Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d565e519-ddbe-3ada-a6ba-f1d3cabea171.roa
File:                     d565e519-ddbe-3ada-a6ba-f1d3cabea171.roa (raw, json)
Hash identifier:          M+A//YkC5M0Thp48LEoCIOSBFyCFcpwLwO7gn1bcQGY=
Subject key identifier:   59:C7:F0:4A:12:CA:1D:8D:30:5C:CF:D7:1C:5D:CC:A2:BE:51:9F:29
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D1F759C6DA5E54D04BB9B0000
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d565e519-ddbe-3ada-a6ba-f1d3cabea171.roa
Signing time:             Tue 10 Mar 2026 14:28:36 +0000
ROA not before:           Tue 10 Mar 2026 14:28:36 +0000
ROA not after:            Mon 08 Jun 2026 14:28:36 +0000
asID:                     22547
IP address blocks:        2001:503:d414::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:1f:75:9c:6d:a5:e5:4d:04:bb:9b:00:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar 10 14:28:36 2026 GMT
            Not After : Jun  8 14:28:36 2026 GMT
        Subject: CN=a2b4c3ec-129b-4590-928a-0e55a2c110c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:20:b3:cc:28:d8:c7:7f:a9:b7:5e:de:c5:20:
                    a8:7c:21:c8:35:84:be:a7:5d:8f:15:4b:6c:c5:52:
                    76:f0:b4:a5:82:10:0e:94:9c:45:2e:d8:a2:61:b8:
                    d1:28:3e:55:43:ae:20:03:6d:f4:fe:4a:5c:e6:d3:
                    b8:36:26:1d:d4:c0:68:1b:fd:f9:1d:c9:39:68:ee:
                    41:53:18:29:6c:49:aa:38:6f:a4:a6:f7:2c:ba:5d:
                    da:b8:17:e4:28:89:2a:a9:2d:4d:f4:d6:32:d7:1e:
                    f5:8c:20:18:7e:d3:f9:f9:b6:a7:94:80:95:ba:41:
                    dc:0a:31:3b:56:28:45:8a:48:41:cc:72:4a:3a:ab:
                    35:70:0f:a6:44:13:d0:f6:a3:e9:0d:c4:d7:26:47:
                    ad:a7:14:22:0d:62:5e:fc:87:a6:69:87:cc:37:e2:
                    18:48:92:6a:97:e2:60:f9:bb:6c:39:04:eb:cd:aa:
                    4f:ca:42:cd:36:85:c3:55:ee:46:02:a7:01:f9:7b:
                    4d:c1:b0:1f:c1:e4:03:b5:de:5e:e5:89:a3:8a:82:
                    df:ca:a4:9e:50:2e:a9:c0:53:4e:52:48:6a:77:0d:
                    b3:46:fd:9d:8b:8b:69:63:ae:71:54:d4:f2:b3:8a:
                    c6:a5:c0:48:8e:18:d9:67:17:fb:10:72:d6:8d:37:
                    2b:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:C7:F0:4A:12:CA:1D:8D:30:5C:CF:D7:1C:5D:CC:A2:BE:51:9F:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d565e519-ddbe-3ada-a6ba-f1d3cabea171.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:d414:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:ec:ed:82:22:26:24:5c:f6:20:3a:7a:38:30:80:4a:10:e8:
         af:84:25:06:e7:da:63:64:01:7d:9c:60:4b:40:a0:3b:bd:ff:
         53:88:99:d0:f9:96:20:34:dd:a9:33:3b:c6:19:13:e8:70:c4:
         98:35:08:1f:64:18:e3:bb:c3:9a:57:cb:d2:03:a1:ba:28:ad:
         d4:91:19:e9:30:82:af:a4:12:15:cf:ab:69:37:3c:2b:9d:a4:
         cb:4b:b9:48:d9:8a:f3:31:b5:e8:78:2d:8e:f0:1c:a0:0c:f1:
         1c:7f:6c:fc:7a:d8:49:e6:ae:24:c3:a5:8c:41:12:36:82:56:
         f0:09:90:87:b1:f1:35:bb:e8:08:26:c9:ba:58:29:74:9e:09:
         5b:18:b0:72:e8:63:b1:a8:f0:19:33:9a:be:5f:3b:ec:3f:19:
         ae:ab:ce:3f:cd:e8:10:2b:7e:d0:f3:a0:b0:8a:0c:a4:c0:8b:
         d4:ac:ae:a5:ca:e2:b0:32:1e:b5:dc:77:eb:7a:63:99:aa:ba:
         c8:d5:d3:71:50:cc:a3:fe:12:9f:c4:dd:59:59:0a:8b:8c:b8:
         66:f4:78:d6:ce:48:00:92:70:1a:c9:fa:94:37:f2:b7:42:ef:
         02:c6:23:55:0b:ef:a9:c9:f1:a4:fa:38:26:6b:e9:04:98:c5:
         80:90:6c:13
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE0fdZxtpeVNBLubAAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDMxMDE0MjgzNloXDTI2MDYwODE0MjgzNlowLzEtMCsGA1UEAxMk
YTJiNGMzZWMtMTI5Yi00NTkwLTkyOGEtMGU1NWEyYzExMGM2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApyCzzCjYx3+pt17exSCofCHINYS+p12PFUts
xVJ28LSlghAOlJxFLtiiYbjRKD5VQ64gA230/kpc5tO4NiYd1MBoG/35Hck5aO5B
UxgpbEmqOG+kpvcsul3auBfkKIkqqS1N9NYy1x71jCAYftP5+banlICVukHcCjE7
VihFikhBzHJKOqs1cA+mRBPQ9qPpDcTXJketpxQiDWJe/IemaYfMN+IYSJJql+Jg
+btsOQTrzapPykLNNoXDVe5GAqcB+XtNwbAfweQDtd5e5YmjioLfyqSeUC6pwFNO
Ukhqdw2zRv2di4tpY65xVNTys4rGpcBIjhjZZxf7EHLWjTcr2QIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFFnH8EoSyh2NMFzP1xxdzKK+UZ8pMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZDU2NWU1MTktZGRiZS0z
YWRhLWE2YmEtZjFkM2NhYmVhMTcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFA9QU
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQA27O2CIiYkXPYgOno4MIBKEOivhCUG59pjZAF9
nGBLQKA7vf9TiJnQ+ZYgNN2pMzvGGRPocMSYNQgfZBjju8OaV8vSA6G6KK3UkRnp
MIKvpBIVz6tpNzwrnaTLS7lI2YrzMbXoeC2O8BygDPEcf2z8ethJ5q4kw6WMQRI2
glbwCZCHsfE1u+gIJsm6WCl0nglbGLBy6GOxqPAZM5q+XzvsPxmuq84/zegQK37Q
86CwigykwIvUrK6lyuKwMh613HfremOZqrrI1dNxUMyj/hKfxN1ZWQqLjLhm9HjW
zkgAknAayfqUN/K3Qu8CxiNVC++pyfGk+jgma+kEmMWAkGwT
-----END CERTIFICATE-----
Generated at Thu Mar 26 15:03:47 2026 by rpki-client