Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/9482ce06-338e-3ced-92c2-54a0db92c001.roa
File:                     9482ce06-338e-3ced-92c2-54a0db92c001.roa (raw, json)
Hash identifier:          XproeD8a5HT75XlzwYPLJpjJuX+1NCS75yBhIqBqvQo=
Subject key identifier:   92:29:2B:D1:9E:8C:66:FA:D9:06:DF:AB:D4:66:0E:E6:E4:4F:F4:96
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584E51E9E9BC18946D800AA3D880
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/9482ce06-338e-3ced-92c2-54a0db92c001.roa
Signing time:             Sun 28 Jun 2026 09:00:11 +0000
ROA not before:           Sun 28 Jun 2026 09:00:11 +0000
ROA not after:            Sat 26 Sep 2026 09:00:11 +0000
asID:                     3925
IP address blocks:        2001:470:38f::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:51:e9:e9:bc:18:94:6d:80:0a:a3:d8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Jun 28 09:00:11 2026 GMT
            Not After : Sep 26 09:00:11 2026 GMT
        Subject: CN=e409bbe1-1ab0-4a6b-8dfa-2db20061e04f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:65:91:4e:a5:01:a2:ac:19:35:b7:e4:14:ba:
                    43:94:92:69:47:2d:70:14:55:45:9b:50:e1:e3:4e:
                    e5:3d:82:96:13:30:71:7f:51:2e:d8:3c:a0:e7:95:
                    fe:31:f7:b4:e2:fa:b7:ad:10:da:c5:4f:e5:b2:52:
                    76:83:8a:d9:db:bb:9b:9a:97:0a:1a:64:72:bf:53:
                    2d:ec:b0:74:f5:65:24:ee:8f:e8:c7:97:73:96:4a:
                    f6:12:c0:83:f2:a7:82:34:79:a7:7d:30:a7:9a:0f:
                    bc:3f:ca:fa:54:fb:9c:92:6c:81:df:56:7d:e8:07:
                    c6:5b:67:a8:df:1f:8a:fb:1d:ae:29:56:5a:fb:1b:
                    3b:cb:bd:d1:6c:3c:d6:66:56:72:45:0a:b2:ec:15:
                    cf:df:61:10:10:7d:1f:db:0e:d2:57:e8:ac:38:94:
                    3f:dd:c4:89:cc:46:78:85:a6:73:83:8f:f0:79:52:
                    89:ea:6b:c6:33:92:82:e1:7a:2f:91:10:a9:ee:04:
                    fb:b1:d8:fe:f7:ec:1d:de:1c:b5:c2:05:c6:95:ae:
                    80:83:6c:dd:f7:7b:91:02:27:ea:08:55:f7:7d:c2:
                    eb:6c:6b:14:25:9b:ee:a8:69:2a:d5:c5:76:26:c4:
                    a1:d1:8c:af:08:1f:15:5e:f9:04:f8:ca:0d:ef:ef:
                    2c:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:29:2B:D1:9E:8C:66:FA:D9:06:DF:AB:D4:66:0E:E6:E4:4F:F4:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/9482ce06-338e-3ced-92c2-54a0db92c001.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:38f::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bc:b8:9f:72:3a:16:e6:c9:a0:d5:d0:87:af:ab:91:88:47:20:
         a7:19:bb:cd:5a:9f:b6:fd:f6:35:65:a4:bb:da:a7:a7:e1:83:
         8f:bc:8e:65:dc:5f:4a:70:7e:24:5e:23:89:89:01:dd:f9:13:
         ba:17:a7:dd:6b:26:9d:70:10:70:da:49:dd:75:7a:c6:44:52:
         45:42:0f:bd:55:77:b4:2e:09:16:e8:1d:e3:f3:1d:54:1a:6a:
         8e:9c:ea:ed:7b:49:56:47:49:c8:50:09:fa:da:a7:6b:b5:db:
         85:9f:ef:8f:02:9b:57:65:6e:0f:5f:21:6a:5e:d1:f0:0c:87:
         79:f2:de:7e:6f:43:39:97:b9:72:79:b6:f7:c1:40:7f:a5:e6:
         6d:7a:cd:79:32:71:46:31:54:5b:44:e5:8a:ab:f9:8f:69:c9:
         cb:ad:a9:61:4e:d0:b1:04:3e:23:40:16:16:79:33:7f:3c:c8:
         b8:48:6c:ac:bd:02:02:6b:e3:56:e5:de:c0:35:88:3d:ec:15:
         fb:48:e4:ea:28:65:38:46:92:d4:50:98:28:77:10:6f:60:8d:
         7e:38:41:b1:f0:3c:0f:69:99:6c:29:ed:5b:7e:5e:0e:65:09:
         79:2d:85:ec:ef:7f:b0:45:fd:cc:1f:bf:23:62:91:ee:7f:62:
         99:af:4d:0e
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE5R6em8GJRtgAqj2IAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI2MDYyODA5MDAxMVoXDTI2MDkyNjA5MDAxMVowLzEtMCsGA1UEAxMk
ZTQwOWJiZTEtMWFiMC00YTZiLThkZmEtMmRiMjAwNjFlMDRmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgWWRTqUBoqwZNbfkFLpDlJJpRy1wFFVFm1Dh
407lPYKWEzBxf1Eu2Dyg55X+Mfe04vq3rRDaxU/lslJ2g4rZ27ubmpcKGmRyv1Mt
7LB09WUk7o/ox5dzlkr2EsCD8qeCNHmnfTCnmg+8P8r6VPuckmyB31Z96AfGW2eo
3x+K+x2uKVZa+xs7y73RbDzWZlZyRQqy7BXP32EQEH0f2w7SV+isOJQ/3cSJzEZ4
haZzg4/weVKJ6mvGM5KC4XovkRCp7gT7sdj+9+wd3hy1wgXGla6Ag2zd93uRAifq
CFX3fcLrbGsUJZvuqGkq1cV2JsSh0YyvCB8VXvkE+MoN7+8sTwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFJIpK9GejGb62Qbfq9RmDubkT/SWMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvOTQ4MmNlMDYtMzM4ZS0z
Y2VkLTkyYzItNTRhMGRiOTJjMDAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAOP
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBALy4n3I6FubJoNXQh6+rkYhHIKcZu81an7b99jVlpLvap6fhg4+8
jmXcX0pwfiReI4mJAd35E7oXp91rJp1wEHDaSd11esZEUkVCD71Vd7QuCRboHePz
HVQaao6c6u17SVZHSchQCfrap2u124Wf748Cm1dlbg9fIWpe0fAMh3ny3n5vQzmX
uXJ5tvfBQH+l5m16zXkycUYxVFtE5Yqr+Y9pycutqWFO0LEEPiNAFhZ5M388yLhI
bKy9AgJr41bl3sA1iD3sFftI5OooZThGktRQmCh3EG9gjX44QbHwPA9pmWwp7Vt+
Xg5lCXkthezvf7BF/cwfvyNike5/YpmvTQ4=
-----END CERTIFICATE-----
Generated at Fri Jul 24 00:44:14 2026 by rpki-client