Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3a975a5d-2307-4688-a186-4a355ff45581/17250f54-5119-3396-8248-a8f3e305a3f8.roa
File:                     17250f54-5119-3396-8248-a8f3e305a3f8.roa (raw, json)
Hash identifier:          noTWq/iHjTLY/K7ORC8eHtbc0S6Uz2kvOmbp8rvp/Ko=
Subject key identifier:   0B:66:38:8C:1F:B7:C8:B1:F1:B0:C5:32:71:C6:1E:47:5C:D7:80:21
Certificate issuer:       /CN=3a975a5d-2307-4688-a186-4a355ff45581
Certificate serial:       010D0C9F4328584CE62CC7E50C6AABDBA4A65A00
Authority key identifier: 0C:2D:81:CC:F7:46:F4:16:73:1E:6C:69:B6:5D:95:2B:82:6C:51:4C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3a975a5d-2307-4688-a186-4a355ff45581.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3a975a5d-2307-4688-a186-4a355ff45581/17250f54-5119-3396-8248-a8f3e305a3f8.roa
Signing time:             Wed 18 Feb 2026 02:00:31 +0000
ROA not before:           Wed 18 Feb 2026 02:00:31 +0000
ROA not after:            Tue 19 May 2026 01:00:31 +0000
asID:                     32473
IP address blocks:        2605:6740::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3a975a5d-2307-4688-a186-4a355ff45581/3a975a5d-2307-4688-a186-4a355ff45581.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3a975a5d-2307-4688-a186-4a355ff45581/3a975a5d-2307-4688-a186-4a355ff45581.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3a975a5d-2307-4688-a186-4a355ff45581.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:e6:2c:c7:e5:0c:6a:ab:db:a4:a6:5a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3a975a5d-2307-4688-a186-4a355ff45581
        Validity
            Not Before: Feb 18 02:00:31 2026 GMT
            Not After : May 19 01:00:31 2026 GMT
        Subject: CN=2764abc0-cddd-47f8-93d8-71f633779962
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:e0:dd:97:d2:ed:62:9c:b7:2a:c2:c8:e0:f9:
                    7e:e3:36:e5:d0:01:8b:40:6b:9a:da:d4:f6:86:8d:
                    69:5a:24:4e:f6:a9:6e:21:0e:8e:99:f7:be:a1:88:
                    30:14:e0:fd:ce:b7:49:1c:3f:3b:98:0d:69:0a:2c:
                    2a:ef:e6:97:4d:c0:8d:b4:61:41:cf:fb:67:44:62:
                    39:58:35:85:84:b4:76:00:8b:15:3e:85:ee:3d:a9:
                    02:13:27:07:9c:97:5c:10:25:99:1b:bf:5d:2d:3d:
                    98:fe:07:3b:31:25:bb:c8:2a:90:b5:9f:b2:5b:8c:
                    93:e1:cc:39:c1:e2:fd:d5:6a:6a:14:7e:88:db:54:
                    71:c9:66:e2:33:e5:c9:fd:6f:96:db:9e:78:bf:08:
                    0c:f8:dd:7b:cd:0e:2f:08:6a:d1:2c:63:f3:53:b7:
                    9c:7b:5e:be:31:be:a7:89:3c:05:e9:9b:c5:70:b7:
                    fa:9b:dd:e2:72:48:82:4d:13:cf:f1:0d:05:b8:b7:
                    23:bd:aa:37:f5:03:ee:4f:41:58:16:c3:28:e6:bb:
                    39:44:48:4b:49:14:54:e0:8b:69:af:81:2d:04:8c:
                    f6:dd:15:b3:2b:a1:aa:53:47:2e:8d:6d:56:9e:f9:
                    07:97:70:d5:da:0b:27:1b:d7:8f:37:d8:3d:8a:8d:
                    df:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:66:38:8C:1F:B7:C8:B1:F1:B0:C5:32:71:C6:1E:47:5C:D7:80:21
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3a975a5d-2307-4688-a186-4a355ff45581/17250f54-5119-3396-8248-a8f3e305a3f8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3a975a5d-2307-4688-a186-4a355ff45581/3a975a5d-2307-4688-a186-4a355ff45581.crl

            X509v3 Authority Key Identifier:
                keyid:0C:2D:81:CC:F7:46:F4:16:73:1E:6C:69:B6:5D:95:2B:82:6C:51:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3a975a5d-2307-4688-a186-4a355ff45581.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:6740::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:a1:31:21:d7:dd:a2:c9:91:7f:99:d5:1c:d7:5b:7d:cb:47:
         81:09:4d:57:4b:a5:bd:fa:60:c9:e9:ce:12:4d:f0:05:9a:10:
         91:e0:8c:55:d4:8a:4f:c7:6a:bc:6a:ad:2f:48:22:fa:32:9d:
         a4:be:9d:8c:36:86:e5:6e:62:de:e8:24:d4:9c:fb:5a:12:55:
         36:d8:69:8b:ba:25:05:20:64:d9:62:0a:c6:1d:88:e2:d6:76:
         8d:fe:c5:6e:e5:7e:9c:78:7f:99:31:40:af:c9:6a:bb:9b:57:
         f6:03:19:a4:91:d6:bb:fe:5d:c3:ed:19:b0:43:ac:35:9e:60:
         08:e5:8a:35:a5:10:3c:cf:2f:35:3b:38:c3:13:71:0f:9b:44:
         16:f9:69:27:33:56:e5:a3:52:e9:1f:d6:a6:9e:6c:2b:e4:76:
         a1:a7:af:33:70:61:89:d4:43:b7:d8:5f:9f:5d:6e:4a:cd:dc:
         82:61:52:75:81:c1:e4:39:59:cb:91:51:dd:fb:54:63:d1:68:
         ac:5e:02:2b:87:0e:00:d6:33:90:25:7f:b0:fd:0a:15:61:59:
         f8:b4:b1:34:d6:81:eb:d9:5f:31:f7:74:49:a1:9c:b2:d6:0d:
         46:c9:0d:d2:76:5f:3b:74:15:06:90:36:19:0c:ff:ac:6f:6d:
         a0:fe:47:8b
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEzmLMflDGqr26SmWgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2E5NzVhNWQtMjMwNy00Njg4LWExODYtNGEzNTVmZjQ1
NTgxMB4XDTI2MDIxODAyMDAzMVoXDTI2MDUxOTAxMDAzMVowLzEtMCsGA1UEAxMk
Mjc2NGFiYzAtY2RkZC00N2Y4LTkzZDgtNzFmNjMzNzc5OTYyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAreDdl9LtYpy3KsLI4Pl+4zbl0AGLQGua2tT2
ho1pWiRO9qluIQ6Omfe+oYgwFOD9zrdJHD87mA1pCiwq7+aXTcCNtGFBz/tnRGI5
WDWFhLR2AIsVPoXuPakCEycHnJdcECWZG79dLT2Y/gc7MSW7yCqQtZ+yW4yT4cw5
weL91WpqFH6I21RxyWbiM+XJ/W+W2554vwgM+N17zQ4vCGrRLGPzU7ece16+Mb6n
iTwF6ZvFcLf6m93ickiCTRPP8Q0FuLcjvao39QPuT0FYFsMo5rs5REhLSRRU4Itp
r4EtBIz23RWzK6GqU0cujW1WnvkHl3DV2gsnG9ePN9g9io3f0QIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFAtmOIwft8ix8bDFMnHGHkdc14AhMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8zYTk3
NWE1ZC0yMzA3LTQ2ODgtYTE4Ni00YTM1NWZmNDU1ODEvMTcyNTBmNTQtNTExOS0z
Mzk2LTgyNDgtYThmM2UzMDVhM2Y4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvM2E5NzVhNWQtMjMwNy00Njg4LWEx
ODYtNGEzNTVmZjQ1NTgxLzNhOTc1YTVkLTIzMDctNDY4OC1hMTg2LTRhMzU1ZmY0
NTU4MS5jcmwwHwYDVR0jBBgwFoAUDC2BzPdG9BZzHmxptl2VK4JsUUwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS8zYTk3NWE1ZC0yMzA3LTQ2ODgtYTE4Ni00YTM1
NWZmNDU1ODEuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgVnQDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQBSoTEh192iyZF/mdUc11t9y0eBCU1XS6W9+mDJ6c4STfAFmhCR4IxV
1IpPx2q8aq0vSCL6Mp2kvp2MNoblbmLe6CTUnPtaElU22GmLuiUFIGTZYgrGHYji
1naN/sVu5X6ceH+ZMUCvyWq7m1f2Axmkkda7/l3D7RmwQ6w1nmAI5Yo1pRA8zy81
OzjDE3EPm0QW+WknM1blo1LpH9amnmwr5Hahp68zcGGJ1EO32F+fXW5KzdyCYVJ1
gcHkOVnLkVHd+1Rj0WisXgIrhw4A1jOQJX+w/QoVYVn4tLE01oHr2V8x93RJoZyy
1g1GyQ3Sdl87dBUGkDYZDP+sb22g/keL
-----END CERTIFICATE-----
Generated at Mon Mar 2 21:56:58 2026 by rpki-client