Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/43e81f08-18fa-32d3-90e2-7115a8a6c472.roa
File:                     43e81f08-18fa-32d3-90e2-7115a8a6c472.roa (raw, json)
Hash identifier:          x0zHnCR4Xze1FvE8EBJoBn+uvktgGiibblHzmoNy2eU=
Subject key identifier:   17:AF:A4:21:2C:03:30:41:71:AD:71:0D:99:C4:12:AE:D4:BC:1B:57
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E640F9C54CA15A5C7A7DC8C80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/43e81f08-18fa-32d3-90e2-7115a8a6c472.roa
Signing time:             Sat 04 Jul 2026 21:00:12 +0000
ROA not before:           Sat 04 Jul 2026 21:00:12 +0000
ROA not after:            Fri 02 Oct 2026 21:00:12 +0000
asID:                     36631
IP address blocks:        2001:500:125::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:64:0f:9c:54:ca:15:a5:c7:a7:dc:8c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul  4 21:00:12 2026 GMT
            Not After : Oct  2 21:00:12 2026 GMT
        Subject: CN=281a5463-05e1-40a0-bbf3-ac580d2d1564
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:97:20:5e:f4:da:fd:e0:37:71:25:61:b5:83:
                    ec:89:9c:7a:6b:c5:f8:de:4f:83:f0:c2:b3:ea:3a:
                    04:c0:ea:86:ec:06:89:63:cb:35:b6:b0:7a:fb:5a:
                    02:fa:c9:16:7e:1a:cf:4a:03:12:64:85:30:4d:cb:
                    ef:02:c9:ee:81:04:3a:f5:80:22:e4:aa:fa:8f:1f:
                    bf:0c:5e:1e:b9:74:a3:41:56:e0:53:36:9e:fb:84:
                    1c:44:b3:be:5c:48:b4:b5:90:89:0c:bc:f8:38:ea:
                    62:35:42:4a:d8:fb:9f:a2:c1:8d:f9:4f:fd:2d:42:
                    41:39:5d:84:a3:7e:f6:49:43:0d:14:e8:06:46:ec:
                    7c:97:82:ca:c1:fc:b3:b6:b8:29:dd:1d:67:38:82:
                    79:13:9f:17:1a:94:c0:2f:60:a2:ab:b1:51:77:73:
                    0a:8d:82:47:b8:84:a0:75:2f:94:8a:0b:b2:35:6a:
                    ed:4c:2c:61:45:1b:f7:6e:46:c3:b3:b4:7e:a3:ef:
                    dc:dc:88:3b:a3:d7:d2:0c:19:99:76:66:ce:87:36:
                    61:d0:89:f7:3b:7f:b6:4c:9e:d5:57:77:7f:8f:23:
                    40:17:e5:02:96:20:cb:aa:90:a9:f1:1a:3a:c8:31:
                    e6:7e:6b:93:96:76:8a:cd:ca:54:25:16:4b:39:4c:
                    42:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:AF:A4:21:2C:03:30:41:71:AD:71:0D:99:C4:12:AE:D4:BC:1B:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/43e81f08-18fa-32d3-90e2-7115a8a6c472.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:125:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ae:75:5b:5b:65:1c:59:76:a0:ff:e4:6d:39:79:de:3f:ac:bf:
         32:1f:1a:2a:39:27:9a:fe:92:be:0f:a7:4d:b7:2c:1c:b2:ca:
         c7:fe:6b:ce:72:05:5c:0e:9b:65:0a:cf:34:da:cd:25:5e:04:
         47:86:12:a5:5c:81:ca:66:ec:3e:7f:e0:db:12:5a:52:6d:36:
         fc:e3:56:08:15:2b:57:a6:f9:78:a1:1a:f6:6b:ec:3e:85:e7:
         5b:74:0f:58:dc:1f:7a:81:eb:f1:67:19:46:02:63:7d:fb:ae:
         25:d8:cc:5d:9e:18:c9:4f:ac:32:18:d2:8c:2d:0d:92:89:24:
         0a:16:c2:f9:43:c4:50:03:45:c3:37:73:48:f8:ec:f9:cd:25:
         50:59:5d:8c:f5:5d:ce:ab:9a:5d:a5:a0:4d:32:4e:6a:d4:d0:
         32:3e:71:a2:70:ad:d3:68:b7:ab:4f:55:78:5a:9f:15:05:54:
         5d:53:05:4d:17:56:61:a9:23:98:f0:09:df:d2:17:be:96:fd:
         52:25:73:0a:6b:c7:3f:5b:93:26:07:52:67:25:73:fb:87:eb:
         0d:b6:d6:d2:5d:83:22:10:27:f3:87:70:4e:11:85:1a:06:9c:
         26:ea:99:3d:f3:32:49:6a:3b:29:b2:45:6b:26:97:07:55:21:
         c5:db:b1:2e
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE5kD5xUyhWlx6fcjIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDcwNDIxMDAxMloXDTI2MTAwMjIxMDAxMlowLzEtMCsGA1UEAxMk
MjgxYTU0NjMtMDVlMS00MGEwLWJiZjMtYWM1ODBkMmQxNTY0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsJcgXvTa/eA3cSVhtYPsiZx6a8X43k+D8MKz
6joEwOqG7AaJY8s1trB6+1oC+skWfhrPSgMSZIUwTcvvAsnugQQ69YAi5Kr6jx+/
DF4euXSjQVbgUzae+4QcRLO+XEi0tZCJDLz4OOpiNUJK2PufosGN+U/9LUJBOV2E
o372SUMNFOgGRux8l4LKwfyztrgp3R1nOIJ5E58XGpTAL2Ciq7FRd3MKjYJHuISg
dS+UiguyNWrtTCxhRRv3bkbDs7R+o+/c3Ig7o9fSDBmZdmbOhzZh0In3O3+2TJ7V
V3d/jyNAF+UCliDLqpCp8Ro6yDHmfmuTlnaKzcpUJRZLOUxCuQIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFBevpCEsAzBBca1xDZnEEq7UvBtXMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNDNlODFmMDgtMThmYS0z
MmQzLTkwZTItNzExNWE4YTZjNDcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEl
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQCudVtbZRxZdqD/5G05ed4/rL8yHxoqOSea/pK+
D6dNtywcssrH/mvOcgVcDptlCs802s0lXgRHhhKlXIHKZuw+f+DbElpSbTb841YI
FStXpvl4oRr2a+w+hedbdA9Y3B96gevxZxlGAmN9+64l2MxdnhjJT6wyGNKMLQ2S
iSQKFsL5Q8RQA0XDN3NI+Oz5zSVQWV2M9V3Oq5pdpaBNMk5q1NAyPnGicK3TaLer
T1V4Wp8VBVRdUwVNF1ZhqSOY8Anf0he+lv1SJXMKa8c/W5MmB1JnJXP7h+sNttbS
XYMiECfzh3BOEYUaBpwm6pk98zJJajspskVrJpcHVSHF27Eu
-----END CERTIFICATE-----
Generated at Fri Jul 24 10:09:23 2026 by rpki-client