Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e85b04ff-40d9-4bf7-8d38-4de0c54bb785/94457b64-2815-3821-9ce4-67d95b994827.roa
File:                     94457b64-2815-3821-9ce4-67d95b994827.roa (raw, json)
Hash identifier:          XpzNWkiBkZdj+Y8tabV24z0/xPBO4CwNaOsqcJlcTUc=
Subject key identifier:   7F:9C:CD:58:24:09:E2:99:58:B4:31:5A:61:E6:C6:8E:B3:27:A7:D1
Certificate issuer:       /CN=e85b04ff-40d9-4bf7-8d38-4de0c54bb785
Certificate serial:       010D0C9F4328584EA7A0859E19AA9150FCED4740
Authority key identifier: D6:BF:E3:FD:2D:90:49:61:AF:E1:E9:09:3F:B8:8F:2C:E4:E3:06:5A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e85b04ff-40d9-4bf7-8d38-4de0c54bb785.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e85b04ff-40d9-4bf7-8d38-4de0c54bb785/94457b64-2815-3821-9ce4-67d95b994827.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     15169
IP address blocks:        2620:33:c000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e85b04ff-40d9-4bf7-8d38-4de0c54bb785/e85b04ff-40d9-4bf7-8d38-4de0c54bb785.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e85b04ff-40d9-4bf7-8d38-4de0c54bb785/e85b04ff-40d9-4bf7-8d38-4de0c54bb785.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e85b04ff-40d9-4bf7-8d38-4de0c54bb785.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:a0:85:9e:19:aa:91:50:fc:ed:47:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e85b04ff-40d9-4bf7-8d38-4de0c54bb785
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=aae1b511-5d00-4a76-9f64-d87640be8f2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:7a:6f:b2:54:d6:96:f2:91:74:f0:ca:70:63:
                    d6:85:b5:59:8f:a1:47:5b:e2:28:82:ca:26:45:c1:
                    27:d5:75:0a:c0:c6:9c:6f:64:ba:e1:fd:e2:17:92:
                    ea:5f:33:d5:27:a8:93:1a:83:52:15:40:16:19:69:
                    01:b0:ef:bc:7b:a6:07:ac:54:ab:6e:9b:ba:f8:21:
                    c7:a0:63:e3:3e:9e:5e:61:2e:9a:ee:e7:7d:39:89:
                    30:21:5d:7d:85:97:62:cf:0b:36:db:a3:dc:1b:96:
                    1b:e9:24:fc:2e:10:47:5f:b9:f1:d4:d1:b6:b7:d0:
                    84:68:07:89:f8:7d:81:00:da:2a:46:66:a4:dc:ad:
                    91:31:07:d2:b1:dc:cd:80:38:f3:e5:4a:5c:83:88:
                    5a:68:49:72:43:5a:30:6d:0f:a7:eb:f6:92:a3:e7:
                    e8:94:bc:37:1c:c2:65:7c:9a:0e:8b:97:05:e0:82:
                    63:fd:c0:56:2e:47:03:4c:a1:1f:93:45:7e:57:1f:
                    71:f4:a8:ac:62:da:ab:30:fc:91:59:df:0a:c8:09:
                    99:f2:a9:51:9f:06:57:f9:ea:ef:28:f2:12:f4:2d:
                    f8:7e:88:d1:7c:c2:91:b4:57:ba:99:8a:2c:62:2b:
                    ac:5a:a6:65:40:e7:ed:a9:30:aa:da:13:78:4c:8e:
                    85:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:9C:CD:58:24:09:E2:99:58:B4:31:5A:61:E6:C6:8E:B3:27:A7:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e85b04ff-40d9-4bf7-8d38-4de0c54bb785/94457b64-2815-3821-9ce4-67d95b994827.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e85b04ff-40d9-4bf7-8d38-4de0c54bb785/e85b04ff-40d9-4bf7-8d38-4de0c54bb785.crl

            X509v3 Authority Key Identifier:
                keyid:D6:BF:E3:FD:2D:90:49:61:AF:E1:E9:09:3F:B8:8F:2C:E4:E3:06:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e85b04ff-40d9-4bf7-8d38-4de0c54bb785.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:33:c000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:43:28:6d:71:ad:81:16:32:1b:9c:bb:b0:d9:3e:92:25:87:
         ad:a3:6d:61:33:41:21:3a:46:7c:f0:84:32:a1:8e:09:09:55:
         fe:7c:47:75:2c:e1:66:cb:96:98:a1:7c:b9:95:d4:ef:3a:7a:
         67:3c:bd:2c:63:14:3c:46:54:5a:90:30:5e:4b:f3:51:9e:f8:
         82:13:c9:7e:ea:14:b5:90:fb:86:f5:5b:db:5b:93:cd:fd:86:
         2f:11:7e:45:ad:bd:94:f4:be:83:55:b0:d1:6b:dd:2f:53:78:
         6a:4e:7a:13:4e:f2:66:ea:9e:8b:35:3f:23:c5:df:d9:93:c4:
         b3:eb:fd:78:1f:e3:d7:13:04:4b:6d:8b:23:03:d8:40:01:7f:
         9c:98:b6:ca:f2:19:1a:33:c9:5e:94:59:e6:ba:7a:40:59:c1:
         61:a9:b7:52:66:c9:b4:a9:63:45:39:61:d8:e4:8b:51:5d:4c:
         7a:b7:64:41:54:ff:c0:09:ab:a6:71:98:b8:6e:da:34:d9:96:
         f1:86:73:5c:28:a9:53:9f:2e:80:2f:72:57:55:c9:a4:25:bb:
         36:fa:09:aa:9c:e6:5d:b7:6c:cf:03:c5:d5:3d:78:c2:91:d7:
         d7:0a:71:6d:5a:2b:d7:39:ac:36:eb:59:ca:ea:c3:45:2b:54:
         36:3b:31:4f
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE6noIWeGaqRUPztR0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTg1YjA0ZmYtNDBkOS00YmY3LThkMzgtNGRlMGM1NGJi
Nzg1MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
YWFlMWI1MTEtNWQwMC00YTc2LTlmNjQtZDg3NjQwYmU4ZjJiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlXpvslTWlvKRdPDKcGPWhbVZj6FHW+Iogsom
RcEn1XUKwMacb2S64f3iF5LqXzPVJ6iTGoNSFUAWGWkBsO+8e6YHrFSrbpu6+CHH
oGPjPp5eYS6a7ud9OYkwIV19hZdizws226PcG5Yb6ST8LhBHX7nx1NG2t9CEaAeJ
+H2BANoqRmak3K2RMQfSsdzNgDjz5Upcg4haaElyQ1owbQ+n6/aSo+folLw3HMJl
fJoOi5cF4IJj/cBWLkcDTKEfk0V+Vx9x9KisYtqrMPyRWd8KyAmZ8qlRnwZX+erv
KPIS9C34fojRfMKRtFe6mYosYiusWqZlQOftqTCq2hN4TI6FiwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFH+czVgkCeKZWLQxWmHmxo6zJ6fRMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lODVi
MDRmZi00MGQ5LTRiZjctOGQzOC00ZGUwYzU0YmI3ODUvOTQ0NTdiNjQtMjgxNS0z
ODIxLTljZTQtNjdkOTViOTk0ODI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZTg1YjA0ZmYtNDBkOS00YmY3LThk
MzgtNGRlMGM1NGJiNzg1L2U4NWIwNGZmLTQwZDktNGJmNy04ZDM4LTRkZTBjNTRi
Yjc4NS5jcmwwHwYDVR0jBBgwFoAU1r/j/S2QSWGv4ekJP7iPLOTjBlowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9lODViMDRmZi00MGQ5LTRiZjctOGQzOC00ZGUw
YzU0YmI3ODUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAM8AA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAIhDKG1xrYEWMhucu7DZPpIlh62jbWEzQSE6RnzwhDKhjgkJVf58
R3Us4WbLlpihfLmV1O86emc8vSxjFDxGVFqQMF5L81Ge+IITyX7qFLWQ+4b1W9tb
k839hi8RfkWtvZT0voNVsNFr3S9TeGpOehNO8mbqnos1PyPF39mTxLPr/Xgf49cT
BEttiyMD2EABf5yYtsryGRozyV6UWea6ekBZwWGpt1JmybSpY0U5Ydjki1FdTHq3
ZEFU/8AJq6ZxmLhu2jTZlvGGc1woqVOfLoAvcldVyaQluzb6Caqc5l23bM8DxdU9
eMKR19cKcW1aK9c5rDbrWcrqw0UrVDY7MU8=
-----END CERTIFICATE-----
Generated at Wed Jul 29 07:36:35 2026 by rpki-client