Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/fcf8ad04-0402-4e5b-ad52-202cba7ac86b/cf3991eb-5972-3d30-bfbd-8698044dccec.roa
File:                     cf3991eb-5972-3d30-bfbd-8698044dccec.roa (raw, json)
Hash identifier:          4MnMkCdkhZd1jqfIMTyW2NWqCe1oEI6CPFRhSYpupuA=
Subject key identifier:   D2:A4:A3:77:CB:48:15:D7:4F:7D:9B:34:C7:D1:5D:89:03:1E:5B:B0
Certificate issuer:       /CN=fcf8ad04-0402-4e5b-ad52-202cba7ac86b
Certificate serial:       010D0C9F4328584E08665EB00A4A905DB9F48D6F
Authority key identifier: 2A:DA:05:2D:F4:36:68:AB:BA:61:6C:01:9B:88:F7:38:34:C6:7C:A5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/fcf8ad04-0402-4e5b-ad52-202cba7ac86b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/fcf8ad04-0402-4e5b-ad52-202cba7ac86b/cf3991eb-5972-3d30-bfbd-8698044dccec.roa
Signing time:             Tue 02 Jun 2026 01:00:10 +0000
ROA not before:           Tue 02 Jun 2026 01:00:10 +0000
ROA not after:            Mon 31 Aug 2026 01:00:10 +0000
asID:                     46685
IP address blocks:        68.65.240.0/21 maxlen: 32
                          199.68.104.0/21 maxlen: 32
                          2602:fbeb::/36 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/fcf8ad04-0402-4e5b-ad52-202cba7ac86b/fcf8ad04-0402-4e5b-ad52-202cba7ac86b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/fcf8ad04-0402-4e5b-ad52-202cba7ac86b/fcf8ad04-0402-4e5b-ad52-202cba7ac86b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/fcf8ad04-0402-4e5b-ad52-202cba7ac86b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:08:66:5e:b0:0a:4a:90:5d:b9:f4:8d:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fcf8ad04-0402-4e5b-ad52-202cba7ac86b
        Validity
            Not Before: Jun  2 01:00:10 2026 GMT
            Not After : Aug 31 01:00:10 2026 GMT
        Subject: CN=e2ebf1f3-a646-44c6-92d7-8737e27a2f36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:7d:e6:50:88:1c:6e:bc:59:95:d5:4e:f1:f2:
                    22:75:c2:f9:76:88:8b:fa:a1:54:26:b8:5f:fd:4a:
                    44:d2:71:91:f3:df:2a:25:4c:cb:0b:4d:39:37:fc:
                    7d:4b:fc:1d:f0:ca:f0:6e:c8:95:f2:86:e7:88:c7:
                    ec:36:b8:16:bd:53:e0:d6:71:7d:6c:a8:48:61:f1:
                    94:9c:be:2d:a9:80:79:74:21:df:f5:96:1c:f6:2a:
                    7a:d0:de:1f:24:f3:f8:0d:b8:83:c4:f2:19:18:1f:
                    18:20:4c:da:5d:fc:67:44:fc:9a:a1:0a:97:36:01:
                    22:96:2e:57:f5:e2:ef:ec:cf:19:dc:88:5f:96:6d:
                    00:89:13:4f:26:ac:5f:11:51:cd:58:3d:cf:59:95:
                    e0:ad:05:17:98:f0:60:08:b6:45:61:50:79:b2:c8:
                    cb:5c:7f:6c:3b:77:75:ad:4b:9d:60:d4:f1:4e:be:
                    26:cc:70:c0:b9:e2:fe:f4:d1:9b:a5:58:d6:ef:54:
                    6f:fe:d4:a8:a0:a4:ca:c8:ac:4d:b0:0d:28:7d:7f:
                    23:dd:1e:99:a6:97:fe:1b:1c:6c:74:82:e2:61:74:
                    79:bf:99:6a:52:49:22:e4:54:25:8a:da:13:bf:0a:
                    32:f3:6d:3e:09:4f:06:22:72:45:29:bf:37:6d:69:
                    78:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:A4:A3:77:CB:48:15:D7:4F:7D:9B:34:C7:D1:5D:89:03:1E:5B:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/fcf8ad04-0402-4e5b-ad52-202cba7ac86b/cf3991eb-5972-3d30-bfbd-8698044dccec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/fcf8ad04-0402-4e5b-ad52-202cba7ac86b/fcf8ad04-0402-4e5b-ad52-202cba7ac86b.crl

            X509v3 Authority Key Identifier:
                keyid:2A:DA:05:2D:F4:36:68:AB:BA:61:6C:01:9B:88:F7:38:34:C6:7C:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/fcf8ad04-0402-4e5b-ad52-202cba7ac86b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.65.240.0/21
                  199.68.104.0/21
                IPv6:
                  2602:fbeb::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:45:bc:9f:1b:79:bf:8d:64:89:da:03:90:d7:f9:69:1c:65:
         17:c5:29:bb:48:a8:82:20:0f:89:1f:74:b9:e4:5f:45:7e:2c:
         9b:e0:45:c8:a2:7f:d3:fd:b1:5a:a7:ce:d1:59:b8:d3:5d:3a:
         72:2f:c9:de:65:6a:a9:c4:5a:14:46:1a:91:9d:7a:04:47:c9:
         13:1f:bc:b3:77:03:45:fa:12:5b:75:cf:e8:74:06:51:82:e6:
         39:0f:1e:be:4f:0e:78:37:2e:a8:3f:09:0e:14:6d:38:07:c2:
         b9:0b:13:4e:1b:c9:65:75:d2:d0:05:23:7a:11:85:cf:13:f6:
         d9:af:52:54:d8:f5:63:0e:dc:bb:67:73:eb:83:42:7e:b1:1c:
         d8:79:cd:74:cd:30:dd:04:b1:cc:76:12:6b:28:1c:ac:2c:75:
         0b:ba:a4:88:a9:e3:04:48:5b:0f:57:d4:46:a6:9e:50:6f:c2:
         a4:61:eb:7e:ec:63:0f:9a:e2:d6:bd:ae:e5:f3:c3:f1:40:6b:
         ce:96:aa:c5:d9:9e:21:ea:6d:98:8f:84:73:69:fd:c5:04:c7:
         a2:40:fd:64:a9:ec:9b:39:29:65:7e:1d:0b:60:7b:21:61:fc:
         f6:e4:73:2a:02:42:40:f2:e8:30:8f:f9:e8:7c:4e:e3:4e:e2:
         d3:f7:a2:a2
-----BEGIN CERTIFICATE-----
MIIGWTCCBUGgAwIBAgIUAQ0Mn0MoWE4IZl6wCkqQXbn0jW8wDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZmNmOGFkMDQtMDQwMi00ZTViLWFkNTItMjAyY2JhN2Fj
ODZiMB4XDTI2MDYwMjAxMDAxMFoXDTI2MDgzMTAxMDAxMFowLzEtMCsGA1UEAxMk
ZTJlYmYxZjMtYTY0Ni00NGM2LTkyZDctODczN2UyN2EyZjM2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyH3mUIgcbrxZldVO8fIidcL5doiL+qFUJrhf
/UpE0nGR898qJUzLC005N/x9S/wd8MrwbsiV8obniMfsNrgWvVPg1nF9bKhIYfGU
nL4tqYB5dCHf9ZYc9ip60N4fJPP4DbiDxPIZGB8YIEzaXfxnRPyaoQqXNgEili5X
9eLv7M8Z3Ihflm0AiRNPJqxfEVHNWD3PWZXgrQUXmPBgCLZFYVB5ssjLXH9sO3d1
rUudYNTxTr4mzHDAueL+9NGbpVjW71Rv/tSooKTKyKxNsA0ofX8j3R6Zppf+Gxxs
dILiYXR5v5lqUkki5FQlitoTvwoy820+CU8GInJFKb83bWl4OwIDAQABo4IDazCC
A2cwHQYDVR0OBBYEFNKko3fLSBXXT32bNMfRXYkDHluwMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9mY2Y4
YWQwNC0wNDAyLTRlNWItYWQ1Mi0yMDJjYmE3YWM4NmIvY2YzOTkxZWItNTk3Mi0z
ZDMwLWJmYmQtODY5ODA0NGRjY2VjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y
Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvZmNmOGFkMDQtMDQwMi00ZTViLWFk
NTItMjAyY2JhN2FjODZiL2ZjZjhhZDA0LTA0MDItNGU1Yi1hZDUyLTIwMmNiYTdh
Yzg2Yi5jcmwwHwYDVR0jBBgwFoAUKtoFLfQ2aKu6YWwBm4j3ODTGfKUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw
ZS1hZTdkLWU2Y2IxMGFmYTEyNS9mY2Y4YWQwNC0wNDAyLTRlNWItYWQ1Mi0yMDJj
YmE3YWM4NmIuY2VyMDUGCCsGAQUFBwEHAQH/BCYwJDASBAIAATAMAwQDREHwAwQD
x0RoMA4EAgACMAgDBgQmAvvrADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow
OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp
L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAPRbyfG3m/jWSJ2gOQ1/lpHGUX
xSm7SKiCIA+JH3S55F9Ffiyb4EXIon/T/bFap87RWbjTXTpyL8neZWqpxFoURhqR
nXoER8kTH7yzdwNF+hJbdc/odAZRguY5Dx6+Tw54Ny6oPwkOFG04B8K5CxNOG8ll
ddLQBSN6EYXPE/bZr1JU2PVjDty7Z3Prg0J+sRzYec10zTDdBLHMdhJrKBysLHUL
uqSIqeMESFsPV9RGpp5Qb8KkYet+7GMPmuLWva7l88PxQGvOlqrF2Z4h6m2Yj4Rz
af3FBMeiQP1kqeybOSllfh0LYHshYfz25HMqAkJA8ugwj/nofE7jTuLT96Ki
-----END CERTIFICATE-----
Generated at Sat Jun 13 21:26:18 2026 by rpki-client