Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fd865c6a-54c8-4f58-ac80-9f9bdd368ee3/db278e47-2b3d-337e-8647-5202119e0fae.roa
File:                     db278e47-2b3d-337e-8647-5202119e0fae.roa (raw, json)
Hash identifier:          IVGrlMhSqFPqCnLmXK8iPN9/HJmP2k4FmT3WxhgN6gc=
Subject key identifier:   EA:65:AA:F8:9A:A5:D4:36:7A:5E:A7:FA:E7:D7:1A:37:89:63:CB:0B
Certificate issuer:       /CN=fd865c6a-54c8-4f58-ac80-9f9bdd368ee3
Certificate serial:       010D0C9F4328584D59EA64E9537B8E4E35DECD00
Authority key identifier: 9C:5E:DB:84:DA:D7:B5:46:10:65:08:BB:F3:24:5A:F8:71:1F:CE:8E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fd865c6a-54c8-4f58-ac80-9f9bdd368ee3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fd865c6a-54c8-4f58-ac80-9f9bdd368ee3/db278e47-2b3d-337e-8647-5202119e0fae.roa
Signing time:             Tue 31 Mar 2026 13:00:30 +0000
ROA not before:           Tue 31 Mar 2026 13:00:30 +0000
ROA not after:            Mon 29 Jun 2026 13:00:30 +0000
asID:                     396982
IP address blocks:        2620:117:bfd0::/44 maxlen: 44
                          2620:117:bfe0::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fd865c6a-54c8-4f58-ac80-9f9bdd368ee3/fd865c6a-54c8-4f58-ac80-9f9bdd368ee3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fd865c6a-54c8-4f58-ac80-9f9bdd368ee3/fd865c6a-54c8-4f58-ac80-9f9bdd368ee3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fd865c6a-54c8-4f58-ac80-9f9bdd368ee3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:59:ea:64:e9:53:7b:8e:4e:35:de:cd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd865c6a-54c8-4f58-ac80-9f9bdd368ee3
        Validity
            Not Before: Mar 31 13:00:30 2026 GMT
            Not After : Jun 29 13:00:30 2026 GMT
        Subject: CN=159d6fbf-ab37-4fa3-93c9-f02dade6ca47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:00:51:e6:a9:48:ec:24:9c:05:20:f3:b6:38:
                    80:90:0f:5f:6f:10:22:f8:08:8c:eb:bb:65:d3:3a:
                    ef:b1:4f:5a:32:71:c1:3d:fe:da:0d:b2:ce:ea:46:
                    75:80:e1:b2:74:0b:e9:a7:63:57:db:2f:65:13:ee:
                    dd:35:27:88:b5:46:f8:d2:52:fe:6c:f4:1e:33:1f:
                    2a:c9:ec:62:23:61:db:c5:10:ef:6d:94:7d:97:c8:
                    03:80:61:e6:a8:7c:fb:f5:f6:d4:00:4d:b1:ce:ac:
                    ef:02:b2:7c:3c:d5:6d:a3:db:91:35:1b:bb:19:a6:
                    e4:24:11:8c:67:9a:a3:c6:f5:47:7c:18:ae:e7:9a:
                    f2:ba:43:f7:55:f3:b1:31:fd:33:6d:95:69:ed:a1:
                    82:97:a0:63:7f:36:4f:1f:8e:5d:d4:ff:5c:d2:d9:
                    fe:83:94:a7:f2:2c:f0:3e:b6:97:3c:2f:f3:02:de:
                    f4:52:33:fb:b1:00:57:1a:0b:9a:14:6a:f4:3e:73:
                    b5:d2:9d:12:5a:e2:54:b5:a5:3c:f1:61:b5:30:1e:
                    e7:3c:fd:01:74:69:63:2e:85:15:77:a3:30:a2:ba:
                    09:b7:f4:da:7a:b6:68:83:83:34:4a:04:62:99:e8:
                    a4:a6:50:1e:75:08:c2:be:a7:9f:9d:95:19:13:71:
                    d4:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:65:AA:F8:9A:A5:D4:36:7A:5E:A7:FA:E7:D7:1A:37:89:63:CB:0B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fd865c6a-54c8-4f58-ac80-9f9bdd368ee3/db278e47-2b3d-337e-8647-5202119e0fae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fd865c6a-54c8-4f58-ac80-9f9bdd368ee3/fd865c6a-54c8-4f58-ac80-9f9bdd368ee3.crl

            X509v3 Authority Key Identifier:
                keyid:9C:5E:DB:84:DA:D7:B5:46:10:65:08:BB:F3:24:5A:F8:71:1F:CE:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fd865c6a-54c8-4f58-ac80-9f9bdd368ee3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:117:bfd0::-2620:117:bfef:ffff:ffff:ffff:ffff:ffff

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:4a:23:2a:15:39:c1:ff:11:a2:c5:75:b2:5e:85:be:85:e3:
         49:4a:9e:77:d6:83:64:62:45:64:c1:8d:5d:7a:18:bb:5b:68:
         41:7f:c4:25:79:37:30:8d:2a:11:ee:42:65:9c:48:c2:9f:d0:
         c1:0e:79:68:9d:4f:07:bf:f9:e7:f2:06:d2:3f:d6:67:f1:7e:
         43:97:e6:75:22:f6:fd:ea:1e:3e:f7:ff:c5:98:44:71:e7:9f:
         62:43:3e:3a:25:cb:19:c8:11:e5:8e:6d:1c:fd:73:b2:dc:eb:
         7a:a5:2e:c7:97:f4:6e:5d:ff:79:6d:bf:e2:7d:e0:8f:e8:a5:
         26:89:14:e6:6d:48:51:86:e0:f7:9d:c4:97:9a:cb:9c:f8:2e:
         da:17:79:1b:bd:91:de:7f:9f:4d:82:ca:27:da:20:76:f2:83:
         4e:83:e3:06:c6:8f:f9:ea:a1:03:f2:f2:ed:95:cf:8f:6f:76:
         a7:39:af:2e:74:ea:5e:22:0c:dc:ba:77:80:3c:1e:e0:06:55:
         e9:f7:13:fd:a0:fd:1b:0d:73:6c:d9:10:93:55:cd:3f:42:c3:
         19:06:4c:5a:41:da:04:cf:ce:71:a9:e3:06:99:06:fe:23:52:
         1e:ae:02:06:dd:fa:59:c2:ad:7d:91:3c:f2:38:f4:ea:dd:f9:
         5a:31:02:9e
-----BEGIN CERTIFICATE-----
MIIGUTCCBTmgAwIBAgIUAQ0Mn0MoWE1Z6mTpU3uOTjXezQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZmQ4NjVjNmEtNTRjOC00ZjU4LWFjODAtOWY5YmRkMzY4
ZWUzMB4XDTI2MDMzMTEzMDAzMFoXDTI2MDYyOTEzMDAzMFowLzEtMCsGA1UEAxMk
MTU5ZDZmYmYtYWIzNy00ZmEzLTkzYzktZjAyZGFkZTZjYTQ3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlABR5qlI7CScBSDztjiAkA9fbxAi+AiM67tl
0zrvsU9aMnHBPf7aDbLO6kZ1gOGydAvpp2NX2y9lE+7dNSeItUb40lL+bPQeMx8q
yexiI2HbxRDvbZR9l8gDgGHmqHz79fbUAE2xzqzvArJ8PNVto9uRNRu7GabkJBGM
Z5qjxvVHfBiu55ryukP3VfOxMf0zbZVp7aGCl6BjfzZPH45d1P9c0tn+g5Sn8izw
PraXPC/zAt70UjP7sQBXGguaFGr0PnO10p0SWuJUtaU88WG1MB7nPP0BdGljLoUV
d6MworoJt/TaerZog4M0SgRimeikplAedQjCvqefnZUZE3HU1wIDAQABo4IDYzCC
A18wHQYDVR0OBBYEFOplqviapdQ2el6n+ufXGjeJY8sLMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9mZDg2
NWM2YS01NGM4LTRmNTgtYWM4MC05ZjliZGQzNjhlZTMvZGIyNzhlNDctMmIzZC0z
MzdlLTg2NDctNTIwMjExOWUwZmFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZmQ4NjVjNmEtNTRjOC00ZjU4LWFj
ODAtOWY5YmRkMzY4ZWUzL2ZkODY1YzZhLTU0YzgtNGY1OC1hYzgwLTlmOWJkZDM2
OGVlMy5jcmwwHwYDVR0jBBgwFoAUnF7bhNrXtUYQZQi78yRa+HEfzo4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9mZDg2NWM2YS01NGM4LTRmNTgtYWM4MC05Zjli
ZGQzNjhlZTMuY2VyMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAAjAUMBIDBwQmIAEX
v9ADBwQmIAEXv+AwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUF
BwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRt
bDANBgkqhkiG9w0BAQsFAAOCAQEAdUojKhU5wf8RosV1sl6FvoXjSUqed9aDZGJF
ZMGNXXoYu1toQX/EJXk3MI0qEe5CZZxIwp/QwQ55aJ1PB7/55/IG0j/WZ/F+Q5fm
dSL2/eoePvf/xZhEceefYkM+OiXLGcgR5Y5tHP1zstzreqUux5f0bl3/eW2/4n3g
j+ilJokU5m1IUYbg953El5rLnPgu2hd5G72R3n+fTYLKJ9ogdvKDToPjBsaP+eqh
A/Ly7ZXPj292pzmvLnTqXiIM3Lp3gDwe4AZV6fcT/aD9Gw1zbNkQk1XNP0LDGQZM
WkHaBM/OcanjBpkG/iNSHq4CBt36WcKtfZE88jj06t35WjECng==
-----END CERTIFICATE-----
Generated at Fri Apr 17 19:11:21 2026 by rpki-client