Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c/c16832b7-2101-3bc4-80fc-37dffcf83679.roa
File:                     c16832b7-2101-3bc4-80fc-37dffcf83679.roa (raw, json)
Hash identifier:          j4GXstT2Scm+Nmrbhj7NOLn9qftqwkRZYCBJWU3VgH0=
Subject key identifier:   7F:4F:42:5A:D9:04:87:CE:C4:28:D4:AB:7B:F9:72:E1:B5:E7:8D:4C
Certificate issuer:       /CN=9c3739a8-4c8d-47b0-8413-77e27a96700c
Certificate serial:       010D0C9F4328584EEEB7558F9871320247D3D280
Authority key identifier: FB:02:1D:81:3F:23:FE:12:9B:83:93:BE:B4:14:A5:27:A5:BD:59:79
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c/c16832b7-2101-3bc4-80fc-37dffcf83679.roa
Signing time:             Sun 23 Aug 2026 13:00:12 +0000
ROA not before:           Sun 23 Aug 2026 13:00:12 +0000
ROA not after:            Sat 21 Nov 2026 14:00:12 +0000
asID:                     14618
IP address blocks:        2605:84c0:57::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c/9c3739a8-4c8d-47b0-8413-77e27a96700c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c/9c3739a8-4c8d-47b0-8413-77e27a96700c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ee:b7:55:8f:98:71:32:02:47:d3:d2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c3739a8-4c8d-47b0-8413-77e27a96700c
        Validity
            Not Before: Aug 23 13:00:12 2026 GMT
            Not After : Nov 21 14:00:12 2026 GMT
        Subject: CN=15574d1c-a720-4c82-8769-4c91da4ac830
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:9c:9e:98:86:74:dd:e2:c8:92:6d:2e:d5:24:
                    01:28:c9:bc:9b:26:fe:68:45:c8:5d:88:fb:af:89:
                    c7:39:ad:e5:96:69:b6:25:82:b6:9d:f4:c6:33:c0:
                    e2:4c:40:26:a7:5c:e3:20:c9:03:32:fe:20:7b:ca:
                    e3:39:13:ae:cc:87:da:f6:74:7a:10:6d:3e:8a:6f:
                    1a:80:04:a7:4d:1a:96:42:72:42:c4:c5:30:5a:e8:
                    d5:b1:a5:e3:a3:d4:e6:fc:98:91:4b:7e:1e:e5:b5:
                    a6:b8:ce:ec:a7:38:ab:26:87:d2:a3:f3:48:29:0a:
                    78:e9:fd:4c:26:4d:2d:7b:cf:38:63:d3:65:f8:dc:
                    4c:36:f4:a0:1c:53:e0:3e:43:40:ec:45:d5:0b:26:
                    0d:16:f4:65:27:b9:ff:17:78:d5:a4:91:85:8c:f5:
                    a8:c9:f3:23:44:35:dc:eb:84:2f:b2:2c:26:ab:07:
                    eb:4f:de:4c:d5:93:30:11:28:7f:c7:a8:6a:ac:73:
                    41:68:ed:34:23:5c:cf:5f:bc:0e:44:db:e1:81:73:
                    b5:df:0f:93:d6:55:e3:7e:bd:d8:91:f7:84:0e:ae:
                    c4:1a:52:91:bd:5a:49:26:bb:c2:99:97:bf:29:22:
                    f6:80:57:8b:47:98:ae:44:17:ae:cb:94:9d:b1:12:
                    fa:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:4F:42:5A:D9:04:87:CE:C4:28:D4:AB:7B:F9:72:E1:B5:E7:8D:4C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c/c16832b7-2101-3bc4-80fc-37dffcf83679.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c/9c3739a8-4c8d-47b0-8413-77e27a96700c.crl

            X509v3 Authority Key Identifier:
                keyid:FB:02:1D:81:3F:23:FE:12:9B:83:93:BE:B4:14:A5:27:A5:BD:59:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:84c0:57::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ad:26:23:2c:22:04:45:e7:92:42:d1:82:5d:28:62:65:b6:5c:
         57:4b:96:3d:34:99:c0:cc:8d:c7:f5:5f:d7:7e:2a:d6:b6:c4:
         1e:99:15:56:c1:aa:88:20:df:08:49:07:9d:b2:cc:a0:d5:55:
         35:b3:a7:eb:e1:98:64:b0:50:90:8f:9b:37:40:5a:5d:a7:3b:
         24:32:4c:44:ec:3f:50:16:cb:c2:22:7d:b7:94:7b:ac:e9:dd:
         39:92:c6:8d:5e:1d:35:d3:1d:5a:f2:84:00:27:22:f9:8f:4a:
         96:8f:70:67:ef:24:b3:80:2c:3e:7a:c3:1f:75:b1:27:7d:85:
         ff:a2:84:4c:6c:5c:2e:5b:d6:f1:96:20:b0:63:ae:f7:ce:6f:
         8b:ca:35:b2:5d:73:6a:fc:f9:eb:01:90:ef:07:f2:1e:ae:d7:
         89:b2:03:cc:6c:1d:df:11:98:4f:5b:0a:e9:a4:9a:f9:6f:38:
         6f:de:18:f6:f8:af:b9:e4:b9:79:d5:e7:37:53:7f:76:2a:25:
         66:40:79:b1:67:09:25:68:2c:53:80:ba:71:a1:bb:d4:cb:60:
         01:be:c5:64:7c:48:3a:ad:d9:d1:2f:59:2e:92:74:e2:17:7f:
         1a:60:87:3b:ff:b5:ca:b8:72:4b:b2:39:92:1e:d0:2e:c3:20:
         4f:a3:33:d9
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE7ut1WPmHEyAkfT0oAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOWMzNzM5YTgtNGM4ZC00N2IwLTg0MTMtNzdlMjdhOTY3
MDBjMB4XDTI2MDgyMzEzMDAxMloXDTI2MTEyMTE0MDAxMlowLzEtMCsGA1UEAxMk
MTU1NzRkMWMtYTcyMC00YzgyLTg3NjktNGM5MWRhNGFjODMwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3pyemIZ03eLIkm0u1SQBKMm8myb+aEXIXYj7
r4nHOa3llmm2JYK2nfTGM8DiTEAmp1zjIMkDMv4ge8rjOROuzIfa9nR6EG0+im8a
gASnTRqWQnJCxMUwWujVsaXjo9Tm/JiRS34e5bWmuM7spzirJofSo/NIKQp46f1M
Jk0te884Y9Nl+NxMNvSgHFPgPkNA7EXVCyYNFvRlJ7n/F3jVpJGFjPWoyfMjRDXc
64QvsiwmqwfrT95M1ZMwESh/x6hqrHNBaO00I1zPX7wORNvhgXO13w+T1lXjfr3Y
kfeEDq7EGlKRvVpJJrvCmZe/KSL2gFeLR5iuRBeuy5SdsRL6bQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFH9PQlrZBIfOxCjUq3v5cuG1541MMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85YzM3
MzlhOC00YzhkLTQ3YjAtODQxMy03N2UyN2E5NjcwMGMvYzE2ODMyYjctMjEwMS0z
YmM0LTgwZmMtMzdkZmZjZjgzNjc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOWMzNzM5YTgtNGM4ZC00N2IwLTg0
MTMtNzdlMjdhOTY3MDBjLzljMzczOWE4LTRjOGQtNDdiMC04NDEzLTc3ZTI3YTk2
NzAwYy5jcmwwHwYDVR0jBBgwFoAU+wIdgT8j/hKbg5O+tBSlJ6W9WXkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS85YzM3MzlhOC00YzhkLTQ3YjAtODQxMy03N2Uy
N2E5NjcwMGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgWEwABX
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAK0mIywiBEXnkkLRgl0oYmW2XFdLlj00mcDMjcf1X9d+Kta2xB6Z
FVbBqogg3whJB52yzKDVVTWzp+vhmGSwUJCPmzdAWl2nOyQyTETsP1AWy8IifbeU
e6zp3TmSxo1eHTXTHVryhAAnIvmPSpaPcGfvJLOALD56wx91sSd9hf+ihExsXC5b
1vGWILBjrvfOb4vKNbJdc2r8+esBkO8H8h6u14myA8xsHd8RmE9bCumkmvlvOG/e
GPb4r7nkuXnV5zdTf3YqJWZAebFnCSVoLFOAunGhu9TLYAG+xWR8SDqt2dEvWS6S
dOIXfxpghzv/tcq4ckuyOZIe0C7DIE+jM9k=
-----END CERTIFICATE-----
Generated at Tue Sep 22 11:07:34 2026 by rpki-client