Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d73a9a02-afae-3e4d-9500-60f60eb8bcef.roa
File:                     d73a9a02-afae-3e4d-9500-60f60eb8bcef.roa (raw, json)
Hash identifier:          nxBk648e5xi30ihpnhLzYDxikB7+4UoOQ/E+t/ez2Bk=
Subject key identifier:   3B:B3:D8:D5:81:88:65:B9:FF:D3:FC:31:0F:2C:D9:43:5E:71:BC:A0
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584DAAE02137969B260E58675B00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d73a9a02-afae-3e4d-9500-60f60eb8bcef.roa
Signing time:             Wed 29 Apr 2026 13:00:31 +0000
ROA not before:           Wed 29 Apr 2026 13:00:31 +0000
ROA not after:            Tue 28 Jul 2026 13:00:31 +0000
asID:                     397201
IP address blocks:        2001:502:1ca1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:aa:e0:21:37:96:9b:26:0e:58:67:5b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 29 13:00:31 2026 GMT
            Not After : Jul 28 13:00:31 2026 GMT
        Subject: CN=cc48c899-451c-4368-a0a2-c96d1f3fe423
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:88:d6:20:3a:1d:af:73:83:df:b3:51:7d:8c:
                    60:92:6b:92:20:31:30:8a:4d:89:49:ea:1c:50:6c:
                    4c:2e:6d:78:55:8e:a6:1e:25:40:29:e5:aa:89:81:
                    d0:a3:f6:83:47:0d:ef:58:92:67:8b:da:4d:5c:7e:
                    cb:0b:5a:f0:3d:82:fb:cf:e5:55:89:81:98:69:be:
                    76:40:78:e8:8b:04:3c:8e:ea:cc:e1:04:b1:99:e3:
                    2e:e6:25:d7:a0:2d:97:94:20:aa:6a:33:79:5b:57:
                    b7:1b:1b:fc:c4:46:d6:b3:70:8a:7e:32:53:4e:be:
                    57:a7:a1:8a:a2:57:39:77:7c:37:49:fc:a2:a6:9a:
                    4a:57:c3:78:a7:dc:96:60:a1:75:2c:2e:05:7d:56:
                    f1:06:96:e3:b9:1a:05:d6:38:0a:32:dc:ff:34:5f:
                    93:18:dc:a2:1e:97:e8:a4:65:28:c2:fa:8f:c3:ce:
                    a5:1a:62:06:c6:c1:85:89:b2:53:08:91:86:6c:4b:
                    cc:a4:e2:de:e6:62:8f:30:0a:3b:bd:37:a5:c4:d2:
                    98:dc:b5:de:35:4f:0b:25:69:ed:e3:70:97:0a:d3:
                    62:94:bb:fe:1f:c1:14:bc:6b:0d:65:db:4d:22:aa:
                    72:bf:fb:f8:02:b2:53:a7:eb:bc:f5:85:35:67:16:
                    16:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:B3:D8:D5:81:88:65:B9:FF:D3:FC:31:0F:2C:D9:43:5E:71:BC:A0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d73a9a02-afae-3e4d-9500-60f60eb8bcef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:1ca1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:ae:4c:04:0b:0b:7e:c6:cd:03:ec:70:ed:17:d6:80:ee:a0:
         33:b4:52:6b:2e:e5:c3:1f:2a:cd:5a:ee:de:62:e8:58:45:cd:
         43:87:ae:e2:69:e1:21:56:17:2a:d3:86:a9:19:d5:8a:5a:33:
         cf:6a:85:d1:fa:00:33:86:bc:d3:f3:d6:66:af:2b:71:da:a1:
         ed:ff:b4:ab:61:e2:f1:8e:32:02:35:e0:5e:5d:0b:fe:38:ac:
         ab:6b:9e:30:ba:26:a4:c4:85:da:c2:7b:7f:47:7c:5d:c4:97:
         25:85:60:84:d3:f7:9d:86:4e:da:32:3e:04:16:9c:c2:61:7d:
         f7:2e:d9:0c:6a:47:bb:98:33:d5:59:fb:b5:ad:f5:ba:f2:35:
         18:de:e8:09:9e:b9:7f:c5:e9:84:ad:a5:be:39:30:ed:bc:b0:
         df:8a:a7:5e:98:cf:00:0e:ba:38:b5:4a:4f:7d:46:49:81:3c:
         fa:b6:72:b3:b7:14:8e:f7:43:7a:58:e7:c8:c9:49:d1:c0:39:
         97:ed:db:07:88:d3:bd:9b:31:f3:ad:8c:fb:67:11:aa:ba:d5:
         d7:43:ae:91:7d:0c:88:c5:0b:a5:54:74:ba:71:79:37:72:b2:
         9b:e2:b6:c8:5a:06:17:87:94:14:0b:c6:51:8b:bd:36:7b:54:
         d0:7c:14:69
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE2q4CE3lpsmDlhnWwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDQyOTEzMDAzMVoXDTI2MDcyODEzMDAzMVowLzEtMCsGA1UEAxMk
Y2M0OGM4OTktNDUxYy00MzY4LWEwYTItYzk2ZDFmM2ZlNDIzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3YjWIDodr3OD37NRfYxgkmuSIDEwik2JSeoc
UGxMLm14VY6mHiVAKeWqiYHQo/aDRw3vWJJni9pNXH7LC1rwPYL7z+VViYGYab52
QHjoiwQ8jurM4QSxmeMu5iXXoC2XlCCqajN5W1e3Gxv8xEbWs3CKfjJTTr5Xp6GK
olc5d3w3SfyipppKV8N4p9yWYKF1LC4FfVbxBpbjuRoF1jgKMtz/NF+TGNyiHpfo
pGUowvqPw86lGmIGxsGFibJTCJGGbEvMpOLe5mKPMAo7vTelxNKY3LXeNU8LJWnt
43CXCtNilLv+H8EUvGsNZdtNIqpyv/v4ArJTp+u89YU1ZxYW9wIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFDuz2NWBiGW5/9P8MQ8s2UNecbygMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZDczYTlhMDItYWZhZS0z
ZTRkLTk1MDAtNjBmNjBlYjhiY2VmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAhyh
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAHmuTAQLC37GzQPscO0X1oDuoDO0Umsu5cMfKs1a7t5i6FhFzUOH
ruJp4SFWFyrThqkZ1YpaM89qhdH6ADOGvNPz1mavK3Haoe3/tKth4vGOMgI14F5d
C/44rKtrnjC6JqTEhdrCe39HfF3ElyWFYITT952GTtoyPgQWnMJhffcu2QxqR7uY
M9VZ+7Wt9bryNRje6AmeuX/F6YStpb45MO28sN+Kp16YzwAOuji1Sk99RkmBPPq2
crO3FI73Q3pY58jJSdHAOZft2weI072bMfOtjPtnEaq61ddDrpF9DIjFC6VUdLpx
eTdyspvitshaBheHlBQLxlGLvTZ7VNB8FGk=
-----END CERTIFICATE-----
Generated at Wed May 13 06:54:16 2026 by rpki-client