Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3567953c-cf8e-3435-9241-d715831e036b.roa
File:                     3567953c-cf8e-3435-9241-d715831e036b.roa (raw, json)
Hash identifier:          zyjLcOpPpdBOK/avoScAEEl3I46qaJ3dBAEb73TA17c=
Subject key identifier:   CF:26:65:BF:52:78:00:59:7D:60:28:63:95:3D:3A:39:02:85:BE:0F
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F498BE8739FA677C11BC7C3C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3567953c-cf8e-3435-9241-d715831e036b.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     397211
IP address blocks:        2001:500:30ff::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:8b:e8:73:9f:a6:77:c1:1b:c7:c3:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=e4ee73ec-d49a-496b-9354-6e3824421107
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:92:26:2b:d7:fc:c7:db:be:af:79:00:4a:cd:
                    f5:bc:88:cf:e9:d5:ca:03:15:91:be:c9:95:11:be:
                    86:3a:bc:82:fe:1f:c2:41:9e:c7:08:67:e4:ed:08:
                    03:bf:d9:5a:e5:e2:6c:5d:a8:58:c8:57:65:a7:7b:
                    15:6e:25:a1:7f:86:f7:15:ca:b8:d0:0b:27:38:42:
                    90:a1:1d:b1:52:d3:20:9a:03:b2:67:2f:e1:b5:f9:
                    d5:a4:00:45:e6:02:b9:7a:95:d7:13:88:da:53:12:
                    cb:1e:48:a1:c8:28:7e:dc:18:6c:c1:2c:51:38:32:
                    24:4b:06:f1:17:8a:04:54:30:75:71:75:e4:99:79:
                    80:a2:d0:c9:ef:39:98:c0:9c:34:5a:00:0b:c3:d0:
                    c7:12:30:ee:3c:7b:d4:20:fe:ea:df:db:71:3b:d9:
                    a0:04:a8:3a:9e:c0:71:0d:87:3b:6d:a7:3b:32:1d:
                    e7:cb:bd:a8:d4:58:3b:68:31:cd:45:8f:03:c5:47:
                    a7:b5:e5:e0:70:5c:56:30:bd:7f:f1:37:e2:36:db:
                    10:4a:f1:60:bb:64:f8:0c:dd:3c:4c:9b:42:4e:aa:
                    cf:16:f9:49:b1:90:7f:b6:f4:73:d7:96:76:6e:6f:
                    bb:39:32:df:d9:0d:69:64:1b:fe:25:b3:b0:a7:fb:
                    d0:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:26:65:BF:52:78:00:59:7D:60:28:63:95:3D:3A:39:02:85:BE:0F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3567953c-cf8e-3435-9241-d715831e036b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:30ff::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:4b:c8:10:59:a5:f0:dc:0b:5c:3f:7a:97:85:4f:cc:49:1d:
         75:ab:e8:f4:68:b5:5e:e3:91:0c:ad:be:2a:26:98:38:89:9e:
         3e:2d:e0:c5:32:f2:9c:95:61:db:63:d8:8d:72:1f:aa:b7:d2:
         eb:2f:6f:f2:d9:41:66:6f:8b:66:f8:4a:9b:3e:66:b2:c9:ea:
         29:f2:29:0c:03:03:3b:b7:f7:3e:24:f9:98:74:3e:7e:1d:7c:
         7e:9e:3e:33:f1:16:3d:d4:9a:fe:e6:78:02:5a:36:e9:36:a7:
         c0:f9:1e:9c:78:6f:4d:e7:54:fe:17:7f:74:c5:53:60:79:39:
         c0:d0:56:55:ae:88:c9:f0:73:de:21:9b:66:05:72:87:c3:00:
         d5:b9:33:ac:d2:19:c0:ea:5f:4b:f0:d0:bb:bf:3d:38:89:1a:
         00:81:ad:c4:38:53:8b:4c:9d:82:da:9b:fc:46:22:1f:a9:da:
         91:2f:93:be:8f:bc:54:12:90:33:dc:bc:56:19:a3:10:4b:6a:
         19:dd:92:0c:7d:84:9c:66:fd:86:06:89:5d:1d:18:9b:2a:a7:
         86:d1:a4:62:73:5f:3c:ed:57:6e:5f:1a:f6:f3:ff:1a:c4:85:
         8d:f3:80:7f:de:fe:ce:c5:b7:09:e2:15:be:13:a9:f6:f8:ab:
         73:c2:cb:4a
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9Ji+hzn6Z3wRvHw8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
ZTRlZTczZWMtZDQ5YS00OTZiLTkzNTQtNmUzODI0NDIxMTA3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7JImK9f8x9u+r3kASs31vIjP6dXKAxWRvsmV
Eb6GOryC/h/CQZ7HCGfk7QgDv9la5eJsXahYyFdlp3sVbiWhf4b3Fcq40AsnOEKQ
oR2xUtMgmgOyZy/htfnVpABF5gK5epXXE4jaUxLLHkihyCh+3BhswSxRODIkSwbx
F4oEVDB1cXXkmXmAotDJ7zmYwJw0WgALw9DHEjDuPHvUIP7q39txO9mgBKg6nsBx
DYc7bac7Mh3ny72o1Fg7aDHNRY8DxUenteXgcFxWML1/8TfiNtsQSvFgu2T4DN08
TJtCTqrPFvlJsZB/tvRz15Z2bm+7OTLf2Q1pZBv+JbOwp/vQdwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFM8mZb9SeABZfWAoY5U9OjkChb4PMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMzU2Nzk1M2MtY2Y4ZS0z
NDM1LTkyNDEtZDcxNTgzMWUwMzZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFADD/
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAAlLyBBZpfDcC1w/epeFT8xJHXWr6PRotV7jkQytviommDiJnj4t
4MUy8pyVYdtj2I1yH6q30usvb/LZQWZvi2b4Sps+ZrLJ6inyKQwDAzu39z4k+Zh0
Pn4dfH6ePjPxFj3Umv7meAJaNuk2p8D5Hpx4b03nVP4Xf3TFU2B5OcDQVlWuiMnw
c94hm2YFcofDANW5M6zSGcDqX0vw0Lu/PTiJGgCBrcQ4U4tMnYLam/xGIh+p2pEv
k76PvFQSkDPcvFYZoxBLahndkgx9hJxm/YYGiV0dGJsqp4bRpGJzXzztV25fGvbz
/xrEhY3zgH/e/s7FtwniFb4Tqfb4q3PCy0o=
-----END CERTIFICATE-----
Generated at Sat Sep 26 07:47:03 2026 by rpki-client