Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/349213f7-28e2-4fa1-8491-78e3580cdb7f/434ec046-ec4e-3046-aed3-b5f5ef3c8c90.roa
File:                     434ec046-ec4e-3046-aed3-b5f5ef3c8c90.roa (raw, json)
Hash identifier:          l5hJ538mqySqYT0tKWTvx3q5sgxBocrI1JQh1ZjK798=
Subject key identifier:   F1:07:76:94:12:5E:4B:C4:A3:EA:F4:97:E5:B0:3D:2D:CA:D0:D3:E9
Certificate issuer:       /CN=349213f7-28e2-4fa1-8491-78e3580cdb7f
Certificate serial:       010D0C9F4328584E15E45A8523137F0EA6A49ED8
Authority key identifier: 97:5E:9F:A9:CC:61:D5:8D:DC:07:ED:E0:44:7D:5F:DD:89:2D:F4:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/349213f7-28e2-4fa1-8491-78e3580cdb7f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/349213f7-28e2-4fa1-8491-78e3580cdb7f/434ec046-ec4e-3046-aed3-b5f5ef3c8c90.roa
Signing time:             Sat 06 Jun 2026 21:00:13 +0000
ROA not before:           Sat 06 Jun 2026 21:00:13 +0000
ROA not after:            Fri 04 Sep 2026 21:00:13 +0000
asID:                     18934
IP address blocks:        2605:9a40:6b::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/349213f7-28e2-4fa1-8491-78e3580cdb7f/349213f7-28e2-4fa1-8491-78e3580cdb7f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/349213f7-28e2-4fa1-8491-78e3580cdb7f/349213f7-28e2-4fa1-8491-78e3580cdb7f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/349213f7-28e2-4fa1-8491-78e3580cdb7f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:15:e4:5a:85:23:13:7f:0e:a6:a4:9e:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=349213f7-28e2-4fa1-8491-78e3580cdb7f
        Validity
            Not Before: Jun  6 21:00:13 2026 GMT
            Not After : Sep  4 21:00:13 2026 GMT
        Subject: CN=b3099484-fa71-4612-a755-5ba6dfaad719
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:d7:ee:f0:98:14:56:68:81:9a:cb:5f:a1:dd:
                    17:f6:a5:c3:c3:cb:d8:e8:dc:db:ec:c1:32:45:ac:
                    91:52:5d:4d:68:d1:52:86:7c:d4:b5:bb:79:6c:3c:
                    4a:29:3f:12:e7:76:b4:c9:4f:06:89:17:3d:7e:b4:
                    58:5f:fc:67:b4:17:18:87:aa:05:4f:d9:d2:bd:a2:
                    79:8b:5b:07:e0:30:e7:ca:41:54:67:e3:5f:4d:3e:
                    76:ff:ef:88:65:db:25:06:4e:27:a6:8a:87:b7:b7:
                    1f:f8:69:93:66:16:97:7e:ab:f6:a8:47:c7:80:cb:
                    ab:19:4d:c0:0e:77:4d:8f:a7:91:40:78:1e:d7:7e:
                    9b:15:27:c1:91:60:81:d0:3b:e5:1c:48:4f:2b:f5:
                    77:98:50:48:22:df:4f:61:b0:ae:64:eb:18:74:d9:
                    03:b2:36:51:41:a8:42:7f:26:60:d8:f8:d2:20:d2:
                    a1:4d:fd:77:96:e9:cc:9c:a5:ca:a0:13:c3:22:47:
                    15:8b:fb:b5:bd:8e:ce:2b:4f:2b:1f:62:ef:22:f1:
                    f0:2e:f1:36:2d:d9:9c:0c:e7:ec:d4:3e:a6:77:79:
                    1b:67:6b:ad:70:01:1f:9d:c6:dd:c8:df:8c:42:45:
                    39:2e:cc:cd:1e:5a:31:4b:ae:fb:af:c3:d3:7d:fc:
                    44:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:07:76:94:12:5E:4B:C4:A3:EA:F4:97:E5:B0:3D:2D:CA:D0:D3:E9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/349213f7-28e2-4fa1-8491-78e3580cdb7f/434ec046-ec4e-3046-aed3-b5f5ef3c8c90.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/349213f7-28e2-4fa1-8491-78e3580cdb7f/349213f7-28e2-4fa1-8491-78e3580cdb7f.crl

            X509v3 Authority Key Identifier:
                keyid:97:5E:9F:A9:CC:61:D5:8D:DC:07:ED:E0:44:7D:5F:DD:89:2D:F4:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/349213f7-28e2-4fa1-8491-78e3580cdb7f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9a40:6b::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:77:d3:00:ec:3a:a9:5f:f7:c6:1c:2b:7d:0b:4a:d8:f8:4c:
         68:f2:79:8f:c8:f3:7f:00:b5:f4:10:87:d1:2b:00:df:8d:e6:
         97:7b:c6:83:01:d5:ae:53:24:3a:96:b9:a8:30:3a:3a:a1:97:
         f5:1f:77:5a:ef:ad:68:29:d8:20:92:08:49:c9:02:05:0d:10:
         29:7c:05:69:ad:84:75:e1:56:4a:c4:8d:2c:47:3a:01:ec:9e:
         4e:3e:90:bd:c0:dd:13:62:bf:41:93:22:58:8c:ea:64:55:61:
         40:5a:3a:46:b4:fd:e6:09:d4:90:f0:65:59:20:aa:73:80:93:
         a8:2f:0f:cc:79:95:dc:06:54:2b:7e:70:46:ab:bf:31:cd:43:
         89:53:36:22:2a:82:08:05:84:f0:20:fe:94:bc:53:0e:8a:f9:
         b5:a8:dc:cc:70:67:5f:c2:bb:ad:48:36:00:6e:63:af:18:64:
         e2:76:87:7e:ba:e3:1c:01:e1:64:42:09:31:98:0d:dc:5e:c3:
         77:c0:b2:41:d7:28:c4:59:71:80:83:4d:90:9c:75:d5:57:84:
         7e:51:ad:cd:5c:cf:30:48:2c:40:21:a4:60:81:e6:df:b6:41:
         72:03:dd:dd:5f:b6:ca:55:07:94:92:19:ea:ce:68:34:c6:5f:
         5a:20:1d:80
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE4V5FqFIxN/DqakntgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzQ5MjEzZjctMjhlMi00ZmExLTg0OTEtNzhlMzU4MGNk
YjdmMB4XDTI2MDYwNjIxMDAxM1oXDTI2MDkwNDIxMDAxM1owLzEtMCsGA1UEAxMk
YjMwOTk0ODQtZmE3MS00NjEyLWE3NTUtNWJhNmRmYWFkNzE5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj9fu8JgUVmiBmstfod0X9qXDw8vY6Nzb7MEy
RayRUl1NaNFShnzUtbt5bDxKKT8S53a0yU8GiRc9frRYX/xntBcYh6oFT9nSvaJ5
i1sH4DDnykFUZ+NfTT52/++IZdslBk4npoqHt7cf+GmTZhaXfqv2qEfHgMurGU3A
DndNj6eRQHge136bFSfBkWCB0DvlHEhPK/V3mFBIIt9PYbCuZOsYdNkDsjZRQahC
fyZg2PjSINKhTf13lunMnKXKoBPDIkcVi/u1vY7OK08rH2LvIvHwLvE2LdmcDOfs
1D6md3kbZ2utcAEfncbdyN+MQkU5LszNHloxS677r8PTffxE9wIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFPEHdpQSXkvEo+r0l+WwPS3K0NPpMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8zNDky
MTNmNy0yOGUyLTRmYTEtODQ5MS03OGUzNTgwY2RiN2YvNDM0ZWMwNDYtZWM0ZS0z
MDQ2LWFlZDMtYjVmNWVmM2M4YzkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMzQ5MjEzZjctMjhlMi00ZmExLTg0
OTEtNzhlMzU4MGNkYjdmLzM0OTIxM2Y3LTI4ZTItNGZhMS04NDkxLTc4ZTM1ODBj
ZGI3Zi5jcmwwHwYDVR0jBBgwFoAUl16fqcxh1Y3cB+3gRH1f3Ykt9AMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi8zNDkyMTNmNy0yOGUyLTRmYTEtODQ5MS03OGUz
NTgwY2RiN2YuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgWaQABr
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBADp30wDsOqlf98YcK30LStj4TGjyeY/I838AtfQQh9ErAN+N5pd7
xoMB1a5TJDqWuagwOjqhl/Ufd1rvrWgp2CCSCEnJAgUNECl8BWmthHXhVkrEjSxH
OgHsnk4+kL3A3RNiv0GTIliM6mRVYUBaOka0/eYJ1JDwZVkgqnOAk6gvD8x5ldwG
VCt+cEarvzHNQ4lTNiIqgggFhPAg/pS8Uw6K+bWo3MxwZ1/Cu61INgBuY68YZOJ2
h3664xwB4WRCCTGYDdxew3fAskHXKMRZcYCDTZCcddVXhH5Rrc1czzBILEAhpGCB
5t+2QXID3d1ftspVB5SSGerOaDTGX1ogHYA=
-----END CERTIFICATE-----
Generated at Sat Jun 13 15:45:06 2026 by rpki-client