Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/d0b86a17-c671-3d97-8ffd-99c4d7c742bb.roa
File:                     d0b86a17-c671-3d97-8ffd-99c4d7c742bb.roa (raw, json)
Hash identifier:          WfGus2yh/7f95UJ33UrRA87A/kmsqumDDKpO5PovAGM=
Subject key identifier:   D0:13:3C:C2:00:EF:D0:E1:CE:2F:4C:26:7A:1B:E3:C7:1F:9E:CC:64
Certificate issuer:       /CN=5b71e83d-2828-4f34-ba3e-648d01ef173a
Certificate serial:       010D0C9F4328584E099A32BAFCCBD2921B33BAE0
Authority key identifier: 0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/d0b86a17-c671-3d97-8ffd-99c4d7c742bb.roa
Signing time:             Tue 02 Jun 2026 11:21:29 +0000
ROA not before:           Tue 02 Jun 2026 11:21:29 +0000
ROA not after:            Mon 31 Aug 2026 11:21:29 +0000
asID:                     402266
IP address blocks:        2606:f184:7041::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:09:9a:32:ba:fc:cb:d2:92:1b:33:ba:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b71e83d-2828-4f34-ba3e-648d01ef173a
        Validity
            Not Before: Jun  2 11:21:29 2026 GMT
            Not After : Aug 31 11:21:29 2026 GMT
        Subject: CN=eebc7aa7-a86b-491e-8f87-a39e2ce6d30c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:1a:a1:7e:e2:bc:86:2f:7b:74:fc:50:14:04:
                    bf:d5:84:66:ff:b5:b7:8e:8a:bf:8b:77:4c:72:98:
                    35:c3:06:fd:53:56:09:13:0e:17:39:75:fc:23:e2:
                    55:ce:24:00:7b:cf:67:0c:75:ff:9e:9b:32:66:4d:
                    32:eb:ad:b3:fa:19:0b:89:9d:9d:92:06:10:47:d1:
                    6f:a3:2d:80:26:04:cb:30:ea:97:0c:44:1d:fd:78:
                    dc:0d:b9:a2:9a:90:f1:4c:74:6a:6a:92:72:01:f3:
                    e4:54:ab:ed:f3:b2:ca:30:c9:e9:55:5e:6d:81:a7:
                    b4:eb:c2:36:4c:49:80:ff:b5:f4:c3:05:95:56:34:
                    48:61:5a:12:62:2a:7d:63:7b:75:ea:31:ed:87:8d:
                    ca:6b:e4:ee:5b:4c:6f:a1:98:69:37:a5:b2:15:fa:
                    0a:3e:ea:a9:c1:8a:85:04:a4:0e:53:e3:93:17:0c:
                    fb:48:61:3f:da:22:cb:33:dc:66:8b:c4:98:98:81:
                    fd:6c:b4:0d:47:fe:7a:0e:57:78:02:f4:a9:fc:73:
                    ef:9f:0a:51:d6:4a:73:3e:3c:21:a3:e4:77:6c:79:
                    a2:5e:3f:24:f4:27:af:ce:7a:c6:72:a7:ed:9d:aa:
                    0b:4e:40:de:3b:dd:a4:66:f4:dd:e6:3a:44:2b:57:
                    ac:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:13:3C:C2:00:EF:D0:E1:CE:2F:4C:26:7A:1B:E3:C7:1F:9E:CC:64
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/d0b86a17-c671-3d97-8ffd-99c4d7c742bb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl

            X509v3 Authority Key Identifier:
                keyid:0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:f184:7041::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:08:b2:54:a9:ca:a4:f3:aa:30:06:c1:44:d2:81:c2:53:f9:
         c7:d9:67:33:7d:f0:9c:93:ce:56:ae:63:1d:c9:24:15:20:42:
         5a:4a:ef:79:b2:8d:b9:6c:13:59:bf:b7:ee:f9:8d:61:af:dc:
         96:71:85:13:8a:98:02:68:43:8c:c0:b4:92:7f:44:96:9c:05:
         13:4b:85:41:b5:7a:04:c0:98:31:df:15:9c:f7:10:a1:b0:5b:
         c7:b7:fd:55:99:b9:56:96:5e:f4:b6:de:c4:a5:28:11:28:31:
         74:9a:1f:e5:9a:e9:f8:f3:c7:31:87:71:3d:0a:84:da:8a:c0:
         09:39:6b:1a:cd:df:6b:a3:4c:b0:9b:a5:ff:01:84:b6:7e:65:
         21:d2:1e:ce:97:ba:ee:a8:e2:8d:56:55:8e:5e:87:6f:52:fa:
         b6:3d:88:3d:5d:11:6f:65:94:b1:68:73:81:01:7e:2e:c4:8e:
         6b:55:d1:56:9b:82:76:a6:4e:ae:0b:50:b0:36:b4:0b:2c:6d:
         62:2c:02:ee:c2:63:c8:ea:22:47:07:4f:68:01:eb:82:24:d3:
         b1:d0:86:60:74:84:2c:7a:8b:38:8c:eb:6b:c6:68:28:07:74:
         ac:48:9c:eb:22:49:dc:29:35:79:1a:5f:55:da:7c:fd:77:23:
         ab:3f:9d:3e
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE4JmjK6/MvSkhszuuAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWI3MWU4M2QtMjgyOC00ZjM0LWJhM2UtNjQ4ZDAxZWYx
NzNhMB4XDTI2MDYwMjExMjEyOVoXDTI2MDgzMTExMjEyOVowLzEtMCsGA1UEAxMk
ZWViYzdhYTctYTg2Yi00OTFlLThmODctYTM5ZTJjZTZkMzBjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5xqhfuK8hi97dPxQFAS/1YRm/7W3joq/i3dM
cpg1wwb9U1YJEw4XOXX8I+JVziQAe89nDHX/npsyZk0y662z+hkLiZ2dkgYQR9Fv
oy2AJgTLMOqXDEQd/XjcDbmimpDxTHRqapJyAfPkVKvt87LKMMnpVV5tgae068I2
TEmA/7X0wwWVVjRIYVoSYip9Y3t16jHth43Ka+TuW0xvoZhpN6WyFfoKPuqpwYqF
BKQOU+OTFwz7SGE/2iLLM9xmi8SYmIH9bLQNR/56Dld4AvSp/HPvnwpR1kpzPjwh
o+R3bHmiXj8k9CevznrGcqftnaoLTkDeO92kZvTd5jpEK1esgQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFNATPMIA79Dhzi9MJnob48cfnsxkMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi81Yjcx
ZTgzZC0yODI4LTRmMzQtYmEzZS02NDhkMDFlZjE3M2EvZDBiODZhMTctYzY3MS0z
ZDk3LThmZmQtOTljNGQ3Yzc0MmJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNWI3MWU4M2QtMjgyOC00ZjM0LWJh
M2UtNjQ4ZDAxZWYxNzNhLzViNzFlODNkLTI4MjgtNGYzNC1iYTNlLTY0OGQwMWVm
MTczYS5jcmwwHwYDVR0jBBgwFoAUCrKywYEk2VOJsQx6TCDGKHhTv54wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi81YjcxZTgzZC0yODI4LTRmMzQtYmEzZS02NDhk
MDFlZjE3M2EuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgbxhHBB
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAEQIslSpyqTzqjAGwUTSgcJT+cfZZzN98JyTzlauYx3JJBUgQlpK
73myjblsE1m/t+75jWGv3JZxhROKmAJoQ4zAtJJ/RJacBRNLhUG1egTAmDHfFZz3
EKGwW8e3/VWZuVaWXvS23sSlKBEoMXSaH+Wa6fjzxzGHcT0KhNqKwAk5axrN32uj
TLCbpf8BhLZ+ZSHSHs6Xuu6o4o1WVY5eh29S+rY9iD1dEW9llLFoc4EBfi7EjmtV
0VabgnamTq4LULA2tAssbWIsAu7CY8jqIkcHT2gB64Ik07HQhmB0hCx6iziM62vG
aCgHdKxInOsiSdwpNXkaX1XafP13I6s/nT4=
-----END CERTIFICATE-----
Generated at Sat Jun 13 22:27:55 2026 by rpki-client