Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93caa9fe-d081-4e18-ad66-499a9209945e/4f943d15-fec8-3e98-bfcb-4d4e7112a790.roa
File:                     4f943d15-fec8-3e98-bfcb-4d4e7112a790.roa (raw, json)
Hash identifier:          aesemIKluOXS65iJOxshmjum45+TxWO/RFN56qGgMq0=
Subject key identifier:   B5:75:2F:84:13:18:49:98:66:52:56:87:AB:60:6A:82:58:C3:D9:56
Certificate issuer:       /CN=93caa9fe-d081-4e18-ad66-499a9209945e
Certificate serial:       010D0C9F4328584F1467A2F2D3ECCB1286C00C80
Authority key identifier: 34:AE:DE:0F:3E:91:29:37:B5:0B:37:66:2F:72:4F:BF:62:3C:FB:AB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93caa9fe-d081-4e18-ad66-499a9209945e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93caa9fe-d081-4e18-ad66-499a9209945e/4f943d15-fec8-3e98-bfcb-4d4e7112a790.roa
Signing time:             Sun 06 Sep 2026 01:00:11 +0000
ROA not before:           Sun 06 Sep 2026 01:00:11 +0000
ROA not after:            Sat 05 Dec 2026 02:00:11 +0000
asID:                     398663
IP address blocks:        2607:2240:6000::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93caa9fe-d081-4e18-ad66-499a9209945e/93caa9fe-d081-4e18-ad66-499a9209945e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93caa9fe-d081-4e18-ad66-499a9209945e/93caa9fe-d081-4e18-ad66-499a9209945e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93caa9fe-d081-4e18-ad66-499a9209945e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Sep 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:14:67:a2:f2:d3:ec:cb:12:86:c0:0c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93caa9fe-d081-4e18-ad66-499a9209945e
        Validity
            Not Before: Sep  6 01:00:11 2026 GMT
            Not After : Dec  5 02:00:11 2026 GMT
        Subject: CN=c5f32149-7c15-40fe-8269-be91cd9447eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:79:55:8c:05:74:e7:f4:9e:a0:db:7c:fc:c7:
                    b2:13:78:31:5b:a8:44:28:75:13:14:e0:de:36:2b:
                    81:18:80:b7:65:40:f9:30:51:42:68:67:9c:c8:fe:
                    6b:4c:64:33:bf:24:5f:c2:77:f1:29:d1:20:1b:7f:
                    d2:91:99:b2:12:1d:a8:1d:fb:eb:9e:bb:84:ea:e3:
                    8e:a9:f6:30:b3:e3:7e:4e:94:15:c6:49:65:ce:59:
                    27:3e:87:22:6b:7f:c4:02:3e:29:c0:50:35:7e:af:
                    bc:aa:ca:f5:07:75:14:dc:40:ed:99:01:fa:59:f1:
                    0a:77:51:1f:e1:7a:70:9c:8a:a0:33:37:92:81:08:
                    68:b1:3e:65:83:ff:bf:0a:ea:34:e9:14:24:c6:46:
                    fa:51:ce:64:bf:bf:40:1b:b5:0d:7f:57:2e:9f:d3:
                    5f:b7:7b:e1:5e:79:ea:75:1a:14:15:7a:da:b5:e6:
                    0f:eb:5a:4d:47:8e:6c:4a:57:3f:30:2e:b1:e2:01:
                    ad:b6:85:5f:24:c5:6d:f4:9e:e7:29:8e:8e:cf:f7:
                    4a:5a:d7:36:67:31:71:70:6f:df:0b:47:44:f0:68:
                    6e:96:37:e4:a7:06:8e:8b:5d:30:b2:b2:95:7b:a5:
                    1d:9e:31:cd:48:bc:f8:b5:4d:50:3d:fa:3e:01:18:
                    64:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:75:2F:84:13:18:49:98:66:52:56:87:AB:60:6A:82:58:C3:D9:56
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93caa9fe-d081-4e18-ad66-499a9209945e/4f943d15-fec8-3e98-bfcb-4d4e7112a790.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93caa9fe-d081-4e18-ad66-499a9209945e/93caa9fe-d081-4e18-ad66-499a9209945e.crl

            X509v3 Authority Key Identifier:
                keyid:34:AE:DE:0F:3E:91:29:37:B5:0B:37:66:2F:72:4F:BF:62:3C:FB:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93caa9fe-d081-4e18-ad66-499a9209945e.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:2240:6000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:3e:17:25:97:bc:95:54:01:6d:d3:61:0a:2b:0a:59:81:c1:
         a9:cf:5e:c9:38:d6:17:5b:b5:8d:ec:e1:cd:62:b6:24:3b:e9:
         b8:ac:03:b8:68:70:0d:6a:a3:dd:b1:24:dc:1c:c7:dd:91:a4:
         64:ec:0a:c6:13:42:d8:ac:52:f1:bb:82:82:b8:de:d1:f9:a2:
         ca:16:24:e3:c3:b7:fd:45:67:db:ac:b8:f4:35:cd:f0:89:76:
         c1:27:67:77:33:87:e6:6a:c7:a7:87:00:5c:44:66:07:f2:7b:
         38:16:54:9a:7d:2a:a1:60:e7:28:5c:1f:9e:83:10:94:d7:3e:
         0f:3d:de:3b:31:a3:87:f2:74:1b:97:17:92:ef:58:28:fd:22:
         18:14:7d:84:f8:6d:bc:3a:60:fa:4c:ba:52:7c:7c:b9:9d:0c:
         71:4a:bd:7c:d5:e4:1b:c4:2e:e8:44:cd:dd:cb:95:d1:7c:65:
         bd:c7:9c:95:bc:8c:23:eb:6c:35:71:3b:77:c6:12:2b:ac:ed:
         c1:d5:95:63:42:57:d8:6a:22:16:e6:82:82:c5:4a:6f:a2:e7:
         6b:e2:2d:4d:85:b2:da:12:a0:c3:f2:12:43:2e:fc:3c:1b:4d:
         d4:99:f0:d4:8a:c6:9b:f7:02:ee:47:12:7b:4a:e9:e0:7f:e6:
         21:0b:2b:35
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE8UZ6Ly0+zLEobADIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTNjYWE5ZmUtZDA4MS00ZTE4LWFkNjYtNDk5YTkyMDk5
NDVlMB4XDTI2MDkwNjAxMDAxMVoXDTI2MTIwNTAyMDAxMVowLzEtMCsGA1UEAxMk
YzVmMzIxNDktN2MxNS00MGZlLTgyNjktYmU5MWNkOTQ0N2ViMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhHlVjAV05/SeoNt8/MeyE3gxW6hEKHUTFODe
NiuBGIC3ZUD5MFFCaGecyP5rTGQzvyRfwnfxKdEgG3/SkZmyEh2oHfvrnruE6uOO
qfYws+N+TpQVxkllzlknPocia3/EAj4pwFA1fq+8qsr1B3UU3EDtmQH6WfEKd1Ef
4XpwnIqgMzeSgQhosT5lg/+/Cuo06RQkxkb6Uc5kv79AG7UNf1cun9Nft3vhXnnq
dRoUFXrateYP61pNR45sSlc/MC6x4gGttoVfJMVt9J7nKY6Oz/dKWtc2ZzFxcG/f
C0dE8GhuljfkpwaOi10wsrKVe6UdnjHNSLz4tU1QPfo+ARhkyQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFLV1L4QTGEmYZlJWh6tgaoJYw9lWMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi85M2Nh
YTlmZS1kMDgxLTRlMTgtYWQ2Ni00OTlhOTIwOTk0NWUvNGY5NDNkMTUtZmVjOC0z
ZTk4LWJmY2ItNGQ0ZTcxMTJhNzkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOTNjYWE5ZmUtZDA4MS00ZTE4LWFk
NjYtNDk5YTkyMDk5NDVlLzkzY2FhOWZlLWQwODEtNGUxOC1hZDY2LTQ5OWE5MjA5
OTQ1ZS5jcmwwHwYDVR0jBBgwFoAUNK7eDz6RKTe1CzdmL3JPv2I8+6swDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi85M2NhYTlmZS1kMDgxLTRlMTgtYWQ2Ni00OTlh
OTIwOTk0NWUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgciQGAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAIz4XJZe8lVQBbdNhCisKWYHBqc9eyTjWF1u1jezhzWK2JDvpuKwD
uGhwDWqj3bEk3BzH3ZGkZOwKxhNC2KxS8buCgrje0fmiyhYk48O3/UVn26y49DXN
8Il2wSdndzOH5mrHp4cAXERmB/J7OBZUmn0qoWDnKFwfnoMQlNc+Dz3eOzGjh/J0
G5cXku9YKP0iGBR9hPhtvDpg+ky6Unx8uZ0McUq9fNXkG8Qu6ETN3cuV0Xxlvcec
lbyMI+tsNXE7d8YSK6ztwdWVY0JX2GoiFuaCgsVKb6Lna+ItTYWy2hKgw/ISQy78
PBtN1Jnw1IrGm/cC7kcSe0rp4H/mIQsrNQ==
-----END CERTIFICATE-----
Generated at Tue Sep 22 12:59:47 2026 by rpki-client