Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/073dd39f-167d-3afe-82b5-24e21b5a0ee3.roa
File:                     073dd39f-167d-3afe-82b5-24e21b5a0ee3.roa (raw, json)
Hash identifier:          h4cIifYbJfPq4b6xIQYtJni57TZhddPivzXXuhI1IQ0=
Subject key identifier:   24:39:B1:80:8B:EC:22:87:C0:E6:B9:AC:9D:C0:5B:19:F8:12:F5:E7
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D6DA190FAE98D75F1796886C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/073dd39f-167d-3afe-82b5-24e21b5a0ee3.roa
Signing time:             Tue 07 Apr 2026 14:30:13 +0000
ROA not before:           Tue 07 Apr 2026 14:30:13 +0000
ROA not after:            Mon 06 Jul 2026 14:30:13 +0000
asID:                     396613
IP address blocks:        2001:500:13f::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:6d:a1:90:fa:e9:8d:75:f1:79:68:86:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr  7 14:30:13 2026 GMT
            Not After : Jul  6 14:30:13 2026 GMT
        Subject: CN=2a2de6fb-37cb-4c8d-9118-46c368f0d40f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:81:dc:c5:57:75:b2:27:9c:3e:c8:a5:52:31:
                    f1:fb:94:bf:3f:12:53:0a:58:b4:d2:06:da:2a:6d:
                    ac:a3:7c:dc:62:5c:97:10:1a:76:62:b3:ba:02:66:
                    74:3f:35:38:d7:9b:04:2e:a1:62:ef:b4:5f:64:b8:
                    06:37:7d:40:a6:78:a4:02:d5:da:2e:47:95:8a:97:
                    92:25:1b:3f:20:ca:23:bf:e0:31:cb:1e:de:fe:3b:
                    65:bd:e7:46:23:3e:d2:a5:26:9c:5b:86:d9:ad:42:
                    5f:b2:6f:7a:34:d3:fa:5c:5d:ef:a2:2d:ac:24:5a:
                    b1:6e:d0:ef:ea:27:b4:11:c1:36:21:40:40:78:0c:
                    27:51:86:01:97:da:f2:7f:df:ec:51:f2:94:0d:88:
                    ea:65:d6:44:ea:04:0f:8b:49:0f:cb:80:69:fb:96:
                    a2:17:3d:13:7d:02:1c:f4:09:09:8a:f3:2d:b7:0f:
                    8e:ae:05:70:2a:8d:20:e1:a2:f3:0d:16:8b:84:ce:
                    08:be:4a:c8:4a:9b:30:1c:01:26:c1:7f:01:88:aa:
                    7e:74:8a:c3:f8:cb:96:7d:fb:20:18:97:7b:2b:1d:
                    dc:5c:23:2b:b5:c2:ca:e6:68:dd:e8:2d:9e:de:56:
                    6f:08:55:5d:74:79:db:e2:01:3e:f8:f9:f4:22:cb:
                    d4:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:39:B1:80:8B:EC:22:87:C0:E6:B9:AC:9D:C0:5B:19:F8:12:F5:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/073dd39f-167d-3afe-82b5-24e21b5a0ee3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:13f:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:ef:16:07:d5:ff:c5:00:c8:6b:9c:bd:b8:33:be:4c:f2:fc:
         ac:33:cb:e3:c4:42:c1:3f:02:6b:16:d3:06:98:37:bf:d1:fe:
         8a:9f:8b:d6:82:98:1b:20:f0:41:95:78:8f:b8:22:62:19:a6:
         c2:99:dd:e2:18:8a:a8:43:76:bc:0d:6e:19:7d:ea:ca:a1:26:
         1c:45:a4:6b:44:d4:b1:e7:62:5d:cf:e4:7d:b0:8d:8e:15:ce:
         5c:89:32:0b:54:56:7d:aa:6d:98:ab:7d:3f:ca:c1:8c:66:01:
         24:de:73:11:72:14:ae:71:95:95:c0:77:ce:c1:2c:6f:2f:4a:
         db:2a:b2:aa:35:e7:ad:2f:0d:d4:44:3a:33:d2:d4:0f:45:28:
         59:bc:88:e1:d2:7c:8b:bb:7d:bd:70:f4:21:0d:cb:7a:35:a9:
         d7:35:a9:c9:21:c6:3b:46:e5:d0:47:38:ea:48:ce:87:62:8f:
         53:42:91:38:94:fa:9c:0a:1f:0a:18:97:49:17:51:3a:b3:e9:
         fa:82:92:97:5b:fc:5b:30:6f:7f:ae:81:1e:d7:53:9d:3e:3a:
         6c:68:a6:d4:8d:b9:02:51:1a:68:9e:bc:f0:c5:5c:db:c0:dd:
         40:f7:d6:4a:4c:06:d8:ea:92:7c:09:cd:1d:34:f8:e6:14:46:
         9e:b1:f6:c1
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE1toZD66Y118XlohsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDQwNzE0MzAxM1oXDTI2MDcwNjE0MzAxM1owLzEtMCsGA1UEAxMk
MmEyZGU2ZmItMzdjYi00YzhkLTkxMTgtNDZjMzY4ZjBkNDBmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwIHcxVd1siecPsilUjHx+5S/PxJTCli00gba
Km2so3zcYlyXEBp2YrO6AmZ0PzU415sELqFi77RfZLgGN31ApnikAtXaLkeVipeS
JRs/IMojv+Axyx7e/jtlvedGIz7SpSacW4bZrUJfsm96NNP6XF3voi2sJFqxbtDv
6ie0EcE2IUBAeAwnUYYBl9ryf9/sUfKUDYjqZdZE6gQPi0kPy4Bp+5aiFz0TfQIc
9AkJivMttw+OrgVwKo0g4aLzDRaLhM4IvkrISpswHAEmwX8BiKp+dIrD+MuWffsg
GJd7Kx3cXCMrtcLK5mjd6C2e3lZvCFVddHnb4gE++Pn0IsvUFQIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFCQ5sYCL7CKHwOa5rJ3AWxn4EvXnMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMDczZGQzOWYtMTY3ZC0z
YWZlLTgyYjUtMjRlMjFiNWEwZWUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAE/
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQAE7xYH1f/FAMhrnL24M75M8vysM8vjxELBPwJr
FtMGmDe/0f6Kn4vWgpgbIPBBlXiPuCJiGabCmd3iGIqoQ3a8DW4ZferKoSYcRaRr
RNSx52Jdz+R9sI2OFc5ciTILVFZ9qm2Yq30/ysGMZgEk3nMRchSucZWVwHfOwSxv
L0rbKrKqNeetLw3URDoz0tQPRShZvIjh0nyLu329cPQhDct6NanXNanJIcY7RuXQ
RzjqSM6HYo9TQpE4lPqcCh8KGJdJF1E6s+n6gpKXW/xbMG9/roEe11OdPjpsaKbU
jbkCURponrzwxVzbwN1A99ZKTAbY6pJ8Cc0dNPjmFEaesfbB
-----END CERTIFICATE-----
Generated at Fri Apr 17 11:26:08 2026 by rpki-client