Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/1cc96c0b-226d-324d-9d1a-d28b7ef1f240.roa
File:                     1cc96c0b-226d-324d-9d1a-d28b7ef1f240.roa (raw, json)
Hash identifier:          GlLhIAD8W2V0mRzapN508FDsBeCe/195pDHJb3u1eE0=
Subject key identifier:   60:16:6D:73:76:B7:29:A0:16:2C:13:7D:43:22:94:B1:DC:0F:E6:C9
Certificate issuer:       /CN=9906748d-5823-4cd3-9a11-f3dc69a3e751
Certificate serial:       010D0C9F4328584F2957AC70E14CF9959BBF33C0
Authority key identifier: A7:31:13:DA:A8:C2:6D:D3:40:47:B6:C3:2B:BA:78:43:31:2F:01:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/1cc96c0b-226d-324d-9d1a-d28b7ef1f240.roa
Signing time:             Sun 13 Sep 2026 13:00:11 +0000
ROA not before:           Sun 13 Sep 2026 13:00:11 +0000
ROA not after:            Sat 12 Dec 2026 14:00:11 +0000
asID:                     16509
IP address blocks:        2620:147:c42::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 16 Oct 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:29:57:ac:70:e1:4c:f9:95:9b:bf:33:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9906748d-5823-4cd3-9a11-f3dc69a3e751
        Validity
            Not Before: Sep 13 13:00:11 2026 GMT
            Not After : Dec 12 14:00:11 2026 GMT
        Subject: CN=0e4f7a9c-53db-4e30-b7cb-a03c24344796
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:8d:6c:35:3b:34:49:b0:c3:77:b8:c6:a1:2b:
                    7e:be:a5:a9:3f:38:3e:8e:cc:e7:97:32:86:8a:93:
                    da:fb:a4:81:8b:8f:79:20:84:1b:33:04:bf:e4:6c:
                    45:b4:11:c6:df:7f:fa:ff:98:47:fa:fc:fb:69:44:
                    ad:ea:b5:53:f1:85:0c:d2:db:20:ec:35:85:e5:5a:
                    52:10:03:df:e6:51:9d:3f:56:80:1b:9e:76:ed:f8:
                    a9:0d:4d:04:19:26:a9:d1:af:fb:7c:f9:cf:d9:7c:
                    b6:1a:f3:4c:f2:59:33:eb:6f:c7:35:be:11:6d:68:
                    92:e4:e0:8f:95:4b:81:3e:d0:54:69:68:81:5d:54:
                    f4:08:d6:7b:71:ea:30:78:96:51:a6:fe:f3:17:c9:
                    25:ff:c9:de:a5:0c:c0:dd:1c:97:0e:fb:82:ab:32:
                    be:84:a9:4e:82:e3:90:5d:56:9c:b5:eb:8f:43:93:
                    02:4d:9e:aa:30:c3:8b:e4:df:45:38:fa:53:4d:81:
                    2b:4d:1a:42:c1:6d:c0:96:90:2d:41:0b:79:16:ba:
                    0e:c6:63:b8:3c:a3:00:d4:27:dd:c1:41:1c:16:7d:
                    32:d8:42:1b:2d:20:4a:a8:fb:5a:5c:bf:83:1c:c8:
                    cc:d7:bc:7e:ed:c5:c4:54:20:94:9b:89:cd:11:7c:
                    69:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:16:6D:73:76:B7:29:A0:16:2C:13:7D:43:22:94:B1:DC:0F:E6:C9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/1cc96c0b-226d-324d-9d1a-d28b7ef1f240.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.crl

            X509v3 Authority Key Identifier:
                keyid:A7:31:13:DA:A8:C2:6D:D3:40:47:B6:C3:2B:BA:78:43:31:2F:01:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:147:c42::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:66:bf:f6:6c:79:98:25:9f:29:d9:4a:b2:a1:dc:eb:b4:ab:
         92:0a:92:e2:67:48:72:c0:50:85:f6:c7:b3:e7:82:b9:0e:45:
         00:30:b8:91:cd:c6:aa:63:32:f8:3b:f0:1f:f1:b8:56:0f:d3:
         69:e9:cd:5f:a8:33:73:72:a2:02:68:a1:09:15:5f:6f:64:b1:
         93:0d:ed:bd:ca:38:ef:d2:44:17:1f:c8:d6:75:5f:74:ae:f0:
         e2:b7:5c:38:06:91:bf:81:24:45:36:71:8b:57:63:78:79:51:
         84:0b:68:e7:c3:8d:2e:27:69:10:83:a0:0a:03:3f:87:12:b7:
         3e:b8:0f:14:7d:80:0d:08:c8:93:d8:eb:6d:c0:9c:03:e2:d2:
         5f:65:ba:75:5d:3b:34:3e:10:a0:a4:7e:50:73:ac:42:9b:3b:
         55:30:bd:ee:ee:12:ee:85:2d:aa:cc:75:51:c2:0b:e1:bf:49:
         ca:ec:49:f3:67:da:62:05:8a:16:fa:f5:eb:5c:cc:f3:57:6a:
         4c:01:8b:a0:ae:16:c7:1a:64:7f:f6:f4:cf:72:1c:5e:ac:70:
         28:6b:56:34:2f:10:83:37:9d:e6:82:c6:18:eb:2e:71:7c:d1:
         a7:d3:22:09:5b:ea:41:aa:40:fc:9a:b1:5a:28:d0:d3:7d:8d:
         ff:9c:28:51
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE8pV6xw4Uz5lZu/M8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTkwNjc0OGQtNTgyMy00Y2QzLTlhMTEtZjNkYzY5YTNl
NzUxMB4XDTI2MDkxMzEzMDAxMVoXDTI2MTIxMjE0MDAxMVowLzEtMCsGA1UEAxMk
MGU0ZjdhOWMtNTNkYi00ZTMwLWI3Y2ItYTAzYzI0MzQ0Nzk2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArI1sNTs0SbDDd7jGoSt+vqWpPzg+jsznlzKG
ipPa+6SBi495IIQbMwS/5GxFtBHG33/6/5hH+vz7aUSt6rVT8YUM0tsg7DWF5VpS
EAPf5lGdP1aAG5527fipDU0EGSap0a/7fPnP2Xy2GvNM8lkz62/HNb4RbWiS5OCP
lUuBPtBUaWiBXVT0CNZ7ceoweJZRpv7zF8kl/8nepQzA3RyXDvuCqzK+hKlOguOQ
XVacteuPQ5MCTZ6qMMOL5N9FOPpTTYErTRpCwW3AlpAtQQt5FroOxmO4PKMA1Cfd
wUEcFn0y2EIbLSBKqPtaXL+DHMjM17x+7cXEVCCUm4nNEXxpAwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFGAWbXN2tymgFiwTfUMilLHcD+bJMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85OTA2
NzQ4ZC01ODIzLTRjZDMtOWExMS1mM2RjNjlhM2U3NTEvMWNjOTZjMGItMjI2ZC0z
MjRkLTlkMWEtZDI4YjdlZjFmMjQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTkwNjc0OGQtNTgyMy00Y2QzLTlh
MTEtZjNkYzY5YTNlNzUxLzk5MDY3NDhkLTU4MjMtNGNkMy05YTExLWYzZGM2OWEz
ZTc1MS5jcmwwHwYDVR0jBBgwFoAUpzET2qjCbdNAR7bDK7p4QzEvAYAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85OTA2NzQ4ZC01ODIzLTRjZDMtOWExMS1mM2Rj
NjlhM2U3NTEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiABRwxC
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAFpmv/ZseZglnynZSrKh3Ou0q5IKkuJnSHLAUIX2x7PngrkORQAw
uJHNxqpjMvg78B/xuFYP02npzV+oM3NyogJooQkVX29ksZMN7b3KOO/SRBcfyNZ1
X3Su8OK3XDgGkb+BJEU2cYtXY3h5UYQLaOfDjS4naRCDoAoDP4cStz64DxR9gA0I
yJPY623AnAPi0l9lunVdOzQ+EKCkflBzrEKbO1Uwve7uEu6FLarMdVHCC+G/Scrs
SfNn2mIFihb69etczPNXakwBi6CuFscaZH/29M9yHF6scChrVjQvEIM3neaCxhjr
LnF80afTIglb6kGqQPyasVoo0NN9jf+cKFE=
-----END CERTIFICATE-----
Generated at Wed Oct 14 10:33:22 2026 by rpki-client