Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8bc88f03-3779-305e-9700-41934795096d.roa
File:                     8bc88f03-3779-305e-9700-41934795096d.roa (raw, json)
Hash identifier:          q+y29HdS+homxsbmhEGBJy8VcVWZP7IB0io2114UbTQ=
Subject key identifier:   59:A8:C5:CE:40:71:A6:6B:91:D1:1C:92:04:54:79:D0:5D:66:CC:07
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E7A64FF25E62687B49912CF00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8bc88f03-3779-305e-9700-41934795096d.roa
Signing time:             Sun 12 Jul 2026 21:00:13 +0000
ROA not before:           Sun 12 Jul 2026 21:00:13 +0000
ROA not after:            Sat 10 Oct 2026 21:00:13 +0000
asID:                     396587
IP address blocks:        2001:503:a83e::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:7a:64:ff:25:e6:26:87:b4:99:12:cf:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 12 21:00:13 2026 GMT
            Not After : Oct 10 21:00:13 2026 GMT
        Subject: CN=ff6d4b71-bb61-40f1-8c20-a224381d504c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:31:86:ff:88:1c:0c:5e:89:a2:b0:b4:40:77:
                    60:c5:4b:f8:d3:7b:f4:41:cd:c6:e8:9d:df:bf:65:
                    16:81:26:16:3c:a4:7b:c7:30:24:dc:d0:ec:dd:e8:
                    f5:99:cf:fd:f4:56:63:22:89:62:50:de:f0:10:7a:
                    15:87:91:78:8b:c5:00:c9:2a:57:e3:1e:5d:14:47:
                    22:12:7f:bf:0d:6f:c8:49:6a:88:1b:bc:6c:63:4f:
                    1b:88:33:38:91:51:c8:81:dd:32:d3:0f:46:8b:5e:
                    63:02:c6:fa:87:f8:30:e5:d3:bb:2c:c5:d7:8e:ef:
                    25:1d:9e:9d:f2:5f:e5:af:2b:6f:8f:89:76:f6:6a:
                    c1:8b:d1:0b:f9:53:75:b5:f7:a1:05:14:2c:66:fd:
                    26:c9:b9:cb:10:9e:8b:cb:f5:5e:96:b6:f6:22:af:
                    dc:73:d2:84:55:f4:ba:3a:56:1c:8b:dc:d2:5a:50:
                    da:be:a6:5f:8d:74:44:e3:41:a8:f3:3a:99:d7:95:
                    d9:bd:a6:91:65:98:6a:a6:ab:78:f5:17:3e:e0:43:
                    9a:90:70:96:ae:35:17:d8:ad:ec:b7:37:17:98:d2:
                    68:af:2d:ee:9b:fd:97:60:95:f6:17:95:e5:c5:6c:
                    b2:02:c6:cc:4b:e9:f1:f0:d1:6c:99:07:8d:41:a1:
                    0d:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:A8:C5:CE:40:71:A6:6B:91:D1:1C:92:04:54:79:D0:5D:66:CC:07
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8bc88f03-3779-305e-9700-41934795096d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:a83e::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:ef:0d:39:20:bd:07:66:1e:db:f9:9e:b2:30:dc:b2:0e:cc:
         21:94:4c:cb:ea:f7:2c:f9:ed:b4:44:ba:b4:b6:a0:e4:cb:07:
         e5:78:d4:36:bd:35:99:2e:17:4b:20:3d:41:40:55:e4:1f:83:
         d2:11:f1:a7:de:70:0e:07:d8:cd:0b:d4:b6:e8:2b:ee:1b:6a:
         14:4c:e5:0e:35:96:ec:8c:58:8a:f0:77:b3:19:11:42:87:35:
         11:0c:00:a9:74:0d:36:df:9c:7c:a5:da:08:8f:36:e5:ed:24:
         63:60:49:72:ce:ee:56:ab:e6:b2:1a:d7:58:ba:a8:bc:02:24:
         6a:35:46:5e:25:f2:ee:6b:a8:14:8e:bc:7e:47:bf:97:f6:31:
         f1:64:80:87:00:60:f4:87:19:19:8f:35:a8:42:cd:04:5f:1a:
         63:a8:cc:c2:9b:fb:94:29:53:09:3a:76:d5:fc:f0:d6:29:a0:
         c5:01:ff:a1:21:36:02:f9:02:66:cf:48:84:9e:c5:57:ad:a6:
         90:81:51:02:85:09:0f:5a:29:12:f5:1e:09:14:ee:6b:d4:b6:
         dc:90:36:dc:77:f9:14:33:84:08:87:94:a0:f4:01:15:af:a6:
         0b:bf:a3:5d:4d:9d:9d:65:98:8e:7d:2c:8f:b4:7e:f5:52:f5:
         ff:37:b3:8b
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE56ZP8l5iaHtJkSzwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDcxMjIxMDAxM1oXDTI2MTAxMDIxMDAxM1owLzEtMCsGA1UEAxMk
ZmY2ZDRiNzEtYmI2MS00MGYxLThjMjAtYTIyNDM4MWQ1MDRjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5zGG/4gcDF6JorC0QHdgxUv403v0Qc3G6J3f
v2UWgSYWPKR7xzAk3NDs3ej1mc/99FZjIoliUN7wEHoVh5F4i8UAySpX4x5dFEci
En+/DW/ISWqIG7xsY08biDM4kVHIgd0y0w9Gi15jAsb6h/gw5dO7LMXXju8lHZ6d
8l/lrytvj4l29mrBi9EL+VN1tfehBRQsZv0mybnLEJ6Ly/Velrb2Iq/cc9KEVfS6
OlYci9zSWlDavqZfjXRE40Go8zqZ15XZvaaRZZhqpqt49Rc+4EOakHCWrjUX2K3s
tzcXmNJory3um/2XYJX2F5XlxWyyAsbMS+nx8NFsmQeNQaENSQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFFmoxc5AcaZrkdEckgRUedBdZswHMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvOGJjODhmMDMtMzc3OS0z
MDVlLTk3MDAtNDE5MzQ3OTUwOTZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFA6g+
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBACnvDTkgvQdmHtv5nrIw3LIOzCGUTMvq9yz57bREurS2oOTLB+V4
1Da9NZkuF0sgPUFAVeQfg9IR8afecA4H2M0L1LboK+4bahRM5Q41luyMWIrwd7MZ
EUKHNREMAKl0DTbfnHyl2giPNuXtJGNgSXLO7lar5rIa11i6qLwCJGo1Rl4l8u5r
qBSOvH5Hv5f2MfFkgIcAYPSHGRmPNahCzQRfGmOozMKb+5QpUwk6dtX88NYpoMUB
/6EhNgL5AmbPSISexVetppCBUQKFCQ9aKRL1HgkU7mvUttyQNtx3+RQzhAiHlKD0
ARWvpgu/o11NnZ1lmI59LI+0fvVS9f83s4s=
-----END CERTIFICATE-----
Generated at Fri Jul 24 12:28:15 2026 by rpki-client