Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e22d6240-82c4-300b-93bc-75c59aa2698c.roa
File:                     e22d6240-82c4-300b-93bc-75c59aa2698c.roa (raw, json)
Hash identifier:          X2epbrtaeKjVbdaQC6qgm1mEMCrj9cE4r0v2ioZioQw=
Subject key identifier:   95:5D:CD:91:C2:03:D0:05:AF:70:5E:42:81:9A:AD:DB:60:B0:0C:28
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E5A4A1BD206AD9C6D1AAC8000
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e22d6240-82c4-300b-93bc-75c59aa2698c.roa
Signing time:             Wed 01 Jul 2026 09:00:12 +0000
ROA not before:           Wed 01 Jul 2026 09:00:12 +0000
ROA not after:            Tue 29 Sep 2026 09:00:12 +0000
asID:                     40717
IP address blocks:        2001:500:123::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:5a:4a:1b:d2:06:ad:9c:6d:1a:ac:80:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul  1 09:00:12 2026 GMT
            Not After : Sep 29 09:00:12 2026 GMT
        Subject: CN=d4113995-b42d-422b-9e65-d3410112ed99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:27:c6:94:2e:df:74:0a:18:38:6b:79:17:be:
                    86:65:c3:a1:58:9e:92:0d:83:d0:0a:b6:a8:17:a0:
                    8f:f2:83:b8:d2:91:b9:f6:1c:d3:d4:4b:4d:58:6e:
                    08:2e:4a:e2:38:7a:8b:3b:f1:8c:f8:43:8f:69:b8:
                    aa:8d:8c:c9:d2:7a:a6:c3:4a:68:5b:16:d5:19:82:
                    a5:ab:92:97:d7:e6:ee:02:52:46:93:74:36:35:33:
                    35:f8:10:5e:f5:c4:a1:e1:1b:6d:4c:c4:95:dc:9c:
                    24:7a:98:81:6c:43:72:e3:7b:e8:18:98:76:a0:5c:
                    d8:08:00:06:2b:72:a4:29:cc:62:a8:2c:7d:a5:dc:
                    7e:47:24:af:dc:00:78:33:a7:1e:7a:cc:54:ea:dd:
                    6b:c5:d7:1d:06:a0:c4:f3:6c:b4:e9:8f:2e:7f:70:
                    d0:49:64:35:22:30:51:07:89:a4:42:8c:0c:70:67:
                    7c:ab:73:06:8a:7d:fd:51:97:ef:56:6a:65:73:31:
                    d3:df:82:f5:0c:85:26:55:bb:72:2d:be:5a:6d:34:
                    c5:3b:bc:58:70:13:29:fe:0b:94:2f:5f:a5:10:47:
                    25:4d:20:2a:5c:53:66:f7:7e:98:9c:01:e0:a6:19:
                    56:d2:c4:9b:5f:f1:c6:d7:a7:46:a9:9c:66:76:4a:
                    51:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:5D:CD:91:C2:03:D0:05:AF:70:5E:42:81:9A:AD:DB:60:B0:0C:28
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e22d6240-82c4-300b-93bc-75c59aa2698c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:123:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ac:db:0c:a9:db:e6:33:dc:f5:9f:cb:2a:2a:61:36:55:ed:f7:
         33:c0:29:f7:e7:48:d2:42:e6:5e:17:60:d8:0a:7b:a8:60:8f:
         69:68:ce:98:1d:6d:67:84:39:38:04:c3:8f:31:02:08:59:f7:
         b9:af:f7:09:c5:75:4e:7d:6c:c3:27:f9:c9:e8:82:d0:92:ac:
         d9:e8:71:d7:ee:25:6d:97:a0:0b:ae:1b:ab:46:e1:a7:63:3a:
         23:1a:a2:55:50:b3:2c:a7:ec:13:dc:79:e5:4c:2e:57:41:25:
         80:bf:cf:35:60:c6:56:06:f7:0e:46:99:be:81:c0:a7:de:9e:
         aa:a0:e5:2c:2b:5c:04:df:ba:0b:cf:ec:f5:a8:56:b4:86:d4:
         dc:43:65:88:52:0e:30:01:20:76:54:1b:8a:26:11:8c:82:a9:
         cc:02:33:e1:f4:16:c1:5d:94:e1:eb:70:90:ce:f2:63:6d:d5:
         a1:83:ff:39:61:b3:41:c8:4f:50:c5:ab:cf:e7:b7:1c:f5:a2:
         c0:29:10:78:8c:2c:e1:ec:c7:cb:44:68:8a:97:69:d7:fa:69:
         b7:05:f1:4b:2c:fe:81:25:7d:9d:48:8f:3b:09:7a:2f:63:8c:
         0a:4d:cb:73:07:46:b2:cb:ed:e5:04:ab:72:d8:8a:1d:df:a4:
         91:99:5f:fb
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE5aShvSBq2cbRqsgAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDcwMTA5MDAxMloXDTI2MDkyOTA5MDAxMlowLzEtMCsGA1UEAxMk
ZDQxMTM5OTUtYjQyZC00MjJiLTllNjUtZDM0MTAxMTJlZDk5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgCfGlC7fdAoYOGt5F76GZcOhWJ6SDYPQCrao
F6CP8oO40pG59hzT1EtNWG4ILkriOHqLO/GM+EOPabiqjYzJ0nqmw0poWxbVGYKl
q5KX1+buAlJGk3Q2NTM1+BBe9cSh4RttTMSV3JwkepiBbENy43voGJh2oFzYCAAG
K3KkKcxiqCx9pdx+RySv3AB4M6ceesxU6t1rxdcdBqDE82y06Y8uf3DQSWQ1IjBR
B4mkQowMcGd8q3MGin39UZfvVmplczHT34L1DIUmVbtyLb5abTTFO7xYcBMp/guU
L1+lEEclTSAqXFNm936YnAHgphlW0sSbX/HG16dGqZxmdkpRwwIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFJVdzZHCA9AFr3BeQoGardtgsAwoMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZTIyZDYyNDAtODJjNC0z
MDBiLTkzYmMtNzVjNTlhYTI2OThjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEj
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQCs2wyp2+Yz3PWfyyoqYTZV7fczwCn350jSQuZe
F2DYCnuoYI9paM6YHW1nhDk4BMOPMQIIWfe5r/cJxXVOfWzDJ/nJ6ILQkqzZ6HHX
7iVtl6ALrhurRuGnYzojGqJVULMsp+wT3HnlTC5XQSWAv881YMZWBvcORpm+gcCn
3p6qoOUsK1wE37oLz+z1qFa0htTcQ2WIUg4wASB2VBuKJhGMgqnMAjPh9BbBXZTh
63CQzvJjbdWhg/85YbNByE9QxavP57cc9aLAKRB4jCzh7MfLRGiKl2nX+mm3BfFL
LP6BJX2dSI87CXovY4wKTctzB0ayy+3lBKty2Iod36SRmV/7
-----END CERTIFICATE-----
Generated at Fri Jul 24 13:01:25 2026 by rpki-client