Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/846e936c-c924-3238-a87a-fca4fbc1f6cb.roa
File:                     846e936c-c924-3238-a87a-fca4fbc1f6cb.roa (raw, json)
Hash identifier:          8fIQU22hW2xlEX3rVqzQfTmYxpM6z9sAJCVd54tSgaY=
Subject key identifier:   D8:B5:6A:0F:E4:2D:22:07:C1:2E:BE:D5:F8:9C:4A:4D:70:C2:1F:B4
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584EF01CDBBBC7E3ED089D4AEFA0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/846e936c-c924-3238-a87a-fca4fbc1f6cb.roa
Signing time:             Mon 24 Aug 2026 01:00:12 +0000
ROA not before:           Mon 24 Aug 2026 01:00:12 +0000
ROA not after:            Sun 22 Nov 2026 02:00:12 +0000
asID:                     396590
IP address blocks:        2001:503:eea3::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f0:1c:db:bb:c7:e3:ed:08:9d:4a:ef:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 24 01:00:12 2026 GMT
            Not After : Nov 22 02:00:12 2026 GMT
        Subject: CN=cbd371f7-11e6-4efc-b9b4-bbf9ef397919
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:d4:d8:d7:20:aa:99:5f:5e:87:68:91:1b:d1:
                    13:f7:a6:00:43:1e:16:9d:c1:12:59:4b:fe:c9:65:
                    02:54:35:02:b1:8f:33:11:3e:e1:db:b9:a0:8d:c2:
                    ac:8d:58:23:ce:ba:9a:0a:2d:50:1a:9d:09:54:2f:
                    25:2f:0f:01:58:dc:98:e4:80:a8:1d:9a:53:14:3f:
                    15:0d:ca:cb:4d:dd:b5:25:e7:d8:39:8c:34:08:3c:
                    a4:21:1e:91:ea:c2:14:6b:1a:fc:a6:78:ec:a1:05:
                    cb:c0:63:b3:9e:18:d3:f5:26:2e:52:92:89:ce:ff:
                    30:a5:ef:f6:25:e1:4b:ed:d8:37:2b:d7:39:17:ce:
                    2d:5f:ba:f8:f2:a6:dd:0e:a3:9c:41:a9:8b:37:05:
                    b6:f0:96:ff:bd:fd:5b:0b:58:a5:1a:e7:a3:dd:8d:
                    de:12:ac:d5:83:a1:5f:a7:33:57:6c:bd:f3:07:64:
                    65:a0:12:cb:58:c5:ba:b2:cb:5a:3d:d9:ed:31:22:
                    70:04:78:03:8c:37:2c:3d:a8:63:c8:67:6e:a3:b1:
                    11:ab:b8:2e:d0:9b:d4:19:ce:28:64:60:07:a7:89:
                    2c:a3:48:12:dd:0d:61:e3:dd:ec:41:2d:a0:88:51:
                    62:aa:ce:a0:bf:0a:52:b8:90:f3:a7:5d:41:48:1a:
                    bc:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:B5:6A:0F:E4:2D:22:07:C1:2E:BE:D5:F8:9C:4A:4D:70:C2:1F:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/846e936c-c924-3238-a87a-fca4fbc1f6cb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:eea3:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:c8:e9:38:ac:41:f1:63:36:d3:1e:62:df:61:5c:fa:c1:91:
         9e:60:2e:e9:96:65:49:18:1e:dc:4f:2b:3b:d0:90:39:4f:77:
         e8:50:ff:cd:8d:ae:95:69:ff:cb:d8:31:32:8c:61:ca:ca:13:
         18:38:64:c4:23:fe:02:a9:41:4c:05:64:1b:29:91:49:8d:36:
         ff:0e:63:78:6b:87:4e:21:61:d0:e0:c8:54:f4:89:94:97:04:
         3f:dd:13:d1:bb:70:a7:26:6c:74:d0:0d:bd:22:eb:a9:02:fe:
         f1:8a:3c:e9:68:0c:c1:dd:dc:e5:a7:92:9c:fb:7b:d5:09:ba:
         6a:7a:47:a4:d0:8f:70:b5:7b:97:1d:aa:4d:06:43:6b:a3:d2:
         83:7a:c2:77:d7:8f:1c:ef:a4:55:52:70:7c:52:e0:37:53:20:
         66:e6:07:dc:2b:1f:f3:b2:28:cd:e4:7a:4f:3f:1a:69:41:0a:
         30:0d:2d:2a:7e:6c:10:b4:74:c4:31:be:82:52:bb:0a:a3:b6:
         09:9a:ec:d9:0f:09:d0:0c:40:bb:45:a6:58:79:41:eb:90:7a:
         39:df:da:7d:0d:0a:97:42:ee:7f:e1:89:98:a8:0d:cb:d5:7c:
         55:f3:80:b7:13:39:de:f4:14:f8:64:91:ce:56:e4:52:ac:6e:
         21:53:35:38
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE7wHNu7x+PtCJ1K76AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDgyNDAxMDAxMloXDTI2MTEyMjAyMDAxMlowLzEtMCsGA1UEAxMk
Y2JkMzcxZjctMTFlNi00ZWZjLWI5YjQtYmJmOWVmMzk3OTE5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgdTY1yCqmV9eh2iRG9ET96YAQx4WncESWUv+
yWUCVDUCsY8zET7h27mgjcKsjVgjzrqaCi1QGp0JVC8lLw8BWNyY5ICoHZpTFD8V
DcrLTd21JefYOYw0CDykIR6R6sIUaxr8pnjsoQXLwGOznhjT9SYuUpKJzv8wpe/2
JeFL7dg3K9c5F84tX7r48qbdDqOcQamLNwW28Jb/vf1bC1ilGuej3Y3eEqzVg6Ff
pzNXbL3zB2RloBLLWMW6sstaPdntMSJwBHgDjDcsPahjyGduo7ERq7gu0JvUGc4o
ZGAHp4kso0gS3Q1h493sQS2giFFiqs6gvwpSuJDzp11BSBq8nwIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFNi1ag/kLSIHwS6+1ficSk1wwh+0MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvODQ2ZTkzNmMtYzkyNC0z
MjM4LWE4N2EtZmNhNGZiYzFmNmNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFA+6j
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQASyOk4rEHxYzbTHmLfYVz6wZGeYC7plmVJGB7c
Tys70JA5T3foUP/Nja6Vaf/L2DEyjGHKyhMYOGTEI/4CqUFMBWQbKZFJjTb/DmN4
a4dOIWHQ4MhU9ImUlwQ/3RPRu3CnJmx00A29IuupAv7xijzpaAzB3dzlp5Kc+3vV
Cbpqekek0I9wtXuXHapNBkNro9KDesJ3148c76RVUnB8UuA3UyBm5gfcKx/zsijN
5HpPPxppQQowDS0qfmwQtHTEMb6CUrsKo7YJmuzZDwnQDEC7RaZYeUHrkHo539p9
DQqXQu5/4YmYqA3L1XxV84C3Ezne9BT4ZJHOVuRSrG4hUzU4
-----END CERTIFICATE-----
Generated at Mon Sep 28 21:12:28 2026 by rpki-client