Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/301880b5-a1b1-3b98-a75a-dfae4cfd5892.roa
File:                     301880b5-a1b1-3b98-a75a-dfae4cfd5892.roa (raw, json)
Hash identifier:          YSqsho49cReQa9rc5rAvSU5bbvrr4QlXH0v28cuhKNE=
Subject key identifier:   48:54:42:05:CA:F1:CB:BE:B7:0B:FF:85:DC:BD:E8:1F:D2:59:E2:C2
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E885A5D7882B4077E9142C600
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/301880b5-a1b1-3b98-a75a-dfae4cfd5892.roa
Signing time:             Fri 17 Jul 2026 21:00:12 +0000
ROA not before:           Fri 17 Jul 2026 21:00:12 +0000
ROA not after:            Thu 15 Oct 2026 21:00:12 +0000
asID:                     25485
IP address blocks:        2001:503:eea3::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:88:5a:5d:78:82:b4:07:7e:91:42:c6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 17 21:00:12 2026 GMT
            Not After : Oct 15 21:00:12 2026 GMT
        Subject: CN=dbf97cef-a7a2-42f4-ad5d-3dffc695c937
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:2e:eb:3e:d1:50:a4:4f:0d:8c:9f:f9:63:8a:
                    a2:b9:79:1f:be:4e:de:af:e1:fe:22:d3:74:24:46:
                    57:81:90:ac:e2:24:ce:86:03:c2:7a:91:a6:0a:6d:
                    33:a8:53:cd:7e:fa:72:02:5b:f0:ef:df:79:46:dd:
                    93:d2:1c:13:e9:12:b5:86:1c:68:fc:44:69:ab:14:
                    de:67:bd:02:bd:76:35:89:98:19:2d:3e:81:03:6d:
                    27:48:5d:e6:27:27:bc:1d:7a:7e:3a:8d:a2:41:81:
                    34:9c:91:aa:9b:ce:16:ea:8b:7a:95:39:cd:1a:2d:
                    0a:10:0d:23:6f:4b:fb:9f:cd:e6:4d:6c:71:98:3f:
                    bc:7f:b0:45:92:a5:85:2c:12:1d:fa:2b:31:5d:4e:
                    a6:f5:4f:36:69:33:3e:ad:6d:3a:85:8c:57:93:51:
                    62:eb:76:9b:d5:6d:ac:fd:82:8d:ee:40:35:b7:0f:
                    42:a5:88:99:c8:91:e5:38:cf:03:5b:63:f0:d9:e2:
                    31:a6:69:79:c3:b6:d3:a7:ee:bd:b5:ba:9b:13:b9:
                    03:fc:0e:0b:ba:ad:8c:ee:78:a4:bf:23:84:b2:8f:
                    07:87:d4:ba:09:9d:4d:11:e0:91:9e:f0:ef:86:34:
                    79:7b:67:59:a2:3f:99:c0:6f:11:b1:86:c3:d2:46:
                    4c:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:54:42:05:CA:F1:CB:BE:B7:0B:FF:85:DC:BD:E8:1F:D2:59:E2:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/301880b5-a1b1-3b98-a75a-dfae4cfd5892.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:eea3::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:91:d4:dd:9c:b1:f1:b5:f1:61:1e:2d:90:6a:a2:60:fd:46:
         89:92:00:c3:c0:bd:a0:d6:3a:7e:f2:fb:fb:0c:42:76:9d:5b:
         5f:3b:5f:95:42:66:cf:1a:1f:08:ef:c9:1f:cb:e9:43:37:5d:
         19:6d:53:82:0d:29:20:c3:7f:d1:fe:69:e2:3c:62:8e:8b:37:
         9c:de:6f:c2:f1:ae:04:f9:8f:36:bf:d5:59:92:10:b5:28:fa:
         6c:e0:d9:01:fe:7d:37:31:e0:d0:b1:0c:ac:2d:6c:a3:ef:74:
         de:70:bc:43:8b:39:05:5c:ba:5e:aa:c6:b6:32:84:b6:b3:52:
         5a:3a:7b:4f:8e:42:bf:c8:d8:c6:84:be:ee:28:d1:5c:d0:7e:
         ee:57:11:08:ed:6a:3c:c1:f9:db:c4:f0:dd:bb:f2:bf:ce:0d:
         a0:a6:a6:45:8b:f6:c2:a8:5b:fa:97:ca:30:7a:98:7c:38:d1:
         20:4d:8b:c0:23:c3:0f:88:e1:ca:d9:0c:fb:27:99:b7:55:43:
         cd:57:73:61:ef:30:b5:1c:da:a3:d7:57:56:b5:3d:35:ac:25:
         60:b9:b0:31:e7:0f:2f:bf:93:ee:33:58:bd:fa:df:9f:06:7b:
         0e:0f:20:00:d0:48:21:83:10:32:1b:eb:a8:a6:f3:e9:da:61:
         40:9f:36:40
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE6IWl14grQHfpFCxgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDcxNzIxMDAxMloXDTI2MTAxNTIxMDAxMlowLzEtMCsGA1UEAxMk
ZGJmOTdjZWYtYTdhMi00MmY0LWFkNWQtM2RmZmM2OTVjOTM3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApS7rPtFQpE8NjJ/5Y4qiuXkfvk7er+H+ItN0
JEZXgZCs4iTOhgPCepGmCm0zqFPNfvpyAlvw7995Rt2T0hwT6RK1hhxo/ERpqxTe
Z70CvXY1iZgZLT6BA20nSF3mJye8HXp+Oo2iQYE0nJGqm84W6ot6lTnNGi0KEA0j
b0v7n83mTWxxmD+8f7BFkqWFLBId+isxXU6m9U82aTM+rW06hYxXk1Fi63ab1W2s
/YKN7kA1tw9CpYiZyJHlOM8DW2Pw2eIxpml5w7bTp+69tbqbE7kD/A4Luq2M7nik
vyOEso8Hh9S6CZ1NEeCRnvDvhjR5e2dZoj+ZwG8RsYbD0kZMBQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFEhUQgXK8cu+twv/hdy96B/SWeLCMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMzAxODgwYjUtYTFiMS0z
Yjk4LWE3NWEtZGZhZTRjZmQ1ODkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFA+6j
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAAOR1N2csfG18WEeLZBqomD9RomSAMPAvaDWOn7y+/sMQnadW187
X5VCZs8aHwjvyR/L6UM3XRltU4INKSDDf9H+aeI8Yo6LN5zeb8LxrgT5jza/1VmS
ELUo+mzg2QH+fTcx4NCxDKwtbKPvdN5wvEOLOQVcul6qxrYyhLazUlo6e0+OQr/I
2MaEvu4o0VzQfu5XEQjtajzB+dvE8N278r/ODaCmpkWL9sKoW/qXyjB6mHw40SBN
i8Ajww+I4crZDPsnmbdVQ81Xc2HvMLUc2qPXV1a1PTWsJWC5sDHnDy+/k+4zWL36
358Gew4PIADQSCGDEDIb66im8+naYUCfNkA=
-----END CERTIFICATE-----
Generated at Fri Jul 24 09:06:00 2026 by rpki-client