Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/12795ac4-1589-3323-a105-d05b6393ff18.roa
File:                     12795ac4-1589-3323-a105-d05b6393ff18.roa (raw, json)
Hash identifier:          KS4o6GWIauVMq9f+l+Dqq8jckjxhUWrrm3KQn8GzO3A=
Subject key identifier:   63:25:10:7A:5F:E4:AA:E2:E1:24:6E:7D:80:43:A6:2C:85:B3:32:7D
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D386A63086D6ED1B192FB7900
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/12795ac4-1589-3323-a105-d05b6393ff18.roa
Signing time:             Thu 19 Mar 2026 13:00:41 +0000
ROA not before:           Thu 19 Mar 2026 13:00:41 +0000
ROA not after:            Wed 17 Jun 2026 13:00:41 +0000
asID:                     396578
IP address blocks:        2001:503:c27::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:38:6a:63:08:6d:6e:d1:b1:92:fb:79:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar 19 13:00:41 2026 GMT
            Not After : Jun 17 13:00:41 2026 GMT
        Subject: CN=933fe778-e540-4cbf-bf70-808348a24d60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:2c:79:04:a3:5b:3a:fd:42:bf:5a:f5:a6:f5:
                    e8:d3:cc:ee:63:b0:ea:11:c5:1d:ed:4d:74:84:40:
                    ad:8f:22:e6:cd:b4:dc:89:68:b0:7c:2f:a4:82:9e:
                    2c:2d:12:c1:cf:b3:85:13:9f:f9:1a:9e:d4:d1:d1:
                    d0:77:ae:f9:90:31:3f:37:e6:ef:14:ef:6a:07:a7:
                    a6:88:0d:97:48:35:a3:8a:1c:ba:8d:a4:c1:43:f8:
                    d5:00:f7:8b:bb:1e:96:f8:23:cf:5a:ef:41:82:2c:
                    bc:a1:32:b4:dc:b8:7e:23:5d:ce:07:8c:bc:0f:0c:
                    f4:45:8e:d2:81:55:eb:7c:c0:4e:b3:9f:35:eb:73:
                    5b:f3:77:f2:05:6c:38:e0:a7:15:40:9b:b6:e6:2e:
                    48:2a:34:68:4b:30:3b:b8:66:ed:0c:de:f9:ff:ef:
                    84:6d:9c:24:db:70:10:ba:37:04:b3:8c:b4:6d:b0:
                    25:8c:40:68:f9:53:61:4c:ed:e0:be:46:83:8a:b0:
                    40:95:d9:9c:97:76:7b:82:41:fc:b9:7a:44:ce:f7:
                    2a:64:dd:f4:9a:03:a1:e0:9a:a6:1e:b8:b8:34:58:
                    b1:f1:0c:7b:07:80:9d:70:08:b8:52:38:8f:72:68:
                    2c:80:06:a3:07:9d:cd:99:0c:00:e5:29:21:75:11:
                    f2:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:25:10:7A:5F:E4:AA:E2:E1:24:6E:7D:80:43:A6:2C:85:B3:32:7D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/12795ac4-1589-3323-a105-d05b6393ff18.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:c27::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:c4:0e:d0:ae:5b:51:b2:42:52:21:4e:ec:95:26:0d:a8:03:
         3f:7b:f8:23:1c:f3:bd:0c:5b:ff:45:f7:2d:cd:2b:35:7c:2b:
         df:4f:f1:62:3a:16:8e:87:f3:7e:ee:bd:32:1c:19:6a:e6:1e:
         fa:4e:93:bb:d9:df:35:47:c7:59:97:24:63:f5:2e:b8:2d:14:
         d5:0a:49:f8:e5:10:a4:ff:90:10:77:64:ab:d5:a4:9c:50:1c:
         74:d6:c3:24:d6:8d:a1:81:54:27:13:4f:ed:d2:61:34:d2:64:
         87:e3:c4:79:65:18:3d:2f:01:8c:b9:c7:16:98:e4:8c:48:a5:
         f0:18:87:48:26:75:33:71:22:fb:ca:b4:44:6c:1e:08:a8:81:
         d8:c4:d3:ed:08:ba:d7:09:ac:95:c9:ad:16:23:df:1d:4d:ba:
         a9:40:a5:ae:87:f4:06:3d:ab:28:44:8d:50:23:9b:cf:74:64:
         36:7e:cc:88:23:39:a9:89:b6:d7:43:c9:c0:c7:1b:0d:8a:46:
         55:7f:07:c9:50:40:c4:3d:2f:63:0b:2f:18:25:88:e4:81:a7:
         a2:9f:12:ba:32:5b:79:53:b0:aa:c6:12:9b:e9:be:5d:61:b9:
         b5:bf:74:1a:00:11:d9:74:5d:c3:c6:e4:40:09:a9:ef:59:b8:
         68:66:90:55
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE04amMIbW7RsZL7eQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDMxOTEzMDA0MVoXDTI2MDYxNzEzMDA0MVowLzEtMCsGA1UEAxMk
OTMzZmU3NzgtZTU0MC00Y2JmLWJmNzAtODA4MzQ4YTI0ZDYwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkSx5BKNbOv1Cv1r1pvXo08zuY7DqEcUd7U10
hECtjyLmzbTciWiwfC+kgp4sLRLBz7OFE5/5Gp7U0dHQd675kDE/N+bvFO9qB6em
iA2XSDWjihy6jaTBQ/jVAPeLux6W+CPPWu9Bgiy8oTK03Lh+I13OB4y8Dwz0RY7S
gVXrfMBOs58163Nb83fyBWw44KcVQJu25i5IKjRoSzA7uGbtDN75/++EbZwk23AQ
ujcEs4y0bbAljEBo+VNhTO3gvkaDirBAldmcl3Z7gkH8uXpEzvcqZN30mgOh4Jqm
Hri4NFix8Qx7B4CdcAi4UjiPcmgsgAajB53NmQwA5SkhdRHy+QIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFGMlEHpf5Kri4SRufYBDpiyFszJ9MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMTI3OTVhYzQtMTU4OS0z
MzIzLWExMDUtZDA1YjYzOTNmZjE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAwwn
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAJzEDtCuW1GyQlIhTuyVJg2oAz97+CMc870MW/9F9y3NKzV8K99P
8WI6Fo6H837uvTIcGWrmHvpOk7vZ3zVHx1mXJGP1LrgtFNUKSfjlEKT/kBB3ZKvV
pJxQHHTWwyTWjaGBVCcTT+3SYTTSZIfjxHllGD0vAYy5xxaY5IxIpfAYh0gmdTNx
IvvKtERsHgiogdjE0+0IutcJrJXJrRYj3x1NuqlApa6H9AY9qyhEjVAjm890ZDZ+
zIgjOamJttdDycDHGw2KRlV/B8lQQMQ9L2MLLxgliOSBp6KfEroyW3lTsKrGEpvp
vl1hubW/dBoAEdl0XcPG5EAJqe9ZuGhmkFU=
-----END CERTIFICATE-----
Generated at Thu Mar 26 17:24:58 2026 by rpki-client