Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/31224c3f-c3c7-3271-89e3-db427fb25250.roa
File:                     31224c3f-c3c7-3271-89e3-db427fb25250.roa (raw, json)
Hash identifier:          KednNKG2A7wosWlbU/1K8PbNduJ0Eq/MzDVANXx/Qho=
Subject key identifier:   21:96:BC:A9:21:8C:19:48:E3:D4:E1:22:9C:79:47:15:1E:60:FF:B4
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E9A7FE23F3376049E2CD7F280
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/31224c3f-c3c7-3271-89e3-db427fb25250.roa
Signing time:             Fri 24 Jul 2026 09:00:12 +0000
ROA not before:           Fri 24 Jul 2026 09:00:12 +0000
ROA not after:            Thu 22 Oct 2026 09:00:12 +0000
asID:                     36624
IP address blocks:        2001:501:b1f9::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:9a:7f:e2:3f:33:76:04:9e:2c:d7:f2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 24 09:00:12 2026 GMT
            Not After : Oct 22 09:00:12 2026 GMT
        Subject: CN=7cb31c22-242b-4149-bea7-6888527f228f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:95:f5:fa:74:13:68:91:c0:13:1c:2f:d2:c9:
                    b1:d7:8b:cb:d5:a0:05:6c:4c:7a:a4:0d:28:3e:94:
                    41:68:ca:78:3b:9b:92:f0:db:a0:00:23:b6:83:81:
                    4e:ff:c7:47:9f:fd:68:cb:c2:62:8d:4c:ee:94:ad:
                    6c:b4:de:27:d4:b6:4e:13:9c:30:ac:2d:03:eb:77:
                    ec:08:40:ea:84:7b:7d:2d:b7:3e:4e:dc:1f:e4:ef:
                    67:38:86:3e:50:0c:b4:81:3b:d5:1d:00:6d:33:ef:
                    f8:c7:26:52:aa:95:f7:c3:1e:e3:34:15:be:f4:f3:
                    7a:a2:3a:4f:c5:80:3c:37:24:78:b8:19:c5:39:47:
                    68:a5:de:a1:fb:9f:24:2d:92:8c:89:d4:34:ae:65:
                    55:d7:e3:8e:37:d7:75:63:09:96:16:23:ef:84:e6:
                    41:da:98:33:92:67:b3:35:27:30:21:14:16:a5:02:
                    d3:42:60:1b:fd:06:f7:53:d7:77:e3:62:e8:2c:a7:
                    59:86:27:8f:e5:dd:ac:61:29:99:3b:ea:19:54:cf:
                    bc:f8:92:b8:be:24:a8:c4:42:e3:d3:2a:84:d0:16:
                    96:27:e0:2f:ea:80:c3:c2:bd:60:49:37:c7:c0:48:
                    c6:9e:22:46:ad:09:37:a3:c4:9f:ea:9b:02:06:8b:
                    be:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:96:BC:A9:21:8C:19:48:E3:D4:E1:22:9C:79:47:15:1E:60:FF:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/31224c3f-c3c7-3271-89e3-db427fb25250.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:501:b1f9::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ad:9d:71:16:6e:ef:95:63:02:61:97:94:04:26:9d:25:d8:19:
         2e:a2:e8:7b:19:aa:2f:e8:8c:32:27:33:b1:d0:7e:03:a4:3c:
         53:04:43:62:08:70:b5:6c:26:5f:b9:fa:3c:a5:87:5f:29:4f:
         a2:ea:0c:38:7c:dd:1b:48:33:05:01:2f:c3:a3:a9:3d:35:b8:
         b5:cf:11:27:99:57:c3:fc:cd:9a:d9:c4:da:dd:67:e1:6b:3a:
         7e:08:75:77:08:ee:7c:d3:47:d3:82:ea:d5:64:9d:f3:2f:bf:
         59:3d:09:39:d5:95:5a:7a:c0:d6:64:55:00:ae:55:0a:15:13:
         1a:c3:90:b6:56:63:71:bd:0e:c5:19:6a:2b:d2:6c:e9:8a:6a:
         23:2f:71:c6:2f:9e:25:5a:70:4d:b5:d2:1b:af:70:d4:3e:19:
         61:e6:58:5d:c6:bc:80:51:0d:7b:08:6e:6b:9f:7d:7a:b0:cb:
         03:9b:ea:7d:24:de:a1:7e:13:16:4d:df:ff:80:22:57:03:38:
         e2:2f:cd:a8:bf:1a:a2:be:9c:e9:45:01:14:c5:52:57:4d:9a:
         13:6a:f6:25:b4:31:54:60:23:c8:3b:32:04:6d:70:4b:a5:53:
         40:88:68:d0:f5:68:0a:c5:52:1e:51:28:cc:6b:1f:fa:48:c4:
         04:68:c7:db
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE6af+I/M3YEnizX8oAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDcyNDA5MDAxMloXDTI2MTAyMjA5MDAxMlowLzEtMCsGA1UEAxMk
N2NiMzFjMjItMjQyYi00MTQ5LWJlYTctNjg4ODUyN2YyMjhmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgJX1+nQTaJHAExwv0smx14vL1aAFbEx6pA0o
PpRBaMp4O5uS8NugACO2g4FO/8dHn/1oy8JijUzulK1stN4n1LZOE5wwrC0D63fs
CEDqhHt9Lbc+Ttwf5O9nOIY+UAy0gTvVHQBtM+/4xyZSqpX3wx7jNBW+9PN6ojpP
xYA8NyR4uBnFOUdopd6h+58kLZKMidQ0rmVV1+OON9d1YwmWFiPvhOZB2pgzkmez
NScwIRQWpQLTQmAb/Qb3U9d342LoLKdZhieP5d2sYSmZO+oZVM+8+JK4viSoxELj
0yqE0BaWJ+Av6oDDwr1gSTfHwEjGniJGrQk3o8Sf6psCBou+ZQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFCGWvKkhjBlI49ThIpx5RxUeYP+0MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMzEyMjRjM2YtYzNjNy0z
MjcxLTg5ZTMtZGI0MjdmYjI1MjUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAbH5
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAK2dcRZu75VjAmGXlAQmnSXYGS6i6HsZqi/ojDInM7HQfgOkPFME
Q2IIcLVsJl+5+jylh18pT6LqDDh83RtIMwUBL8OjqT01uLXPESeZV8P8zZrZxNrd
Z+FrOn4IdXcI7nzTR9OC6tVknfMvv1k9CTnVlVp6wNZkVQCuVQoVExrDkLZWY3G9
DsUZaivSbOmKaiMvccYvniVacE210huvcNQ+GWHmWF3GvIBRDXsIbmuffXqwywOb
6n0k3qF+ExZN3/+AIlcDOOIvzai/GqK+nOlFARTFUldNmhNq9iW0MVRgI8g7MgRt
cEulU0CIaND1aArFUh5RKMxrH/pIxARox9s=
-----END CERTIFICATE-----
Generated at Fri Jul 24 13:11:20 2026 by rpki-client