Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cbdc881f-54ac-40a9-89b3-5383cf243bae/cf2b3797-7be9-3b3a-ba2e-23e8cc77131d.roa
File:                     cf2b3797-7be9-3b3a-ba2e-23e8cc77131d.roa (raw, json)
Hash identifier:          2DLyAeYUTjKZKe7OWTiOqx5g7+ibR2he2YTDy6A0qhE=
Subject key identifier:   B5:74:1B:B5:C9:94:85:7F:37:4F:8B:1B:57:ED:D7:F4:0D:DF:59:0F
Certificate issuer:       /CN=cbdc881f-54ac-40a9-89b3-5383cf243bae
Certificate serial:       010D0C9F4328584D86955C0758980BED1E502900
Authority key identifier: 0B:77:9F:06:0B:42:75:84:12:DE:DC:60:66:74:A4:3B:3B:C5:1C:33
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cbdc881f-54ac-40a9-89b3-5383cf243bae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cbdc881f-54ac-40a9-89b3-5383cf243bae/cf2b3797-7be9-3b3a-ba2e-23e8cc77131d.roa
Signing time:             Thu 16 Apr 2026 13:00:31 +0000
ROA not before:           Thu 16 Apr 2026 13:00:31 +0000
ROA not after:            Wed 15 Jul 2026 13:00:31 +0000
asID:                     396982
IP address blocks:        2620:126:f000::/44 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cbdc881f-54ac-40a9-89b3-5383cf243bae/cbdc881f-54ac-40a9-89b3-5383cf243bae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cbdc881f-54ac-40a9-89b3-5383cf243bae/cbdc881f-54ac-40a9-89b3-5383cf243bae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cbdc881f-54ac-40a9-89b3-5383cf243bae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:86:95:5c:07:58:98:0b:ed:1e:50:29:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cbdc881f-54ac-40a9-89b3-5383cf243bae
        Validity
            Not Before: Apr 16 13:00:31 2026 GMT
            Not After : Jul 15 13:00:31 2026 GMT
        Subject: CN=f067ab50-eeb3-40a2-b377-cafe0ea7a6e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:5c:45:7e:00:ad:b4:27:2e:9c:d4:ab:5c:b4:
                    71:c5:f2:17:9e:7d:5c:e8:33:d6:cf:00:72:04:a8:
                    50:24:e1:fa:20:8d:cd:1e:dc:1f:fd:bd:54:61:d7:
                    d2:70:53:bd:4f:43:20:dc:22:31:c8:5d:d8:70:79:
                    a1:fb:fd:0f:96:92:0f:56:98:89:a7:9c:87:05:3a:
                    2a:ae:d4:70:7d:ad:4a:be:10:eb:d3:8b:bb:b3:43:
                    4c:d5:cf:a5:61:a0:c5:34:a1:ee:ba:38:63:14:1a:
                    44:67:1a:9a:0a:9a:b5:43:fb:24:c6:88:13:a6:dc:
                    ce:34:27:6c:50:1f:c5:86:d5:5c:0f:9c:7f:3a:77:
                    80:a0:60:0e:d9:26:c0:51:d9:9d:df:69:ba:71:1c:
                    43:ff:d0:4c:b6:24:0a:5b:f7:d4:0f:95:d3:89:97:
                    ab:e5:1a:a8:a4:44:4a:2c:81:98:ee:3a:78:7f:a9:
                    c0:22:76:81:9c:81:b4:8e:86:cd:47:93:e6:40:bc:
                    34:e0:37:6f:fd:f5:5b:10:3c:66:44:fe:be:c9:2c:
                    2a:4f:71:a9:11:0d:97:e8:38:a6:37:2c:6b:c5:49:
                    fd:f8:5a:55:c9:80:1a:41:2c:49:d1:69:15:f0:7c:
                    46:36:26:70:b5:14:3c:5e:24:5e:0d:6a:20:2c:67:
                    f7:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:74:1B:B5:C9:94:85:7F:37:4F:8B:1B:57:ED:D7:F4:0D:DF:59:0F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cbdc881f-54ac-40a9-89b3-5383cf243bae/cf2b3797-7be9-3b3a-ba2e-23e8cc77131d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cbdc881f-54ac-40a9-89b3-5383cf243bae/cbdc881f-54ac-40a9-89b3-5383cf243bae.crl

            X509v3 Authority Key Identifier:
                keyid:0B:77:9F:06:0B:42:75:84:12:DE:DC:60:66:74:A4:3B:3B:C5:1C:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cbdc881f-54ac-40a9-89b3-5383cf243bae.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:126:f000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:65:cc:5c:51:cb:f0:a2:05:46:98:d7:3d:5a:8f:59:2e:68:
         66:00:8c:8e:36:f1:6f:88:88:b7:1a:c1:97:a7:4a:c3:32:50:
         fe:43:66:34:d2:dc:f9:04:95:ed:09:37:93:51:68:79:f9:39:
         98:62:06:a5:d3:2e:49:e1:25:dd:d3:98:60:84:89:c9:d9:d5:
         df:1e:41:10:34:aa:fc:4c:9a:d0:88:c8:50:a6:89:1c:5c:d0:
         3a:32:f9:bb:ab:91:61:45:e5:3d:6b:72:a9:e5:12:30:04:03:
         e0:81:3d:8a:31:b7:63:2a:66:69:ac:1b:bf:e0:9e:5f:d5:03:
         f1:7a:10:0f:28:bb:f5:cb:b5:57:5a:78:ea:a4:fb:b6:91:76:
         ae:70:26:30:20:12:96:ab:a7:51:b1:3f:9a:63:a1:54:62:1e:
         c6:ec:76:27:44:ba:c9:74:31:b1:60:09:f7:80:f0:3c:b9:34:
         ca:5a:c8:e3:2c:79:74:eb:69:fe:02:29:78:3f:e4:ea:eb:13:
         df:17:fc:38:6f:87:83:32:d6:6a:27:3f:cd:0e:0a:d7:03:4c:
         54:20:51:2d:d8:e5:13:df:63:20:a9:a9:35:f0:15:ce:a4:69:
         61:76:65:da:ae:b5:74:2d:3e:e7:95:46:1a:4f:b1:88:5a:34:
         00:06:e0:ca
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE2GlVwHWJgL7R5QKQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2JkYzg4MWYtNTRhYy00MGE5LTg5YjMtNTM4M2NmMjQz
YmFlMB4XDTI2MDQxNjEzMDAzMVoXDTI2MDcxNTEzMDAzMVowLzEtMCsGA1UEAxMk
ZjA2N2FiNTAtZWViMy00MGEyLWIzNzctY2FmZTBlYTdhNmU2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlVxFfgCttCcunNSrXLRxxfIXnn1c6DPWzwBy
BKhQJOH6II3NHtwf/b1UYdfScFO9T0Mg3CIxyF3YcHmh+/0PlpIPVpiJp5yHBToq
rtRwfa1KvhDr04u7s0NM1c+lYaDFNKHuujhjFBpEZxqaCpq1Q/skxogTptzONCds
UB/FhtVcD5x/OneAoGAO2SbAUdmd32m6cRxD/9BMtiQKW/fUD5XTiZer5RqopERK
LIGY7jp4f6nAInaBnIG0jobNR5PmQLw04Ddv/fVbEDxmRP6+ySwqT3GpEQ2X6Dim
NyxrxUn9+FpVyYAaQSxJ0WkV8HxGNiZwtRQ8XiReDWogLGf3oQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFLV0G7XJlIV/N0+LG1ft1/QN31kPMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9jYmRj
ODgxZi01NGFjLTQwYTktODliMy01MzgzY2YyNDNiYWUvY2YyYjM3OTctN2JlOS0z
YjNhLWJhMmUtMjNlOGNjNzcxMzFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvY2JkYzg4MWYtNTRhYy00MGE5LTg5
YjMtNTM4M2NmMjQzYmFlL2NiZGM4ODFmLTU0YWMtNDBhOS04OWIzLTUzODNjZjI0
M2JhZS5jcmwwHwYDVR0jBBgwFoAUC3efBgtCdYQS3txgZnSkOzvFHDMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS9jYmRjODgxZi01NGFjLTQwYTktODliMy01Mzgz
Y2YyNDNiYWUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJiABJvAA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAJJlzFxRy/CiBUaY1z1aj1kuaGYAjI428W+IiLcawZenSsMyUP5D
ZjTS3PkEle0JN5NRaHn5OZhiBqXTLknhJd3TmGCEicnZ1d8eQRA0qvxMmtCIyFCm
iRxc0Doy+burkWFF5T1rcqnlEjAEA+CBPYoxt2MqZmmsG7/gnl/VA/F6EA8ou/XL
tVdaeOqk+7aRdq5wJjAgEparp1GxP5pjoVRiHsbsdidEusl0MbFgCfeA8Dy5NMpa
yOMseXTraf4CKXg/5OrrE98X/Dhvh4My1monP80OCtcDTFQgUS3Y5RPfYyCpqTXw
Fc6kaWF2ZdqutXQtPueVRhpPsYhaNAAG4Mo=
-----END CERTIFICATE-----
Generated at Fri Apr 17 18:37:14 2026 by rpki-client