Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/6df6c3fc-8bb6-3646-ae2b-3597c65054d4.roa
File:                     6df6c3fc-8bb6-3646-ae2b-3597c65054d4.roa (raw, json)
Hash identifier:          lVnhS9M815jj0P0DHK0BIWqSOZ1Ozs505WjBLCDOkU4=
Subject key identifier:   B2:B8:8B:5B:13:E0:CF:13:08:08:2E:0A:07:94:08:E0:F8:8D:43:D7
Certificate issuer:       /CN=4bc604de-ac2b-4921-b601-a2c976ab18e8
Certificate serial:       010D0C9F4328584CAE5707EF91FB9F30A8F5D2C0
Authority key identifier: 5D:EC:C2:1E:9D:07:9D:B1:09:72:20:A7:5D:09:3D:FA:E3:FC:AC:40
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/6df6c3fc-8bb6-3646-ae2b-3597c65054d4.roa
Signing time:             Thu 29 Jan 2026 02:00:32 +0000
ROA not before:           Thu 29 Jan 2026 02:00:32 +0000
ROA not after:            Wed 29 Apr 2026 01:00:32 +0000
asID:                     394354
IP address blocks:        2620:10a:801c::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/4bc604de-ac2b-4921-b601-a2c976ab18e8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/4bc604de-ac2b-4921-b601-a2c976ab18e8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ae:57:07:ef:91:fb:9f:30:a8:f5:d2:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4bc604de-ac2b-4921-b601-a2c976ab18e8
        Validity
            Not Before: Jan 29 02:00:32 2026 GMT
            Not After : Apr 29 01:00:32 2026 GMT
        Subject: CN=3f6f8254-6f91-40f5-8762-a3c956f60133
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:de:8d:8d:89:10:1a:2e:b0:f7:8d:36:6c:21:
                    d3:04:e3:7b:2c:4a:08:f3:9d:d4:7f:68:d6:a2:62:
                    27:1c:61:20:5f:b8:12:f8:87:f9:fd:e5:6e:20:e9:
                    1d:02:0b:fd:79:a4:9a:e2:f4:29:5f:38:33:a8:92:
                    c8:66:d8:54:5a:16:be:90:ee:13:5f:f5:a0:64:eb:
                    e1:a9:db:7b:19:4f:3d:78:f8:b0:ba:cc:71:1f:f7:
                    69:3b:0e:94:25:d1:d4:25:09:c4:d7:ec:d7:73:f4:
                    7e:6a:e1:85:e5:cd:9b:5a:ef:8a:c9:dd:51:8b:57:
                    b0:28:d4:c2:e9:43:70:17:12:e8:0d:77:db:14:fc:
                    e9:68:b7:4c:4e:71:19:21:1b:ba:7d:d8:94:f4:55:
                    ba:18:d3:ef:ed:b6:0f:51:9b:cb:84:68:50:32:aa:
                    1f:8e:38:97:5f:31:fe:10:14:7a:79:4d:1d:21:68:
                    87:e1:54:e1:65:14:07:d7:48:8d:2f:2c:1d:f8:59:
                    2f:82:1e:26:9e:c9:cf:b6:6f:bb:c6:56:88:95:6f:
                    00:15:62:7f:9c:11:83:cd:20:71:a6:cc:61:b3:99:
                    5d:f8:83:98:1d:cb:4c:99:40:52:dc:9b:59:2e:c2:
                    9b:18:d7:ca:71:8b:d6:fa:90:8c:28:ae:2d:e5:f8:
                    a3:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:B8:8B:5B:13:E0:CF:13:08:08:2E:0A:07:94:08:E0:F8:8D:43:D7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/6df6c3fc-8bb6-3646-ae2b-3597c65054d4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/4bc604de-ac2b-4921-b601-a2c976ab18e8.crl

            X509v3 Authority Key Identifier:
                keyid:5D:EC:C2:1E:9D:07:9D:B1:09:72:20:A7:5D:09:3D:FA:E3:FC:AC:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:10a:801c::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:f6:11:ff:54:f5:50:36:9c:d7:9d:8a:66:bc:ff:6f:ce:43:
         ba:55:52:a4:cd:d8:bd:ef:ae:05:aa:f5:09:4f:05:cb:a6:dd:
         0b:52:29:fc:5e:9a:29:c4:c7:75:ec:99:e4:01:04:41:42:ff:
         83:b8:cc:67:59:f7:55:8a:c2:21:96:8f:f0:b2:fc:79:c2:a5:
         d5:a1:d2:40:2b:f6:96:a7:35:f0:39:13:27:83:32:12:80:1a:
         45:83:8a:68:9d:54:be:bd:83:86:06:71:63:fb:3f:21:1e:99:
         4c:ff:01:21:68:37:81:7d:ad:6f:7e:2e:4c:48:55:36:a9:26:
         18:e5:a9:36:ae:e2:3d:13:36:d6:5d:fe:1f:5f:90:13:c7:b6:
         34:63:75:90:e9:cf:ec:72:1d:0f:0a:25:f7:4b:87:cb:64:c2:
         22:98:74:d3:80:77:a6:22:bf:81:b7:97:a6:46:e5:6b:e7:11:
         b8:0b:ee:a2:6a:6b:99:5b:f3:81:4d:18:b0:ef:a7:65:d6:cf:
         e6:62:3f:d9:38:01:a2:cc:7b:d2:61:e5:7d:a9:88:4b:18:93:
         cd:d3:4c:09:70:c7:76:72:5b:9a:26:d8:74:23:79:18:30:94:
         55:04:ea:50:3e:fd:ba:35:e1:bd:cd:31:8f:c0:7e:48:94:5b:
         fc:c4:d7:87
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEyuVwfvkfufMKj10sAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGJjNjA0ZGUtYWMyYi00OTIxLWI2MDEtYTJjOTc2YWIx
OGU4MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk
M2Y2ZjgyNTQtNmY5MS00MGY1LTg3NjItYTNjOTU2ZjYwMTMzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkN6NjYkQGi6w9402bCHTBON7LEoI853Uf2jW
omInHGEgX7gS+If5/eVuIOkdAgv9eaSa4vQpXzgzqJLIZthUWha+kO4TX/WgZOvh
qdt7GU89ePiwusxxH/dpOw6UJdHUJQnE1+zXc/R+auGF5c2bWu+Kyd1Ri1ewKNTC
6UNwFxLoDXfbFPzpaLdMTnEZIRu6fdiU9FW6GNPv7bYPUZvLhGhQMqofjjiXXzH+
EBR6eU0dIWiH4VThZRQH10iNLywd+Fkvgh4mnsnPtm+7xlaIlW8AFWJ/nBGDzSBx
psxhs5ld+IOYHctMmUBS3JtZLsKbGNfKcYvW+pCMKK4t5fijPQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFLK4i1sT4M8TCAguCgeUCOD4jUPXMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS80YmM2
MDRkZS1hYzJiLTQ5MjEtYjYwMS1hMmM5NzZhYjE4ZTgvNmRmNmMzZmMtOGJiNi0z
NjQ2LWFlMmItMzU5N2M2NTA1NGQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNGJjNjA0ZGUtYWMyYi00OTIxLWI2
MDEtYTJjOTc2YWIxOGU4LzRiYzYwNGRlLWFjMmItNDkyMS1iNjAxLWEyYzk3NmFi
MThlOC5jcmwwHwYDVR0jBBgwFoAUXezCHp0HnbEJciCnXQk9+uP8rEAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS80YmM2MDRkZS1hYzJiLTQ5MjEtYjYwMS1hMmM5
NzZhYjE4ZTguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiABCoAc
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAIP2Ef9U9VA2nNedima8/2/OQ7pVUqTN2L3vrgWq9QlPBcum3QtS
KfxeminEx3XsmeQBBEFC/4O4zGdZ91WKwiGWj/Cy/HnCpdWh0kAr9panNfA5EyeD
MhKAGkWDimidVL69g4YGcWP7PyEemUz/ASFoN4F9rW9+LkxIVTapJhjlqTau4j0T
NtZd/h9fkBPHtjRjdZDpz+xyHQ8KJfdLh8tkwiKYdNOAd6Yiv4G3l6ZG5WvnEbgL
7qJqa5lb84FNGLDvp2XWz+ZiP9k4AaLMe9Jh5X2piEsYk83TTAlwx3ZyW5om2HQj
eRgwlFUE6lA+/bo14b3NMY/AfkiUW/zE14c=
-----END CERTIFICATE-----
Generated at Mon Mar 2 00:52:38 2026 by rpki-client