Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/43c1bf20-a6e6-3ae4-9264-348386103d3c.roa
File:                     43c1bf20-a6e6-3ae4-9264-348386103d3c.roa (raw, json)
Hash identifier:          Y3Jdd7BW8khs+pAGp6rcfPFKShHbClnpF5ydtDuCh3w=
Subject key identifier:   AC:BA:EA:18:94:AA:BA:24:E0:09:C3:BB:2A:C3:4D:94:54:58:99:6E
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584DD4E1D77820231304847F8AC2
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/43c1bf20-a6e6-3ae4-9264-348386103d3c.roa
Signing time:             Thu 14 May 2026 14:07:59 +0000
ROA not before:           Thu 14 May 2026 14:07:59 +0000
ROA not after:            Wed 12 Aug 2026 14:07:59 +0000
asID:                     396576
IP address blocks:        2001:500:30ff::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 17 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:d4:e1:d7:78:20:23:13:04:84:7f:8a:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 14 14:07:59 2026 GMT
            Not After : Aug 12 14:07:59 2026 GMT
        Subject: CN=5a96b15d-1d9c-4983-9559-91c09bbfbc4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:cd:6c:ac:34:17:76:de:8c:99:5b:fa:74:bc:
                    6d:1a:b8:f5:cc:c2:04:03:31:7d:90:b9:71:53:10:
                    d8:af:83:40:14:ed:f9:27:04:92:65:05:72:0e:aa:
                    ec:fb:35:e1:2e:6d:3f:21:1c:75:1b:94:3f:bc:86:
                    8e:ba:39:e6:8d:85:b3:fb:dc:75:cd:1e:a4:1e:89:
                    8e:2a:8f:93:ad:4b:7a:9c:09:4b:97:82:c6:73:87:
                    d7:d8:75:ca:41:36:fe:4d:c6:b1:04:e7:91:2c:ff:
                    55:b6:b4:62:52:eb:e5:c2:e8:e2:a5:3d:91:d5:cd:
                    89:3e:44:9d:d2:c1:c4:86:e3:aa:d2:f1:61:75:cd:
                    51:b2:28:2c:ca:f8:bb:91:03:df:36:85:ed:ec:98:
                    ce:f7:7b:95:20:69:75:42:bf:ce:7e:f5:dc:81:ba:
                    22:80:de:0f:84:c8:e1:ac:8e:0c:d9:90:ae:86:1d:
                    60:7a:a3:e7:e3:17:55:53:f0:87:3d:55:8c:ab:eb:
                    dc:a2:36:c0:69:74:fa:7b:5a:c8:da:37:af:a5:80:
                    23:15:3c:05:e0:95:14:8b:6f:75:bf:bb:46:7b:cb:
                    33:97:b2:c8:32:41:64:a1:96:bb:5a:f0:49:ea:23:
                    e8:65:7c:9b:53:8e:62:b6:c5:18:59:f1:d5:18:de:
                    34:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:BA:EA:18:94:AA:BA:24:E0:09:C3:BB:2A:C3:4D:94:54:58:99:6E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/43c1bf20-a6e6-3ae4-9264-348386103d3c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:30ff::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:cd:df:aa:82:f1:17:7c:dd:45:89:f6:b7:5b:32:4d:ad:21:
         37:bd:68:d1:35:9e:c0:f6:e4:9f:1d:ba:ef:9d:59:4e:51:37:
         47:07:8b:7d:54:51:d5:f3:79:c2:89:f6:5e:a4:2d:71:bf:e1:
         c6:6b:ef:25:11:10:9e:75:ef:46:91:1a:ac:67:24:d6:98:e3:
         e6:52:45:7e:3a:83:fe:1e:49:be:a3:3f:75:2a:6d:3b:62:1e:
         1b:2e:fd:87:75:e2:f2:a8:ae:43:f6:93:ea:08:dd:fe:6a:08:
         d1:cf:a0:a1:d9:19:c7:40:d9:c6:c3:76:ab:7b:2f:ce:8f:1b:
         ac:66:46:62:75:a1:de:a7:e2:8a:85:2e:fe:21:e3:a6:4b:18:
         62:e7:99:86:ff:e7:0f:b5:0f:47:0f:cf:f1:ae:0e:fb:40:01:
         85:b5:0c:4f:88:04:df:26:d5:38:36:f6:71:57:c1:b9:9b:48:
         39:f8:06:2c:de:2f:57:25:d3:40:63:7a:8d:f1:62:2d:9c:25:
         ae:6d:44:f0:c8:db:de:c9:2f:d2:67:5b:f4:92:df:8b:ef:7c:
         fc:5b:ff:4c:e2:05:cc:02:85:db:32:c2:4c:41:31:7f:28:2f:
         36:a6:59:43:5e:16:39:b5:d8:b4:06:75:1b:7b:81:d1:0f:91:
         f4:d4:c1:90
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE3U4dd4ICMTBIR/isIwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDUxNDE0MDc1OVoXDTI2MDgxMjE0MDc1OVowLzEtMCsGA1UEAxMk
NWE5NmIxNWQtMWQ5Yy00OTgzLTk1NTktOTFjMDliYmZiYzRhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAls1srDQXdt6MmVv6dLxtGrj1zMIEAzF9kLlx
UxDYr4NAFO35JwSSZQVyDqrs+zXhLm0/IRx1G5Q/vIaOujnmjYWz+9x1zR6kHomO
Ko+TrUt6nAlLl4LGc4fX2HXKQTb+TcaxBOeRLP9VtrRiUuvlwujipT2R1c2JPkSd
0sHEhuOq0vFhdc1Rsigsyvi7kQPfNoXt7JjO93uVIGl1Qr/OfvXcgboigN4PhMjh
rI4M2ZCuhh1geqPn4xdVU/CHPVWMq+vcojbAaXT6e1rI2jevpYAjFTwF4JUUi291
v7tGe8szl7LIMkFkoZa7WvBJ6iPoZXybU45itsUYWfHVGN40lwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFKy66hiUqrok4AnDuyrDTZRUWJluMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNDNjMWJmMjAtYTZlNi0z
YWU0LTkyNjQtMzQ4Mzg2MTAzZDNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFADD/
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBADbN36qC8Rd83UWJ9rdbMk2tITe9aNE1nsD25J8duu+dWU5RN0cH
i31UUdXzecKJ9l6kLXG/4cZr7yUREJ5170aRGqxnJNaY4+ZSRX46g/4eSb6jP3Uq
bTtiHhsu/Yd14vKorkP2k+oI3f5qCNHPoKHZGcdA2cbDdqt7L86PG6xmRmJ1od6n
4oqFLv4h46ZLGGLnmYb/5w+1D0cPz/GuDvtAAYW1DE+IBN8m1Tg29nFXwbmbSDn4
BizeL1cl00Bjeo3xYi2cJa5tRPDI297JL9JnW/SS34vvfPxb/0ziBcwChdsywkxB
MX8oLzamWUNeFjm12LQGdRt7gdEPkfTUwZA=
-----END CERTIFICATE-----
Generated at Fri May 15 09:06:23 2026 by rpki-client