Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fbae4126-4d48-32ac-beb7-429581920c17.roa
File:                     fbae4126-4d48-32ac-beb7-429581920c17.roa (raw, json)
Hash identifier:          H3T0QYUinyYnvLKP5mWRiDKPYxKxivltY/j0Li+3GwU=
Subject key identifier:   80:33:EF:89:06:6E:B3:66:83:3E:F3:17:0E:76:EB:E7:5A:14:1E:94
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D8EF56CD515A68867703916C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fbae4126-4d48-32ac-beb7-429581920c17.roa
Signing time:             Sun 19 Apr 2026 13:00:31 +0000
ROA not before:           Sun 19 Apr 2026 13:00:31 +0000
ROA not after:            Sat 18 Jul 2026 13:00:31 +0000
asID:                     396563
IP address blocks:        2001:502:8cc::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:8e:f5:6c:d5:15:a6:88:67:70:39:16:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 19 13:00:31 2026 GMT
            Not After : Jul 18 13:00:31 2026 GMT
        Subject: CN=13a6771d-bd7c-4b98-ac64-67a3d40c1c6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:c2:2f:e8:94:b8:82:75:08:53:87:73:17:8c:
                    df:0b:02:d4:5a:7d:54:42:8e:89:ea:18:85:73:cb:
                    5b:28:bd:73:b0:98:44:03:18:22:69:bd:c8:5d:47:
                    a8:9a:db:4a:93:11:b4:5d:c1:a6:10:cf:2d:d2:d7:
                    40:b3:b6:42:df:e9:0a:9c:9b:7f:12:df:5c:8b:76:
                    6a:4e:f9:00:ba:cc:9c:c8:06:42:22:47:2b:81:b8:
                    2f:45:31:27:a2:19:bf:cf:2d:21:3f:44:a5:7a:b1:
                    ad:e6:16:46:2e:01:bb:dd:c9:23:dc:64:d3:a4:6b:
                    30:1c:08:b4:46:33:23:28:13:2c:56:b2:a9:b3:2c:
                    2f:1d:35:59:53:74:eb:e1:93:8a:b4:0c:62:2a:e2:
                    5a:50:10:4c:e9:aa:fd:c6:85:8f:ae:75:46:30:3d:
                    00:51:90:ae:e4:0c:bc:69:77:cb:29:49:ae:2d:03:
                    6f:7e:84:c9:3f:08:9a:31:e1:8f:76:a2:18:49:18:
                    8e:1d:c9:c6:4d:e3:dc:f0:c2:c5:a5:39:a2:b6:10:
                    4f:bf:00:68:f9:d4:6f:c1:60:6c:cd:2f:92:78:86:
                    ea:45:79:72:3f:8a:d7:3b:3f:03:e8:a6:c5:f5:e1:
                    7c:7c:d0:18:c2:f5:62:5a:06:bf:73:33:4f:ba:71:
                    f1:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:33:EF:89:06:6E:B3:66:83:3E:F3:17:0E:76:EB:E7:5A:14:1E:94
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fbae4126-4d48-32ac-beb7-429581920c17.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:8cc::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:12:9b:c4:f3:76:b0:07:91:d9:5a:26:38:d6:e3:f6:b4:3a:
         bf:b7:cb:09:c7:64:ef:59:35:58:ab:f1:3a:d8:68:8f:a9:03:
         91:64:bc:99:ba:7d:ad:5f:14:9e:e0:a4:78:2f:37:07:8f:19:
         07:05:97:2a:10:61:3c:7b:80:d6:10:0f:dd:d1:de:0a:fe:de:
         ae:79:41:07:17:21:cb:94:0b:e2:ff:3e:20:20:0a:42:72:c0:
         d6:b4:2c:24:c2:90:93:42:ab:d9:d0:06:ec:93:bc:54:1f:d9:
         b5:23:10:05:2d:8d:b0:ed:0f:b0:fe:2f:95:14:0d:95:4e:75:
         0b:83:43:cb:4c:a6:33:18:27:84:8d:e5:48:6d:19:99:c4:f5:
         9f:7b:dc:24:68:dd:b7:2f:78:16:e6:14:c9:14:2a:d0:a4:31:
         73:bf:c8:e2:ab:26:7b:5a:1c:4a:bc:47:d9:a7:06:b5:e6:85:
         ac:28:84:5e:2b:d3:3b:40:4f:72:80:08:18:6f:f2:7e:ce:e8:
         13:d0:40:1c:7b:8d:86:ff:59:53:35:8f:88:9c:5a:95:0a:c7:
         c8:a2:4d:d0:94:f7:f1:4a:5d:d0:2b:a1:cf:ad:a8:ff:ac:9c:
         bc:9e:5a:a3:be:9c:3a:69:02:89:9d:36:3c:32:71:e2:7d:36:
         b2:01:99:8c
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE2O9WzVFaaIZ3A5FsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDQxOTEzMDAzMVoXDTI2MDcxODEzMDAzMVowLzEtMCsGA1UEAxMk
MTNhNjc3MWQtYmQ3Yy00Yjk4LWFjNjQtNjdhM2Q0MGMxYzZiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg8Iv6JS4gnUIU4dzF4zfCwLUWn1UQo6J6hiF
c8tbKL1zsJhEAxgiab3IXUeomttKkxG0XcGmEM8t0tdAs7ZC3+kKnJt/Et9ci3Zq
TvkAusycyAZCIkcrgbgvRTEnohm/zy0hP0SlerGt5hZGLgG73ckj3GTTpGswHAi0
RjMjKBMsVrKpsywvHTVZU3Tr4ZOKtAxiKuJaUBBM6ar9xoWPrnVGMD0AUZCu5Ay8
aXfLKUmuLQNvfoTJPwiaMeGPdqIYSRiOHcnGTePc8MLFpTmithBPvwBo+dRvwWBs
zS+SeIbqRXlyP4rXOz8D6KbF9eF8fNAYwvViWga/czNPunHxUwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFIAz74kGbrNmgz7zFw526+daFB6UMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZmJhZTQxMjYtNGQ0OC0z
MmFjLWJlYjctNDI5NTgxOTIwYzE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAgjM
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAIcSm8TzdrAHkdlaJjjW4/a0Or+3ywnHZO9ZNVir8TrYaI+pA5Fk
vJm6fa1fFJ7gpHgvNwePGQcFlyoQYTx7gNYQD93R3gr+3q55QQcXIcuUC+L/PiAg
CkJywNa0LCTCkJNCq9nQBuyTvFQf2bUjEAUtjbDtD7D+L5UUDZVOdQuDQ8tMpjMY
J4SN5UhtGZnE9Z973CRo3bcveBbmFMkUKtCkMXO/yOKrJntaHEq8R9mnBrXmhawo
hF4r0ztAT3KACBhv8n7O6BPQQBx7jYb/WVM1j4icWpUKx8iiTdCU9/FKXdAroc+t
qP+snLyeWqO+nDppAomdNjwyceJ9NrIBmYw=
-----END CERTIFICATE-----
Generated at Wed May 13 12:16:44 2026 by rpki-client