Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4182a0d-d744-441b-a850-e3f85aa3aafb/3a4e1ddc-b802-3982-afa2-4be29cd9fa95.roa
File:                     3a4e1ddc-b802-3982-afa2-4be29cd9fa95.roa (raw, json)
Hash identifier:          NtTrda2kJo46T2txpf/5O+UeKEQG3EP8gshc8+hindE=
Subject key identifier:   F4:47:12:D0:3F:35:01:FC:67:DB:36:28:43:DF:51:B6:CC:8A:CD:E3
Certificate issuer:       /CN=c4182a0d-d744-441b-a850-e3f85aa3aafb
Certificate serial:       010D0C9F4328584DE41B263C39397A3A49AF9180
Authority key identifier: 2B:B1:91:D5:B4:CC:C3:BC:8A:7D:2F:CB:18:C8:09:FC:E6:99:C0:22
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4182a0d-d744-441b-a850-e3f85aa3aafb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4182a0d-d744-441b-a850-e3f85aa3aafb/3a4e1ddc-b802-3982-afa2-4be29cd9fa95.roa
Signing time:             Wed 20 May 2026 01:00:25 +0000
ROA not before:           Wed 20 May 2026 01:00:25 +0000
ROA not after:            Tue 18 Aug 2026 01:00:25 +0000
asID:                     14618
IP address blocks:        2620:135:7018::/56 maxlen: 56
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4182a0d-d744-441b-a850-e3f85aa3aafb/c4182a0d-d744-441b-a850-e3f85aa3aafb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4182a0d-d744-441b-a850-e3f85aa3aafb/c4182a0d-d744-441b-a850-e3f85aa3aafb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4182a0d-d744-441b-a850-e3f85aa3aafb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e4:1b:26:3c:39:39:7a:3a:49:af:91:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c4182a0d-d744-441b-a850-e3f85aa3aafb
        Validity
            Not Before: May 20 01:00:25 2026 GMT
            Not After : Aug 18 01:00:25 2026 GMT
        Subject: CN=af99d6e8-bff4-4319-a7f7-c8c01d01b9ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:2e:34:97:f2:46:b2:b7:fe:65:d7:a6:4e:26:
                    86:68:34:af:ca:60:37:94:48:62:51:71:81:96:4f:
                    f1:ae:48:3f:66:d7:7f:e3:b7:62:ce:e6:c9:46:1e:
                    ef:20:d2:94:ec:7c:e5:8f:13:9b:60:26:eb:94:4f:
                    87:02:4a:74:30:86:2e:3a:ab:76:0a:dc:cf:d1:f9:
                    ff:3e:70:dc:c2:42:35:b6:1b:02:ab:cc:d2:9a:bd:
                    73:4e:dc:ae:8c:46:1d:34:25:cc:27:74:49:f6:5a:
                    67:19:0a:b8:49:66:c7:f3:22:91:c4:f9:8f:45:8d:
                    58:45:df:3b:cb:8c:9d:57:15:e3:33:10:fb:b3:f0:
                    1f:40:82:bc:00:5c:fd:eb:71:4d:05:ff:13:ae:98:
                    03:8c:5b:75:ec:e0:0e:4d:19:3f:48:95:a1:47:98:
                    26:20:1c:b7:8b:2e:c6:65:8b:4d:a3:6c:66:99:e1:
                    0e:3a:0b:6c:94:98:3c:49:49:c6:ea:bd:40:d0:ed:
                    c9:0e:32:36:2d:33:63:e5:e9:30:f0:ff:7b:80:ec:
                    99:08:1b:d6:d7:3f:e2:55:32:34:69:5c:d7:1d:a7:
                    7a:53:a3:e4:59:e2:5e:f2:63:65:ee:c1:42:3a:d7:
                    18:29:2c:2c:85:f6:86:1d:08:02:bd:9d:24:4d:e9:
                    b6:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:47:12:D0:3F:35:01:FC:67:DB:36:28:43:DF:51:B6:CC:8A:CD:E3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4182a0d-d744-441b-a850-e3f85aa3aafb/3a4e1ddc-b802-3982-afa2-4be29cd9fa95.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4182a0d-d744-441b-a850-e3f85aa3aafb/c4182a0d-d744-441b-a850-e3f85aa3aafb.crl

            X509v3 Authority Key Identifier:
                keyid:2B:B1:91:D5:B4:CC:C3:BC:8A:7D:2F:CB:18:C8:09:FC:E6:99:C0:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4182a0d-d744-441b-a850-e3f85aa3aafb.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:135:7018::/56

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9e:fe:36:07:55:1a:aa:eb:89:d9:93:34:76:25:50:8b:07:be:
         d6:ae:f9:73:85:8c:c2:a1:c2:ed:5e:5d:4f:62:91:e6:c8:57:
         f7:c2:5d:84:e1:6e:aa:fc:8d:3a:67:c9:06:a5:55:ca:15:1a:
         95:fd:08:02:a9:38:11:33:01:af:6b:aa:7b:f6:8d:3f:51:15:
         64:c0:e9:bd:cf:04:39:42:ed:8e:68:36:57:04:11:d0:82:37:
         c6:cf:62:1e:65:c7:90:8b:6f:09:aa:cc:81:f3:b0:c9:c6:f5:
         64:4c:0d:fe:49:23:5b:5b:8a:eb:8d:16:f8:f6:bf:1e:16:bf:
         2d:10:ed:7c:2c:2b:9b:74:4c:ba:bf:f8:f0:88:ba:a4:88:c0:
         49:39:2d:1a:12:9b:1d:82:89:97:7a:0c:1b:8f:22:b9:06:71:
         82:e1:b5:fa:9f:ec:d8:20:ff:73:34:4d:b2:c9:14:85:b0:e7:
         1c:bd:44:5f:4c:21:fc:94:16:fc:81:fe:9b:98:5a:49:b2:42:
         d3:c6:82:f8:b8:32:3d:7c:13:36:e7:20:65:0d:e4:6c:80:57:
         e2:20:39:8c:02:e6:63:05:aa:6e:9a:9a:2e:bd:63:25:26:f3:
         75:40:eb:e4:ae:c4:70:41:e3:98:3f:e2:39:71:df:9b:94:9b:
         3d:ad:63:49
-----BEGIN CERTIFICATE-----
MIIGRzCCBS+gAwIBAgIUAQ0Mn0MoWE3kGyY8OTl6OkmvkYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzQxODJhMGQtZDc0NC00NDFiLWE4NTAtZTNmODVhYTNh
YWZiMB4XDTI2MDUyMDAxMDAyNVoXDTI2MDgxODAxMDAyNVowLzEtMCsGA1UEAxMk
YWY5OWQ2ZTgtYmZmNC00MzE5LWE3ZjctYzhjMDFkMDFiOWVmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAki40l/JGsrf+ZdemTiaGaDSvymA3lEhiUXGB
lk/xrkg/Ztd/47dizubJRh7vINKU7HzljxObYCbrlE+HAkp0MIYuOqt2CtzP0fn/
PnDcwkI1thsCq8zSmr1zTtyujEYdNCXMJ3RJ9lpnGQq4SWbH8yKRxPmPRY1YRd87
y4ydVxXjMxD7s/AfQIK8AFz963FNBf8TrpgDjFt17OAOTRk/SJWhR5gmIBy3iy7G
ZYtNo2xmmeEOOgtslJg8SUnG6r1A0O3JDjI2LTNj5ekw8P97gOyZCBvW1z/iVTI0
aVzXHad6U6PkWeJe8mNl7sFCOtcYKSwshfaGHQgCvZ0kTem21wIDAQABo4IDWTCC
A1UwHQYDVR0OBBYEFPRHEtA/NQH8Z9s2KEPfUbbMis3jMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9jNDE4
MmEwZC1kNzQ0LTQ0MWItYTg1MC1lM2Y4NWFhM2FhZmIvM2E0ZTFkZGMtYjgwMi0z
OTgyLWFmYTItNGJlMjljZDlmYTk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYzQxODJhMGQtZDc0NC00NDFiLWE4
NTAtZTNmODVhYTNhYWZiL2M0MTgyYTBkLWQ3NDQtNDQxYi1hODUwLWUzZjg1YWEz
YWFmYi5jcmwwHwYDVR0jBBgwFoAUK7GR1bTMw7yKfS/LGMgJ/OaZwCIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9jNDE4MmEwZC1kNzQ0LTQ0MWItYTg1MC1lM2Y4
NWFhM2FhZmIuY2VyMCMGCCsGAQUFBwEHAQH/BBQwEjAQBAIAAjAKAwgAJiABNXAY
ADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBz
Oi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3
DQEBCwUAA4IBAQCe/jYHVRqq64nZkzR2JVCLB77WrvlzhYzCocLtXl1PYpHmyFf3
wl2E4W6q/I06Z8kGpVXKFRqV/QgCqTgRMwGva6p79o0/URVkwOm9zwQ5Qu2OaDZX
BBHQgjfGz2IeZceQi28JqsyB87DJxvVkTA3+SSNbW4rrjRb49r8eFr8tEO18LCub
dEy6v/jwiLqkiMBJOS0aEpsdgomXegwbjyK5BnGC4bX6n+zYIP9zNE2yyRSFsOcc
vURfTCH8lBb8gf6bmFpJskLTxoL4uDI9fBM25yBlDeRsgFfiIDmMAuZjBapumpou
vWMlJvN1QOvkrsRwQeOYP+I5cd+blJs9rWNJ
-----END CERTIFICATE-----
Generated at Sat Jun 13 07:11:11 2026 by rpki-client