Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/7a86ba22-c035-3bfb-a1df-7032c02b18de.roa
File:                     7a86ba22-c035-3bfb-a1df-7032c02b18de.roa (raw, json)
Hash identifier:          piR+AcpZeIruOiG3d0C2I9vwDmceSnQf2ZxJpUPh7YY=
Subject key identifier:   30:D6:28:76:18:4D:6B:4C:8E:8A:2D:79:91:56:7D:FE:6B:90:66:79
Certificate issuer:       /CN=a3049800-ff17-49a6-b029-ec908e1c7cb3
Certificate serial:       010D0C9F4328584DF4DB5D3D8D9CAAB9D45370A0
Authority key identifier: 68:23:CA:29:BD:91:A1:49:CE:95:E6:5A:B1:0F:66:B3:85:67:6C:F0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/7a86ba22-c035-3bfb-a1df-7032c02b18de.roa
Signing time:             Tue 26 May 2026 01:00:24 +0000
ROA not before:           Tue 26 May 2026 01:00:24 +0000
ROA not after:            Mon 24 Aug 2026 01:00:24 +0000
asID:                     30823
IP address blocks:        2605:7980::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/a3049800-ff17-49a6-b029-ec908e1c7cb3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/a3049800-ff17-49a6-b029-ec908e1c7cb3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:f4:db:5d:3d:8d:9c:aa:b9:d4:53:70:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a3049800-ff17-49a6-b029-ec908e1c7cb3
        Validity
            Not Before: May 26 01:00:24 2026 GMT
            Not After : Aug 24 01:00:24 2026 GMT
        Subject: CN=543bc9e8-e98b-43a0-a2f7-cabaed468327
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:36:74:f0:97:83:d6:55:8f:6a:5f:75:92:b8:
                    3a:1b:93:51:e6:27:38:5e:0d:a8:ff:7d:f6:e9:2e:
                    98:7c:a6:68:74:f1:08:5b:21:f0:b1:cb:8b:2f:1f:
                    d7:db:bc:ca:66:d1:a8:db:16:bd:18:78:b2:ff:d2:
                    cf:31:cd:c3:5d:ce:f8:34:34:ef:67:71:8b:5d:4d:
                    61:55:fa:a6:90:a2:f1:18:6b:48:ef:e8:4b:60:4f:
                    35:00:e5:42:02:ea:46:d9:4c:14:81:d6:58:b6:cc:
                    c3:3e:de:61:df:a6:85:e8:aa:53:f1:b5:60:bd:57:
                    7c:37:4b:92:d9:08:cf:61:df:1f:d8:c0:4f:0c:ba:
                    98:68:42:a8:c1:31:d8:dc:d2:49:51:72:e8:bc:8c:
                    73:07:26:7e:0b:8a:5c:af:9a:6c:bd:4d:4f:ec:7e:
                    5f:c4:32:03:f9:1f:f4:f0:3b:bd:3a:e7:1b:86:76:
                    27:c9:51:1d:fa:d2:d2:0e:5e:ae:01:7b:43:fc:a7:
                    48:ab:f8:5c:26:92:03:dc:d2:45:84:83:e9:08:fe:
                    6f:4c:47:eb:e7:1f:e5:6d:0b:8b:40:9f:81:ea:b3:
                    ee:07:f5:ab:02:3d:11:46:7c:f9:d7:0f:77:4b:61:
                    48:99:2c:d7:f4:12:45:ee:ca:f1:7a:2f:27:2c:bf:
                    91:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:D6:28:76:18:4D:6B:4C:8E:8A:2D:79:91:56:7D:FE:6B:90:66:79
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/7a86ba22-c035-3bfb-a1df-7032c02b18de.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/a3049800-ff17-49a6-b029-ec908e1c7cb3.crl

            X509v3 Authority Key Identifier:
                keyid:68:23:CA:29:BD:91:A1:49:CE:95:E6:5A:B1:0F:66:B3:85:67:6C:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:7980::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9f:d0:44:23:bc:65:d5:c3:e8:c1:d6:93:26:b9:1d:bf:e1:31:
         dc:6e:bd:4a:98:d2:cb:3a:95:28:16:46:a6:42:68:aa:20:9b:
         65:ff:61:a8:92:81:29:01:ba:48:af:2e:d2:89:26:00:21:81:
         b0:0b:8a:d2:7e:54:0c:ee:99:5b:26:b2:b0:78:ae:78:a0:b0:
         d4:fd:aa:9f:b0:52:d6:e8:a9:aa:60:ab:29:df:95:b6:6a:44:
         97:db:b9:0c:54:14:5e:1d:83:21:0d:3f:40:2a:f5:36:26:f5:
         44:9c:d3:48:81:fa:19:1d:69:3b:a6:db:c0:a9:d1:18:da:98:
         fe:52:22:28:e2:a7:a2:84:9a:d9:ad:69:e4:1e:2a:f7:3d:b8:
         92:d9:7c:13:82:09:4c:53:09:a8:2a:3a:06:6e:5f:ef:5b:fc:
         13:1e:13:d4:4f:01:e5:fe:e6:a5:fc:c1:44:49:62:ab:1b:5e:
         c0:d6:6b:cc:7f:dc:e0:9a:32:45:24:41:11:a9:d2:d5:69:11:
         88:7c:20:e7:89:bc:d9:f0:29:b3:e9:f6:26:1b:55:36:57:e6:
         77:4c:0a:7f:ba:5f:cf:23:1e:c2:8d:63:8e:b7:5f:e0:e8:e3:
         29:b4:86:80:c9:75:11:51:00:c6:58:17:57:13:f1:dd:75:e6:
         0a:ca:58:68
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE302109jZyqudRTcKAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTMwNDk4MDAtZmYxNy00OWE2LWIwMjktZWM5MDhlMWM3
Y2IzMB4XDTI2MDUyNjAxMDAyNFoXDTI2MDgyNDAxMDAyNFowLzEtMCsGA1UEAxMk
NTQzYmM5ZTgtZTk4Yi00M2EwLWEyZjctY2FiYWVkNDY4MzI3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnDZ08JeD1lWPal91krg6G5NR5ic4Xg2o/332
6S6YfKZodPEIWyHwscuLLx/X27zKZtGo2xa9GHiy/9LPMc3DXc74NDTvZ3GLXU1h
VfqmkKLxGGtI7+hLYE81AOVCAupG2UwUgdZYtszDPt5h36aF6KpT8bVgvVd8N0uS
2QjPYd8f2MBPDLqYaEKowTHY3NJJUXLovIxzByZ+C4pcr5psvU1P7H5fxDID+R/0
8Du9OucbhnYnyVEd+tLSDl6uAXtD/KdIq/hcJpID3NJFhIPpCP5vTEfr5x/lbQuL
QJ+B6rPuB/WrAj0RRnz51w93S2FImSzX9BJF7srxei8nLL+RIwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFDDWKHYYTWtMjooteZFWff5rkGZ5MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hMzA0
OTgwMC1mZjE3LTQ5YTYtYjAyOS1lYzkwOGUxYzdjYjMvN2E4NmJhMjItYzAzNS0z
YmZiLWExZGYtNzAzMmMwMmIxOGRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTMwNDk4MDAtZmYxNy00OWE2LWIw
MjktZWM5MDhlMWM3Y2IzL2EzMDQ5ODAwLWZmMTctNDlhNi1iMDI5LWVjOTA4ZTFj
N2NiMy5jcmwwHwYDVR0jBBgwFoAUaCPKKb2RoUnOleZasQ9ms4VnbPAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9hMzA0OTgwMC1mZjE3LTQ5YTYtYjAyOS1lYzkw
OGUxYzdjYjMuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgV5gDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQCf0EQjvGXVw+jB1pMmuR2/4THcbr1KmNLLOpUoFkamQmiqIJtl/2Go
koEpAbpIry7SiSYAIYGwC4rSflQM7plbJrKweK54oLDU/aqfsFLW6KmqYKsp35W2
akSX27kMVBReHYMhDT9AKvU2JvVEnNNIgfoZHWk7ptvAqdEY2pj+UiIo4qeihJrZ
rWnkHir3PbiS2XwTgglMUwmoKjoGbl/vW/wTHhPUTwHl/ual/MFESWKrG17A1mvM
f9zgmjJFJEERqdLVaRGIfCDnibzZ8Cmz6fYmG1U2V+Z3TAp/ul/PIx7CjWOOt1/g
6OMptIaAyXURUQDGWBdXE/HddeYKylho
-----END CERTIFICATE-----
Generated at Sat Jun 13 18:03:59 2026 by rpki-client