Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9377ba0e-dde7-47fc-b879-e155f4e3ce8d/da3e563b-aec6-3b6f-9c82-da2d9cf659b6.roa
File:                     da3e563b-aec6-3b6f-9c82-da2d9cf659b6.roa (raw, json)
Hash identifier:          HFJeNgpEw0moXY02+FuMXNfenwXUOKMalWW/+x1eDwM=
Subject key identifier:   9D:26:85:CA:B7:DF:E6:38:1B:12:24:3B:75:4B:E7:50:D6:69:5B:B3
Certificate issuer:       /CN=9377ba0e-dde7-47fc-b879-e155f4e3ce8d
Certificate serial:       010D0C9F4328584F23C25373FAD92BF9974D1B80
Authority key identifier: D6:FA:12:88:DB:E4:56:52:BC:BB:5F:03:F3:D4:7E:0B:12:16:9E:5C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9377ba0e-dde7-47fc-b879-e155f4e3ce8d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9377ba0e-dde7-47fc-b879-e155f4e3ce8d/da3e563b-aec6-3b6f-9c82-da2d9cf659b6.roa
Signing time:             Fri 11 Sep 2026 13:00:12 +0000
ROA not before:           Fri 11 Sep 2026 13:00:12 +0000
ROA not after:            Thu 10 Dec 2026 14:00:12 +0000
asID:                     395161
IP address blocks:        2606:d940::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9377ba0e-dde7-47fc-b879-e155f4e3ce8d/9377ba0e-dde7-47fc-b879-e155f4e3ce8d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9377ba0e-dde7-47fc-b879-e155f4e3ce8d/9377ba0e-dde7-47fc-b879-e155f4e3ce8d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9377ba0e-dde7-47fc-b879-e155f4e3ce8d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:23:c2:53:73:fa:d9:2b:f9:97:4d:1b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9377ba0e-dde7-47fc-b879-e155f4e3ce8d
        Validity
            Not Before: Sep 11 13:00:12 2026 GMT
            Not After : Dec 10 14:00:12 2026 GMT
        Subject: CN=2e8e2efa-a2dd-45d0-bb26-049897f72d50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:81:75:09:09:f2:d5:a1:7b:eb:66:17:15:46:
                    b0:99:64:15:9e:2c:36:dd:9c:a1:a4:77:e6:97:0c:
                    50:10:3b:a7:e4:42:d1:f0:f4:36:8d:3a:43:14:5e:
                    f9:1e:d6:2f:41:f6:79:a4:d6:25:08:ea:7e:41:41:
                    0b:fb:8e:6a:e2:96:f1:9a:00:81:8f:a6:28:c6:26:
                    38:a6:2a:a7:bb:6f:30:9c:87:12:20:29:7e:94:88:
                    a7:9f:0b:fc:5d:62:b8:46:db:0a:3a:92:40:00:6f:
                    b4:93:48:7c:69:0b:9c:0c:62:ef:d5:22:0d:0e:38:
                    60:dd:b1:87:f6:9a:42:e9:69:19:c7:47:6e:56:b2:
                    49:e9:fc:65:55:89:e7:2f:75:5e:bc:ab:18:9b:8b:
                    91:4d:21:dc:28:a6:0e:dd:bc:d4:db:72:dc:a5:90:
                    ed:33:7a:81:70:37:ed:0a:37:e6:8c:24:00:73:89:
                    f9:84:cd:79:87:5d:67:24:0e:5f:ec:87:d0:4b:bb:
                    cd:59:ef:54:c1:1c:5a:17:37:ad:10:27:b1:e4:64:
                    e8:f9:0d:53:95:e6:f9:9f:71:69:a8:54:b7:35:d1:
                    52:e1:6a:b9:f0:63:02:83:2a:04:80:37:db:09:5d:
                    1e:00:7b:d6:a2:07:ea:18:e9:95:3f:68:bd:3e:f3:
                    89:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:26:85:CA:B7:DF:E6:38:1B:12:24:3B:75:4B:E7:50:D6:69:5B:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9377ba0e-dde7-47fc-b879-e155f4e3ce8d/da3e563b-aec6-3b6f-9c82-da2d9cf659b6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9377ba0e-dde7-47fc-b879-e155f4e3ce8d/9377ba0e-dde7-47fc-b879-e155f4e3ce8d.crl

            X509v3 Authority Key Identifier:
                keyid:D6:FA:12:88:DB:E4:56:52:BC:BB:5F:03:F3:D4:7E:0B:12:16:9E:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9377ba0e-dde7-47fc-b879-e155f4e3ce8d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:d940::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a2:b9:85:ee:c0:9d:0a:5c:4b:ba:ec:9a:d9:5c:e8:f5:15:04:
         6f:13:3f:a4:37:37:67:c0:05:c2:d6:4f:ba:d7:1a:e7:31:4c:
         58:fd:d0:05:3b:81:15:bd:10:bd:28:4e:2f:c8:76:88:94:b1:
         82:9a:78:ea:13:5d:38:56:5d:e7:00:87:32:1e:3a:02:90:f5:
         8b:f4:6e:15:a1:e6:b2:51:8a:5d:0c:99:4a:04:a4:78:98:6d:
         15:4c:f9:3b:39:13:6b:16:64:f3:55:5f:58:80:de:43:a9:b8:
         bb:6e:0a:d3:eb:58:7f:ef:35:80:40:99:32:75:70:99:df:6e:
         5d:14:3e:66:f2:90:bd:4b:9a:a0:ad:58:01:be:96:e5:39:17:
         eb:fc:e1:1d:5b:c9:10:24:1a:79:d0:00:16:e3:9c:b6:43:65:
         1a:6a:7f:f2:c7:9d:1c:52:c0:67:19:d1:fd:59:51:b4:c7:1f:
         2e:a7:c5:68:cf:95:40:80:b8:e5:50:00:8a:b5:7f:6b:05:4c:
         9c:d2:7c:08:94:66:ba:49:f7:2c:32:ae:bd:fc:42:d0:e6:a0:
         f1:d6:bd:62:1b:c7:8c:63:a1:7d:54:9f:37:8b:68:b4:b7:e2:
         02:73:e1:a3:d9:e3:29:c7:48:48:e7:16:fd:02:dc:6f:ef:67:
         5d:2b:97:2e
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE8jwlNz+tkr+ZdNG4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTM3N2JhMGUtZGRlNy00N2ZjLWI4NzktZTE1NWY0ZTNj
ZThkMB4XDTI2MDkxMTEzMDAxMloXDTI2MTIxMDE0MDAxMlowLzEtMCsGA1UEAxMk
MmU4ZTJlZmEtYTJkZC00NWQwLWJiMjYtMDQ5ODk3ZjcyZDUwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwoF1CQny1aF762YXFUawmWQVniw23ZyhpHfm
lwxQEDun5ELR8PQ2jTpDFF75HtYvQfZ5pNYlCOp+QUEL+45q4pbxmgCBj6YoxiY4
piqnu28wnIcSICl+lIinnwv8XWK4RtsKOpJAAG+0k0h8aQucDGLv1SINDjhg3bGH
9ppC6WkZx0duVrJJ6fxlVYnnL3VevKsYm4uRTSHcKKYO3bzU23LcpZDtM3qBcDft
CjfmjCQAc4n5hM15h11nJA5f7IfQS7vNWe9UwRxaFzetECex5GTo+Q1Tleb5n3Fp
qFS3NdFS4Wq58GMCgyoEgDfbCV0eAHvWogfqGOmVP2i9PvOJxQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFJ0mhcq33+Y4GxIkO3VL51DWaVuzMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85Mzc3
YmEwZS1kZGU3LTQ3ZmMtYjg3OS1lMTU1ZjRlM2NlOGQvZGEzZTU2M2ItYWVjNi0z
YjZmLTljODItZGEyZDljZjY1OWI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTM3N2JhMGUtZGRlNy00N2ZjLWI4
NzktZTE1NWY0ZTNjZThkLzkzNzdiYTBlLWRkZTctNDdmYy1iODc5LWUxNTVmNGUz
Y2U4ZC5jcmwwHwYDVR0jBBgwFoAU1voSiNvkVlK8u18D89R+CxIWnlwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85Mzc3YmEwZS1kZGU3LTQ3ZmMtYjg3OS1lMTU1
ZjRlM2NlOGQuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgbZQDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQCiuYXuwJ0KXEu67JrZXOj1FQRvEz+kNzdnwAXC1k+61xrnMUxY/dAF
O4EVvRC9KE4vyHaIlLGCmnjqE104Vl3nAIcyHjoCkPWL9G4VoeayUYpdDJlKBKR4
mG0VTPk7ORNrFmTzVV9YgN5Dqbi7bgrT61h/7zWAQJkydXCZ325dFD5m8pC9S5qg
rVgBvpblORfr/OEdW8kQJBp50AAW45y2Q2Uaan/yx50cUsBnGdH9WVG0xx8up8Vo
z5VAgLjlUACKtX9rBUyc0nwIlGa6SfcsMq69/ELQ5qDx1r1iG8eMY6F9VJ83i2i0
t+ICc+Gj2eMpx0hI5xb9Atxv72ddK5cu
-----END CERTIFICATE-----
Generated at Thu Sep 24 02:00:42 2026 by rpki-client