Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d826c88d-e62d-45fe-a08c-0b0a021a5314/8e21170e-1466-3099-9701-481f57135285.roa
File:                     8e21170e-1466-3099-9701-481f57135285.roa (raw, json)
Hash identifier:          6UFRhHcoVDmyIPjlqSr0Iq9zVzZKoGSJZm2bFXwvLd8=
Subject key identifier:   90:F4:29:F6:66:3A:99:3A:79:66:5F:4E:62:17:1B:7B:B8:7B:0F:03
Certificate issuer:       /CN=d826c88d-e62d-45fe-a08c-0b0a021a5314
Certificate serial:       010D0C9F4328584E15E46CEBFE0FB5500C25AD70
Authority key identifier: A1:CF:A2:F0:DE:CA:A4:4B:99:13:F3:EA:92:FC:76:9E:9F:EE:80:64
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d826c88d-e62d-45fe-a08c-0b0a021a5314.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d826c88d-e62d-45fe-a08c-0b0a021a5314/8e21170e-1466-3099-9701-481f57135285.roa
Signing time:             Sat 06 Jun 2026 21:00:13 +0000
ROA not before:           Sat 06 Jun 2026 21:00:13 +0000
ROA not after:            Fri 04 Sep 2026 21:00:13 +0000
asID:                     81
IP address blocks:        2620:7:2000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d826c88d-e62d-45fe-a08c-0b0a021a5314/d826c88d-e62d-45fe-a08c-0b0a021a5314.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d826c88d-e62d-45fe-a08c-0b0a021a5314/d826c88d-e62d-45fe-a08c-0b0a021a5314.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d826c88d-e62d-45fe-a08c-0b0a021a5314.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:15:e4:6c:eb:fe:0f:b5:50:0c:25:ad:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d826c88d-e62d-45fe-a08c-0b0a021a5314
        Validity
            Not Before: Jun  6 21:00:13 2026 GMT
            Not After : Sep  4 21:00:13 2026 GMT
        Subject: CN=a53606e4-0c8c-4a20-94ba-a47f5c232437
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:8e:4c:40:fa:fe:4d:44:73:a6:1d:9b:60:7c:
                    53:81:2b:b7:a0:ab:6e:cd:78:db:6e:0c:de:c9:0f:
                    b2:fe:52:a1:55:67:72:46:7d:61:3b:31:d1:4a:6a:
                    79:3a:35:db:a9:39:28:df:17:d9:c6:f4:c9:02:49:
                    aa:55:00:62:8d:ba:c5:35:23:34:a3:56:29:28:83:
                    d9:80:48:a7:a4:50:18:51:3e:49:23:74:87:1b:ef:
                    a7:5d:0e:c0:a7:22:36:76:76:02:d3:de:29:c9:c9:
                    e1:07:3d:2c:37:d1:02:3d:7f:cf:ee:2b:69:b0:53:
                    af:82:3a:00:6a:fe:3d:fc:64:7c:64:70:7b:31:8f:
                    6b:aa:7f:35:05:b9:c7:2d:82:67:a1:3e:4d:12:50:
                    6f:08:e1:38:76:1e:f2:1f:c6:fc:9f:08:e5:32:11:
                    47:2d:b8:26:39:a4:4b:4a:7a:0e:6c:b9:71:c7:bc:
                    24:e5:db:66:74:91:ad:83:35:0a:fd:cc:17:4e:db:
                    e8:49:7b:ee:35:67:fe:af:0f:bf:6e:aa:1f:d9:51:
                    6f:67:93:c9:ea:85:d3:31:e1:58:33:10:da:8f:93:
                    b8:ec:76:9b:24:1f:a3:49:27:c7:ce:18:1d:da:ac:
                    ab:e3:9d:dd:55:e2:1b:a6:e1:2a:08:8f:ae:cf:0b:
                    0b:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:F4:29:F6:66:3A:99:3A:79:66:5F:4E:62:17:1B:7B:B8:7B:0F:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d826c88d-e62d-45fe-a08c-0b0a021a5314/8e21170e-1466-3099-9701-481f57135285.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d826c88d-e62d-45fe-a08c-0b0a021a5314/d826c88d-e62d-45fe-a08c-0b0a021a5314.crl

            X509v3 Authority Key Identifier:
                keyid:A1:CF:A2:F0:DE:CA:A4:4B:99:13:F3:EA:92:FC:76:9E:9F:EE:80:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d826c88d-e62d-45fe-a08c-0b0a021a5314.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:7:2000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:1c:d5:3b:7e:42:11:db:9f:32:4e:fd:27:50:d8:91:ef:2d:
         10:23:76:5b:77:b8:7b:93:c3:91:50:9c:4c:f0:62:ad:5e:a1:
         77:fb:dd:8b:de:93:8b:36:60:2b:7f:1e:94:74:f8:13:aa:30:
         51:41:21:43:41:69:c4:1e:f9:79:22:5a:eb:db:b4:5d:3e:7a:
         73:f2:99:c0:1c:d6:35:26:92:1a:a2:39:dc:9c:23:86:6f:3f:
         fc:ff:f3:42:2c:cd:36:95:64:b3:c2:d1:ac:e8:3d:55:55:25:
         ee:3e:47:cb:b5:db:36:26:80:b0:64:f8:31:ba:75:2f:b5:41:
         6a:4b:aa:cd:08:66:88:01:81:a3:09:ab:c3:8e:fb:71:b4:ae:
         29:3b:8d:54:b3:7c:b1:93:87:95:dc:f0:cb:ef:7f:04:81:5e:
         3c:06:bd:01:16:d4:67:39:41:4c:ef:c2:7a:72:1e:ff:8e:c2:
         3e:55:05:2e:d1:cd:5d:c8:a2:f6:b3:f7:b5:35:b3:2b:d6:1f:
         33:1e:0b:4f:74:7f:63:7a:ad:5a:b2:8d:2e:85:bf:ad:6a:23:
         7a:3a:ae:4a:d2:e0:0f:d9:94:95:a2:d2:80:44:a2:0d:fc:2a:
         1d:11:f8:9b:c3:6b:10:84:02:ad:01:0d:93:3b:fb:28:33:76:
         99:6e:2a:2a
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE4V5Gzr/g+1UAwlrXAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDgyNmM4OGQtZTYyZC00NWZlLWEwOGMtMGIwYTAyMWE1
MzE0MB4XDTI2MDYwNjIxMDAxM1oXDTI2MDkwNDIxMDAxM1owLzEtMCsGA1UEAxMk
YTUzNjA2ZTQtMGM4Yy00YTIwLTk0YmEtYTQ3ZjVjMjMyNDM3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA145MQPr+TURzph2bYHxTgSu3oKtuzXjbbgze
yQ+y/lKhVWdyRn1hOzHRSmp5OjXbqTko3xfZxvTJAkmqVQBijbrFNSM0o1YpKIPZ
gEinpFAYUT5JI3SHG++nXQ7ApyI2dnYC094pycnhBz0sN9ECPX/P7itpsFOvgjoA
av49/GR8ZHB7MY9rqn81BbnHLYJnoT5NElBvCOE4dh7yH8b8nwjlMhFHLbgmOaRL
SnoObLlxx7wk5dtmdJGtgzUK/cwXTtvoSXvuNWf+rw+/bqof2VFvZ5PJ6oXTMeFY
MxDaj5O47HabJB+jSSfHzhgd2qyr453dVeIbpuEqCI+uzwsLWwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFJD0KfZmOpk6eWZfTmIXG3u4ew8DMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9kODI2
Yzg4ZC1lNjJkLTQ1ZmUtYTA4Yy0wYjBhMDIxYTUzMTQvOGUyMTE3MGUtMTQ2Ni0z
MDk5LTk3MDEtNDgxZjU3MTM1Mjg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZDgyNmM4OGQtZTYyZC00NWZlLWEw
OGMtMGIwYTAyMWE1MzE0L2Q4MjZjODhkLWU2MmQtNDVmZS1hMDhjLTBiMGEwMjFh
NTMxNC5jcmwwHwYDVR0jBBgwFoAUoc+i8N7KpEuZE/Pqkvx2np/ugGQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9kODI2Yzg4ZC1lNjJkLTQ1ZmUtYTA4Yy0wYjBh
MDIxYTUzMTQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAByAA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAH0c1Tt+QhHbnzJO/SdQ2JHvLRAjdlt3uHuTw5FQnEzwYq1eoXf7
3Yvek4s2YCt/HpR0+BOqMFFBIUNBacQe+XkiWuvbtF0+enPymcAc1jUmkhqiOdyc
I4ZvP/z/80IszTaVZLPC0azoPVVVJe4+R8u12zYmgLBk+DG6dS+1QWpLqs0IZogB
gaMJq8OO+3G0rik7jVSzfLGTh5Xc8MvvfwSBXjwGvQEW1Gc5QUzvwnpyHv+Owj5V
BS7RzV3Iovaz97U1syvWHzMeC090f2N6rVqyjS6Fv61qI3o6rkrS4A/ZlJWi0oBE
og38Kh0R+JvDaxCEAq0BDZM7+ygzdpluKio=
-----END CERTIFICATE-----
Generated at Sat Jun 13 16:01:33 2026 by rpki-client