Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bb408cb3-dc94-359a-83c3-1cb00e46c944.roa
File:                     bb408cb3-dc94-359a-83c3-1cb00e46c944.roa (raw, json)
Hash identifier:          c26lfhDi5551Yk8vCZJxRAnu75EVNjABCwE9a6s40v8=
Subject key identifier:   5A:E3:A3:37:BD:6D:22:C9:1A:EB:E9:56:C0:A9:03:6C:44:67:89:7D
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584DD0905AFAA117548EA9E8C180
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bb408cb3-dc94-359a-83c3-1cb00e46c944.roa
Signing time:             Wed 13 May 2026 01:00:24 +0000
ROA not before:           Wed 13 May 2026 01:00:24 +0000
ROA not after:            Tue 11 Aug 2026 01:00:24 +0000
asID:                     396617
IP address blocks:        2001:502:1ca1::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:d0:90:5a:fa:a1:17:54:8e:a9:e8:c1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 13 01:00:24 2026 GMT
            Not After : Aug 11 01:00:24 2026 GMT
        Subject: CN=4838a260-24fc-4cd1-9dfd-68352c083958
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:e1:2d:07:9d:c9:58:77:17:d9:7d:eb:2d:da:
                    a5:5a:f0:d8:1c:1a:c7:2b:24:88:c7:34:ab:51:de:
                    c6:00:85:ca:01:bf:1d:45:9d:55:2c:dc:f4:70:af:
                    6d:f4:e1:ac:49:14:21:ae:28:0a:f4:3d:1b:c5:15:
                    e8:db:93:31:a6:f7:da:82:72:05:47:2b:f3:0c:df:
                    b7:78:66:dd:62:e4:ca:c0:75:44:c2:0d:b0:b3:41:
                    11:12:79:94:5c:fb:7e:8c:44:7e:08:65:07:2e:58:
                    83:3e:43:a6:17:56:28:86:12:91:69:33:6f:4f:c9:
                    29:27:92:0d:a2:af:ee:e9:73:9c:16:95:f1:12:2f:
                    0d:f8:f3:b1:c4:69:b1:9a:8f:b2:e9:a7:29:fa:84:
                    6f:ac:ba:f3:8d:58:66:49:5d:03:73:43:19:30:23:
                    c5:28:34:fc:d8:2d:57:dc:4b:51:d2:34:28:fb:3a:
                    c3:2e:8f:c3:15:59:1b:61:96:a9:9a:21:c6:85:ef:
                    c4:c9:54:56:d1:c8:3f:e2:ac:73:72:98:00:7d:c5:
                    35:97:5e:f6:73:77:1b:08:97:dd:0d:22:85:11:9f:
                    92:09:2c:79:0e:b6:23:0e:bb:af:92:fd:00:18:6d:
                    f5:e7:0c:83:1d:d6:b6:c8:97:78:61:36:e1:a3:9b:
                    cf:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:E3:A3:37:BD:6D:22:C9:1A:EB:E9:56:C0:A9:03:6C:44:67:89:7D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bb408cb3-dc94-359a-83c3-1cb00e46c944.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:1ca1:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:ff:cb:b0:f3:96:09:46:6e:e9:06:88:0d:7f:9d:ee:d0:5e:
         02:e1:74:08:47:8c:f0:ee:7b:bb:e1:95:c2:8f:47:4f:d1:0d:
         0b:85:2a:06:80:fc:c3:0f:46:eb:77:36:92:32:e5:e9:05:de:
         b2:09:6d:04:da:dc:9a:12:5a:1a:32:93:83:51:e4:d8:ad:84:
         5c:9a:56:c0:f8:4e:e3:95:c7:96:8b:3e:80:b5:dc:af:4a:94:
         82:f5:d0:0f:9e:e9:e9:f2:71:31:23:e4:52:e8:ba:4e:07:8d:
         d0:2c:da:3d:88:91:a1:16:42:42:17:ad:73:83:66:7c:cd:92:
         72:d7:67:20:2f:19:06:32:64:37:c2:fc:b4:28:02:e2:ba:de:
         73:f2:d7:d3:2d:da:90:1e:9e:89:d2:a6:06:e4:c3:1e:ce:40:
         aa:63:de:33:9c:d9:63:7e:f9:39:a1:95:4a:f1:ba:d3:c7:86:
         51:25:d3:1e:3d:5e:38:6a:a6:96:17:06:56:d1:53:1a:28:ed:
         86:4c:eb:a6:7e:4c:b6:f3:f7:f3:59:a6:8b:42:41:b7:00:8e:
         02:bd:fa:1d:31:c5:3b:c5:83:58:06:5f:cd:0a:8c:3b:66:65:
         cd:a8:72:da:87:13:84:bb:ff:88:8e:6a:4a:56:31:af:73:28:
         25:17:56:7e
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE3QkFr6oRdUjqnowYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDUxMzAxMDAyNFoXDTI2MDgxMTAxMDAyNFowLzEtMCsGA1UEAxMk
NDgzOGEyNjAtMjRmYy00Y2QxLTlkZmQtNjgzNTJjMDgzOTU4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkOEtB53JWHcX2X3rLdqlWvDYHBrHKySIxzSr
Ud7GAIXKAb8dRZ1VLNz0cK9t9OGsSRQhrigK9D0bxRXo25MxpvfagnIFRyvzDN+3
eGbdYuTKwHVEwg2ws0EREnmUXPt+jER+CGUHLliDPkOmF1YohhKRaTNvT8kpJ5IN
oq/u6XOcFpXxEi8N+POxxGmxmo+y6acp+oRvrLrzjVhmSV0Dc0MZMCPFKDT82C1X
3EtR0jQo+zrDLo/DFVkbYZapmiHGhe/EyVRW0cg/4qxzcpgAfcU1l172c3cbCJfd
DSKFEZ+SCSx5DrYjDruvkv0AGG315wyDHda2yJd4YTbho5vPIQIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFFrjoze9bSLJGuvpVsCpA2xEZ4l9MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYmI0MDhjYjMtZGM5NC0z
NTlhLTgzYzMtMWNiMDBlNDZjOTQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAhyh
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQB3/8uw85YJRm7pBogNf53u0F4C4XQIR4zw7nu7
4ZXCj0dP0Q0LhSoGgPzDD0brdzaSMuXpBd6yCW0E2tyaEloaMpODUeTYrYRcmlbA
+E7jlceWiz6AtdyvSpSC9dAPnunp8nExI+RS6LpOB43QLNo9iJGhFkJCF61zg2Z8
zZJy12cgLxkGMmQ3wvy0KALiut5z8tfTLdqQHp6J0qYG5MMezkCqY94znNljfvk5
oZVK8brTx4ZRJdMePV44aqaWFwZW0VMaKO2GTOumfky28/fzWaaLQkG3AI4Cvfod
McU7xYNYBl/NCow7ZmXNqHLahxOEu/+IjmpKVjGvcyglF1Z+
-----END CERTIFICATE-----
Generated at Wed May 13 09:34:01 2026 by rpki-client