Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168/ac57ba9e-c065-36da-ad5a-6f1537123b24.roa
File:                     ac57ba9e-c065-36da-ad5a-6f1537123b24.roa (raw, json)
Hash identifier:          +PAQlZhfNNoz9OK/kznOcfP1LtTMKjHaVSMDHNX5S4s=
Subject key identifier:   4C:73:6C:43:A7:0C:4F:89:C3:A9:35:C2:66:C4:10:68:6E:F1:52:22
Certificate issuer:       /CN=2de5d746-3402-4263-b880-ea4d7ecfc168
Certificate serial:       010D0C9F4328584EA6C7492FC15892D366D014A0
Authority key identifier: 6B:BB:D0:04:79:CD:D6:C4:66:C1:FB:C0:6A:58:3A:2A:15:6D:48:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168/ac57ba9e-c065-36da-ad5a-6f1537123b24.roa
Signing time:             Tue 28 Jul 2026 18:34:14 +0000
ROA not before:           Tue 28 Jul 2026 18:34:14 +0000
ROA not after:            Mon 26 Oct 2026 18:34:14 +0000
asID:                     22359
IP address blocks:        2607:8240:ff0a::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168/2de5d746-3402-4263-b880-ea4d7ecfc168.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168/2de5d746-3402-4263-b880-ea4d7ecfc168.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 31 Jul 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a6:c7:49:2f:c1:58:92:d3:66:d0:14:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2de5d746-3402-4263-b880-ea4d7ecfc168
        Validity
            Not Before: Jul 28 18:34:14 2026 GMT
            Not After : Oct 26 18:34:14 2026 GMT
        Subject: CN=f65496b3-da7d-4793-bcfe-262b3746a646
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:bb:a8:3a:67:41:8e:b4:b0:a6:5d:9d:c8:7c:
                    ce:8c:ce:76:b3:3a:25:18:2c:56:0e:be:6a:10:f2:
                    4f:b3:29:d2:96:81:d9:a4:d1:1e:59:bf:d0:fa:21:
                    75:e6:c1:52:27:ca:8f:b8:f9:ef:64:bc:e2:60:1d:
                    d5:e7:9c:d3:dd:59:40:69:06:02:07:f7:4e:59:6d:
                    c5:c7:5c:76:c9:aa:66:30:ea:c4:2f:73:a0:17:e9:
                    90:3c:e2:aa:30:0e:05:c2:b4:df:d7:ba:87:af:5a:
                    5f:e1:f4:8e:0d:68:9f:a9:f0:57:f4:b2:9c:98:22:
                    b2:3b:c4:88:c6:73:1f:b8:e9:4e:31:d4:f9:3b:e2:
                    56:14:ed:ef:d2:7f:b7:fe:b6:d2:82:2a:d8:88:78:
                    fc:58:0b:85:8a:27:a0:5e:e9:9f:c0:c8:10:a1:3e:
                    a8:79:c2:49:4e:46:f3:c3:80:1b:57:91:ad:4e:d6:
                    24:85:42:f1:94:25:0d:e0:f6:2a:ef:27:8d:05:e4:
                    11:78:87:b0:69:74:00:7a:88:83:7f:94:cc:6a:93:
                    86:a0:63:53:cb:1d:18:92:7e:73:64:b7:94:44:2e:
                    27:7c:2b:b6:9f:e8:88:55:0a:c0:18:6b:25:d0:a5:
                    26:11:7e:47:7a:de:2e:33:34:64:a9:34:7e:5f:6d:
                    cd:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:73:6C:43:A7:0C:4F:89:C3:A9:35:C2:66:C4:10:68:6E:F1:52:22
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168/ac57ba9e-c065-36da-ad5a-6f1537123b24.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168/2de5d746-3402-4263-b880-ea4d7ecfc168.crl

            X509v3 Authority Key Identifier:
                keyid:6B:BB:D0:04:79:CD:D6:C4:66:C1:FB:C0:6A:58:3A:2A:15:6D:48:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8240:ff0a::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:de:6b:c8:8c:43:fb:45:71:56:de:1a:53:ee:de:03:68:7f:
         80:ea:d5:63:96:79:e0:cc:f3:67:9a:77:c5:a7:74:a8:26:b3:
         be:34:17:80:49:10:ec:6c:0c:de:38:db:9b:ff:01:1e:56:e4:
         0f:f5:f5:33:16:b5:f0:2d:11:32:83:fd:4b:e8:f9:ed:09:ba:
         7c:5e:8d:b3:a1:a7:14:d0:1d:65:2b:26:99:c8:a2:10:f2:80:
         67:e1:59:2d:2d:a3:ca:99:67:71:c4:91:d5:d7:26:4f:fa:21:
         5f:17:38:02:d3:1e:19:10:bc:cb:fc:d8:bc:82:5c:a2:06:fc:
         b8:41:1e:e8:94:ed:32:68:c9:78:bf:62:fa:9b:05:2a:d1:b8:
         e9:fc:b8:1a:8f:21:11:30:04:05:72:36:b6:4b:c6:b2:fd:74:
         70:e6:7e:87:fa:07:3b:7b:ad:0d:ec:4f:bc:2d:12:b2:a1:24:
         6a:29:d1:6e:15:b0:d5:3d:6a:ad:13:75:5d:4c:ad:20:b4:24:
         81:71:58:c9:7b:a5:68:04:49:40:a5:07:da:1f:e5:e4:47:4c:
         79:17:d8:a7:3f:6b:0e:57:bf:7c:60:da:f6:a8:b8:0f:7f:2b:
         1a:f4:3d:96:9e:bd:82:ed:20:55:38:c3:45:df:cb:81:47:f2:
         1e:80:43:42
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE6mx0kvwViS02bQFKAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmRlNWQ3NDYtMzQwMi00MjYzLWI4ODAtZWE0ZDdlY2Zj
MTY4MB4XDTI2MDcyODE4MzQxNFoXDTI2MTAyNjE4MzQxNFowLzEtMCsGA1UEAxMk
ZjY1NDk2YjMtZGE3ZC00NzkzLWJjZmUtMjYyYjM3NDZhNjQ2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApLuoOmdBjrSwpl2dyHzOjM52szolGCxWDr5q
EPJPsynSloHZpNEeWb/Q+iF15sFSJ8qPuPnvZLziYB3V55zT3VlAaQYCB/dOWW3F
x1x2yapmMOrEL3OgF+mQPOKqMA4FwrTf17qHr1pf4fSODWifqfBX9LKcmCKyO8SI
xnMfuOlOMdT5O+JWFO3v0n+3/rbSgirYiHj8WAuFiiegXumfwMgQoT6oecJJTkbz
w4AbV5GtTtYkhULxlCUN4PYq7yeNBeQReIewaXQAeoiDf5TMapOGoGNTyx0Ykn5z
ZLeURC4nfCu2n+iIVQrAGGsl0KUmEX5Het4uMzRkqTR+X23NbwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFExzbEOnDE+Jw6k1wmbEEGhu8VIiMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8yZGU1
ZDc0Ni0zNDAyLTQyNjMtYjg4MC1lYTRkN2VjZmMxNjgvYWM1N2JhOWUtYzA2NS0z
NmRhLWFkNWEtNmYxNTM3MTIzYjI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMmRlNWQ3NDYtMzQwMi00MjYzLWI4
ODAtZWE0ZDdlY2ZjMTY4LzJkZTVkNzQ2LTM0MDItNDI2My1iODgwLWVhNGQ3ZWNm
YzE2OC5jcmwwHwYDVR0jBBgwFoAUa7vQBHnN1sRmwfvAalg6KhVtSHwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy8yZGU1ZDc0Ni0zNDAyLTQyNjMtYjg4MC1lYTRk
N2VjZmMxNjguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgeCQP8K
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAC/ea8iMQ/tFcVbeGlPu3gNof4Dq1WOWeeDM82ead8WndKgms740
F4BJEOxsDN4425v/AR5W5A/19TMWtfAtETKD/Uvo+e0JunxejbOhpxTQHWUrJpnI
ohDygGfhWS0to8qZZ3HEkdXXJk/6IV8XOALTHhkQvMv82LyCXKIG/LhBHuiU7TJo
yXi/YvqbBSrRuOn8uBqPIREwBAVyNrZLxrL9dHDmfof6Bzt7rQ3sT7wtErKhJGop
0W4VsNU9aq0TdV1MrSC0JIFxWMl7pWgESUClB9of5eRHTHkX2Kc/aw5Xv3xg2vao
uA9/Kxr0PZaevYLtIFU4w0Xfy4FH8h6AQ0I=
-----END CERTIFICATE-----
Generated at Thu Jul 30 00:29:40 2026 by rpki-client