Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/220921f9-7729-39d8-9f8d-d19802ad19b2.roa
File:                     220921f9-7729-39d8-9f8d-d19802ad19b2.roa (raw, json)
Hash identifier:          gEjGk052hR2MkVT6myb8UnOZbCWyWOG+zc09nUyU5N8=
Subject key identifier:   FC:95:9A:33:15:E1:22:4D:C3:E4:79:C3:B0:F9:3B:55:D4:3D:9F:95
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584E2AD46AE0B34EAF5D78AFBFA0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/220921f9-7729-39d8-9f8d-d19802ad19b2.roa
Signing time:             Sun 14 Jun 2026 09:00:11 +0000
ROA not before:           Sun 14 Jun 2026 09:00:11 +0000
ROA not after:            Sat 12 Sep 2026 09:00:11 +0000
asID:                     32987
IP address blocks:        2001:470:584::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:2a:d4:6a:e0:b3:4e:af:5d:78:af:bf:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Jun 14 09:00:11 2026 GMT
            Not After : Sep 12 09:00:11 2026 GMT
        Subject: CN=c9e8968f-b1e1-44ad-9349-28a6a913ba8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:3f:47:bc:a7:d7:ae:fa:87:48:5b:40:ec:10:
                    f7:20:1d:39:22:88:2c:0f:18:d1:39:57:fb:bf:d0:
                    ce:d3:67:c0:01:3c:d2:da:cd:51:38:e1:6f:31:50:
                    6a:7f:be:f0:93:ae:ac:d7:5a:d9:a8:2f:4b:5c:0d:
                    f7:cf:6c:53:66:46:b6:3e:b1:65:67:c7:73:ce:d1:
                    07:09:7a:a6:9f:1b:0a:1c:0c:64:3f:57:13:b2:57:
                    70:4b:5a:0c:64:e1:d2:d9:db:22:bd:47:e9:7c:40:
                    ed:54:61:4e:c4:7c:1d:d9:2e:b1:0c:6f:33:ab:68:
                    e9:0b:c8:e6:6b:05:1f:74:f3:0a:dc:81:9f:62:56:
                    0c:da:d7:24:ac:ec:c2:59:04:2f:eb:24:c1:26:4c:
                    28:38:56:ce:80:83:b7:95:d4:11:d9:a1:ca:70:a9:
                    29:56:27:f1:76:ad:e0:4a:a2:b0:db:85:22:14:80:
                    d9:7e:d0:45:3e:e1:ef:bf:f5:91:9e:7f:f8:f9:5f:
                    8e:43:c4:83:e4:bb:c0:06:bf:00:07:1f:15:3b:63:
                    ae:94:f4:dd:95:39:30:28:30:b9:41:41:ca:a6:14:
                    44:64:ff:bf:a4:6a:00:ec:3f:0b:9b:d2:c6:87:24:
                    fc:51:f5:b4:0e:55:bc:ab:d3:78:d5:6c:b5:f2:20:
                    4e:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:95:9A:33:15:E1:22:4D:C3:E4:79:C3:B0:F9:3B:55:D4:3D:9F:95
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/220921f9-7729-39d8-9f8d-d19802ad19b2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:584::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:0d:74:64:a2:68:5b:87:89:9d:d4:8b:4f:75:0a:2f:2e:13:
         ce:bb:8a:b1:c7:53:ee:f8:01:97:b4:d9:29:6c:fe:ba:9f:ff:
         c5:8a:94:50:db:6d:3e:99:58:a3:3b:dc:53:33:bb:4b:56:c2:
         4d:fa:05:cf:ec:6d:93:f9:da:b4:38:10:65:b4:e0:9a:ba:34:
         5f:2c:26:5a:7b:0e:e7:73:0e:98:2f:f7:88:31:9c:9d:0c:f7:
         68:95:67:6d:b9:6d:46:65:63:06:7a:14:57:42:02:c4:28:70:
         6b:86:b2:a4:55:7b:17:30:c3:c7:7f:d3:12:48:37:46:f4:c6:
         39:fc:32:e5:80:5d:b4:18:4b:d0:4f:a5:70:c0:b3:1c:03:07:
         7a:e6:49:e3:d9:55:17:1a:1b:5c:21:7b:1c:e1:5b:e5:6f:a4:
         ad:15:fe:d6:9f:98:01:00:48:71:90:1c:61:07:40:f3:d2:b8:
         e0:52:93:c3:bc:41:97:de:5b:c1:b8:5d:8f:40:50:c7:a4:66:
         91:01:3c:4d:ad:8d:f5:26:21:a1:4a:d0:29:74:18:6d:fb:52:
         5c:fe:d0:26:9c:8d:db:12:d7:74:b5:31:b5:f1:4f:65:b5:9c:
         ec:7c:db:c4:d4:40:f8:57:98:62:bc:e6:23:48:94:de:5e:b5:
         15:a5:8c:50
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE4q1Grgs06vXXivv6AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI2MDYxNDA5MDAxMVoXDTI2MDkxMjA5MDAxMVowLzEtMCsGA1UEAxMk
YzllODk2OGYtYjFlMS00NGFkLTkzNDktMjhhNmE5MTNiYThhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtj9HvKfXrvqHSFtA7BD3IB05IogsDxjROVf7
v9DO02fAATzS2s1ROOFvMVBqf77wk66s11rZqC9LXA33z2xTZka2PrFlZ8dzztEH
CXqmnxsKHAxkP1cTsldwS1oMZOHS2dsivUfpfEDtVGFOxHwd2S6xDG8zq2jpC8jm
awUfdPMK3IGfYlYM2tckrOzCWQQv6yTBJkwoOFbOgIO3ldQR2aHKcKkpVifxdq3g
SqKw24UiFIDZftBFPuHvv/WRnn/4+V+OQ8SD5LvABr8ABx8VO2OulPTdlTkwKDC5
QUHKphREZP+/pGoA7D8Lm9LGhyT8UfW0DlW8q9N41Wy18iBOJwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFPyVmjMV4SJNw+R5w7D5O1XUPZ+VMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMjIwOTIxZjktNzcyOS0z
OWQ4LTlmOGQtZDE5ODAyYWQxOWIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAWE
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAGMNdGSiaFuHiZ3Ui091Ci8uE867irHHU+74AZe02Sls/rqf/8WK
lFDbbT6ZWKM73FMzu0tWwk36Bc/sbZP52rQ4EGW04Jq6NF8sJlp7DudzDpgv94gx
nJ0M92iVZ225bUZlYwZ6FFdCAsQocGuGsqRVexcww8d/0xJIN0b0xjn8MuWAXbQY
S9BPpXDAsxwDB3rmSePZVRcaG1whexzhW+VvpK0V/tafmAEASHGQHGEHQPPSuOBS
k8O8QZfeW8G4XY9AUMekZpEBPE2tjfUmIaFK0Cl0GG37Ulz+0CacjdsS13S1MbXx
T2W1nOx828TUQPhXmGK85iNIlN5etRWljFA=
-----END CERTIFICATE-----
Generated at Fri Jul 24 02:10:24 2026 by rpki-client