Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/469597d0-a870-46e2-b0a1-04a71dad0b25/7ccad7cb-a81f-38a7-87ae-9140f743fb68.roa
File:                     7ccad7cb-a81f-38a7-87ae-9140f743fb68.roa (raw, json)
Hash identifier:          VwEWEk1NQFxRdBA9Ofi2U8YUpfqC6fm7GHkQ3Jj6gJ4=
Subject key identifier:   2B:BF:83:66:C0:62:45:FF:DD:46:CC:F0:18:14:4A:31:5E:E9:3A:ED
Certificate issuer:       /CN=469597d0-a870-46e2-b0a1-04a71dad0b25
Certificate serial:       010D0C9F4328584E131996A628BA5E7AE791CD60
Authority key identifier: D9:22:F4:C1:14:0A:7F:93:24:F6:09:53:39:5C:D7:15:FD:76:7A:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/469597d0-a870-46e2-b0a1-04a71dad0b25.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/469597d0-a870-46e2-b0a1-04a71dad0b25/7ccad7cb-a81f-38a7-87ae-9140f743fb68.roa
Signing time:             Fri 05 Jun 2026 21:00:12 +0000
ROA not before:           Fri 05 Jun 2026 21:00:12 +0000
ROA not after:            Thu 03 Sep 2026 21:00:12 +0000
asID:                     6128
IP address blocks:        148.76.128.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/469597d0-a870-46e2-b0a1-04a71dad0b25/469597d0-a870-46e2-b0a1-04a71dad0b25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/469597d0-a870-46e2-b0a1-04a71dad0b25/469597d0-a870-46e2-b0a1-04a71dad0b25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/469597d0-a870-46e2-b0a1-04a71dad0b25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:13:19:96:a6:28:ba:5e:7a:e7:91:cd:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=469597d0-a870-46e2-b0a1-04a71dad0b25
        Validity
            Not Before: Jun  5 21:00:12 2026 GMT
            Not After : Sep  3 21:00:12 2026 GMT
        Subject: CN=c398b45d-b85c-4831-8fdd-faa7429d678b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:df:27:22:8d:7c:f7:53:ab:85:53:85:10:96:
                    ff:10:ce:69:e3:60:37:54:4a:74:36:ad:e0:23:cf:
                    24:71:bd:5c:f8:81:77:5c:d0:c2:73:4f:dd:da:db:
                    6d:d9:13:72:e6:18:db:d6:12:c9:eb:9e:a9:4e:07:
                    69:c1:53:24:9b:f5:0f:b3:26:a1:1a:4b:c9:c4:e4:
                    d9:07:c5:5c:e3:a7:28:ea:55:dd:91:7d:07:af:68:
                    67:53:65:3f:ee:16:c5:66:64:a1:bb:a7:05:e5:8b:
                    fe:8b:9b:b2:7f:cf:3b:a1:17:df:20:7e:c7:1d:2e:
                    f2:c0:2c:6f:8f:58:42:a5:db:10:4a:b6:fc:c9:c2:
                    8c:b5:e2:33:74:ee:2b:8d:03:ef:0d:5e:72:d7:c4:
                    a0:e0:b2:36:9e:3f:99:d9:55:39:d8:32:a8:b0:e6:
                    c4:d7:4b:bf:97:3b:6c:12:35:a6:f4:d1:f3:31:74:
                    5e:a7:10:1d:51:2f:e8:2f:c0:33:26:0c:c4:0a:7a:
                    fe:fc:d1:36:75:be:eb:1a:d8:c4:20:7b:dc:5d:c3:
                    e4:5f:dc:ae:c7:06:99:bc:19:d7:ad:f8:68:97:20:
                    de:e2:c2:d3:69:ce:0c:22:bb:ff:86:7c:1e:1a:ab:
                    e2:e3:68:d8:1d:18:75:af:b2:51:fa:6e:9c:10:19:
                    67:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:BF:83:66:C0:62:45:FF:DD:46:CC:F0:18:14:4A:31:5E:E9:3A:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/469597d0-a870-46e2-b0a1-04a71dad0b25/7ccad7cb-a81f-38a7-87ae-9140f743fb68.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/469597d0-a870-46e2-b0a1-04a71dad0b25/469597d0-a870-46e2-b0a1-04a71dad0b25.crl

            X509v3 Authority Key Identifier:
                keyid:D9:22:F4:C1:14:0A:7F:93:24:F6:09:53:39:5C:D7:15:FD:76:7A:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/469597d0-a870-46e2-b0a1-04a71dad0b25.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.76.128.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:5c:42:48:cc:e5:e6:aa:51:65:e0:89:9f:7f:73:0a:46:10:
         e4:79:e4:ed:3b:c2:e1:f8:ec:4f:11:64:5e:8f:b7:02:bd:9c:
         a0:36:6f:ff:85:f7:f2:25:f2:0f:6b:9d:1e:21:1f:fd:7e:0e:
         bd:6a:94:fb:fe:01:31:33:9e:db:4c:31:cd:be:2e:49:ff:49:
         c7:16:54:bd:bd:1b:c9:95:f9:bd:9e:bd:a5:37:5e:bd:72:f3:
         03:a5:da:6e:f2:8a:6c:55:88:e2:ba:2e:a0:70:33:4b:c0:71:
         39:78:04:57:47:e8:c0:d9:9f:f8:b0:3e:df:28:f7:e4:db:0c:
         8f:e2:c8:02:9c:43:7c:17:c1:c7:69:ba:e2:7d:59:e5:7c:ff:
         11:cc:f1:1b:74:da:1b:bc:97:97:25:30:16:f7:55:35:9f:53:
         29:ca:aa:05:92:9a:81:db:7b:6e:c7:24:33:75:9e:88:87:21:
         39:fb:82:9c:ec:32:14:c5:de:db:46:85:56:b3:86:58:db:4d:
         52:8e:9a:bb:29:71:14:89:1c:ca:ee:8f:0d:d3:04:6e:28:e4:
         7a:ae:26:f3:3c:84:9e:e9:74:ed:fc:0b:5a:3d:76:e9:98:48:
         e8:be:1d:29:55:c7:04:3e:6b:cb:c2:33:37:88:dd:2a:da:b5:
         41:d0:5a:0f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4TGZamKLpeeueRzWAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDY5NTk3ZDAtYTg3MC00NmUyLWIwYTEtMDRhNzFkYWQw
YjI1MB4XDTI2MDYwNTIxMDAxMloXDTI2MDkwMzIxMDAxMlowLzEtMCsGA1UEAxMk
YzM5OGI0NWQtYjg1Yy00ODMxLThmZGQtZmFhNzQyOWQ2NzhiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqd8nIo1891OrhVOFEJb/EM5p42A3VEp0Nq3g
I88kcb1c+IF3XNDCc0/d2ttt2RNy5hjb1hLJ656pTgdpwVMkm/UPsyahGkvJxOTZ
B8Vc46co6lXdkX0Hr2hnU2U/7hbFZmShu6cF5Yv+i5uyf887oRffIH7HHS7ywCxv
j1hCpdsQSrb8ycKMteIzdO4rjQPvDV5y18Sg4LI2nj+Z2VU52DKosObE10u/lzts
EjWm9NHzMXRepxAdUS/oL8AzJgzECnr+/NE2db7rGtjEIHvcXcPkX9yuxwaZvBnX
rfholyDe4sLTac4MIrv/hnweGqvi42jYHRh1r7JR+m6cEBlnuQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCu/g2bAYkX/3UbM8BgUSjFe6TrtMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS80Njk1
OTdkMC1hODcwLTQ2ZTItYjBhMS0wNGE3MWRhZDBiMjUvN2NjYWQ3Y2ItYTgxZi0z
OGE3LTg3YWUtOTE0MGY3NDNmYjY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y
Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvNDY5NTk3ZDAtYTg3MC00NmUyLWIw
YTEtMDRhNzFkYWQwYjI1LzQ2OTU5N2QwLWE4NzAtNDZlMi1iMGExLTA0YTcxZGFk
MGIyNS5jcmwwHwYDVR0jBBgwFoAU2SL0wRQKf5Mk9glTOVzXFf12erQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw
ZS1hZTdkLWU2Y2IxMGFmYTEyNS80Njk1OTdkMC1hODcwLTQ2ZTItYjBhMS0wNGE3
MWRhZDBiMjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGlEyAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFtcQkjM5eaqUWXgiZ9/cwpGEOR55O07wuH47E8RZF6PtwK9nKA2b/+F
9/Il8g9rnR4hH/1+Dr1qlPv+ATEznttMMc2+Lkn/SccWVL29G8mV+b2evaU3Xr1y
8wOl2m7yimxViOK6LqBwM0vAcTl4BFdH6MDZn/iwPt8o9+TbDI/iyAKcQ3wXwcdp
uuJ9WeV8/xHM8Rt02hu8l5clMBb3VTWfUynKqgWSmoHbe27HJDN1noiHITn7gpzs
MhTF3ttGhVazhljbTVKOmrspcRSJHMrujw3TBG4o5HquJvM8hJ7pdO38C1o9dumY
SOi+HSlVxwQ+a8vCMzeI3SratUHQWg8=
-----END CERTIFICATE-----
Generated at Sun Jun 14 02:14:37 2026 by rpki-client