Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/ffd406a8-5a81-3c59-8ede-ace6695d0187.roa
File:                     ffd406a8-5a81-3c59-8ede-ace6695d0187.roa (raw, json)
Hash identifier:          +ie7MkgRjQyIPxbO2ZnAnDleFZVCdLyIiQMSn7Py4/8=
Subject key identifier:   87:05:BA:36:3E:83:39:EA:B4:7F:8A:AD:DF:CF:DF:57:E6:21:0D:78
Certificate issuer:       /CN=208edf3a-73a5-4614-9c76-5702d5c88977
Certificate serial:       010D0C9F4328584D65151A37553059108CFC97A0
Authority key identifier: 8E:21:B9:9B:FC:3F:2A:52:82:94:D4:B0:85:BD:F7:BC:CF:3B:55:47
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/ffd406a8-5a81-3c59-8ede-ace6695d0187.roa
Signing time:             Sat 04 Apr 2026 13:00:29 +0000
ROA not before:           Sat 04 Apr 2026 13:00:29 +0000
ROA not after:            Fri 03 Jul 2026 13:00:29 +0000
asID:                     16509
IP address blocks:        2605:dd40:8990::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/208edf3a-73a5-4614-9c76-5702d5c88977.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/208edf3a-73a5-4614-9c76-5702d5c88977.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:65:15:1a:37:55:30:59:10:8c:fc:97:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=208edf3a-73a5-4614-9c76-5702d5c88977
        Validity
            Not Before: Apr  4 13:00:29 2026 GMT
            Not After : Jul  3 13:00:29 2026 GMT
        Subject: CN=87397a02-a67e-4334-b721-2b6722f8b389
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:e6:7e:87:c6:6a:79:6f:4b:bb:4e:0c:e6:84:
                    71:72:fb:1f:00:10:33:84:a6:82:76:b2:ff:5b:bf:
                    ac:7d:22:71:6b:3f:0a:5c:41:83:97:51:7d:1a:0d:
                    35:f8:a5:5f:c9:0d:cd:4e:f1:9f:cd:9e:a8:63:42:
                    83:be:a3:45:70:b1:63:0b:95:cb:5d:6a:45:c2:0d:
                    3d:28:b6:b3:d5:50:f7:88:58:0c:04:e1:e1:98:7b:
                    46:25:8e:de:9a:6b:46:aa:fa:3c:e0:ed:d8:fd:eb:
                    7f:e7:87:f5:13:26:9c:c8:80:d1:06:a0:60:f2:79:
                    57:c3:8b:84:5d:5d:c8:e1:89:ef:ee:70:fb:dd:87:
                    15:65:3e:b1:ed:cd:08:ab:38:6c:ac:da:94:aa:fb:
                    54:0a:ab:aa:3e:b5:1f:48:b6:01:81:4b:c4:ad:48:
                    cb:0d:ff:ce:7b:b8:3b:90:53:dc:ed:9c:d5:9e:fc:
                    fe:45:07:65:ca:5d:90:99:d0:dc:20:b0:c1:89:c7:
                    8a:96:65:81:3f:21:dc:3a:df:64:a6:07:69:ab:b9:
                    48:65:53:de:8b:e6:ad:54:9d:96:c2:4d:1a:c1:ce:
                    81:b2:43:62:b7:16:e9:78:ca:0a:cb:c1:94:2d:fe:
                    35:03:16:1a:3c:37:61:d0:6a:85:4c:15:1b:2b:c9:
                    47:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:05:BA:36:3E:83:39:EA:B4:7F:8A:AD:DF:CF:DF:57:E6:21:0D:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/ffd406a8-5a81-3c59-8ede-ace6695d0187.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/208edf3a-73a5-4614-9c76-5702d5c88977.crl

            X509v3 Authority Key Identifier:
                keyid:8E:21:B9:9B:FC:3F:2A:52:82:94:D4:B0:85:BD:F7:BC:CF:3B:55:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:dd40:8990::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:6f:36:f1:33:e0:64:89:62:ea:b0:8d:1a:62:19:7c:e0:2c:
         f6:12:ac:f6:e8:e9:98:df:21:a6:1a:af:0e:f9:b9:39:45:43:
         72:d4:4e:57:eb:08:26:9e:36:54:1d:01:9e:bc:46:42:06:00:
         59:0f:d2:88:e3:a3:d9:4e:af:26:32:a5:95:84:a1:7e:a9:8e:
         29:e1:fe:93:5c:4f:f4:d5:0f:9b:38:cb:68:47:e8:e5:11:b2:
         33:92:76:ef:29:52:11:74:8f:96:1e:22:3d:3d:30:46:06:69:
         9b:22:d9:e1:22:13:c0:69:97:66:55:0e:d4:2a:0e:8d:a5:44:
         1b:e0:2a:63:c2:b3:3f:9e:7d:30:4a:61:ac:4b:52:08:1f:8e:
         14:87:a8:48:1c:9b:0a:0f:1b:eb:b8:8e:47:e7:b1:33:a2:b1:
         66:38:32:2f:a4:74:63:69:66:e2:3e:85:cd:b3:96:c9:0c:8a:
         b7:be:03:89:fd:6e:3f:44:a5:20:8b:34:38:21:68:32:b8:85:
         a5:28:31:b7:bf:11:81:8a:3e:88:3d:2e:f8:68:54:f6:4c:90:
         12:46:70:87:65:b2:5e:0f:22:a6:b0:3a:b7:49:d4:e3:f5:45:
         31:a1:90:40:c7:5e:82:96:57:32:8a:83:bf:64:14:c2:f7:94:
         3d:11:e4:6a
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE1lFRo3VTBZEIz8l6AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjA4ZWRmM2EtNzNhNS00NjE0LTljNzYtNTcwMmQ1Yzg4
OTc3MB4XDTI2MDQwNDEzMDAyOVoXDTI2MDcwMzEzMDAyOVowLzEtMCsGA1UEAxMk
ODczOTdhMDItYTY3ZS00MzM0LWI3MjEtMmI2NzIyZjhiMzg5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvOZ+h8ZqeW9Lu04M5oRxcvsfABAzhKaCdrL/
W7+sfSJxaz8KXEGDl1F9Gg01+KVfyQ3NTvGfzZ6oY0KDvqNFcLFjC5XLXWpFwg09
KLaz1VD3iFgMBOHhmHtGJY7emmtGqvo84O3Y/et/54f1EyacyIDRBqBg8nlXw4uE
XV3I4Ynv7nD73YcVZT6x7c0IqzhsrNqUqvtUCquqPrUfSLYBgUvErUjLDf/Oe7g7
kFPc7ZzVnvz+RQdlyl2QmdDcILDBiceKlmWBPyHcOt9kpgdpq7lIZVPei+atVJ2W
wk0awc6BskNitxbpeMoKy8GULf41AxYaPDdh0GqFTBUbK8lHkwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFIcFujY+gznqtH+Krd/P31fmIQ14MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yMDhl
ZGYzYS03M2E1LTQ2MTQtOWM3Ni01NzAyZDVjODg5NzcvZmZkNDA2YTgtNWE4MS0z
YzU5LThlZGUtYWNlNjY5NWQwMTg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjA4ZWRmM2EtNzNhNS00NjE0LTlj
NzYtNTcwMmQ1Yzg4OTc3LzIwOGVkZjNhLTczYTUtNDYxNC05Yzc2LTU3MDJkNWM4
ODk3Ny5jcmwwHwYDVR0jBBgwFoAUjiG5m/w/KlKClNSwhb33vM87VUcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8yMDhlZGYzYS03M2E1LTQ2MTQtOWM3Ni01NzAy
ZDVjODg5NzcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgXdQImQ
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAIRvNvEz4GSJYuqwjRpiGXzgLPYSrPbo6ZjfIaYarw75uTlFQ3LU
TlfrCCaeNlQdAZ68RkIGAFkP0ojjo9lOryYypZWEoX6pjinh/pNcT/TVD5s4y2hH
6OURsjOSdu8pUhF0j5YeIj09MEYGaZsi2eEiE8Bpl2ZVDtQqDo2lRBvgKmPCsz+e
fTBKYaxLUggfjhSHqEgcmwoPG+u4jkfnsTOisWY4Mi+kdGNpZuI+hc2zlskMire+
A4n9bj9EpSCLNDghaDK4haUoMbe/EYGKPog9LvhoVPZMkBJGcIdlsl4PIqawOrdJ
1OP1RTGhkEDHXoKWVzKKg79kFML3lD0R5Go=
-----END CERTIFICATE-----
Generated at Sat Apr 18 00:07:35 2026 by rpki-client