Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4608ec8e-2dbf-3264-a001-235788f24d6f.roa
File:                     4608ec8e-2dbf-3264-a001-235788f24d6f.roa (raw, json)
Hash identifier:          GhFTqvEo/lxkn8vPU2Pkqf6+/dvRDClZWXG7sMhJPAo=
Subject key identifier:   6D:05:8E:EC:5B:77:AE:ED:08:B4:D7:38:79:EA:A0:80:D7:F4:01:45
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E534F3E419CFF79DC4B030437
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4608ec8e-2dbf-3264-a001-235788f24d6f.roa
Signing time:             Sun 28 Jun 2026 21:00:11 +0000
ROA not before:           Sun 28 Jun 2026 21:00:11 +0000
ROA not after:            Sat 26 Sep 2026 21:00:11 +0000
asID:                     396544
IP address blocks:        2001:503:d2d::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:53:4f:3e:41:9c:ff:79:dc:4b:03:04:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun 28 21:00:11 2026 GMT
            Not After : Sep 26 21:00:11 2026 GMT
        Subject: CN=7d3da448-211f-43f4-bfef-6f2f740dedf7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:5c:00:79:95:47:b9:19:36:3e:04:e3:5a:39:
                    b4:a7:31:e2:36:6e:30:03:7d:3b:c0:99:94:55:81:
                    28:7e:de:aa:9e:06:69:e2:ae:d8:f6:6d:7d:e1:5c:
                    c7:0f:4f:ff:41:86:c3:ac:2f:5d:5f:0d:e9:b1:94:
                    5a:4b:42:37:44:3a:83:91:3d:46:40:4f:87:23:0a:
                    6f:6e:9c:44:b3:1f:d8:2d:f7:bf:f5:74:bf:88:32:
                    1c:1d:96:f6:ae:58:91:ee:0c:57:39:7b:c3:50:0c:
                    f3:33:df:de:3a:25:2b:3c:7e:d5:5a:41:ad:27:3b:
                    5e:36:34:d8:27:71:c4:3f:cf:ee:66:99:0e:4a:a7:
                    36:bd:b3:1b:f1:96:de:c8:ad:d3:06:b9:b9:cc:38:
                    fd:38:67:74:b4:7e:8c:0b:c3:6a:38:79:a3:3f:a7:
                    d1:ba:80:af:d5:29:8e:37:fd:10:10:66:75:ab:c6:
                    ac:7b:f9:d0:5e:15:08:42:5e:60:17:f3:c1:6e:fe:
                    40:e8:f9:16:95:4d:7b:bb:f7:55:5b:38:51:5b:c2:
                    ed:b4:da:91:05:11:5f:5f:70:1c:3e:03:b6:a0:00:
                    1d:a2:98:58:e8:16:5e:9f:6c:07:36:af:0b:73:37:
                    44:cf:b7:64:c9:ed:c2:96:56:0b:09:cd:12:cb:35:
                    b2:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:05:8E:EC:5B:77:AE:ED:08:B4:D7:38:79:EA:A0:80:D7:F4:01:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4608ec8e-2dbf-3264-a001-235788f24d6f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:d2d:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9f:a9:ca:c7:7c:2a:30:9c:c5:23:de:a6:85:25:e7:db:49:ed:
         1d:39:2f:19:4e:77:89:f1:25:39:ae:ca:4b:ae:dd:41:55:fd:
         98:05:53:ff:e5:ae:8e:5d:a9:d0:d7:84:48:b7:9c:98:71:47:
         60:35:2b:31:58:7a:cf:c7:ad:4c:30:25:8e:41:21:99:b9:84:
         ec:67:34:9a:5f:83:0b:f1:23:d6:11:8d:e7:35:1d:a9:75:48:
         54:7a:9a:79:30:5a:9c:72:95:fd:5d:cd:18:da:3b:4c:9c:03:
         a3:3c:8d:23:5c:9f:d3:82:7d:c0:f0:08:02:9d:dd:9b:e1:6e:
         b7:c4:fb:77:02:67:de:2c:79:f3:11:63:ca:45:50:5e:fe:9b:
         bc:a7:1b:1a:12:0f:14:d8:71:96:be:d0:e5:9f:10:7c:b2:9b:
         7b:a9:09:6d:a7:a5:ec:46:b2:33:1a:df:23:f8:44:49:86:ca:
         89:b3:6b:89:bc:df:5f:55:bf:3e:de:3c:e8:35:18:23:73:52:
         34:60:be:60:8f:57:be:72:6c:c3:36:6d:9e:01:a6:6e:82:1d:
         be:db:47:c0:67:25:54:18:70:94:7b:4f:59:72:07:38:fb:45:
         dd:4a:d6:41:a9:c8:2d:d5:de:91:68:e4:37:43:7d:84:35:99:
         f1:4b:23:79
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE5TTz5BnP953EsDBDcwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDYyODIxMDAxMVoXDTI2MDkyNjIxMDAxMVowLzEtMCsGA1UEAxMk
N2QzZGE0NDgtMjExZi00M2Y0LWJmZWYtNmYyZjc0MGRlZGY3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhFwAeZVHuRk2PgTjWjm0pzHiNm4wA307wJmU
VYEoft6qngZp4q7Y9m194VzHD0//QYbDrC9dXw3psZRaS0I3RDqDkT1GQE+HIwpv
bpxEsx/YLfe/9XS/iDIcHZb2rliR7gxXOXvDUAzzM9/eOiUrPH7VWkGtJzteNjTY
J3HEP8/uZpkOSqc2vbMb8ZbeyK3TBrm5zDj9OGd0tH6MC8NqOHmjP6fRuoCv1SmO
N/0QEGZ1q8ase/nQXhUIQl5gF/PBbv5A6PkWlU17u/dVWzhRW8LttNqRBRFfX3Ac
PgO2oAAdophY6BZen2wHNq8LczdEz7dkye3CllYLCc0SyzWy0wIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFG0Fjuxbd67tCLTXOHnqoIDX9AFFMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNDYwOGVjOGUtMmRiZi0z
MjY0LWEwMDEtMjM1Nzg4ZjI0ZDZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAw0t
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQCfqcrHfCownMUj3qaFJefbSe0dOS8ZTneJ8SU5
rspLrt1BVf2YBVP/5a6OXanQ14RIt5yYcUdgNSsxWHrPx61MMCWOQSGZuYTsZzSa
X4ML8SPWEY3nNR2pdUhUepp5MFqccpX9Xc0Y2jtMnAOjPI0jXJ/Tgn3A8AgCnd2b
4W63xPt3AmfeLHnzEWPKRVBe/pu8pxsaEg8U2HGWvtDlnxB8spt7qQltp6XsRrIz
Gt8j+ERJhsqJs2uJvN9fVb8+3jzoNRgjc1I0YL5gj1e+cmzDNm2eAaZugh2+20fA
ZyVUGHCUe09Zcgc4+0XdStZBqcgt1d6RaOQ3Q32ENZnxSyN5
-----END CERTIFICATE-----
Generated at Fri Jul 24 12:51:41 2026 by rpki-client