Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/844755a7-bab8-3dfc-9b8e-4ab66bd15b4a.roa
File:                     844755a7-bab8-3dfc-9b8e-4ab66bd15b4a.roa (raw, json)
Hash identifier:          uqeXhb/I2etl0fcWiyojyFLJkbKrHdh/dwstdwzQK40=
Subject key identifier:   95:07:91:4F:B7:5D:7F:9A:D5:36:E4:E7:4A:8B:11:8B:7E:3C:B7:50
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F49869D596D1BF1EE205FEB20
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/844755a7-bab8-3dfc-9b8e-4ab66bd15b4a.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     10515
IP address blocks:        2001:500:135::53/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:86:9d:59:6d:1b:f1:ee:20:5f:eb:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=18542980-dbac-4896-be54-78375498dfd5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:cc:b5:05:9f:c5:da:3f:f9:a1:c7:85:b5:53:
                    7a:55:77:31:59:fd:5b:4f:6d:06:07:ef:d6:40:18:
                    35:cc:a3:ca:f6:52:c2:04:f7:48:8c:26:9a:08:68:
                    bc:ed:24:17:56:9e:45:15:63:8e:bc:33:61:2e:3f:
                    95:bc:61:c9:73:81:58:4b:4b:97:42:60:99:75:da:
                    7b:14:1d:0b:bd:33:f9:d1:6a:55:47:84:be:fb:7e:
                    1b:e0:53:59:a7:3e:c2:0c:f3:01:5a:c2:0b:2f:b7:
                    08:6d:1c:02:cc:38:7d:72:79:14:df:32:08:17:95:
                    ff:4b:e7:d4:14:98:bf:84:bc:f8:55:53:e7:db:b6:
                    7d:92:34:62:6c:45:d8:32:2a:f0:37:45:a3:79:5c:
                    cf:25:39:23:4d:2e:b3:be:73:57:7d:6e:bd:c1:a4:
                    d8:97:02:ff:67:ea:29:4a:9f:1f:32:85:46:9e:16:
                    56:a2:39:d9:bc:06:ee:b6:b5:ac:10:a4:8c:db:cd:
                    f4:25:8b:4f:8e:ea:2e:7a:69:32:d6:6b:31:06:b2:
                    30:c8:26:89:88:6d:48:4e:7c:c6:05:76:ba:b8:c6:
                    e2:44:ec:2b:c4:94:72:51:1b:80:d8:77:46:07:0c:
                    42:03:4d:02:86:b8:86:79:87:87:0a:a8:93:a2:c3:
                    ee:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:07:91:4F:B7:5D:7F:9A:D5:36:E4:E7:4A:8B:11:8B:7E:3C:B7:50
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/844755a7-bab8-3dfc-9b8e-4ab66bd15b4a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:135:0:0:0:0:53/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:da:36:ea:a3:d2:31:8f:34:42:bb:0d:c1:9a:67:a5:6f:35:
         5a:67:e6:ed:b7:05:17:ba:7a:6f:c6:6d:40:36:64:3d:21:17:
         d5:e6:50:17:bb:55:3f:c4:68:a5:ba:af:73:3f:10:dc:13:b1:
         a3:79:ca:f4:d4:89:5a:0d:e4:88:85:aa:bb:06:cf:dc:ef:6c:
         6a:b3:62:74:ac:38:b0:a3:a5:af:dc:31:8c:6a:36:6e:00:78:
         e2:1c:34:52:60:bf:7c:27:23:b8:22:e8:ca:93:d7:5a:30:9e:
         c1:96:8c:14:90:cd:86:2f:b0:d5:82:8d:0a:e1:38:f8:10:2c:
         21:2f:81:19:f0:5b:ef:ba:0b:f5:4d:5f:dc:66:22:b4:72:ed:
         ec:39:59:87:be:64:33:8c:b2:83:1b:5b:d0:d2:1c:67:c9:22:
         1c:18:74:60:46:3d:d4:93:92:c1:dc:e5:b9:80:be:63:f6:65:
         c0:8a:43:f3:fd:5a:e9:d6:89:12:d4:a5:8a:b1:d4:05:a3:c6:
         a1:9f:80:21:c0:ae:87:40:6d:a9:0e:0d:f7:cd:1c:0e:e5:98:
         1c:12:54:9e:89:f0:04:d3:cd:13:f5:97:d7:a5:e0:ef:b2:ac:
         c8:a3:0b:c0:7e:f6:00:43:44:c3:74:6d:8f:75:4a:ca:aa:aa:
         ba:27:43:38
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE9Jhp1ZbRvx7iBf6yAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
MTg1NDI5ODAtZGJhYy00ODk2LWJlNTQtNzgzNzU0OThkZmQ1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgcy1BZ/F2j/5oceFtVN6VXcxWf1bT20GB+/W
QBg1zKPK9lLCBPdIjCaaCGi87SQXVp5FFWOOvDNhLj+VvGHJc4FYS0uXQmCZddp7
FB0LvTP50WpVR4S++34b4FNZpz7CDPMBWsILL7cIbRwCzDh9cnkU3zIIF5X/S+fU
FJi/hLz4VVPn27Z9kjRibEXYMirwN0WjeVzPJTkjTS6zvnNXfW69waTYlwL/Z+op
Sp8fMoVGnhZWojnZvAbutrWsEKSM2830JYtPjuouemky1msxBrIwyCaJiG1ITnzG
BXa6uMbiROwrxJRyURuA2HdGBwxCA00ChriGeYeHCqiTosPuGQIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFJUHkU+3XX+a1Tbk50qLEYt+PLdQMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvODQ0NzU1YTctYmFiOC0z
ZGZjLTliOGUtNGFiNjZiZDE1YjRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAE1
AAAAAAAAAAAAUzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQAa2jbqo9IxjzRCuw3BmmelbzVaZ+bttwUXunpv
xm1ANmQ9IRfV5lAXu1U/xGiluq9zPxDcE7Gjecr01IlaDeSIhaq7Bs/c72xqs2J0
rDiwo6Wv3DGMajZuAHjiHDRSYL98JyO4IujKk9daMJ7BlowUkM2GL7DVgo0K4Tj4
ECwhL4EZ8Fvvugv1TV/cZiK0cu3sOVmHvmQzjLKDG1vQ0hxnySIcGHRgRj3Uk5LB
3OW5gL5j9mXAikPz/Vrp1okS1KWKsdQFo8ahn4AhwK6HQG2pDg33zRwO5ZgcElSe
ifAE080T9ZfXpeDvsqzIowvAfvYAQ0TDdG2PdUrKqqq6J0M4
-----END CERTIFICATE-----
Generated at Sat Sep 26 22:19:28 2026 by rpki-client