Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c5b1bcd8-0476-39a4-8a5d-0740f9ab3210.roa
File:                     c5b1bcd8-0476-39a4-8a5d-0740f9ab3210.roa (raw, json)
Hash identifier:          gzI0UrNsuvV+VIUjx1OkZKmclLZQGkjLBPbwFgt+G30=
Subject key identifier:   1E:8C:BA:8B:E0:77:B3:60:8F:0E:48:57:C0:84:02:1A:34:3A:3C:1D
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584DCF62718976723B4713D33080
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c5b1bcd8-0476-39a4-8a5d-0740f9ab3210.roa
Signing time:             Tue 12 May 2026 14:52:15 +0000
ROA not before:           Tue 12 May 2026 14:52:15 +0000
ROA not after:            Mon 10 Aug 2026 14:52:15 +0000
asID:                     396982
IP address blocks:        2600:1902:f0::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:cf:62:71:89:76:72:3b:47:13:d3:30:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: May 12 14:52:15 2026 GMT
            Not After : Aug 10 14:52:15 2026 GMT
        Subject: CN=09d2b66b-af26-4a48-a959-ea907be3c9f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:46:47:b4:dc:3a:b0:e4:b3:68:9e:b0:41:ec:
                    f6:47:8b:aa:e2:a9:cf:19:03:3c:14:c0:fb:73:dc:
                    cd:29:66:d1:f7:b2:de:d9:c6:4c:59:df:e1:c2:68:
                    5f:9a:1f:9f:33:ef:c1:5a:10:c1:12:d4:ac:7e:4b:
                    58:78:d7:9e:b9:04:2f:c5:54:07:da:1a:16:29:78:
                    e7:d1:8c:49:57:44:df:2d:0b:6e:17:62:85:ba:b9:
                    25:56:c2:ad:29:2f:23:44:d2:20:a6:a9:bb:62:69:
                    77:d2:16:a6:23:80:d0:8b:b0:a7:43:b8:5e:64:8e:
                    50:de:3a:75:0e:e3:f1:b4:32:ac:9f:2e:4e:6c:f7:
                    8f:84:6a:1f:69:31:ad:56:e3:dd:10:8d:2f:53:8a:
                    c4:eb:40:cc:e9:24:59:05:99:f3:6b:bb:90:30:04:
                    50:99:94:1a:fd:45:28:3d:6f:58:6e:17:e1:de:63:
                    9c:9d:33:79:b4:56:39:eb:e2:87:55:1f:34:a0:9b:
                    c0:e5:3e:14:e3:1d:a7:0f:1a:88:10:53:3b:bc:b6:
                    34:aa:e5:6a:ca:43:31:d1:b7:29:c2:54:6c:bb:c6:
                    1f:70:7e:6b:38:eb:0c:df:ac:c3:3b:a8:94:b3:83:
                    1a:22:20:96:b4:f0:e2:f4:45:fa:07:16:f6:ec:ad:
                    2a:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:8C:BA:8B:E0:77:B3:60:8F:0E:48:57:C0:84:02:1A:34:3A:3C:1D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c5b1bcd8-0476-39a4-8a5d-0740f9ab3210.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1902:f0::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a0:5e:7b:91:7b:24:01:6c:f6:2d:c2:4e:18:d5:b0:73:9c:72:
         e3:14:dc:49:f4:0a:9e:2e:60:9c:81:e8:dd:60:ba:a9:b3:ce:
         c4:97:9f:d5:c4:20:e5:40:2a:89:62:85:8e:d1:50:c1:c6:e8:
         b0:39:2f:45:00:33:83:b1:85:22:db:64:9d:c2:dd:03:a1:97:
         c5:c4:0f:1f:09:b1:22:f5:c4:85:78:dc:1f:28:41:5e:53:06:
         7e:7d:64:99:58:f0:66:50:87:79:90:99:13:a2:53:93:70:4e:
         c8:a9:48:4f:ee:22:b4:ed:13:f7:f2:58:fb:a7:a1:15:65:73:
         20:8d:93:0a:4e:b9:88:cb:ec:32:96:51:8c:dc:5e:0e:77:43:
         f6:3c:9a:4e:8b:d6:c9:1d:2f:cf:ba:58:a4:59:c6:98:02:e8:
         5b:c6:c7:35:f9:d2:8f:8e:f1:72:58:b7:b0:0e:66:48:b7:86:
         b5:7a:1b:f9:25:7c:08:34:d7:30:a1:c3:f4:f5:49:6b:76:e3:
         34:1d:94:f5:5a:57:58:b3:03:40:b0:44:68:be:68:02:d1:40:
         26:c9:44:bb:eb:79:d3:0d:5d:b8:08:cf:f5:43:5f:61:dc:4b:
         af:9e:2e:fb:64:89:f2:e8:65:65:8e:a0:ee:93:d0:6b:81:63:
         d1:ee:60:14
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE3PYnGJdnI7RxPTMIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTI2MDUxMjE0NTIxNVoXDTI2MDgxMDE0NTIxNVowLzEtMCsGA1UEAxMk
MDlkMmI2NmItYWYyNi00YTQ4LWE5NTktZWE5MDdiZTNjOWYzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiEZHtNw6sOSzaJ6wQez2R4uq4qnPGQM8FMD7
c9zNKWbR97Le2cZMWd/hwmhfmh+fM+/BWhDBEtSsfktYeNeeuQQvxVQH2hoWKXjn
0YxJV0TfLQtuF2KFurklVsKtKS8jRNIgpqm7Yml30hamI4DQi7CnQ7heZI5Q3jp1
DuPxtDKsny5ObPePhGofaTGtVuPdEI0vU4rE60DM6SRZBZnza7uQMARQmZQa/UUo
PW9Ybhfh3mOcnTN5tFY56+KHVR80oJvA5T4U4x2nDxqIEFM7vLY0quVqykMx0bcp
wlRsu8YfcH5rOOsM36zDO6iUs4MaIiCWtPDi9EX6Bxb27K0qOwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFB6Muovgd7Ngjw5IV8CEAho0OjwdMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYzViMWJjZDgtMDQ3Ni0z
OWE0LThhNWQtMDc0MGY5YWIzMjEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgAZAgDw
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAKBee5F7JAFs9i3CThjVsHOccuMU3En0Cp4uYJyB6N1guqmzzsSX
n9XEIOVAKolihY7RUMHG6LA5L0UAM4OxhSLbZJ3C3QOhl8XEDx8JsSL1xIV43B8o
QV5TBn59ZJlY8GZQh3mQmROiU5NwTsipSE/uIrTtE/fyWPunoRVlcyCNkwpOuYjL
7DKWUYzcXg53Q/Y8mk6L1skdL8+6WKRZxpgC6FvGxzX50o+O8XJYt7AOZki3hrV6
G/klfAg01zChw/T1SWt24zQdlPVaV1izA0CwRGi+aALRQCbJRLvredMNXbgIz/VD
X2HcS6+eLvtkifLoZWWOoO6T0GuBY9HuYBQ=
-----END CERTIFICATE-----
Generated at Wed May 13 16:14:49 2026 by rpki-client