Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e5e40aad-6d99-3fe6-b82a-22e74b12a905.roa
File:                     e5e40aad-6d99-3fe6-b82a-22e74b12a905.roa (raw, json)
Hash identifier:          IWmjEmLQ3mUgcUaItmLLdaJcoLP9w0v4zaRQVwtO22Y=
Subject key identifier:   EA:80:3F:CF:35:49:28:BD:EB:CC:33:26:16:2D:C8:90:F8:F0:46:D0
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584F30528FE4D8CEE6C33BE3AE80
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e5e40aad-6d99-3fe6-b82a-22e74b12a905.roa
Signing time:             Wed 16 Sep 2026 01:00:12 +0000
ROA not before:           Wed 16 Sep 2026 01:00:12 +0000
ROA not after:            Tue 15 Dec 2026 02:00:12 +0000
asID:                     30060
IP address blocks:        2620:74:a0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Sep 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:30:52:8f:e4:d8:ce:e6:c3:3b:e3:ae:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Sep 16 01:00:12 2026 GMT
            Not After : Dec 15 02:00:12 2026 GMT
        Subject: CN=3eaf7349-d4c0-49c7-a4f1-b11a47414c92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:c2:72:ff:a3:b1:c2:ed:11:6b:21:1a:77:ae:
                    74:7c:96:79:bd:1e:a3:d5:a8:eb:f1:5d:07:e6:b8:
                    dd:e6:4a:80:68:ee:1a:54:cb:3b:54:86:7a:42:85:
                    a0:a0:94:de:cc:0d:8e:2d:bf:10:57:f9:f0:68:b1:
                    aa:87:ab:cd:e4:fd:d0:df:ab:74:1b:5a:5b:76:3c:
                    e6:8e:ec:5a:a6:94:1d:f9:25:50:c8:86:90:a1:7c:
                    30:be:5e:8b:7d:17:d9:33:60:5e:ff:89:90:b2:f0:
                    43:48:14:5b:0e:9d:e4:0a:12:da:49:e9:e9:3b:be:
                    36:d2:7b:58:e4:45:b1:40:55:e6:b5:a8:1d:f8:17:
                    50:22:42:e5:77:ce:61:25:da:b3:9e:88:78:5c:f7:
                    09:f6:26:45:ff:84:16:0f:fb:00:7a:d6:1b:b5:6a:
                    9c:dd:17:7b:6a:f5:50:0b:e5:40:80:a1:31:89:a8:
                    67:3b:06:8a:3c:4e:b0:6c:65:25:51:62:5e:60:c1:
                    3d:3e:b4:f7:21:b0:55:a6:11:80:c3:f1:09:4e:f6:
                    dd:8a:17:da:ad:76:8d:89:82:c2:f1:22:5c:78:c8:
                    9a:61:1b:7c:fb:84:74:2f:ae:f6:d6:24:03:21:38:
                    b5:5e:ba:95:00:a2:0c:9a:88:56:16:a0:b0:42:3c:
                    d1:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:80:3F:CF:35:49:28:BD:EB:CC:33:26:16:2D:C8:90:F8:F0:46:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e5e40aad-6d99-3fe6-b82a-22e74b12a905.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:a0::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:d2:e9:43:cd:c3:2d:78:77:1b:1a:7d:8b:97:29:81:13:94:
         67:7b:94:95:5e:42:3b:d8:cd:dd:24:e2:e1:70:87:1f:ff:04:
         d2:6e:bf:3b:bc:c1:7f:a5:91:5f:2c:91:4b:51:5e:ee:e9:7f:
         42:e1:78:84:1d:48:f8:e8:be:fa:85:e7:52:01:d4:ad:ff:db:
         e0:ab:97:9c:83:ef:70:4f:9d:a9:16:3d:c8:4d:7a:d9:ad:58:
         6a:7f:dd:c8:35:b3:65:73:8f:91:62:dc:c1:bc:e4:68:80:2d:
         3e:de:b8:3d:fb:b9:e1:1b:6e:19:93:cf:8d:a0:7d:6e:a9:b6:
         46:f1:d9:05:41:48:41:e7:83:b5:83:f4:fe:d4:d1:d0:c4:1c:
         ec:25:64:f4:64:ea:e9:de:63:d6:cb:3b:89:4e:48:26:88:3f:
         b2:d2:10:70:e3:5b:1d:15:62:6f:a6:8f:9e:2b:7d:62:dd:b5:
         79:22:8a:0a:03:68:09:7b:b3:6e:51:96:d9:38:44:31:e4:6d:
         89:1f:12:9d:36:b3:f9:6e:02:a7:b4:95:6b:d9:59:4e:74:3c:
         c2:36:47:33:3a:cf:82:0f:fd:b3:11:b3:d4:fc:fb:00:97:6a:
         55:34:fa:33:ba:88:e4:ce:b5:3e:09:a5:12:8c:6f:82:3e:62:
         a8:f1:83:ab
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE8wUo/k2M7mwzvjroAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz
YzQ1MB4XDTI2MDkxNjAxMDAxMloXDTI2MTIxNTAyMDAxMlowLzEtMCsGA1UEAxMk
M2VhZjczNDktZDRjMC00OWM3LWE0ZjEtYjExYTQ3NDE0YzkyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx8Jy/6Oxwu0RayEad650fJZ5vR6j1ajr8V0H
5rjd5kqAaO4aVMs7VIZ6QoWgoJTezA2OLb8QV/nwaLGqh6vN5P3Q36t0G1pbdjzm
juxappQd+SVQyIaQoXwwvl6LfRfZM2Be/4mQsvBDSBRbDp3kChLaSenpO7420ntY
5EWxQFXmtagd+BdQIkLld85hJdqznoh4XPcJ9iZF/4QWD/sAetYbtWqc3Rd7avVQ
C+VAgKExiahnOwaKPE6wbGUlUWJeYME9PrT3IbBVphGAw/EJTvbdihfarXaNiYLC
8SJceMiaYRt8+4R0L6721iQDITi1XrqVAKIMmohWFqCwQjzRHwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFOqAP881SSi968wzJhYtyJD48EbQMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz
N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZTVlNDBhYWQtNmQ5OS0z
ZmU2LWI4MmEtMjJlNzRiMTJhOTA1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl
MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk
M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh
YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdACg
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAGTS6UPNwy14dxsafYuXKYETlGd7lJVeQjvYzd0k4uFwhx//BNJu
vzu8wX+lkV8skUtRXu7pf0LheIQdSPjovvqF51IB1K3/2+Crl5yD73BPnakWPchN
etmtWGp/3cg1s2Vzj5Fi3MG85GiALT7euD37ueEbbhmTz42gfW6ptkbx2QVBSEHn
g7WD9P7U0dDEHOwlZPRk6uneY9bLO4lOSCaIP7LSEHDjWx0VYm+mj54rfWLdtXki
igoDaAl7s25Rltk4RDHkbYkfEp02s/luAqe0lWvZWU50PMI2RzM6z4IP/bMRs9T8
+wCXalU0+jO6iOTOtT4JpRKMb4I+Yqjxg6s=
-----END CERTIFICATE-----
Generated at Tue Sep 22 05:18:44 2026 by rpki-client