Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/473aba48-e57f-40d4-b25e-8e59a1171ae8/46458d7f-8248-3067-a79d-c45984ab3f0a.roa
File:                     46458d7f-8248-3067-a79d-c45984ab3f0a.roa (raw, json)
Hash identifier:          u3dT3P0ya+MVr0PPjwGTpCke7trrSerRGak9XyVJcgA=
Subject key identifier:   4F:DE:C9:66:4C:E5:8F:66:5E:80:81:06:EE:6E:81:C6:F5:33:75:B7
Certificate issuer:       /CN=473aba48-e57f-40d4-b25e-8e59a1171ae8
Certificate serial:       010D0C9F4328584DE41B22680D651BF0F362C764
Authority key identifier: 31:D8:E4:89:EF:82:5A:7B:E9:37:04:AB:E6:B3:60:F1:3C:92:1D:4A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/473aba48-e57f-40d4-b25e-8e59a1171ae8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/473aba48-e57f-40d4-b25e-8e59a1171ae8/46458d7f-8248-3067-a79d-c45984ab3f0a.roa
Signing time:             Wed 20 May 2026 01:00:25 +0000
ROA not before:           Wed 20 May 2026 01:00:25 +0000
ROA not after:            Tue 18 Aug 2026 01:00:25 +0000
asID:                     399331
IP address blocks:        2606:25c0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/473aba48-e57f-40d4-b25e-8e59a1171ae8/473aba48-e57f-40d4-b25e-8e59a1171ae8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/473aba48-e57f-40d4-b25e-8e59a1171ae8/473aba48-e57f-40d4-b25e-8e59a1171ae8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/473aba48-e57f-40d4-b25e-8e59a1171ae8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e4:1b:22:68:0d:65:1b:f0:f3:62:c7:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=473aba48-e57f-40d4-b25e-8e59a1171ae8
        Validity
            Not Before: May 20 01:00:25 2026 GMT
            Not After : Aug 18 01:00:25 2026 GMT
        Subject: CN=36250fb7-7f76-4467-8058-d0c6e0d910eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:2e:67:01:44:86:2b:23:08:5e:c7:32:36:d8:
                    01:6b:64:ee:e2:17:e9:ec:ee:ef:ac:7c:af:d2:e8:
                    8f:28:07:3b:7b:3f:30:b3:27:63:fd:c9:0c:92:eb:
                    12:6a:12:c9:56:c2:d2:a0:f5:fb:f8:e6:81:d4:3a:
                    39:95:13:92:54:ea:e9:ea:18:5f:e0:6e:21:77:ee:
                    ef:86:74:00:3e:97:46:dd:93:be:1b:65:25:6d:41:
                    5d:52:ad:84:50:7e:3b:30:71:06:1c:52:b0:7d:c4:
                    82:f5:cf:09:88:e8:52:87:ec:0f:5b:fe:be:d9:8b:
                    10:e0:90:cb:4f:b1:0a:5d:69:a8:95:01:6c:69:f3:
                    74:1b:13:80:fe:e6:fb:02:b8:d3:3a:c9:b4:dd:26:
                    bc:18:17:35:fd:fb:2e:57:f6:85:3f:3d:79:d7:ff:
                    67:94:9b:dd:dc:be:99:42:b4:51:69:13:8e:6a:89:
                    49:c0:53:8f:f5:3b:42:28:16:1a:86:ba:aa:be:a0:
                    af:f5:10:60:bc:98:e8:80:0f:8a:c3:9b:e7:40:50:
                    41:ee:72:67:e8:a4:5d:1d:ac:c0:a5:33:48:db:56:
                    30:b3:7d:a8:47:a1:2d:41:b3:3d:a1:2a:c9:5d:bd:
                    40:3f:b4:ec:46:e2:a1:9a:4c:8b:61:ce:64:49:65:
                    63:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:DE:C9:66:4C:E5:8F:66:5E:80:81:06:EE:6E:81:C6:F5:33:75:B7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/473aba48-e57f-40d4-b25e-8e59a1171ae8/46458d7f-8248-3067-a79d-c45984ab3f0a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/473aba48-e57f-40d4-b25e-8e59a1171ae8/473aba48-e57f-40d4-b25e-8e59a1171ae8.crl

            X509v3 Authority Key Identifier:
                keyid:31:D8:E4:89:EF:82:5A:7B:E9:37:04:AB:E6:B3:60:F1:3C:92:1D:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/473aba48-e57f-40d4-b25e-8e59a1171ae8.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:25c0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:3c:c2:30:7a:97:a4:70:c8:fa:b2:20:a4:ff:87:a4:84:ba:
         7b:13:3b:93:94:32:8a:14:2c:4c:bc:b4:a5:70:81:c5:02:a2:
         07:d9:a2:5b:37:e4:cd:96:ef:7a:79:ef:68:14:0f:3d:24:27:
         42:15:95:27:b0:ee:6c:3e:c9:2f:7a:da:e0:d1:94:f3:d2:25:
         ca:ae:19:a5:68:18:ed:2b:1d:8c:00:7c:e4:27:92:22:dc:d1:
         e9:d6:a8:23:8d:79:de:98:f7:cc:d7:5b:25:d1:5e:4f:06:78:
         3c:e9:14:9f:77:b6:72:24:37:b8:93:15:8f:83:f8:fe:79:eb:
         f7:77:74:e2:3f:11:03:4f:0e:ee:66:5d:12:98:00:f7:d0:e1:
         10:e4:6c:91:a1:f8:8f:b2:cb:08:09:74:bb:f6:e2:fa:69:38:
         de:6a:08:c6:f1:c5:4e:30:7d:1d:0c:a7:09:be:cd:79:64:d8:
         cc:68:27:f9:54:1e:69:15:77:7f:f1:30:42:fd:10:fc:51:4a:
         9c:93:f5:6e:45:e1:8f:0c:0c:db:00:ab:a7:68:98:63:29:ef:
         85:ee:77:64:77:65:ab:b5:28:3e:ae:21:c7:f2:94:d3:a7:6e:
         25:63:a8:29:0b:86:f7:1f:ef:75:89:05:9b:90:d5:19:49:a7:
         c6:aa:df:be
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE3kGyJoDWUb8PNix2QwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDczYWJhNDgtZTU3Zi00MGQ0LWIyNWUtOGU1OWExMTcx
YWU4MB4XDTI2MDUyMDAxMDAyNVoXDTI2MDgxODAxMDAyNVowLzEtMCsGA1UEAxMk
MzYyNTBmYjctN2Y3Ni00NDY3LTgwNTgtZDBjNmUwZDkxMGViMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxS5nAUSGKyMIXscyNtgBa2Tu4hfp7O7vrHyv
0uiPKAc7ez8wsydj/ckMkusSahLJVsLSoPX7+OaB1Do5lROSVOrp6hhf4G4hd+7v
hnQAPpdG3ZO+G2UlbUFdUq2EUH47MHEGHFKwfcSC9c8JiOhSh+wPW/6+2YsQ4JDL
T7EKXWmolQFsafN0GxOA/ub7ArjTOsm03Sa8GBc1/fsuV/aFPz151/9nlJvd3L6Z
QrRRaROOaolJwFOP9TtCKBYahrqqvqCv9RBgvJjogA+Kw5vnQFBB7nJn6KRdHazA
pTNI21Yws32oR6EtQbM9oSrJXb1AP7TsRuKhmkyLYc5kSWVjbQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFE/eyWZM5Y9mXoCBBu5ugcb1M3W3MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS80NzNh
YmE0OC1lNTdmLTQwZDQtYjI1ZS04ZTU5YTExNzFhZTgvNDY0NThkN2YtODI0OC0z
MDY3LWE3OWQtYzQ1OTg0YWIzZjBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNDczYWJhNDgtZTU3Zi00MGQ0LWIy
NWUtOGU1OWExMTcxYWU4LzQ3M2FiYTQ4LWU1N2YtNDBkNC1iMjVlLThlNTlhMTE3
MWFlOC5jcmwwHwYDVR0jBBgwFoAUMdjkie+CWnvpNwSr5rNg8TySHUowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS80NzNhYmE0OC1lNTdmLTQwZDQtYjI1ZS04ZTU5
YTExNzFhZTguY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgYlwDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQAHPMIwepekcMj6siCk/4ekhLp7EzuTlDKKFCxMvLSlcIHFAqIH2aJb
N+TNlu96ee9oFA89JCdCFZUnsO5sPskvetrg0ZTz0iXKrhmlaBjtKx2MAHzkJ5Ii
3NHp1qgjjXnemPfM11sl0V5PBng86RSfd7ZyJDe4kxWPg/j+eev3d3TiPxEDTw7u
Zl0SmAD30OEQ5GyRofiPsssICXS79uL6aTjeagjG8cVOMH0dDKcJvs15ZNjMaCf5
VB5pFXd/8TBC/RD8UUqck/VuReGPDAzbAKunaJhjKe+F7ndkd2WrtSg+riHH8pTT
p24lY6gpC4b3H+91iQWbkNUZSafGqt++
-----END CERTIFICATE-----
Generated at Sat Jun 13 15:35:17 2026 by rpki-client