Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9e9b8a66-cfe9-30ab-acd9-ae8702718f03.roa
File:                     9e9b8a66-cfe9-30ab-acd9-ae8702718f03.roa (raw, json)
Hash identifier:          4ipJdjdFu810s81qrcLA7rjbCxO0HaYa1Q9YQf76VIk=
Subject key identifier:   AA:31:81:0A:07:C0:94:08:B3:62:21:03:20:11:72:E5:4C:5D:21:8F
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E534F46822ED14467988C3D30
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9e9b8a66-cfe9-30ab-acd9-ae8702718f03.roa
Signing time:             Sun 28 Jun 2026 21:00:11 +0000
ROA not before:           Sun 28 Jun 2026 21:00:11 +0000
ROA not after:            Sat 26 Sep 2026 21:00:11 +0000
asID:                     396584
IP address blocks:        2001:500:133::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:53:4f:46:82:2e:d1:44:67:98:8c:3d:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun 28 21:00:11 2026 GMT
            Not After : Sep 26 21:00:11 2026 GMT
        Subject: CN=a1c20e0e-3576-4a9d-8828-9503806dfbc9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:28:79:34:ae:8e:a1:6e:73:24:d7:cb:bf:2f:
                    c7:c9:23:e0:11:86:2b:9d:4e:4f:97:74:78:a5:01:
                    45:ab:00:5c:e5:d5:15:ea:bd:20:b7:a2:63:dd:34:
                    00:3f:d8:3b:c4:1b:76:e5:6b:d1:72:d3:de:ae:5c:
                    1c:cc:08:f9:f3:e3:9e:84:7c:e0:70:10:45:66:76:
                    49:ad:56:ac:7c:fc:b4:e1:f1:ff:a1:7b:da:b4:49:
                    78:1f:61:72:db:05:48:e2:5e:0b:30:65:15:36:4b:
                    e1:79:43:e5:38:cc:29:96:d8:43:0d:36:b9:1a:9e:
                    e0:0f:07:f0:5b:f3:ad:ed:c5:73:09:7e:54:98:50:
                    17:f3:f2:09:86:d9:aa:35:ec:85:e5:a8:45:bf:63:
                    18:e2:7e:b3:f4:48:e8:22:12:db:1c:d1:48:81:34:
                    d2:ce:65:b4:a9:71:43:a4:fc:be:b5:c8:e1:8f:a0:
                    3f:9a:49:62:20:e6:65:42:00:83:cf:b0:2e:d2:f6:
                    c8:bc:5d:a9:49:0b:bb:b8:31:2d:87:47:18:08:00:
                    d2:33:97:a5:d2:89:af:56:da:d5:c5:4f:ae:f2:4b:
                    49:ab:5d:03:e1:75:7c:a6:11:2b:35:7a:76:6c:d1:
                    1f:f5:df:c5:1c:ab:e0:b8:38:a3:82:6e:24:0d:1a:
                    ba:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:31:81:0A:07:C0:94:08:B3:62:21:03:20:11:72:E5:4C:5D:21:8F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9e9b8a66-cfe9-30ab-acd9-ae8702718f03.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:133::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:db:3c:99:a8:26:94:13:bc:cf:d4:e7:f7:4f:1a:c9:19:e0:
         f0:7e:82:8b:76:27:62:ae:ad:0f:09:dc:48:0e:8e:f3:6e:cf:
         f1:d6:1c:be:f8:26:e2:c5:8c:38:16:ae:2f:08:cb:6f:52:ec:
         19:7b:6b:a9:a5:a9:37:a2:d3:7e:e6:62:21:1f:ba:86:85:b3:
         84:c0:f5:55:6c:df:12:9c:b8:e3:ca:4f:e9:df:e8:a3:b2:28:
         6c:f6:48:33:b9:00:2a:23:d9:9e:92:fa:99:a6:ae:43:6b:2e:
         c0:89:0f:24:62:49:a7:43:40:6b:44:17:a7:bf:ae:be:c6:f6:
         d1:9d:9e:de:f2:91:78:1d:aa:0e:c7:c3:56:ed:56:17:b4:61:
         e1:e7:45:cc:37:79:2c:66:78:7f:82:de:f2:51:90:03:e3:d6:
         af:e4:10:e3:4f:79:52:89:88:f6:be:b8:ec:fb:cc:58:50:26:
         25:70:ac:6b:14:b5:fa:66:74:3b:b3:53:11:46:c9:96:34:6a:
         19:66:4c:cd:d1:1b:fc:26:3d:03:5c:85:4b:50:69:ac:95:2d:
         2a:c5:e2:eb:1b:1b:cd:52:6e:bb:66:5d:77:cf:c1:51:ec:27:
         ad:dc:8f:bb:ed:02:6b:4f:85:80:40:95:ca:c6:12:ad:ad:12:
         ef:37:6f:30
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE5TT0aCLtFEZ5iMPTAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDYyODIxMDAxMVoXDTI2MDkyNjIxMDAxMVowLzEtMCsGA1UEAxMk
YTFjMjBlMGUtMzU3Ni00YTlkLTg4MjgtOTUwMzgwNmRmYmM5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyih5NK6OoW5zJNfLvy/HySPgEYYrnU5Pl3R4
pQFFqwBc5dUV6r0gt6Jj3TQAP9g7xBt25WvRctPerlwczAj58+OehHzgcBBFZnZJ
rVasfPy04fH/oXvatEl4H2Fy2wVI4l4LMGUVNkvheUPlOMwplthDDTa5Gp7gDwfw
W/Ot7cVzCX5UmFAX8/IJhtmqNeyF5ahFv2MY4n6z9EjoIhLbHNFIgTTSzmW0qXFD
pPy+tcjhj6A/mkliIOZlQgCDz7Au0vbIvF2pSQu7uDEth0cYCADSM5el0omvVtrV
xU+u8ktJq10D4XV8phErNXp2bNEf9d/FHKvguDijgm4kDRq64wIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFKoxgQoHwJQIs2IhAyARcuVMXSGPMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvOWU5YjhhNjYtY2ZlOS0z
MGFiLWFjZDktYWU4NzAyNzE4ZjAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEz
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAI/bPJmoJpQTvM/U5/dPGskZ4PB+got2J2KurQ8J3EgOjvNuz/HW
HL74JuLFjDgWri8Iy29S7Bl7a6mlqTei037mYiEfuoaFs4TA9VVs3xKcuOPKT+nf
6KOyKGz2SDO5ACoj2Z6S+pmmrkNrLsCJDyRiSadDQGtEF6e/rr7G9tGdnt7ykXgd
qg7Hw1btVhe0YeHnRcw3eSxmeH+C3vJRkAPj1q/kEONPeVKJiPa+uOz7zFhQJiVw
rGsUtfpmdDuzUxFGyZY0ahlmTM3RG/wmPQNchUtQaayVLSrF4usbG81SbrtmXXfP
wVHsJ63cj7vtAmtPhYBAlcrGEq2tEu83bzA=
-----END CERTIFICATE-----
Generated at Fri Jul 24 09:41:52 2026 by rpki-client