Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/06382a76-a732-35ed-aa7d-a38282ce24e0.roa
File:                     06382a76-a732-35ed-aa7d-a38282ce24e0.roa (raw, json)
Hash identifier:          KS+FNYI2s1vSAZV1FMzcWOn/YBstP/+I5D4HPVeR7Xo=
Subject key identifier:   2D:A9:E3:C3:30:CB:E1:93:56:4B:1C:67:41:15:6F:B6:2F:AC:FF:EE
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584DAAE02DBA4C2A6313716A5110
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/06382a76-a732-35ed-aa7d-a38282ce24e0.roa
Signing time:             Wed 29 Apr 2026 13:00:31 +0000
ROA not before:           Wed 29 Apr 2026 13:00:31 +0000
ROA not after:            Tue 28 Jul 2026 13:00:31 +0000
asID:                     397208
IP address blocks:        2001:502:1ca1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:aa:e0:2d:ba:4c:2a:63:13:71:6a:51:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 29 13:00:31 2026 GMT
            Not After : Jul 28 13:00:31 2026 GMT
        Subject: CN=fdb95dc4-2d9d-4c3b-8be1-63a7aa74235b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:4f:5b:3a:ff:55:0c:69:d7:e3:a5:46:06:34:
                    cb:ea:df:14:9f:e4:9c:88:a1:a8:6a:3e:2b:43:f4:
                    19:8b:bc:31:09:2c:a6:0d:a9:78:54:7a:8b:05:33:
                    2c:25:4d:e8:43:39:2d:4d:b8:d1:13:83:41:66:4a:
                    87:81:6d:9f:79:d2:0f:da:60:77:df:d2:e9:60:a5:
                    4b:71:6e:ce:84:a2:72:91:d9:93:33:9e:be:4d:f1:
                    dc:af:47:65:d3:59:c2:0a:0a:f8:92:3f:0b:c6:8a:
                    23:47:9d:fb:ee:40:e2:3f:0e:0b:45:28:31:cd:05:
                    e0:61:4a:d1:3b:8c:0f:cb:52:38:e6:a6:2d:1d:13:
                    28:80:28:92:79:e5:ad:db:cb:30:c7:0a:d0:35:f4:
                    d4:59:6d:46:2b:ff:3f:a8:ce:8b:5a:22:b2:26:a0:
                    12:d2:59:e2:94:90:26:ee:4b:1d:64:4e:5c:e4:f8:
                    b4:de:53:d3:42:0e:20:8c:62:1c:f6:fa:f8:61:57:
                    19:16:78:a0:5b:4e:bf:a4:4a:6c:87:02:d9:aa:45:
                    60:ae:2d:4b:08:1c:25:94:3f:f9:bc:b3:f0:82:6c:
                    35:d1:bf:dd:67:d8:a1:88:5e:e5:7f:7e:2c:7b:32:
                    49:95:ec:59:eb:c0:b6:18:f8:8a:4e:90:5f:16:d9:
                    75:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:A9:E3:C3:30:CB:E1:93:56:4B:1C:67:41:15:6F:B6:2F:AC:FF:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/06382a76-a732-35ed-aa7d-a38282ce24e0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:1ca1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:39:e6:3b:4f:02:0c:da:a1:a5:3b:c8:15:00:ee:4d:90:93:
         08:51:4a:02:c0:da:ea:b4:4b:ba:2a:79:79:b5:a8:a0:c2:21:
         05:39:d5:4a:1a:92:4c:40:f2:3e:92:9b:83:c0:81:20:4a:04:
         da:07:b9:cd:09:b8:10:a8:67:12:b8:4c:3f:63:e9:e9:d2:8d:
         65:19:4f:c5:2b:e7:d4:0f:cb:f2:94:5d:6c:cf:97:c4:21:dd:
         88:21:33:53:7a:16:32:f4:e1:17:f3:d5:94:60:ee:57:f6:5f:
         35:94:e9:fe:3c:74:a0:3f:46:7e:c1:54:79:68:67:1d:4f:5d:
         f8:9e:11:ea:d6:7f:38:23:58:e1:a3:26:ef:60:07:91:61:53:
         df:d0:52:f9:31:f3:9b:90:0a:d7:c2:2f:cf:f9:dd:29:c9:ad:
         6c:45:ee:f4:02:21:1f:b3:a2:dc:6b:16:27:7c:35:ae:69:b6:
         cc:ba:b5:a6:c6:63:7a:f8:d1:7a:c8:38:1d:a0:60:bb:9a:d4:
         87:df:82:24:90:bf:e8:f9:ad:1a:6c:d8:ac:1e:90:c8:82:b1:
         d7:bf:e9:a8:f9:a6:33:7b:ef:8e:c1:18:8e:37:8e:ea:f6:fe:
         fe:11:52:82:7a:57:27:81:ec:84:3c:4e:c2:17:39:e1:40:a1:
         2d:9d:9d:c6
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE2q4C26TCpjE3FqURAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDQyOTEzMDAzMVoXDTI2MDcyODEzMDAzMVowLzEtMCsGA1UEAxMk
ZmRiOTVkYzQtMmQ5ZC00YzNiLThiZTEtNjNhN2FhNzQyMzViMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvk9bOv9VDGnX46VGBjTL6t8Un+SciKGoaj4r
Q/QZi7wxCSymDal4VHqLBTMsJU3oQzktTbjRE4NBZkqHgW2fedIP2mB339LpYKVL
cW7OhKJykdmTM56+TfHcr0dl01nCCgr4kj8LxoojR5377kDiPw4LRSgxzQXgYUrR
O4wPy1I45qYtHRMogCiSeeWt28swxwrQNfTUWW1GK/8/qM6LWiKyJqAS0lnilJAm
7ksdZE5c5Pi03lPTQg4gjGIc9vr4YVcZFnigW06/pEpshwLZqkVgri1LCBwllD/5
vLPwgmw10b/dZ9ihiF7lf34sezJJlexZ68C2GPiKTpBfFtl1hwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFC2p48Mwy+GTVkscZ0EVb7YvrP/uMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMDYzODJhNzYtYTczMi0z
NWVkLWFhN2QtYTM4MjgyY2UyNGUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAhyh
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAA455jtPAgzaoaU7yBUA7k2QkwhRSgLA2uq0S7oqeXm1qKDCIQU5
1UoakkxA8j6Sm4PAgSBKBNoHuc0JuBCoZxK4TD9j6enSjWUZT8Ur59QPy/KUXWzP
l8Qh3YghM1N6FjL04Rfz1ZRg7lf2XzWU6f48dKA/Rn7BVHloZx1PXfieEerWfzgj
WOGjJu9gB5FhU9/QUvkx85uQCtfCL8/53SnJrWxF7vQCIR+zotxrFid8Na5ptsy6
tabGY3r40XrIOB2gYLua1IffgiSQv+j5rRps2KwekMiCsde/6aj5pjN7747BGI43
jur2/v4RUoJ6VyeB7IQ8TsIXOeFAoS2dncY=
-----END CERTIFICATE-----
Generated at Wed May 13 09:58:43 2026 by rpki-client