Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9e37e6d6-ca70-339d-96fb-a19748429aec.roa
File:                     9e37e6d6-ca70-339d-96fb-a19748429aec.roa (raw, json)
Hash identifier:          Ku9I02aIoq/0bAfdY9Ux8RkA0u4TitmSt23SO/JBFUA=
Subject key identifier:   40:AD:12:0E:48:49:52:00:5E:E3:DA:DC:B0:83:F7:82:D5:9E:5B:5D
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F49749EBD5137E39A9640ABC0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9e37e6d6-ca70-339d-96fb-a19748429aec.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     396584
IP address blocks:        2001:500:d937::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:74:9e:bd:51:37:e3:9a:96:40:ab:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=a74eb511-d1d0-4c25-b34a-45d9df435547
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:ba:d5:84:5b:c9:84:54:af:e9:78:47:61:42:
                    b8:21:19:57:f4:6f:36:86:34:c7:f4:d0:ca:9d:59:
                    fb:61:da:62:18:7c:e4:f1:e7:4a:42:a0:cc:f1:fd:
                    e3:dc:44:2e:ec:3c:74:db:09:89:05:ff:77:50:e2:
                    03:74:6a:86:ae:6d:c9:10:68:7d:a8:3d:c1:0e:2e:
                    a6:ad:d3:81:16:a0:a8:c8:80:98:cb:d3:5b:8b:c6:
                    3b:c5:68:a0:14:ba:56:ae:6c:bf:61:93:6d:a0:dc:
                    a9:97:c9:e5:9b:ed:3e:ee:80:41:2a:ba:3a:f5:f3:
                    c8:db:bc:87:12:d6:8f:76:d8:e5:85:28:ef:b0:1d:
                    89:dc:8e:15:46:e5:f0:dd:b9:54:00:50:da:54:be:
                    37:60:ce:a1:7a:59:7a:ee:1c:87:09:35:bc:be:bc:
                    b3:ae:61:1c:6a:77:92:c1:3a:81:0a:66:ec:2e:b4:
                    31:04:85:94:b6:16:d4:1d:a5:68:12:c8:d4:1a:26:
                    9c:c2:5c:d6:0e:68:31:b1:20:b5:95:89:06:89:1b:
                    eb:6a:89:de:e5:5e:a8:3e:b5:78:c5:e6:32:40:87:
                    1e:88:a4:83:97:3f:7a:92:c1:57:9b:b9:0f:8c:37:
                    8f:36:f8:bd:7d:c1:af:36:36:f6:25:69:05:38:af:
                    63:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:AD:12:0E:48:49:52:00:5E:E3:DA:DC:B0:83:F7:82:D5:9E:5B:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9e37e6d6-ca70-339d-96fb-a19748429aec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:d937:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:e0:ef:34:b1:c2:fb:0c:d2:41:95:b4:67:e0:77:04:06:8e:
         2d:4c:55:5a:a5:bc:8d:64:d9:49:06:94:72:b0:71:dd:c4:5d:
         5f:51:0a:46:f6:9b:f0:80:3d:e2:10:95:53:9f:5e:2e:cd:94:
         ce:49:de:f7:25:e7:9d:aa:e4:de:bd:35:98:32:3d:06:4c:4b:
         fd:45:a4:34:92:5f:93:b9:f0:02:f3:45:94:b9:2e:69:80:50:
         b1:b1:20:07:d5:e6:c1:eb:9a:40:12:3c:37:7e:23:8c:e7:76:
         3d:25:54:c5:29:bf:8c:d0:fd:31:79:e3:be:79:d9:ee:df:29:
         19:3c:50:d8:23:fd:35:2b:87:13:77:f2:4b:d4:96:0e:0d:84:
         fa:e9:95:b6:a6:75:25:34:c7:b9:9a:ad:06:7c:da:f8:ba:4b:
         f4:c5:8c:7e:89:8f:33:0f:33:6d:20:e0:c8:80:bb:7b:d1:73:
         00:ce:b6:39:e1:ec:84:d7:7c:9b:78:8f:79:ff:50:fc:b1:49:
         6a:29:c4:64:76:d8:0f:c1:92:ca:5b:25:75:d1:a0:1d:68:d0:
         76:44:b9:8f:1f:6b:cf:a4:74:e2:a3:4a:36:a5:35:01:a8:3d:
         0f:6f:e1:a3:35:d5:49:eb:2e:8a:47:c7:53:e3:d6:07:7d:1c:
         e7:dc:cf:02
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE9JdJ69UTfjmpZAq8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
YTc0ZWI1MTEtZDFkMC00YzI1LWIzNGEtNDVkOWRmNDM1NTQ3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq7rVhFvJhFSv6XhHYUK4IRlX9G82hjTH9NDK
nVn7YdpiGHzk8edKQqDM8f3j3EQu7Dx02wmJBf93UOIDdGqGrm3JEGh9qD3BDi6m
rdOBFqCoyICYy9Nbi8Y7xWigFLpWrmy/YZNtoNypl8nlm+0+7oBBKro69fPI27yH
EtaPdtjlhSjvsB2J3I4VRuXw3blUAFDaVL43YM6hell67hyHCTW8vryzrmEcaneS
wTqBCmbsLrQxBIWUthbUHaVoEsjUGiacwlzWDmgxsSC1lYkGiRvraone5V6oPrV4
xeYyQIceiKSDlz96ksFXm7kPjDePNvi9fcGvNjb2JWkFOK9jrQIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFECtEg5ISVIAXuPa3LCD94LVnltdMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvOWUzN2U2ZDYtY2E3MC0z
MzlkLTk2ZmItYTE5NzQ4NDI5YWVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFANk3
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQBH4O80scL7DNJBlbRn4HcEBo4tTFVapbyNZNlJ
BpRysHHdxF1fUQpG9pvwgD3iEJVTn14uzZTOSd73JeedquTevTWYMj0GTEv9RaQ0
kl+TufAC80WUuS5pgFCxsSAH1ebB65pAEjw3fiOM53Y9JVTFKb+M0P0xeeO+ednu
3ykZPFDYI/01K4cTd/JL1JYODYT66ZW2pnUlNMe5mq0GfNr4ukv0xYx+iY8zDzNt
IODIgLt70XMAzrY54eyE13ybeI95/1D8sUlqKcRkdtgPwZLKWyV10aAdaNB2RLmP
H2vPpHTio0o2pTUBqD0Pb+GjNdVJ6y6KR8dT49YHfRzn3M8C
-----END CERTIFICATE-----
Generated at Sun Sep 27 16:14:51 2026 by rpki-client