA1UEAxMk
NjVhNjdhY2YtYWRmYS00MDYwLThiZTQtMmM3MDYyYWM5M2YzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkIbLDSlVEbNrCgO8JlM4fW1z20CQvKFX/Q2Y
F6lndwt1w1Fztouo2SKIPhKOjMobbtbAF3q3+U09L20b0HmF5qTD0BG0ISvEiwlO
KbtOs7LCvRn5gEcz4sGIkA8ZQsVDeWZ82PRUDzQJuciYQACmJ6f5iXOfZD2IlGwO
HNIAsUX1Imr8nZ7Be+QEam4C6PUWg5jZwGGFnWWRf7Hi/UWLd46sH/uKEgF7NmF3
1ai9ehZwQJx3YTAl46rbpVOEqgrNJzrYUsRQVRndJWq3FPO03wUq3hNsZ4wIQEPB
ixiLDzS3upv+Z9idCRsPTDrvLtJEc1Gs9LanSH5Oh+muHqYv0QIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFDNSyhoPsw8hShNVpYWQ/lQ8XKy9MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82NWRh
ZTJhMC0wY2I3LTQ2ZTgtYWUxNy1hYmViMDYwMDdlMWEvNGIyZTg4YWYtN2Y4MS0z
NDhkLWJiNTgtNWFlMWE1NDNiMzg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjVkYWUyYTAtMGNiNy00NmU4LWFl
MTctYWJlYjA2MDA3ZTFhLzY1ZGFlMmEwLTBjYjctNDZlOC1hZTE3LWFiZWIwNjAw
N2UxYS5jcmwwHwYDVR0jBBgwFoAUGkmdi3ejOt8fzU66Ucwao/qj9iUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS82NWRhZTJhMC0wY2I3LTQ2ZTgtYWUxNy1hYmVi
MDYwMDdlMWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgdrgABY
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBADRveAXG4j/Qw94hjEGuoxPeb3omiEvNriP/GQz+jhPjL/ioQvbm
yHGyRBGD6avT5MAOmsfvAeRy7jfeLgO3KkpD4OY2lGWcljL0onimgcoUc4tYR2MV
+/sf05ncuLi55FIasFiypAV0SKY4q77smlR1R9eKHFkwiyB4uUn2xrX7W172PSDF
XFoK0uPVno6pBX7s+sekB7V2V9iRDYheWe/d1swvpUsFkkL3rS/YTGBnfOCMC2Bu
i+aj319DFGwbAHtUxrIcBhp076UA4OKvihEt0Scm7nA1LLy0WWW/5C8Ka6Xm5xe0
HS3+/JWMrb8EjUCVk7d4COY64Bb7vDNmZlU=
-----END CERTIFICATE-----
Generated at Wed May 13 08:47:58 2026 by rpki-client