Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d9ab9a45-2b06-4ca8-bd0f-bbd96acccc27/30fc1cb1-7fa2-3ab0-97b6-0367e80ee3be.roa
File:                     30fc1cb1-7fa2-3ab0-97b6-0367e80ee3be.roa (raw, json)
Hash identifier:          lETFZanK/L94806l0MCAauXSla9WrKqYvI0WY5Eq8yM=
Subject key identifier:   EE:A6:27:A2:50:F9:F0:A0:88:E8:78:30:CE:89:05:D5:44:0B:5A:B0
Certificate issuer:       /CN=d9ab9a45-2b06-4ca8-bd0f-bbd96acccc27
Certificate serial:       010D0C9F4328584F9BCDC334A83906487CA4D0C0
Authority key identifier: A1:2C:DA:96:0B:63:94:15:8D:17:96:2B:73:6A:DF:40:5C:72:A2:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d9ab9a45-2b06-4ca8-bd0f-bbd96acccc27.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d9ab9a45-2b06-4ca8-bd0f-bbd96acccc27/30fc1cb1-7fa2-3ab0-97b6-0367e80ee3be.roa
Signing time:             Sat 24 Oct 2026 13:00:12 +0000
ROA not before:           Sat 24 Oct 2026 13:00:12 +0000
ROA not after:            Fri 22 Jan 2027 14:00:12 +0000
asID:                     14618
IP address blocks:        2605:c540:8c00::/42 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d9ab9a45-2b06-4ca8-bd0f-bbd96acccc27/d9ab9a45-2b06-4ca8-bd0f-bbd96acccc27.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d9ab9a45-2b06-4ca8-bd0f-bbd96acccc27/d9ab9a45-2b06-4ca8-bd0f-bbd96acccc27.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d9ab9a45-2b06-4ca8-bd0f-bbd96acccc27.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 06 Nov 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:9b:cd:c3:34:a8:39:06:48:7c:a4:d0:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9ab9a45-2b06-4ca8-bd0f-bbd96acccc27
        Validity
            Not Before: Oct 24 13:00:12 2026 GMT
            Not After : Jan 22 14:00:12 2027 GMT
        Subject: CN=4fc3ef2d-173b-44bc-9921-0debf2453135
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:1f:fe:72:fe:93:93:71:d4:80:92:4e:26:a9:
                    7f:53:7c:42:6c:fc:46:98:3e:66:5d:8c:bb:18:5a:
                    b2:a2:b1:66:bc:16:e2:36:bb:44:44:33:cc:81:c0:
                    39:01:24:63:0b:e9:61:8c:f8:16:58:72:78:b3:ff:
                    4f:16:77:da:9d:88:ee:ae:59:b1:b7:9d:c2:1b:52:
                    4f:13:9d:cd:75:f9:1c:c3:4c:9b:d1:7c:c9:49:89:
                    5f:e0:02:22:64:6f:ba:87:17:e7:d1:a8:dc:e6:cc:
                    96:d4:bd:cb:a4:de:71:13:31:55:dd:f8:c2:5e:3d:
                    1f:b2:03:25:f5:72:1e:ef:7e:14:25:ba:54:52:0f:
                    57:48:3e:d1:b5:95:76:27:ff:b7:f9:34:ef:e3:03:
                    ab:b3:d1:27:7e:d3:dc:93:19:9b:04:9e:76:9d:63:
                    01:40:62:60:05:2e:48:b8:eb:c6:64:68:df:36:5d:
                    fc:cf:8a:21:b5:b9:1a:27:90:64:32:e6:71:12:62:
                    1b:1c:73:65:82:b6:db:e1:c2:3a:69:5b:e5:b9:7e:
                    07:77:2c:5d:3a:3e:21:07:b1:38:b7:c1:f7:b7:cd:
                    90:5b:af:fd:a7:9e:d0:f1:70:2a:e2:9c:05:06:12:
                    87:91:d8:76:0d:55:65:52:b4:82:b7:72:4f:a5:85:
                    3d:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:A6:27:A2:50:F9:F0:A0:88:E8:78:30:CE:89:05:D5:44:0B:5A:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d9ab9a45-2b06-4ca8-bd0f-bbd96acccc27/30fc1cb1-7fa2-3ab0-97b6-0367e80ee3be.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d9ab9a45-2b06-4ca8-bd0f-bbd96acccc27/d9ab9a45-2b06-4ca8-bd0f-bbd96acccc27.crl

            X509v3 Authority Key Identifier:
                keyid:A1:2C:DA:96:0B:63:94:15:8D:17:96:2B:73:6A:DF:40:5C:72:A2:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d9ab9a45-2b06-4ca8-bd0f-bbd96acccc27.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:c540:8c00::/42

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:c1:32:51:22:41:9b:31:df:e0:76:74:66:e4:48:34:b7:6c:
         cc:3e:45:e6:eb:30:ff:b0:c4:93:dd:e9:30:7b:c5:fc:e7:a9:
         30:50:1e:48:8a:90:61:07:c8:ce:fc:12:56:6b:fb:3e:15:7f:
         2c:de:e4:34:f3:1a:11:fe:bc:9a:d1:21:23:f5:bf:e5:2f:61:
         ee:76:2a:61:52:31:90:92:ba:5b:41:f7:83:32:5c:c4:ef:96:
         54:28:5c:ae:db:56:35:eb:18:de:fe:9f:0b:32:0d:98:76:73:
         78:69:40:08:5b:27:0d:85:c1:df:3d:66:f4:99:28:38:39:1b:
         16:39:50:e2:9e:2c:80:5e:50:94:5f:e3:f3:13:41:54:37:1d:
         2f:7a:f1:e3:3b:56:8b:c0:7a:ee:1f:84:b4:c5:85:2b:63:40:
         50:5c:dd:47:14:50:4e:94:e5:46:6c:a5:58:f9:95:50:c6:2c:
         df:9c:91:fe:ff:64:9f:17:45:d3:5a:76:7e:4d:b8:93:44:04:
         4d:64:01:1f:c1:c0:31:a6:32:9a:b6:a9:3e:5d:38:b4:ac:80:
         6c:18:91:8b:e3:61:7b:d3:e4:12:5c:35:e4:ee:69:5c:68:b0:
         39:5c:c8:9d:f0:64:16:12:ff:36:3b:cb:97:1b:5f:77:b5:18:
         e8:53:bd:30
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE+bzcM0qDkGSHyk0MAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDlhYjlhNDUtMmIwNi00Y2E4LWJkMGYtYmJkOTZhY2Nj
YzI3MB4XDTI2MTAyNDEzMDAxMloXDTI3MDEyMjE0MDAxMlowLzEtMCsGA1UEAxMk
NGZjM2VmMmQtMTczYi00NGJjLTk5MjEtMGRlYmYyNDUzMTM1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAux/+cv6Tk3HUgJJOJql/U3xCbPxGmD5mXYy7
GFqyorFmvBbiNrtERDPMgcA5ASRjC+lhjPgWWHJ4s/9PFnfanYjurlmxt53CG1JP
E53Ndfkcw0yb0XzJSYlf4AIiZG+6hxfn0ajc5syW1L3LpN5xEzFV3fjCXj0fsgMl
9XIe734UJbpUUg9XSD7RtZV2J/+3+TTv4wOrs9EnftPckxmbBJ52nWMBQGJgBS5I
uOvGZGjfNl38z4ohtbkaJ5BkMuZxEmIbHHNlgrbb4cI6aVvluX4HdyxdOj4hB7E4
t8H3t82QW6/9p57Q8XAq4pwFBhKHkdh2DVVlUrSCt3JPpYU9HQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFO6mJ6JQ+fCgiOh4MM6JBdVEC1qwMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kOWFi
OWE0NS0yYjA2LTRjYTgtYmQwZi1iYmQ5NmFjY2NjMjcvMzBmYzFjYjEtN2ZhMi0z
YWIwLTk3YjYtMDM2N2U4MGVlM2JlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDlhYjlhNDUtMmIwNi00Y2E4LWJk
MGYtYmJkOTZhY2NjYzI3L2Q5YWI5YTQ1LTJiMDYtNGNhOC1iZDBmLWJiZDk2YWNj
Y2MyNy5jcmwwHwYDVR0jBBgwFoAUoSzalgtjlBWNF5Yrc2rfQFxyouswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy9kOWFiOWE0NS0yYjA2LTRjYTgtYmQwZi1iYmQ5
NmFjY2NjMjcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcGJgXFQIwA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAFzBMlEiQZsx3+B2dGbkSDS3bMw+RebrMP+wxJPd6TB7xfznqTBQ
HkiKkGEHyM78ElZr+z4Vfyze5DTzGhH+vJrRISP1v+UvYe52KmFSMZCSultB94My
XMTvllQoXK7bVjXrGN7+nwsyDZh2c3hpQAhbJw2Fwd89ZvSZKDg5GxY5UOKeLIBe
UJRf4/MTQVQ3HS968eM7VovAeu4fhLTFhStjQFBc3UcUUE6U5UZspVj5lVDGLN+c
kf7/ZJ8XRdNadn5NuJNEBE1kAR/BwDGmMpq2qT5dOLSsgGwYkYvjYXvT5BJcNeTu
aVxosDlcyJ3wZBYS/zY7y5cbX3e1GOhTvTA=
-----END CERTIFICATE-----
Generated at Thu Nov 5 14:13:17 2026 by rpki-client