Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/7d6cf22f-161f-3bc2-88f7-f1058fe30e90.roa
File:                     7d6cf22f-161f-3bc2-88f7-f1058fe30e90.roa (raw, json)
Hash identifier:          vpAow7dBA52cvdJIm76+AaDs2wNvgakka3D5MnAFJeE=
Subject key identifier:   1D:4E:94:3A:9B:1A:C9:35:21:79:A1:F4:70:B6:77:A5:28:2B:89:2A
Certificate issuer:       /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial:       010D0C9F4328584F4C3D7A11CC4C00A8E88A1900
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/7d6cf22f-161f-3bc2-88f7-f1058fe30e90.roa
Signing time:             Sat 26 Sep 2026 01:00:13 +0000
ROA not before:           Sat 26 Sep 2026 01:00:13 +0000
ROA not after:            Fri 25 Dec 2026 02:00:13 +0000
asID:                     8075
IP address blocks:        2603:1062:4::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 07 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:4c:3d:7a:11:cc:4c:00:a8:e8:8a:19:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
        Validity
            Not Before: Sep 26 01:00:13 2026 GMT
            Not After : Dec 25 02:00:13 2026 GMT
        Subject: CN=c85eb81e-e068-442a-a6a3-0940a7449957
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:6d:c0:72:7f:0c:9e:8a:61:86:50:fd:b9:1d:
                    89:78:92:48:a8:6a:a1:ae:33:11:fc:3e:b1:4e:5c:
                    b9:e8:60:5e:99:cf:ba:95:7c:1e:cf:4d:3a:e9:f4:
                    70:a2:6c:d6:e6:d9:d4:4d:10:08:63:12:fd:aa:b0:
                    29:93:c7:1c:49:f0:e7:93:fd:12:d2:7d:a1:44:ee:
                    3e:c4:2d:08:f9:a4:59:00:c7:e7:ee:22:60:d2:f4:
                    22:4b:ae:de:8d:a7:a2:a0:a7:0a:1a:cb:da:6a:40:
                    d6:d2:93:ea:44:7c:6a:95:9a:8c:48:07:5c:d1:d7:
                    80:f7:4c:17:1b:91:a3:b9:0d:d0:03:25:32:aa:9c:
                    92:94:13:62:7a:e9:00:5d:c4:ff:9f:2b:5e:61:e9:
                    d0:bc:91:23:13:41:77:ec:9c:c3:93:3f:20:b1:be:
                    ba:ed:c0:ec:e4:aa:ee:de:8f:47:a7:43:29:5c:69:
                    31:66:31:46:a8:75:f4:c7:38:f2:18:73:13:82:ed:
                    cf:9e:9a:5e:f0:3b:e2:33:c3:bc:73:ca:6f:ca:1f:
                    b9:a8:25:45:06:4a:56:80:a1:27:0d:42:41:d6:b0:
                    52:3e:1e:20:08:fc:7a:ce:95:e9:97:21:e4:2d:09:
                    f9:73:01:e8:7c:01:ed:04:a7:67:fa:bf:3e:77:d3:
                    4c:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:4E:94:3A:9B:1A:C9:35:21:79:A1:F4:70:B6:77:A5:28:2B:89:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/7d6cf22f-161f-3bc2-88f7-f1058fe30e90.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl

            X509v3 Authority Key Identifier:
                keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:1062:4::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:cd:00:79:d7:4c:b8:a7:db:50:0a:e4:d8:2d:be:8f:ac:8d:
         52:4f:bb:ca:9a:10:59:39:b1:02:23:9f:27:9a:5b:f3:fe:67:
         f0:59:c5:61:73:b1:d3:8e:b6:51:e7:05:f6:1b:44:dc:a8:63:
         27:3d:5a:52:46:66:3d:e2:a5:99:e1:ee:cd:21:12:66:79:63:
         1e:81:d1:09:93:12:ce:2b:da:e4:cf:85:a0:e2:49:d4:44:9e:
         24:aa:74:7a:5c:02:83:cd:24:f0:5b:c0:5b:3b:0e:44:87:09:
         8e:77:c8:b3:26:07:3c:ce:bb:52:44:5b:29:58:cd:b7:00:b9:
         aa:db:ea:c2:2e:ef:09:0e:5c:7d:0c:1c:1f:65:ed:bf:ba:c5:
         e7:f5:57:e6:9b:7f:d3:97:8b:62:88:69:9f:9c:58:42:e1:bc:
         2b:ec:e1:07:77:c7:b1:28:4a:db:e8:e8:b7:82:fc:14:ab:82:
         66:8b:48:2d:45:88:ce:71:f4:1f:00:97:8c:d9:36:8e:71:45:
         49:a0:8d:a6:02:0f:54:68:d0:cf:eb:e1:59:b4:1a:36:e0:28:
         16:db:d2:ae:29:ac:6d:31:3f:07:93:8e:4c:86:63:98:5a:ef:
         4b:0f:bf:9b:1d:c6:45:53:0e:27:86:0d:5b:65:49:27:fd:71:
         53:47:08:9e
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9MPXoRzEwAqOiKGQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1
ZWVhMB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk
Yzg1ZWI4MWUtZTA2OC00NDJhLWE2YTMtMDk0MGE3NDQ5OTU3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmm3Acn8MnophhlD9uR2JeJJIqGqhrjMR/D6x
Tly56GBemc+6lXwez0066fRwomzW5tnUTRAIYxL9qrApk8ccSfDnk/0S0n2hRO4+
xC0I+aRZAMfn7iJg0vQiS67ejaeioKcKGsvaakDW0pPqRHxqlZqMSAdc0deA90wX
G5GjuQ3QAyUyqpySlBNieukAXcT/nyteYenQvJEjE0F37JzDkz8gsb667cDs5Kru
3o9Hp0MpXGkxZjFGqHX0xzjyGHMTgu3Pnppe8DviM8O8c8pvyh+5qCVFBkpWgKEn
DUJB1rBSPh4gCPx6zpXplyHkLQn5cwHofAHtBKdn+r8+d9NMtwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFB1OlDqbGsk1IXmh9HC2d6UoK4kqMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy
ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvN2Q2Y2YyMmYtMTYxZi0z
YmMyLTg4ZjctZjEwNThmZTMwZTkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky
M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl
NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz
ODRkZTVlZWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgMQYgAE
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAIvNAHnXTLin21AK5Ngtvo+sjVJPu8qaEFk5sQIjnyeaW/P+Z/BZ
xWFzsdOOtlHnBfYbRNyoYyc9WlJGZj3ipZnh7s0hEmZ5Yx6B0QmTEs4r2uTPhaDi
SdREniSqdHpcAoPNJPBbwFs7DkSHCY53yLMmBzzOu1JEWylYzbcAuarb6sIu7wkO
XH0MHB9l7b+6xef1V+abf9OXi2KIaZ+cWELhvCvs4Qd3x7EoStvo6LeC/BSrgmaL
SC1FiM5x9B8Al4zZNo5xRUmgjaYCD1Ro0M/r4Vm0GjbgKBbb0q4prG0xPweTjkyG
Y5ha70sPv5sdxkVTDieGDVtlSSf9cVNHCJ4=
-----END CERTIFICATE-----
Generated at Tue Oct 6 11:19:48 2026 by rpki-client