Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a40791d7-fba6-378d-bdd1-e69e8fbdf2e4.roa
File:                     a40791d7-fba6-378d-bdd1-e69e8fbdf2e4.roa (raw, json)
Hash identifier:          Cr95+RhRGVd3NjGutyOgZUgQVp41BdrCzoEu2ltIHNw=
Subject key identifier:   70:16:0E:DB:13:FF:51:F8:16:90:50:4A:B1:F4:B3:B6:B4:4C:9F:44
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584EDC922418C2D39689AADE1A40
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a40791d7-fba6-378d-bdd1-e69e8fbdf2e4.roa
Signing time:             Mon 17 Aug 2026 01:00:12 +0000
ROA not before:           Mon 17 Aug 2026 01:00:12 +0000
ROA not after:            Sun 15 Nov 2026 02:00:12 +0000
asID:                     398538
IP address blocks:        2001:470:201::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 25 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:dc:92:24:18:c2:d3:96:89:aa:de:1a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Aug 17 01:00:12 2026 GMT
            Not After : Nov 15 02:00:12 2026 GMT
        Subject: CN=afd70182-29ce-4f29-a5c1-32b2e9ed3945
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:8c:0d:4c:aa:00:7d:1d:2d:b3:ab:2d:85:4d:
                    02:f1:b4:0a:77:e4:2b:b1:92:7e:02:e4:79:85:e9:
                    f5:97:f8:ea:51:57:6a:6e:b0:6f:29:67:15:1b:97:
                    17:1f:69:79:03:2a:0b:fa:88:ab:8d:5a:28:93:8e:
                    34:f9:8d:a3:1f:eb:0c:5e:ae:9a:b2:69:dc:f9:59:
                    f5:e8:bd:7a:16:53:31:ba:56:2c:80:4d:55:0b:25:
                    66:65:2c:bb:f2:38:29:81:71:f4:02:73:97:0e:8b:
                    f3:af:81:87:30:f2:9f:09:3d:96:f3:cd:13:15:a8:
                    b2:9b:94:1e:9a:d0:3b:5d:97:9f:6e:9a:26:cc:54:
                    09:e2:9f:9b:ed:54:6a:24:0f:16:98:13:4f:b2:23:
                    06:ff:db:33:4a:86:29:8f:3b:94:7a:72:a5:53:a7:
                    9b:36:91:e4:1c:fc:01:85:67:b5:f4:29:cb:d6:13:
                    51:3a:ea:bd:79:dd:05:11:16:f7:2d:39:87:f8:72:
                    86:9a:d3:d7:60:76:6e:56:a7:00:39:27:28:3c:39:
                    6d:e2:0c:4c:fd:12:9e:ad:51:7c:31:b6:91:2d:21:
                    fc:a0:7c:7d:f5:38:06:73:0b:b1:e1:8c:f1:47:5a:
                    56:cc:9c:6f:6f:85:5f:6c:e4:5a:03:bb:a9:46:4f:
                    6d:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:16:0E:DB:13:FF:51:F8:16:90:50:4A:B1:F4:B3:B6:B4:4C:9F:44
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a40791d7-fba6-378d-bdd1-e69e8fbdf2e4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:201::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:a9:06:a8:4f:79:3d:88:29:8e:11:32:4d:ea:75:50:c9:c0:
         51:7d:fb:68:57:fa:e4:1c:90:85:34:58:9b:05:c7:b8:53:82:
         18:e0:fb:23:7e:ac:a1:80:d8:b5:cf:71:90:d1:1e:c5:d4:64:
         77:ed:ae:1f:08:18:d4:f0:60:df:87:81:b1:ef:35:0f:b4:41:
         78:c5:2d:ad:5a:c4:6f:14:dd:0f:af:93:5a:54:71:2a:ba:9e:
         17:7f:d7:81:75:07:b5:ba:61:39:66:a8:f4:0f:b0:7e:6d:59:
         d8:06:73:3c:4e:a3:20:0d:d1:a5:75:7b:78:07:e9:2d:58:2f:
         7e:0f:de:12:f3:94:79:03:cc:29:69:4c:e1:b3:9a:c5:3c:20:
         8e:37:37:f8:45:4b:85:8b:e2:a2:97:3a:e7:8a:75:96:fb:3b:
         e4:38:8c:27:c2:90:95:7e:bc:33:fc:15:46:ba:d2:12:17:6c:
         36:f9:6d:82:cd:e7:b5:b4:6d:f3:15:ea:c1:8b:24:78:a0:a7:
         2c:f0:17:42:9d:39:5d:61:4a:81:c9:49:9f:f4:5f:f6:a8:29:
         e4:4d:63:5c:0b:d9:fb:02:a9:93:61:e7:61:f7:d8:9c:e2:f8:
         b8:8d:8d:48:b6:f0:60:4c:04:e1:a6:66:79:5a:89:f5:db:44:
         ad:5b:50:08
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE7ckiQYwtOWiareGkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI2MDgxNzAxMDAxMloXDTI2MTExNTAyMDAxMlowLzEtMCsGA1UEAxMk
YWZkNzAxODItMjljZS00ZjI5LWE1YzEtMzJiMmU5ZWQzOTQ1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj4wNTKoAfR0ts6sthU0C8bQKd+QrsZJ+AuR5
hen1l/jqUVdqbrBvKWcVG5cXH2l5AyoL+oirjVook440+Y2jH+sMXq6asmnc+Vn1
6L16FlMxulYsgE1VCyVmZSy78jgpgXH0AnOXDovzr4GHMPKfCT2W880TFaiym5Qe
mtA7XZefbpomzFQJ4p+b7VRqJA8WmBNPsiMG/9szSoYpjzuUenKlU6ebNpHkHPwB
hWe19CnL1hNROuq9ed0FERb3LTmH+HKGmtPXYHZuVqcAOScoPDlt4gxM/RKerVF8
MbaRLSH8oHx99TgGcwux4YzxR1pWzJxvb4VfbORaA7upRk9tVQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFHAWDtsT/1H4FpBQSrH0s7a0TJ9EMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvYTQwNzkxZDctZmJhNi0z
NzhkLWJkZDEtZTY5ZThmYmRmMmU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAIB
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBACipBqhPeT2IKY4RMk3qdVDJwFF9+2hX+uQckIU0WJsFx7hTghjg
+yN+rKGA2LXPcZDRHsXUZHftrh8IGNTwYN+HgbHvNQ+0QXjFLa1axG8U3Q+vk1pU
cSq6nhd/14F1B7W6YTlmqPQPsH5tWdgGczxOoyAN0aV1e3gH6S1YL34P3hLzlHkD
zClpTOGzmsU8II43N/hFS4WL4qKXOueKdZb7O+Q4jCfCkJV+vDP8FUa60hIXbDb5
bYLN57W0bfMV6sGLJHigpyzwF0KdOV1hSoHJSZ/0X/aoKeRNY1wL2fsCqZNh52H3
2Jzi+LiNjUi28GBMBOGmZnlaifXbRK1bUAg=
-----END CERTIFICATE-----
Generated at Wed Sep 23 20:02:07 2026 by rpki-client