Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3e6042c0-2e89-3f76-8cea-b7b6fa53683e.roa
File:                     3e6042c0-2e89-3f76-8cea-b7b6fa53683e.roa (raw, json)
Hash identifier:          jsdbORnv80DMq3TOYHWhbUiPVZ8DVcHbqmZf2cHbbXk=
Subject key identifier:   C5:5C:0D:67:CA:BC:58:3A:E0:14:A5:E9:28:3F:50:06:CF:37:99:88
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D932557B15B4F405CB07F8000
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3e6042c0-2e89-3f76-8cea-b7b6fa53683e.roa
Signing time:             Tue 21 Apr 2026 01:00:24 +0000
ROA not before:           Tue 21 Apr 2026 01:00:24 +0000
ROA not after:            Mon 20 Jul 2026 01:00:24 +0000
asID:                     396616
IP address blocks:        2001:502:cbe4::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:93:25:57:b1:5b:4f:40:5c:b0:7f:80:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 21 01:00:24 2026 GMT
            Not After : Jul 20 01:00:24 2026 GMT
        Subject: CN=3ed50316-7d72-4196-baba-adc1fa425fc6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:b6:52:8c:89:40:11:ab:3e:7d:40:94:24:e2:
                    ee:89:39:20:49:f5:ab:35:53:22:96:90:a8:9d:10:
                    12:29:ec:aa:3d:79:7b:7b:12:84:fd:7c:ab:f8:70:
                    38:af:74:5f:a9:28:d3:af:12:3d:bb:79:c5:b5:fc:
                    8f:2b:70:a0:0b:95:53:14:0d:c4:c3:7a:dc:7b:3c:
                    3a:2f:43:55:d5:68:eb:26:17:25:57:49:88:9e:cc:
                    aa:fa:50:f5:f4:21:10:27:e2:9f:92:ea:5a:02:95:
                    21:b1:ec:07:b5:5a:c9:e5:0a:b4:f1:23:85:2d:a8:
                    49:7c:27:48:bc:4f:14:3b:bf:10:0a:90:95:2f:93:
                    3e:58:f2:56:d8:4d:6f:ac:4b:c1:17:17:05:07:3b:
                    cc:d0:e9:bf:aa:f0:33:5c:20:8f:65:96:40:bd:40:
                    32:c6:41:53:71:ca:46:e8:26:f8:bf:6b:fe:8f:5e:
                    a7:24:88:e3:f2:ee:9f:9a:a1:1c:12:db:91:4f:fb:
                    2d:31:99:d8:87:32:53:c2:cb:d8:18:95:bf:5f:b8:
                    16:b5:a8:95:b0:a8:3f:70:b1:5c:64:4f:b8:5d:65:
                    6e:bc:14:52:59:fc:bb:b0:81:b2:22:d9:f9:bd:bd:
                    50:c2:4e:7c:20:24:af:d1:bd:ec:66:4e:55:94:cf:
                    34:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:5C:0D:67:CA:BC:58:3A:E0:14:A5:E9:28:3F:50:06:CF:37:99:88
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3e6042c0-2e89-3f76-8cea-b7b6fa53683e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:cbe4:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b2:9a:c8:93:a7:cc:8a:0c:3c:81:ae:84:d6:58:cc:3a:f2:25:
         29:4a:81:7f:e0:e9:e1:46:69:7a:19:d8:88:4f:e6:c9:f9:3f:
         5c:cc:de:ef:53:8b:8e:f8:ef:54:99:4d:37:08:61:44:50:7c:
         ec:7a:3f:7d:b9:e0:c8:13:3d:c9:8a:d5:78:ab:85:9d:51:03:
         61:e2:6e:f5:d4:1f:25:b4:74:d2:df:ba:ff:d2:e3:6b:4b:f8:
         03:cc:3e:61:9b:98:45:21:a5:72:6f:5f:8d:e1:cd:54:19:65:
         96:c5:e3:b1:9e:15:7c:90:a3:54:c3:ae:2b:92:8c:5e:0c:99:
         be:17:5b:0d:c1:55:54:e2:de:28:59:22:8a:a5:f1:0b:da:e9:
         66:35:6a:fc:91:23:27:7a:bf:0d:c5:ad:9b:ed:6d:2d:5e:fb:
         b8:50:a7:52:97:5c:40:8a:f0:c5:d9:96:01:f7:90:68:bb:4e:
         09:a1:63:26:7e:33:ba:09:46:6e:12:42:01:2d:3c:25:b5:7a:
         48:b3:e9:fe:2e:bd:b9:46:ae:17:51:d0:a6:b3:79:cb:bc:09:
         75:6e:21:a2:b5:62:8b:77:e1:7c:d2:38:38:42:bc:03:71:02:
         22:98:fd:1e:da:a9:61:63:ad:9a:6a:7c:00:b8:10:97:c7:00:
         47:95:26:7c
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE2TJVexW09AXLB/gAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDQyMTAxMDAyNFoXDTI2MDcyMDAxMDAyNFowLzEtMCsGA1UEAxMk
M2VkNTAzMTYtN2Q3Mi00MTk2LWJhYmEtYWRjMWZhNDI1ZmM2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7bZSjIlAEas+fUCUJOLuiTkgSfWrNVMilpCo
nRASKeyqPXl7exKE/Xyr+HA4r3RfqSjTrxI9u3nFtfyPK3CgC5VTFA3Ew3rcezw6
L0NV1WjrJhclV0mInsyq+lD19CEQJ+KfkupaApUhsewHtVrJ5Qq08SOFLahJfCdI
vE8UO78QCpCVL5M+WPJW2E1vrEvBFxcFBzvM0Om/qvAzXCCPZZZAvUAyxkFTccpG
6Cb4v2v+j16nJIjj8u6fmqEcEtuRT/stMZnYhzJTwsvYGJW/X7gWtaiVsKg/cLFc
ZE+4XWVuvBRSWfy7sIGyItn5vb1Qwk58ICSv0b3sZk5VlM80DwIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFMVcDWfKvFg64BSl6Sg/UAbPN5mIMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvM2U2MDQyYzAtMmU4OS0z
Zjc2LThjZWEtYjdiNmZhNTM2ODNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAsvk
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQCymsiTp8yKDDyBroTWWMw68iUpSoF/4OnhRml6
GdiIT+bJ+T9czN7vU4uO+O9UmU03CGFEUHzsej99ueDIEz3JitV4q4WdUQNh4m71
1B8ltHTS37r/0uNrS/gDzD5hm5hFIaVyb1+N4c1UGWWWxeOxnhV8kKNUw64rkoxe
DJm+F1sNwVVU4t4oWSKKpfEL2ulmNWr8kSMner8Nxa2b7W0tXvu4UKdSl1xAivDF
2ZYB95Bou04JoWMmfjO6CUZuEkIBLTwltXpIs+n+Lr25Rq4XUdCms3nLvAl1biGi
tWKLd+F80jg4QrwDcQIimP0e2qlhY62aanwAuBCXxwBHlSZ8
-----END CERTIFICATE-----
Generated at Wed May 13 06:21:39 2026 by rpki-client