Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ed1c116b-b42c-4d90-ac66-1ef8075303d6/5fc75599-4e5e-34b3-91c5-638df070f033.roa
File:                     5fc75599-4e5e-34b3-91c5-638df070f033.roa (raw, json)
Hash identifier:          DhlhzSYfWD5+iLoOjJwagR0Nte/TZJCnDcd/Jcxg5wk=
Subject key identifier:   ED:51:A9:90:F7:D0:DC:8F:3D:1D:89:82:80:3B:C6:FA:8B:3D:A6:EE
Certificate issuer:       /CN=ed1c116b-b42c-4d90-ac66-1ef8075303d6
Certificate serial:       010D0C9F4328584E15FCFAF2397EA08010472000
Authority key identifier: D4:EB:D8:25:07:E3:73:BD:26:AA:78:E8:41:70:E7:A7:AA:F0:0C:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ed1c116b-b42c-4d90-ac66-1ef8075303d6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ed1c116b-b42c-4d90-ac66-1ef8075303d6/5fc75599-4e5e-34b3-91c5-638df070f033.roa
Signing time:             Sat 06 Jun 2026 21:50:13 +0000
ROA not before:           Sat 06 Jun 2026 21:50:13 +0000
ROA not after:            Fri 04 Sep 2026 21:50:13 +0000
asID:                     1299
IP address blocks:        2604:af80::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ed1c116b-b42c-4d90-ac66-1ef8075303d6/ed1c116b-b42c-4d90-ac66-1ef8075303d6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ed1c116b-b42c-4d90-ac66-1ef8075303d6/ed1c116b-b42c-4d90-ac66-1ef8075303d6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ed1c116b-b42c-4d90-ac66-1ef8075303d6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:15:fc:fa:f2:39:7e:a0:80:10:47:20:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed1c116b-b42c-4d90-ac66-1ef8075303d6
        Validity
            Not Before: Jun  6 21:50:13 2026 GMT
            Not After : Sep  4 21:50:13 2026 GMT
        Subject: CN=91478771-4eff-409b-8b7a-d2521eccf999
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:21:d1:fd:e4:39:a9:70:15:cc:88:4d:57:ba:
                    d2:ef:3a:86:e8:4f:27:ed:95:24:be:a5:20:c9:79:
                    c2:5f:8e:80:94:ac:d4:af:0f:ee:e4:37:93:30:e5:
                    d0:ad:1c:2e:0d:eb:55:c7:fe:6d:eb:26:91:46:4e:
                    2e:b7:64:c6:fa:03:3e:e3:6d:07:dc:a4:10:c0:f8:
                    03:3b:d6:12:42:94:7b:c1:f2:68:51:9e:7e:2e:35:
                    80:7e:1a:dd:da:f0:c1:70:18:4a:1e:3a:2f:a6:0b:
                    92:58:b0:0f:c5:0b:3c:66:bb:08:e2:ab:e2:e8:75:
                    95:ea:82:2d:bc:cf:e5:54:e6:dc:71:28:ff:60:1a:
                    6a:65:7f:ba:72:42:2c:0d:c8:50:71:54:5b:c8:cd:
                    29:2a:b5:80:b3:99:81:22:42:48:80:ab:1b:bb:e9:
                    4e:bb:e5:9b:b8:89:f0:ac:e7:7c:9f:43:4a:31:56:
                    b3:49:08:bc:55:99:7c:b2:76:1d:28:01:03:34:41:
                    f9:d5:fa:57:f2:05:ae:76:72:95:a4:d3:f1:b8:f2:
                    de:94:a6:5f:fa:5d:fd:7b:98:1a:ab:79:3c:28:08:
                    a5:f2:f4:4a:d7:80:2f:06:73:2d:a6:13:c8:e0:bb:
                    82:78:5d:6d:13:a6:d4:09:a0:0e:4f:48:cf:0f:18:
                    f8:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:51:A9:90:F7:D0:DC:8F:3D:1D:89:82:80:3B:C6:FA:8B:3D:A6:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ed1c116b-b42c-4d90-ac66-1ef8075303d6/5fc75599-4e5e-34b3-91c5-638df070f033.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ed1c116b-b42c-4d90-ac66-1ef8075303d6/ed1c116b-b42c-4d90-ac66-1ef8075303d6.crl

            X509v3 Authority Key Identifier:
                keyid:D4:EB:D8:25:07:E3:73:BD:26:AA:78:E8:41:70:E7:A7:AA:F0:0C:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ed1c116b-b42c-4d90-ac66-1ef8075303d6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:af80::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:c4:9c:64:f5:15:d6:fe:12:81:62:f8:6e:2f:1f:b9:9a:15:
         3d:09:89:7e:a7:9d:44:19:dc:53:70:c4:15:d4:b4:92:b2:5e:
         89:17:ad:13:91:ed:ce:56:5f:79:85:de:b5:dc:2f:81:6b:dc:
         d3:49:7a:f2:81:a2:c9:f6:93:c4:c7:12:9c:d8:7a:26:00:6a:
         a0:cc:1c:02:07:06:6a:1e:96:9e:2a:48:6c:ea:1c:97:ad:3c:
         6a:b7:29:12:f1:fc:6f:14:75:a5:0e:f6:52:82:b5:06:15:62:
         56:67:5d:f5:4f:a4:22:55:99:57:e0:58:cd:50:fb:52:5a:f7:
         ac:c5:bf:b8:38:88:8f:b2:79:d2:b5:a8:d6:69:dd:fd:92:34:
         be:8d:47:42:cb:cd:9f:46:fc:f1:9b:cc:bf:a6:4b:80:b3:9f:
         83:41:19:68:93:d1:68:09:52:ae:b7:9e:94:cf:e3:f4:cc:4b:
         5e:92:b5:b9:af:42:3c:42:7c:41:1e:0e:26:40:7f:1c:00:9c:
         1f:cc:90:99:05:d1:19:d4:df:bc:0d:68:00:54:ae:71:54:45:
         f5:3c:3a:20:07:85:39:ea:03:2d:db:21:50:ad:c7:77:62:aa:
         38:f3:d1:91:27:7d:04:1b:fd:de:66:f8:c3:80:fa:e4:4b:87:
         56:c6:8e:46
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE4V/PryOX6ggBBHIAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZWQxYzExNmItYjQyYy00ZDkwLWFjNjYtMWVmODA3NTMw
M2Q2MB4XDTI2MDYwNjIxNTAxM1oXDTI2MDkwNDIxNTAxM1owLzEtMCsGA1UEAxMk
OTE0Nzg3NzEtNGVmZi00MDliLThiN2EtZDI1MjFlY2NmOTk5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkyHR/eQ5qXAVzIhNV7rS7zqG6E8n7ZUkvqUg
yXnCX46AlKzUrw/u5DeTMOXQrRwuDetVx/5t6yaRRk4ut2TG+gM+420H3KQQwPgD
O9YSQpR7wfJoUZ5+LjWAfhrd2vDBcBhKHjovpguSWLAPxQs8ZrsI4qvi6HWV6oIt
vM/lVObccSj/YBpqZX+6ckIsDchQcVRbyM0pKrWAs5mBIkJIgKsbu+lOu+WbuInw
rOd8n0NKMVazSQi8VZl8snYdKAEDNEH51fpX8gWudnKVpNPxuPLelKZf+l39e5ga
q3k8KAil8vRK14AvBnMtphPI4LuCeF1tE6bUCaAOT0jPDxj4WQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFO1RqZD30NyPPR2JgoA7xvqLPabuMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi9lZDFj
MTE2Yi1iNDJjLTRkOTAtYWM2Ni0xZWY4MDc1MzAzZDYvNWZjNzU1OTktNGU1ZS0z
NGIzLTkxYzUtNjM4ZGYwNzBmMDMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05
YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvZWQxYzExNmItYjQyYy00ZDkwLWFj
NjYtMWVmODA3NTMwM2Q2L2VkMWMxMTZiLWI0MmMtNGQ5MC1hYzY2LTFlZjgwNzUz
MDNkNi5jcmwwHwYDVR0jBBgwFoAU1OvYJQfjc70mqnjoQXDnp6rwDAMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz
OS05NDBmLWJlMjczZDljMGI2Mi9lZDFjMTE2Yi1iNDJjLTRkOTAtYWM2Ni0xZWY4
MDc1MzAzZDYuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgSvgDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQBSxJxk9RXW/hKBYvhuLx+5mhU9CYl+p51EGdxTcMQV1LSSsl6JF60T
ke3OVl95hd613C+Ba9zTSXrygaLJ9pPExxKc2HomAGqgzBwCBwZqHpaeKkhs6hyX
rTxqtykS8fxvFHWlDvZSgrUGFWJWZ131T6QiVZlX4FjNUPtSWvesxb+4OIiPsnnS
tajWad39kjS+jUdCy82fRvzxm8y/pkuAs5+DQRlok9FoCVKut56Uz+P0zEtekrW5
r0I8QnxBHg4mQH8cAJwfzJCZBdEZ1N+8DWgAVK5xVEX1PDogB4U56gMt2yFQrcd3
Yqo489GRJ30EG/3eZvjDgPrkS4dWxo5G
-----END CERTIFICATE-----
Generated at Sat Jun 13 19:02:45 2026 by rpki-client