Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9e29d9c5-9a00-3913-aea5-3291ed1c8c67.roa
File:                     9e29d9c5-9a00-3913-aea5-3291ed1c8c67.roa (raw, json)
Hash identifier:          gGaPiEn2Giba12hL9t5stfj/kOhpAosoqaXUAXcaAog=
Subject key identifier:   68:26:CE:5B:3E:DD:54:AC:A1:70:9D:BB:5D:2A:4E:DF:FD:D4:2B:38
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D32F5A70EDF1B1B3EF3B9C500
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9e29d9c5-9a00-3913-aea5-3291ed1c8c67.roa
Signing time:             Tue 17 Mar 2026 14:06:57 +0000
ROA not before:           Tue 17 Mar 2026 14:06:57 +0000
ROA not after:            Mon 15 Jun 2026 14:06:57 +0000
asID:                     25485
IP address blocks:        2001:500:856e::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:32:f5:a7:0e:df:1b:1b:3e:f3:b9:c5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar 17 14:06:57 2026 GMT
            Not After : Jun 15 14:06:57 2026 GMT
        Subject: CN=9d342bea-0c05-49b7-9f52-ca20ef4af186
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:b7:b1:23:8c:86:00:a6:fa:5b:70:80:8d:97:
                    78:2b:92:0d:42:99:7e:87:d0:89:85:77:fb:9f:8d:
                    06:81:1d:2e:7e:ec:1a:61:19:de:e6:51:de:33:7a:
                    f1:8b:e8:11:e1:4a:9a:51:db:dd:0f:2a:4f:2e:04:
                    65:79:95:1a:0c:68:97:48:63:2f:70:9a:c9:d8:77:
                    24:17:e5:4a:af:59:e8:68:ac:24:1a:0b:78:c4:c5:
                    6f:ea:e8:c9:7c:ce:e5:d6:6f:7f:f3:c4:e7:9a:98:
                    ba:73:a8:47:58:cf:14:f7:1d:43:13:6a:51:20:e8:
                    01:e7:3c:25:b0:78:64:80:6e:33:ce:86:f8:ab:26:
                    59:b6:07:d6:85:5f:05:e7:a3:5b:4b:f0:2a:12:0d:
                    74:bd:1b:35:0f:6d:a6:8d:0b:67:3d:09:f3:d8:c1:
                    07:ab:bd:b1:f9:cc:a2:4d:9c:4b:b0:4d:cd:ff:c9:
                    41:f7:04:a7:bd:2f:bf:94:1f:5a:6a:49:d5:20:a3:
                    51:18:1a:12:ab:0b:96:13:50:d7:0c:4a:18:f9:2a:
                    db:08:1c:e0:09:3e:01:e8:de:2e:2a:a8:8a:c6:ed:
                    9f:bb:79:aa:83:7f:eb:d8:53:51:a5:05:ff:04:6e:
                    46:35:96:5e:c8:a1:a2:92:9c:1b:ac:f1:00:d2:21:
                    9c:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:26:CE:5B:3E:DD:54:AC:A1:70:9D:BB:5D:2A:4E:DF:FD:D4:2B:38
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9e29d9c5-9a00-3913-aea5-3291ed1c8c67.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:856e:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:f7:89:51:a0:90:1e:b7:09:64:ff:63:11:11:a9:14:74:ee:
         33:44:d4:86:b1:96:71:2c:10:58:34:1a:d8:20:b3:dc:30:84:
         65:a0:67:14:39:8f:eb:08:97:53:d5:e6:95:31:d8:90:19:b5:
         05:75:ff:8f:6a:9d:b0:ae:54:32:99:12:67:50:b6:1b:ef:da:
         76:20:78:41:ad:a7:e1:13:37:9d:69:f7:8c:db:7f:9f:eb:65:
         f9:cf:9b:87:0b:a8:c7:7a:51:b2:a4:52:93:8b:36:07:63:ee:
         e1:86:6b:e7:97:4c:98:29:30:2d:d4:d8:7d:72:e3:48:64:32:
         8c:66:d6:01:e1:e2:70:13:34:f2:24:72:13:b7:b8:eb:b6:e8:
         42:50:3d:02:62:f5:77:7e:15:82:1f:14:a6:7b:af:52:7e:bd:
         a3:a3:87:76:bb:ea:5c:5d:e0:83:ef:b2:e1:a4:aa:91:03:ef:
         4f:45:a4:89:97:3c:85:5e:ff:e9:b3:d3:d2:14:a0:81:21:38:
         be:7c:3d:5a:a8:e4:0d:06:49:a5:41:26:a7:b5:1c:d9:13:65:
         eb:f5:39:0a:32:4d:1f:b3:2a:cf:10:3c:60:55:01:fc:4e:45:
         cd:55:78:5d:b5:12:3c:8c:32:77:20:b6:f3:a1:ca:41:10:bf:
         7e:b5:89:76
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE0y9acO3xsbPvO5xQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDMxNzE0MDY1N1oXDTI2MDYxNTE0MDY1N1owLzEtMCsGA1UEAxMk
OWQzNDJiZWEtMGMwNS00OWI3LTlmNTItY2EyMGVmNGFmMTg2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAibexI4yGAKb6W3CAjZd4K5INQpl+h9CJhXf7
n40GgR0ufuwaYRne5lHeM3rxi+gR4UqaUdvdDypPLgRleZUaDGiXSGMvcJrJ2Hck
F+VKr1noaKwkGgt4xMVv6ujJfM7l1m9/88Tnmpi6c6hHWM8U9x1DE2pRIOgB5zwl
sHhkgG4zzob4qyZZtgfWhV8F56NbS/AqEg10vRs1D22mjQtnPQnz2MEHq72x+cyi
TZxLsE3N/8lB9wSnvS+/lB9aaknVIKNRGBoSqwuWE1DXDEoY+SrbCBzgCT4B6N4u
KqiKxu2fu3mqg3/r2FNRpQX/BG5GNZZeyKGikpwbrPEA0iGcQwIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFGgmzls+3VSsoXCdu10qTt/91Cs4MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvOWUyOWQ5YzUtOWEwMC0z
OTEzLWFlYTUtMzI5MWVkMWM4YzY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAIVu
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQAQ94lRoJAetwlk/2MREakUdO4zRNSGsZZxLBBY
NBrYILPcMIRloGcUOY/rCJdT1eaVMdiQGbUFdf+Pap2wrlQymRJnULYb79p2IHhB
rafhEzedafeM23+f62X5z5uHC6jHelGypFKTizYHY+7hhmvnl0yYKTAt1Nh9cuNI
ZDKMZtYB4eJwEzTyJHITt7jrtuhCUD0CYvV3fhWCHxSme69Sfr2jo4d2u+pcXeCD
77LhpKqRA+9PRaSJlzyFXv/ps9PSFKCBITi+fD1aqOQNBkmlQSantRzZE2Xr9TkK
Mk0fsyrPEDxgVQH8TkXNVXhdtRI8jDJ3ILbzocpBEL9+tYl2
-----END CERTIFICATE-----
Generated at Thu Mar 26 08:39:28 2026 by rpki-client