Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/4f3b1d14-8545-3d03-9ee0-abc2049c0162.roa
File:                     4f3b1d14-8545-3d03-9ee0-abc2049c0162.roa (raw, json)
Hash identifier:          z5rIqCwDhdxh6X3M/g1zuwJhg5l/r/kLpNYjk7bUGgE=
Subject key identifier:   31:02:67:59:C0:80:AD:14:27:4D:60:98:04:6B:9C:73:E1:A3:20:6E
Certificate issuer:       /CN=3efd7529-38b1-472c-9d5b-d87382d088a0
Certificate serial:       010D0C9F4328584F2EED1645AB088AB0A748FF00
Authority key identifier: 5B:83:22:72:94:88:A9:78:59:9B:3A:DB:DD:E0:48:29:87:6A:94:07
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/4f3b1d14-8545-3d03-9ee0-abc2049c0162.roa
Signing time:             Tue 15 Sep 2026 13:00:12 +0000
ROA not before:           Tue 15 Sep 2026 13:00:12 +0000
ROA not after:            Mon 14 Dec 2026 14:00:12 +0000
asID:                     394285
IP address blocks:        2606:a100:5000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 25 Sep 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:2e:ed:16:45:ab:08:8a:b0:a7:48:ff:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3efd7529-38b1-472c-9d5b-d87382d088a0
        Validity
            Not Before: Sep 15 13:00:12 2026 GMT
            Not After : Dec 14 14:00:12 2026 GMT
        Subject: CN=8aed795c-1ce6-4698-8c5d-3ab97ec23c1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:31:f9:42:80:7c:65:7d:26:be:d6:ca:8d:99:
                    1e:82:85:99:75:79:61:ae:ec:67:59:6d:bf:cd:6d:
                    f4:ae:c2:f6:d2:9c:33:cb:44:f4:13:bf:89:f1:b3:
                    7b:e2:ee:57:f9:30:cb:6f:5a:34:e6:ff:f4:e1:3d:
                    39:7f:28:bd:30:48:db:e2:64:ac:42:df:0a:2a:19:
                    a6:90:c5:37:f8:fb:0f:d1:b6:fe:13:bc:fc:da:a1:
                    82:2e:36:b7:c8:1a:70:e0:d6:bd:ff:bd:b0:fd:65:
                    74:df:80:df:39:03:4e:d8:f0:b1:22:14:73:44:ba:
                    0c:fd:a3:4a:ae:a1:0a:21:1e:72:92:9b:0f:c9:42:
                    1e:16:99:a3:60:89:8b:66:25:4e:99:10:15:6c:c0:
                    bd:af:3e:ee:4c:14:86:64:4f:f5:47:21:ab:12:1d:
                    c8:f3:53:3c:0c:dd:28:5d:f4:d8:d7:4d:35:98:c2:
                    49:ec:54:fe:31:dc:a9:55:80:44:6f:cd:60:f9:aa:
                    6f:57:32:cf:59:17:ae:b6:89:4d:e9:52:7b:55:70:
                    d8:1f:7c:e0:3b:f0:81:cf:f9:03:f2:e4:17:99:9b:
                    a0:cd:1d:0b:67:e2:ae:7d:7e:2a:d9:a8:5c:ce:1c:
                    63:90:2f:f9:69:35:cb:0c:c9:7d:50:be:46:24:5c:
                    ed:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:02:67:59:C0:80:AD:14:27:4D:60:98:04:6B:9C:73:E1:A3:20:6E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/4f3b1d14-8545-3d03-9ee0-abc2049c0162.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.crl

            X509v3 Authority Key Identifier:
                keyid:5B:83:22:72:94:88:A9:78:59:9B:3A:DB:DD:E0:48:29:87:6A:94:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:a100:5000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:e4:99:0b:a6:23:73:64:6b:3f:94:bd:b7:54:9e:3c:9f:7b:
         b6:7c:a0:ab:ff:9b:c2:e9:7a:18:73:a4:33:22:01:fe:8c:e4:
         ae:01:f0:58:86:0a:0a:6f:ec:69:ad:ea:2b:1d:94:ba:70:cc:
         de:33:ec:a8:dd:0d:a2:e7:78:63:93:8d:73:90:48:bd:65:61:
         b5:17:fc:9f:f6:aa:18:7a:21:af:72:a8:26:3c:be:fd:6b:80:
         00:b8:5d:2d:17:98:37:c0:16:1a:b1:71:e6:e7:85:7c:ce:4a:
         96:8e:30:71:63:9b:c6:d1:21:78:ed:7a:7e:be:62:7c:48:86:
         60:e9:a2:22:43:84:15:ad:b1:8d:6d:51:5d:6c:36:fb:96:c1:
         28:05:22:d2:17:83:dc:af:f8:c6:92:42:db:be:a3:81:61:24:
         18:4a:87:3d:6b:4f:e6:88:7d:cf:ef:72:49:e9:9a:ac:ec:d7:
         e2:a9:ba:2f:e7:b8:39:21:f0:1a:28:d0:ca:06:b1:5f:9b:5a:
         ba:aa:3b:20:a1:b0:14:f2:a3:a9:8d:fa:3c:39:65:cf:05:16:
         c5:ca:91:d2:c9:41:47:65:34:6a:be:bc:f5:a1:91:e6:41:a3:
         c0:ef:b3:8e:b7:f8:33:88:e6:1c:99:25:e2:41:3d:57:8b:22:
         22:bb:eb:ab
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE8u7RZFqwiKsKdI/wAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2VmZDc1MjktMzhiMS00NzJjLTlkNWItZDg3MzgyZDA4
OGEwMB4XDTI2MDkxNTEzMDAxMloXDTI2MTIxNDE0MDAxMlowLzEtMCsGA1UEAxMk
OGFlZDc5NWMtMWNlNi00Njk4LThjNWQtM2FiOTdlYzIzYzFlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxTH5QoB8ZX0mvtbKjZkegoWZdXlhruxnWW2/
zW30rsL20pwzy0T0E7+J8bN74u5X+TDLb1o05v/04T05fyi9MEjb4mSsQt8KKhmm
kMU3+PsP0bb+E7z82qGCLja3yBpw4Na9/72w/WV034DfOQNO2PCxIhRzRLoM/aNK
rqEKIR5ykpsPyUIeFpmjYImLZiVOmRAVbMC9rz7uTBSGZE/1RyGrEh3I81M8DN0o
XfTY1001mMJJ7FT+MdypVYBEb81g+apvVzLPWReutolN6VJ7VXDYH3zgO/CBz/kD
8uQXmZugzR0LZ+KufX4q2ahczhxjkC/5aTXLDMl9UL5GJFztxwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFDECZ1nAgK0UJ01gmARrnHPhoyBuMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8zZWZk
NzUyOS0zOGIxLTQ3MmMtOWQ1Yi1kODczODJkMDg4YTAvNGYzYjFkMTQtODU0NS0z
ZDAzLTllZTAtYWJjMjA0OWMwMTYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvM2VmZDc1MjktMzhiMS00NzJjLTlk
NWItZDg3MzgyZDA4OGEwLzNlZmQ3NTI5LTM4YjEtNDcyYy05ZDViLWQ4NzM4MmQw
ODhhMC5jcmwwHwYDVR0jBBgwFoAUW4MicpSIqXhZmzrb3eBIKYdqlAcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi8zZWZkNzUyOS0zOGIxLTQ3MmMtOWQ1Yi1kODcz
ODJkMDg4YTAuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgahAFAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAWOSZC6Yjc2RrP5S9t1SePJ97tnygq/+bwul6GHOkMyIB/ozkrgHw
WIYKCm/saa3qKx2UunDM3jPsqN0Noud4Y5ONc5BIvWVhtRf8n/aqGHohr3KoJjy+
/WuAALhdLReYN8AWGrFx5ueFfM5Klo4wcWObxtEheO16fr5ifEiGYOmiIkOEFa2x
jW1RXWw2+5bBKAUi0heD3K/4xpJC276jgWEkGEqHPWtP5oh9z+9ySemarOzX4qm6
L+e4OSHwGijQygaxX5tauqo7IKGwFPKjqY36PDllzwUWxcqR0slBR2U0ar689aGR
5kGjwO+zjrf4M4jmHJkl4kE9V4siIrvrqw==
-----END CERTIFICATE-----
Generated at Thu Sep 24 07:51:57 2026 by rpki-client