Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9bab9993-92bd-4c12-b0ca-ba2a956443fb/471d23e5-bef4-373e-8d48-3e1b342314df.roa
File:                     471d23e5-bef4-373e-8d48-3e1b342314df.roa (raw, json)
Hash identifier:          EgW8/pIwy2veO7uIcnmenb5EWU7rMQnXuXA7YajNLcs=
Subject key identifier:   F0:13:D5:98:7F:CD:D1:37:4D:AC:B1:B9:34:E1:2D:2C:ED:C2:4D:D5
Certificate issuer:       /CN=9bab9993-92bd-4c12-b0ca-ba2a956443fb
Certificate serial:       010D0C9F4328584F1C45FA68A7B39AA106FFEE80
Authority key identifier: 99:68:17:14:1B:4D:C7:D5:60:8F:CE:77:1E:90:E3:76:95:15:74:4F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9bab9993-92bd-4c12-b0ca-ba2a956443fb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9bab9993-92bd-4c12-b0ca-ba2a956443fb/471d23e5-bef4-373e-8d48-3e1b342314df.roa
Signing time:             Tue 08 Sep 2026 20:39:05 +0000
ROA not before:           Tue 08 Sep 2026 20:39:05 +0000
ROA not after:            Mon 07 Dec 2026 21:39:05 +0000
asID:                     14174
IP address blocks:        2605:dc40::/32 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9bab9993-92bd-4c12-b0ca-ba2a956443fb/9bab9993-92bd-4c12-b0ca-ba2a956443fb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9bab9993-92bd-4c12-b0ca-ba2a956443fb/9bab9993-92bd-4c12-b0ca-ba2a956443fb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9bab9993-92bd-4c12-b0ca-ba2a956443fb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:1c:45:fa:68:a7:b3:9a:a1:06:ff:ee:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9bab9993-92bd-4c12-b0ca-ba2a956443fb
        Validity
            Not Before: Sep  8 20:39:05 2026 GMT
            Not After : Dec  7 21:39:05 2026 GMT
        Subject: CN=717e5853-c44d-4cee-b7c7-d71fa1253049
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:9c:81:94:c1:c9:6c:53:5a:8d:eb:47:27:31:
                    49:55:ef:b9:06:ed:ec:8d:0f:d3:92:89:73:4e:80:
                    93:eb:d8:50:93:76:5f:84:e7:7c:bf:76:46:06:04:
                    2f:8b:9f:65:5b:c3:44:47:f1:a4:c8:51:b7:2e:8b:
                    5c:d1:f3:1a:74:7a:e3:6f:a2:91:06:b0:ae:8e:0a:
                    c0:ac:36:ad:e4:f3:bf:bb:0b:ed:f7:ad:1d:e0:6b:
                    9b:66:bd:f5:c4:94:f0:09:07:6a:b4:88:19:94:f1:
                    47:64:75:67:bb:0f:13:13:54:98:13:cf:10:ca:04:
                    ad:40:e2:c8:94:b1:2f:42:7b:78:9a:e0:14:c1:e0:
                    6e:8f:f2:6c:5d:f4:72:5d:a4:2b:5d:af:84:e9:31:
                    9a:30:06:e4:c9:6d:ed:4e:5f:51:8e:7e:5d:b3:34:
                    c1:44:1d:fe:9e:d8:7b:e3:85:91:ec:86:7c:f4:c6:
                    a6:87:07:5c:16:ec:1d:b7:e5:10:ca:4f:1e:95:df:
                    49:81:c4:6d:ea:22:29:ec:b2:06:ee:b1:02:63:27:
                    74:0d:d2:2a:a5:58:1d:73:de:bd:9d:49:f2:7e:09:
                    a2:60:f7:0b:49:62:64:6b:70:3e:84:90:46:ca:c5:
                    d4:eb:e9:ec:7a:d9:d4:99:64:4d:75:84:4c:80:eb:
                    fe:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:13:D5:98:7F:CD:D1:37:4D:AC:B1:B9:34:E1:2D:2C:ED:C2:4D:D5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9bab9993-92bd-4c12-b0ca-ba2a956443fb/471d23e5-bef4-373e-8d48-3e1b342314df.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9bab9993-92bd-4c12-b0ca-ba2a956443fb/9bab9993-92bd-4c12-b0ca-ba2a956443fb.crl

            X509v3 Authority Key Identifier:
                keyid:99:68:17:14:1B:4D:C7:D5:60:8F:CE:77:1E:90:E3:76:95:15:74:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9bab9993-92bd-4c12-b0ca-ba2a956443fb.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:dc40::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c6:f7:ad:59:b8:ec:96:43:52:33:37:c3:a7:dc:0b:fd:13:35:
         11:58:1c:47:2d:19:84:22:70:0e:01:6c:cf:7e:38:a4:94:20:
         be:43:90:9f:b2:3a:e2:01:a4:7f:fb:e3:c6:e6:22:72:cf:20:
         96:c1:f0:8e:02:e1:6c:16:c4:12:e6:87:9b:90:8d:f3:57:95:
         b4:ad:f3:58:7b:3a:a3:a3:a9:bf:f2:b2:dc:79:df:ed:c7:84:
         82:26:d9:28:e2:81:cd:63:c5:2c:41:76:4e:87:32:0c:8e:b1:
         f0:1d:27:c2:40:39:1f:ab:ab:6f:d9:c6:b5:34:6a:6e:60:9d:
         05:5a:79:23:73:a5:47:df:01:a8:9a:45:42:7e:c0:26:97:0d:
         d1:23:5a:40:2c:0a:ba:b1:0f:94:15:e5:1a:dc:9a:10:99:6e:
         02:b1:cf:8d:3b:7a:0b:10:d8:88:23:de:b6:4d:f7:17:2d:6d:
         c5:90:4d:0c:76:ce:ac:ea:43:a0:4d:18:39:94:b7:ff:3b:41:
         b7:9a:40:1d:65:d3:16:34:ad:5a:0c:9f:26:e1:de:c1:14:e2:
         57:18:2b:b2:b7:76:58:a9:f4:a0:99:7a:8b:30:e5:06:09:09:
         8e:52:9b:11:9a:ee:e2:7d:69:37:58:ca:81:c7:d0:44:19:a9:
         55:ec:73:0d
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE8cRfpop7OaoQb/7oAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOWJhYjk5OTMtOTJiZC00YzEyLWIwY2EtYmEyYTk1NjQ0
M2ZiMB4XDTI2MDkwODIwMzkwNVoXDTI2MTIwNzIxMzkwNVowLzEtMCsGA1UEAxMk
NzE3ZTU4NTMtYzQ0ZC00Y2VlLWI3YzctZDcxZmExMjUzMDQ5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmpyBlMHJbFNajetHJzFJVe+5Bu3sjQ/Tkolz
ToCT69hQk3ZfhOd8v3ZGBgQvi59lW8NER/GkyFG3Lotc0fMadHrjb6KRBrCujgrA
rDat5PO/uwvt960d4GubZr31xJTwCQdqtIgZlPFHZHVnuw8TE1SYE88QygStQOLI
lLEvQnt4muAUweBuj/JsXfRyXaQrXa+E6TGaMAbkyW3tTl9Rjn5dszTBRB3+nth7
44WR7IZ89MamhwdcFuwdt+UQyk8eld9JgcRt6iIp7LIG7rECYyd0DdIqpVgdc969
nUnyfgmiYPcLSWJka3A+hJBGysXU6+nsetnUmWRNdYRMgOv+DwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFPAT1Zh/zdE3TayxuTThLSztwk3VMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS85YmFi
OTk5My05MmJkLTRjMTItYjBjYS1iYTJhOTU2NDQzZmIvNDcxZDIzZTUtYmVmNC0z
NzNlLThkNDgtM2UxYjM0MjMxNGRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOWJhYjk5OTMtOTJiZC00YzEyLWIw
Y2EtYmEyYTk1NjQ0M2ZiLzliYWI5OTkzLTkyYmQtNGMxMi1iMGNhLWJhMmE5NTY0
NDNmYi5jcmwwHwYDVR0jBBgwFoAUmWgXFBtNx9Vgj853HpDjdpUVdE8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS85YmFiOTk5My05MmJkLTRjMTItYjBjYS1iYTJh
OTU2NDQzZmIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgXcQDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQDG961ZuOyWQ1IzN8On3Av9EzURWBxHLRmEInAOAWzPfjiklCC+Q5Cf
sjriAaR/++PG5iJyzyCWwfCOAuFsFsQS5oebkI3zV5W0rfNYezqjo6m/8rLced/t
x4SCJtko4oHNY8UsQXZOhzIMjrHwHSfCQDkfq6tv2ca1NGpuYJ0FWnkjc6VH3wGo
mkVCfsAmlw3RI1pALAq6sQ+UFeUa3JoQmW4Csc+NO3oLENiII962TfcXLW3FkE0M
ds6s6kOgTRg5lLf/O0G3mkAdZdMWNK1aDJ8m4d7BFOJXGCuyt3ZYqfSgmXqLMOUG
CQmOUpsRmu7ifWk3WMqBx9BEGalV7HMN
-----END CERTIFICATE-----
Generated at Tue Sep 22 19:21:53 2026 by rpki-client