Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e6f3d63c-78c3-419e-9c5b-d937e0a0e8c3/6628d323-03bb-31cf-906c-a0bced4bc384.roa
File:                     6628d323-03bb-31cf-906c-a0bced4bc384.roa (raw, json)
Hash identifier:          z9rPOlNqBjpPZ6ARoDmL+8RsQVJbr10Gk3w1abz5dd8=
Subject key identifier:   44:13:28:0E:3F:1F:0E:49:59:CC:F7:3D:EA:59:4C:02:CF:63:24:6E
Certificate issuer:       /CN=e6f3d63c-78c3-419e-9c5b-d937e0a0e8c3
Certificate serial:       010D0C9F4328584D74701BEE13BFEE57F2E0E1C0
Authority key identifier: 8C:05:C7:5B:68:24:2C:00:C6:FC:D0:51:53:4F:91:FB:1A:B7:F1:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e6f3d63c-78c3-419e-9c5b-d937e0a0e8c3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e6f3d63c-78c3-419e-9c5b-d937e0a0e8c3/6628d323-03bb-31cf-906c-a0bced4bc384.roa
Signing time:             Fri 10 Apr 2026 01:00:24 +0000
ROA not before:           Fri 10 Apr 2026 01:00:24 +0000
ROA not after:            Thu 09 Jul 2026 01:00:24 +0000
asID:                     8103
IP address blocks:        2001:520:100e::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e6f3d63c-78c3-419e-9c5b-d937e0a0e8c3/e6f3d63c-78c3-419e-9c5b-d937e0a0e8c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e6f3d63c-78c3-419e-9c5b-d937e0a0e8c3/e6f3d63c-78c3-419e-9c5b-d937e0a0e8c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e6f3d63c-78c3-419e-9c5b-d937e0a0e8c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:74:70:1b:ee:13:bf:ee:57:f2:e0:e1:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6f3d63c-78c3-419e-9c5b-d937e0a0e8c3
        Validity
            Not Before: Apr 10 01:00:24 2026 GMT
            Not After : Jul  9 01:00:24 2026 GMT
        Subject: CN=395d15f6-760b-4aca-bdbb-be7f0a99ea8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:0b:1c:fe:81:19:22:98:be:97:2a:8f:28:39:
                    04:01:70:d4:b5:78:2d:00:ec:0d:b6:55:8a:39:a1:
                    81:dc:97:af:b1:a2:3d:36:86:92:15:84:b3:52:3e:
                    75:12:cc:0e:97:36:0b:6e:82:16:e0:74:b8:3a:60:
                    99:f6:d4:8d:be:84:b9:5d:16:0f:8f:2d:6d:33:0e:
                    2c:8b:b3:3b:45:8b:01:ca:17:50:cc:1b:ba:b4:66:
                    75:40:bf:86:11:89:be:15:d0:05:2c:2c:3b:cd:2a:
                    d0:a9:44:db:42:29:ed:80:69:bd:f5:41:31:b4:9b:
                    88:60:ee:f0:48:1c:19:3c:3e:8e:e3:34:5b:ab:23:
                    4d:9f:dd:71:f1:a0:af:75:ee:a4:a8:3a:26:75:a1:
                    36:8f:c7:cc:58:c3:56:40:ee:14:c5:a0:9e:41:7c:
                    4f:60:c9:23:50:87:18:57:69:72:6b:9f:5a:01:2d:
                    73:1e:fe:d5:91:2a:75:2c:d8:e0:78:83:ed:7e:21:
                    86:cb:e9:ef:f0:d6:c7:06:1e:c9:0a:80:e3:28:b6:
                    7d:bb:b1:bf:07:3b:3b:39:5c:b7:65:b2:26:5f:9c:
                    6e:eb:34:09:54:0f:62:d4:65:de:d4:77:52:e4:c7:
                    75:d7:b3:03:5f:bc:80:2e:7c:58:93:06:41:32:50:
                    fd:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:13:28:0E:3F:1F:0E:49:59:CC:F7:3D:EA:59:4C:02:CF:63:24:6E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e6f3d63c-78c3-419e-9c5b-d937e0a0e8c3/6628d323-03bb-31cf-906c-a0bced4bc384.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e6f3d63c-78c3-419e-9c5b-d937e0a0e8c3/e6f3d63c-78c3-419e-9c5b-d937e0a0e8c3.crl

            X509v3 Authority Key Identifier:
                keyid:8C:05:C7:5B:68:24:2C:00:C6:FC:D0:51:53:4F:91:FB:1A:B7:F1:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e6f3d63c-78c3-419e-9c5b-d937e0a0e8c3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:520:100e::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         cc:8c:3c:f6:0e:65:66:18:68:b6:d8:fe:40:f4:78:3f:03:87:
         22:81:a1:ab:29:85:7c:18:b9:b3:4b:56:df:75:27:c5:8b:31:
         16:cc:b7:1e:01:0a:c3:4d:a2:f4:d2:8f:b5:c9:e1:78:f5:47:
         7d:6a:e9:9b:96:e7:38:90:7b:36:3f:d8:10:af:12:7a:e6:40:
         1f:e6:cf:82:24:77:fb:56:17:f4:1f:d4:ac:62:79:a9:e6:6a:
         77:43:7c:a2:3d:c2:88:c8:1a:10:ce:16:e3:55:36:f8:16:35:
         98:59:2a:c3:8d:3e:40:9f:18:87:cd:0d:95:34:6c:35:3f:fd:
         70:8e:f4:98:d0:37:9f:3c:14:5c:f4:d7:f6:5f:93:e2:4d:6c:
         f9:20:0f:a6:83:18:6b:67:97:07:41:ca:96:13:08:41:e6:a8:
         35:05:db:81:d4:23:fa:04:d7:a9:71:34:6f:b2:64:09:3f:ae:
         d5:d2:52:13:9b:60:63:85:ba:99:23:f0:38:6b:ef:98:e3:0b:
         da:0f:61:6a:ed:b4:40:64:41:a1:50:3d:4e:2b:0a:70:b5:7b:
         7f:78:85:4e:1c:f7:d4:31:64:3b:ab:43:bd:ba:4b:73:96:54:
         95:18:48:6f:f6:a5:98:0e:50:a6:21:17:3f:5a:be:5f:37:2b:
         fc:9c:50:7d
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE10cBvuE7/uV/Lg4cAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTZmM2Q2M2MtNzhjMy00MTllLTljNWItZDkzN2UwYTBl
OGMzMB4XDTI2MDQxMDAxMDAyNFoXDTI2MDcwOTAxMDAyNFowLzEtMCsGA1UEAxMk
Mzk1ZDE1ZjYtNzYwYi00YWNhLWJkYmItYmU3ZjBhOTllYThiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAugsc/oEZIpi+lyqPKDkEAXDUtXgtAOwNtlWK
OaGB3JevsaI9NoaSFYSzUj51EswOlzYLboIW4HS4OmCZ9tSNvoS5XRYPjy1tMw4s
i7M7RYsByhdQzBu6tGZ1QL+GEYm+FdAFLCw7zSrQqUTbQintgGm99UExtJuIYO7w
SBwZPD6O4zRbqyNNn91x8aCvde6kqDomdaE2j8fMWMNWQO4UxaCeQXxPYMkjUIcY
V2lya59aAS1zHv7VkSp1LNjgeIPtfiGGy+nv8NbHBh7JCoDjKLZ9u7G/Bzs7OVy3
ZbImX5xu6zQJVA9i1GXe1HdS5Md117MDX7yALnxYkwZBMlD9gwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFEQTKA4/Hw5JWcz3PepZTALPYyRuMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lNmYz
ZDYzYy03OGMzLTQxOWUtOWM1Yi1kOTM3ZTBhMGU4YzMvNjYyOGQzMjMtMDNiYi0z
MWNmLTkwNmMtYTBiY2VkNGJjMzg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZTZmM2Q2M2MtNzhjMy00MTllLTlj
NWItZDkzN2UwYTBlOGMzL2U2ZjNkNjNjLTc4YzMtNDE5ZS05YzViLWQ5MzdlMGEw
ZThjMy5jcmwwHwYDVR0jBBgwFoAUjAXHW2gkLADG/NBRU0+R+xq38W8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9lNmYzZDYzYy03OGMzLTQxOWUtOWM1Yi1kOTM3
ZTBhMGU4YzMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFIBAO
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAMyMPPYOZWYYaLbY/kD0eD8DhyKBoasphXwYubNLVt91J8WLMRbM
tx4BCsNNovTSj7XJ4Xj1R31q6ZuW5ziQezY/2BCvEnrmQB/mz4Ikd/tWF/Qf1Kxi
eanmandDfKI9wojIGhDOFuNVNvgWNZhZKsONPkCfGIfNDZU0bDU//XCO9JjQN588
FFz01/Zfk+JNbPkgD6aDGGtnlwdBypYTCEHmqDUF24HUI/oE16lxNG+yZAk/rtXS
UhObYGOFupkj8Dhr75jjC9oPYWrttEBkQaFQPU4rCnC1e394hU4c99QxZDurQ726
S3OWVJUYSG/2pZgOUKYhFz9avl83K/ycUH0=
-----END CERTIFICATE-----
Generated at Fri Apr 17 12:48:42 2026 by rpki-client