Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/7cb8dcf7-79a5-388c-bb77-278790a84f7c.roa
File:                     7cb8dcf7-79a5-388c-bb77-278790a84f7c.roa (raw, json)
Hash identifier:          tAKL5m5Lvag04CIYLu5FobyxqW4LvjGvjZ1bnfFASuE=
Subject key identifier:   56:4E:AB:E9:A3:56:1E:84:9C:83:8F:B9:41:60:1E:8A:4C:71:5F:88
Certificate issuer:       /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial:       010D0C9F4328584CD4078056795E2FF3ADD498C0
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/7cb8dcf7-79a5-388c-bb77-278790a84f7c.roa
Signing time:             Wed 11 Feb 2026 14:00:41 +0000
ROA not before:           Wed 11 Feb 2026 14:00:41 +0000
ROA not after:            Tue 12 May 2026 13:00:41 +0000
asID:                     54113
IP address blocks:        2620:11a:c05d::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:d4:07:80:56:79:5e:2f:f3:ad:d4:98:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
        Validity
            Not Before: Feb 11 14:00:41 2026 GMT
            Not After : May 12 13:00:41 2026 GMT
        Subject: CN=1d565cd9-4a82-41dd-acd6-0ed53538a36b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:bf:8a:3b:5e:59:30:77:dd:d8:7e:cf:d8:b7:
                    c0:1e:75:83:b4:c0:c6:23:97:f9:a2:9a:08:7c:87:
                    20:62:be:80:8d:bb:58:b9:68:74:67:63:f7:29:b0:
                    d9:17:72:02:28:78:f3:d7:6e:ad:f3:42:22:1b:f9:
                    49:d9:bb:0c:62:ca:80:16:9f:0e:e2:16:8b:a0:7c:
                    7b:ea:f5:48:08:ac:55:42:6c:db:36:df:c5:f8:da:
                    ca:d2:04:a0:04:fd:b5:b1:64:f7:fe:12:3c:22:46:
                    31:6d:8c:f1:eb:c8:28:88:69:75:a9:12:91:8f:9b:
                    83:c7:7e:62:c9:8b:ef:fd:9f:d2:ba:2b:95:3e:19:
                    48:67:ec:ba:e3:c3:71:fb:56:9e:84:a8:90:e4:71:
                    99:39:6e:a3:e6:0d:46:8a:9d:86:64:6f:e4:ce:4c:
                    b4:66:54:6a:f0:7e:e6:ce:f3:fa:66:54:07:03:8c:
                    b8:9b:13:22:ff:32:45:00:de:11:c6:f0:ae:29:8e:
                    43:2e:81:36:88:75:2f:5f:e7:47:ea:d5:fd:00:6a:
                    6c:fc:73:62:f4:16:35:99:e0:84:e2:97:f9:fd:a1:
                    ec:eb:e2:e1:51:3e:a5:c1:e0:07:de:5b:2f:28:22:
                    c0:81:5e:78:c9:e5:c6:e4:49:32:2c:7a:11:b2:ef:
                    71:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:4E:AB:E9:A3:56:1E:84:9C:83:8F:B9:41:60:1E:8A:4C:71:5F:88
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/7cb8dcf7-79a5-388c-bb77-278790a84f7c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl

            X509v3 Authority Key Identifier:
                keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:11a:c05d::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:07:cc:bd:c1:c6:48:36:f3:27:b3:3a:97:5b:c4:58:ba:7f:
         22:0e:7d:ba:1f:e7:85:20:cd:c3:b3:62:0d:c3:84:00:0f:ce:
         d4:2d:b8:5e:98:62:14:8c:a3:f6:5d:9a:cd:30:81:7a:15:84:
         2b:f7:af:8a:cf:c9:51:32:bc:67:43:10:6d:bc:09:96:d2:df:
         6d:8b:0e:8d:11:db:b2:de:41:df:5a:9c:a1:8d:87:7a:62:8e:
         e1:48:15:18:ab:a3:05:66:13:f5:54:41:b3:70:0a:2a:60:74:
         0a:9f:d0:1f:61:ad:bb:8e:ec:25:3c:f4:86:c6:0f:9e:45:79:
         70:34:52:cd:67:9d:a6:81:26:41:0b:e6:9d:c7:49:da:fd:b4:
         ba:b6:cd:e2:59:aa:79:36:0b:ab:2f:1d:f9:60:fc:39:95:1e:
         84:f1:5d:05:ab:50:8b:a0:b0:5d:cf:35:53:d0:7c:e2:e6:76:
         61:99:1f:bc:12:2a:95:e5:8c:7d:8d:9c:2d:51:cf:d1:17:3c:
         c5:b5:78:38:59:3a:68:e6:35:00:04:a5:80:e3:0f:dc:e8:67:
         63:96:a8:dd:89:2d:27:b0:7a:e3:da:3a:96:4a:63:37:e9:6e:
         dd:ea:ac:3e:c3:13:06:9b:83:b9:cf:8f:45:89:7b:24:da:b7:
         c4:9a:32:05
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEzUB4BWeV4v863UmMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTYwNWYyNzktNTVmNC00OGVjLWJhMTMtNDg0NWMwOTcz
YTYzMB4XDTI2MDIxMTE0MDA0MVoXDTI2MDUxMjEzMDA0MVowLzEtMCsGA1UEAxMk
MWQ1NjVjZDktNGE4Mi00MWRkLWFjZDYtMGVkNTM1MzhhMzZiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg7+KO15ZMHfd2H7P2LfAHnWDtMDGI5f5opoI
fIcgYr6AjbtYuWh0Z2P3KbDZF3ICKHjz126t80IiG/lJ2bsMYsqAFp8O4haLoHx7
6vVICKxVQmzbNt/F+NrK0gSgBP21sWT3/hI8IkYxbYzx68goiGl1qRKRj5uDx35i
yYvv/Z/SuiuVPhlIZ+y648Nx+1aehKiQ5HGZOW6j5g1Gip2GZG/kzky0ZlRq8H7m
zvP6ZlQHA4y4mxMi/zJFAN4RxvCuKY5DLoE2iHUvX+dH6tX9AGps/HNi9BY1meCE
4pf5/aHs6+LhUT6lweAH3lsvKCLAgV54yeXG5EkyLHoRsu9x2QIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFFZOq+mjVh6EnIOPuUFgHopMcV+IMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1
ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1YzA5NzNhNjMvN2NiOGRjZjctNzlhNS0z
ODhjLWJiNzctMjc4NzkwYTg0ZjdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTYwNWYyNzktNTVmNC00OGVjLWJh
MTMtNDg0NWMwOTczYTYzL2U2MDVmMjc5LTU1ZjQtNDhlYy1iYTEzLTQ4NDVjMDk3
M2E2My5jcmwwHwYDVR0jBBgwFoAUD90BfdxrMy65FaN34JMqxNJo1/4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1
YzA5NzNhNjMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiABGsBd
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBADsHzL3Bxkg28yezOpdbxFi6fyIOfbof54UgzcOzYg3DhAAPztQt
uF6YYhSMo/Zdms0wgXoVhCv3r4rPyVEyvGdDEG28CZbS322LDo0R27LeQd9anKGN
h3pijuFIFRirowVmE/VUQbNwCipgdAqf0B9hrbuO7CU89IbGD55FeXA0Us1nnaaB
JkEL5p3HSdr9tLq2zeJZqnk2C6svHflg/DmVHoTxXQWrUIugsF3PNVPQfOLmdmGZ
H7wSKpXljH2NnC1Rz9EXPMW1eDhZOmjmNQAEpYDjD9zoZ2OWqN2JLSeweuPaOpZK
Yzfpbt3qrD7DEwabg7nPj0WJeyTat8SaMgU=
-----END CERTIFICATE-----
Generated at Mon Mar 2 19:09:14 2026 by rpki-client