Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8f1333ed-7ccb-3a70-b466-78258419d210.roa
File:                     8f1333ed-7ccb-3a70-b466-78258419d210.roa (raw, json)
Hash identifier:          lMLapaGzOEUemLKN1hm7J2xNDqKEhTQxrQDZQ6k69pM=
Subject key identifier:   6C:3B:4A:DA:B3:44:64:07:37:5B:CB:69:1E:7F:21:D3:28:C0:E1:EA
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E66DA2CD461269DA95F031300
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8f1333ed-7ccb-3a70-b466-78258419d210.roa
Signing time:             Sun 05 Jul 2026 21:00:11 +0000
ROA not before:           Sun 05 Jul 2026 21:00:11 +0000
ROA not after:            Sat 03 Oct 2026 21:00:11 +0000
asID:                     32651
IP address blocks:        2001:500:122::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:66:da:2c:d4:61:26:9d:a9:5f:03:13:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul  5 21:00:11 2026 GMT
            Not After : Oct  3 21:00:11 2026 GMT
        Subject: CN=ed3ff724-d53c-4291-88b9-ab93a523ca54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:de:a9:c0:3c:c8:1a:43:5c:d0:14:e1:97:18:
                    56:50:24:fb:e8:9d:86:70:97:10:82:f2:11:96:20:
                    e7:2f:02:03:ac:2d:dc:65:5d:b8:f9:a7:a0:6e:05:
                    9f:58:19:93:ca:95:bb:3d:0f:f2:9e:d0:75:2d:bb:
                    b9:57:b5:a1:f7:8f:de:28:a8:52:e3:58:72:1f:25:
                    ac:30:e9:ef:58:8d:da:95:2a:4a:3d:16:67:9d:ba:
                    57:b3:51:81:e8:bf:b9:27:55:90:2a:10:4b:61:0e:
                    43:8b:27:f3:de:7b:c7:e5:6a:8e:0e:54:99:74:49:
                    fd:e5:df:9b:01:a3:4b:b5:58:52:f4:cf:d8:db:99:
                    23:bb:a5:90:2d:d1:93:e0:08:fc:3e:6b:f1:61:b7:
                    d1:ef:99:20:f2:58:73:9a:51:fd:a6:4e:3e:76:b2:
                    1f:2a:2e:32:3d:b0:9e:f2:f2:e4:0e:f4:95:1e:1a:
                    f8:9b:89:b8:86:94:82:1d:7d:09:0a:c3:9b:08:84:
                    b2:7d:80:06:84:09:56:6a:89:83:fe:9d:5b:43:43:
                    f3:62:67:23:2f:3d:b9:ac:14:cc:50:4b:66:2f:e7:
                    ff:5b:60:46:ec:55:63:46:d5:9f:c8:7a:19:b5:49:
                    db:d2:31:84:3a:61:02:39:da:30:2c:69:13:53:22:
                    87:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:3B:4A:DA:B3:44:64:07:37:5B:CB:69:1E:7F:21:D3:28:C0:E1:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8f1333ed-7ccb-3a70-b466-78258419d210.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:122:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:7a:cf:0d:2a:e2:a2:cb:2b:70:21:c5:d1:d2:8b:9d:20:96:
         22:3e:05:09:24:ec:2e:dc:f0:ce:d6:96:70:84:00:50:9c:63:
         41:3f:a0:9c:e5:6c:53:d3:fa:38:b9:cf:35:86:59:87:4e:dc:
         71:78:9c:04:f5:82:77:5b:f6:6a:53:6e:ba:89:fb:ca:ca:1c:
         05:72:b9:7a:28:3e:2f:6b:3e:0e:5e:d1:0a:1f:38:88:e8:65:
         45:16:b2:b8:bc:8a:2a:4f:b7:7f:68:ba:d4:59:5c:3c:a7:35:
         08:fd:a9:cd:ff:ac:65:7e:b8:f1:d1:48:8c:c5:2b:f1:f4:73:
         3b:6a:11:bb:d7:33:90:b5:b2:8b:f7:d0:7d:a9:b0:e3:14:4a:
         e5:a2:21:f5:0d:55:29:29:2e:00:76:ca:93:d5:9a:44:91:d5:
         0c:13:f1:09:73:ba:96:09:59:94:dd:0e:3f:9c:cf:a2:e0:75:
         8a:c0:8f:d1:43:6e:f4:77:7c:bb:b3:b0:de:f0:28:4b:d4:89:
         09:ca:a6:a4:2b:c0:57:f8:19:85:e8:32:81:d1:ef:d2:f4:83:
         58:06:8a:60:95:07:d9:4d:71:eb:03:da:76:24:ed:cb:a8:14:
         38:d1:9f:cc:cf:a7:f1:6c:c3:53:17:5b:e8:d5:2d:d4:0e:89:
         8c:1d:96:e5
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE5m2izUYSadqV8DEwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDcwNTIxMDAxMVoXDTI2MTAwMzIxMDAxMVowLzEtMCsGA1UEAxMk
ZWQzZmY3MjQtZDUzYy00MjkxLTg4YjktYWI5M2E1MjNjYTU0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtd6pwDzIGkNc0BThlxhWUCT76J2GcJcQgvIR
liDnLwIDrC3cZV24+aegbgWfWBmTypW7PQ/yntB1Lbu5V7Wh94/eKKhS41hyHyWs
MOnvWI3alSpKPRZnnbpXs1GB6L+5J1WQKhBLYQ5Diyfz3nvH5WqODlSZdEn95d+b
AaNLtVhS9M/Y25kju6WQLdGT4Aj8PmvxYbfR75kg8lhzmlH9pk4+drIfKi4yPbCe
8vLkDvSVHhr4m4m4hpSCHX0JCsObCISyfYAGhAlWaomD/p1bQ0PzYmcjLz25rBTM
UEtmL+f/W2BG7FVjRtWfyHoZtUnb0jGEOmECOdowLGkTUyKHIQIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFGw7StqzRGQHN1vLaR5/IdMowOHqMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvOGYxMzMzZWQtN2NjYi0z
YTcwLWI0NjYtNzgyNTg0MTlkMjEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEi
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQAJes8NKuKiyytwIcXR0oudIJYiPgUJJOwu3PDO
1pZwhABQnGNBP6Cc5WxT0/o4uc81hlmHTtxxeJwE9YJ3W/ZqU266ifvKyhwFcrl6
KD4vaz4OXtEKHziI6GVFFrK4vIoqT7d/aLrUWVw8pzUI/anN/6xlfrjx0UiMxSvx
9HM7ahG71zOQtbKL99B9qbDjFErloiH1DVUpKS4AdsqT1ZpEkdUME/EJc7qWCVmU
3Q4/nM+i4HWKwI/RQ270d3y7s7De8ChL1IkJyqakK8BX+BmF6DKB0e/S9INYBopg
lQfZTXHrA9p2JO3LqBQ40Z/Mz6fxbMNTF1vo1S3UDomMHZbl
-----END CERTIFICATE-----
Generated at Fri Jul 24 13:04:04 2026 by rpki-client