Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cdd32e44-cd89-3bc6-985b-23ad56e3c0d3.roa
File:                     cdd32e44-cd89-3bc6-985b-23ad56e3c0d3.roa (raw, json)
Hash identifier:          dodI9C3JnvtC51HaUm4pLwIHUyRJP8qpetoSWIRnvFE=
Subject key identifier:   01:3D:EE:4C:34:5A:A8:CA:4A:9A:1C:D5:19:A1:0A:43:ED:5B:D4:D6
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584DA84F4355945974B46DA0ED00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cdd32e44-cd89-3bc6-985b-23ad56e3c0d3.roa
Signing time:             Tue 28 Apr 2026 14:57:05 +0000
ROA not before:           Tue 28 Apr 2026 14:57:05 +0000
ROA not after:            Mon 27 Jul 2026 14:57:05 +0000
asID:                     396592
IP address blocks:        2001:503:eea3::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:a8:4f:43:55:94:59:74:b4:6d:a0:ed:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 28 14:57:05 2026 GMT
            Not After : Jul 27 14:57:05 2026 GMT
        Subject: CN=5080251e-82ec-4850-8d76-b3ae22b15841
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:9f:67:04:85:9e:84:c5:57:14:1a:98:54:1b:
                    e1:e9:08:00:8b:0d:29:a2:88:e7:5c:29:98:27:66:
                    49:60:4d:16:7c:c9:86:70:e0:b2:cf:2d:70:59:e0:
                    a6:e9:c8:90:50:c3:1b:42:08:18:05:f2:c4:9d:27:
                    34:29:36:ce:01:8c:fb:32:16:54:a8:9e:9e:cc:ab:
                    0c:cc:b4:aa:f4:38:f6:ce:e2:55:e5:c0:4b:aa:b5:
                    cd:05:37:ea:bf:95:cc:9a:f1:56:d7:85:f3:3f:44:
                    b6:dd:6b:96:89:7a:dd:ed:94:73:46:48:a6:9b:7a:
                    0d:cd:94:eb:ef:e0:e8:c9:c0:89:30:94:2e:30:b6:
                    c1:c3:64:04:2f:55:f2:d6:fa:86:79:ea:c0:d6:56:
                    03:19:a2:11:b7:08:a3:00:c7:1d:49:c3:f7:b9:5b:
                    f9:04:eb:ad:05:db:33:24:7d:92:9d:cf:c6:77:37:
                    e3:df:a5:8a:9d:38:3c:f9:12:e4:b8:5c:2f:79:a2:
                    16:14:1d:af:b8:d0:15:53:34:38:d3:8c:0e:96:d9:
                    c4:71:39:a1:fa:a3:cc:3d:f7:5e:5c:bf:96:7e:f9:
                    51:a8:ec:9e:a2:2c:fc:9e:49:70:04:3a:d6:e4:65:
                    58:ca:07:7a:01:09:4b:7f:1d:88:b5:ff:02:45:ce:
                    76:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:3D:EE:4C:34:5A:A8:CA:4A:9A:1C:D5:19:A1:0A:43:ED:5B:D4:D6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cdd32e44-cd89-3bc6-985b-23ad56e3c0d3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:eea3::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:e6:55:58:79:cf:f5:39:24:74:ce:d6:46:f5:77:03:8d:46:
         50:1e:de:a5:ff:ef:2c:91:c8:a3:96:c5:c1:99:b9:92:39:10:
         92:a2:89:2e:fb:07:a8:ba:cb:8d:60:5b:b2:e5:78:d6:63:f2:
         29:0f:48:16:e5:77:fb:af:40:64:ec:be:cd:d0:a1:a8:94:61:
         d9:d8:95:5a:ef:77:66:03:43:fc:9c:12:ff:b3:ce:15:61:ea:
         53:14:ba:1e:2b:e7:fb:ca:84:50:cf:a3:b3:5d:cb:16:27:e2:
         2e:b5:0d:77:7b:68:6f:e4:18:b5:ad:76:ff:c2:c8:f4:b0:e7:
         32:fb:eb:61:59:29:ef:ce:98:33:3e:77:2f:1e:f7:ec:40:e4:
         7e:90:bf:be:3e:a8:cc:9f:99:c3:3b:7b:8d:38:5c:25:ab:f5:
         5d:d5:4f:50:58:65:2b:9b:46:f6:16:e8:7c:96:a3:e5:aa:ee:
         9f:3d:3e:09:7d:a8:c6:02:10:6c:6b:f3:05:b5:72:87:65:4c:
         1e:16:7e:cd:c6:12:e2:04:ca:72:11:b9:db:ba:d7:c4:e3:5e:
         f6:99:e5:b6:7d:15:90:61:e8:83:ec:c4:d2:86:42:af:bc:0f:
         62:c7:e7:49:f6:eb:f8:ac:24:62:02:be:f2:bd:bc:ac:48:8f:
         5f:82:e7:9e
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE2oT0NVlFl0tG2g7QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDQyODE0NTcwNVoXDTI2MDcyNzE0NTcwNVowLzEtMCsGA1UEAxMk
NTA4MDI1MWUtODJlYy00ODUwLThkNzYtYjNhZTIyYjE1ODQxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiZ9nBIWehMVXFBqYVBvh6QgAiw0poojnXCmY
J2ZJYE0WfMmGcOCyzy1wWeCm6ciQUMMbQggYBfLEnSc0KTbOAYz7MhZUqJ6ezKsM
zLSq9Dj2zuJV5cBLqrXNBTfqv5XMmvFW14XzP0S23WuWiXrd7ZRzRkimm3oNzZTr
7+DoycCJMJQuMLbBw2QEL1Xy1vqGeerA1lYDGaIRtwijAMcdScP3uVv5BOutBdsz
JH2Snc/Gdzfj36WKnTg8+RLkuFwveaIWFB2vuNAVUzQ404wOltnEcTmh+qPMPfde
XL+WfvlRqOyeoiz8nklwBDrW5GVYygd6AQlLfx2Itf8CRc52UQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFAE97kw0WqjKSpoc1RmhCkPtW9TWMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvY2RkMzJlNDQtY2Q4OS0z
YmM2LTk4NWItMjNhZDU2ZTNjMGQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFA+6j
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAEfmVVh5z/U5JHTO1kb1dwONRlAe3qX/7yyRyKOWxcGZuZI5EJKi
iS77B6i6y41gW7LleNZj8ikPSBbld/uvQGTsvs3QoaiUYdnYlVrvd2YDQ/ycEv+z
zhVh6lMUuh4r5/vKhFDPo7NdyxYn4i61DXd7aG/kGLWtdv/CyPSw5zL762FZKe/O
mDM+dy8e9+xA5H6Qv74+qMyfmcM7e404XCWr9V3VT1BYZSubRvYW6HyWo+Wq7p89
Pgl9qMYCEGxr8wW1codlTB4Wfs3GEuIEynIRudu618TjXvaZ5bZ9FZBh6IPsxNKG
Qq+8D2LH50n26/isJGICvvK9vKxIj1+C554=
-----END CERTIFICATE-----
Generated at Wed May 13 06:37:53 2026 by rpki-client