Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/152e21f1-be01-3eed-b70b-7e89b149fa70.roa
File:                     152e21f1-be01-3eed-b70b-7e89b149fa70.roa (raw, json)
Hash identifier:          fHCTA0yOFPu13s9JGhtsY3EDpn1Po+v/EHRZ6AH7Au4=
Subject key identifier:   F2:FF:B0:C9:50:F1:B6:7B:CD:FB:68:63:77:CE:59:5E:00:DD:26:4D
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D87FA8B804E77EEDA3821D800
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/152e21f1-be01-3eed-b70b-7e89b149fa70.roa
Signing time:             Fri 17 Apr 2026 01:00:27 +0000
ROA not before:           Fri 17 Apr 2026 01:00:27 +0000
ROA not after:            Thu 16 Jul 2026 01:00:27 +0000
asID:                     396597
IP address blocks:        2001:502:8cc::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:87:fa:8b:80:4e:77:ee:da:38:21:d8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 17 01:00:27 2026 GMT
            Not After : Jul 16 01:00:27 2026 GMT
        Subject: CN=6df8d5a3-9981-4e5f-9b2a-7bc2014c4195
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:64:3b:1c:5b:93:0e:f3:d0:51:5a:fd:6f:39:
                    af:10:34:7a:3e:98:e0:4e:a1:8a:b2:41:25:9b:28:
                    63:bc:8a:bd:b8:1b:25:a4:b0:32:d2:98:f6:86:62:
                    75:08:10:5c:4a:e0:dc:a8:e9:54:f5:2d:7b:47:71:
                    da:f7:da:55:70:50:a2:0c:de:18:7a:5b:39:9c:22:
                    86:c1:c0:34:27:13:26:e2:a9:0f:df:24:40:c8:26:
                    a4:be:6f:6c:f4:80:ed:8a:71:d8:93:1d:d3:6c:ad:
                    64:db:3b:30:4d:69:6b:35:69:52:6e:75:0e:0f:9b:
                    2a:9a:75:93:a2:47:54:75:b5:5e:3f:7c:f5:a1:8c:
                    7d:10:ec:a3:b8:69:be:35:cd:4d:76:5f:94:06:e9:
                    36:88:51:9a:57:2d:e5:01:a7:af:ab:47:65:8b:84:
                    67:0d:00:c4:5b:26:b6:0c:21:7d:4a:7e:3d:2b:0e:
                    7b:6e:5c:76:83:1f:4a:45:0d:ec:0a:c3:a1:f1:c9:
                    ed:bb:a5:b0:4d:6d:60:06:6b:ec:00:54:c9:ad:93:
                    62:11:0e:e4:f1:8c:25:36:ad:07:44:d2:af:ac:a9:
                    01:f0:c5:4a:1e:bc:f1:f5:2e:c9:69:47:c8:1a:49:
                    ab:87:a1:ab:50:8a:6f:30:e5:4a:cb:db:07:6e:3a:
                    fa:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:FF:B0:C9:50:F1:B6:7B:CD:FB:68:63:77:CE:59:5E:00:DD:26:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/152e21f1-be01-3eed-b70b-7e89b149fa70.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:8cc:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:df:54:fe:9c:b9:dd:9f:90:f8:84:28:c0:51:b5:98:b6:03:
         f1:56:be:a6:47:3c:b9:f0:66:9c:73:cb:5e:d2:69:a9:07:e1:
         9b:73:4d:b6:a4:41:0e:83:94:81:6c:ea:6a:98:46:80:aa:6a:
         07:49:60:1b:78:a6:b4:1d:06:96:4b:44:75:b3:76:ae:cb:d3:
         7e:0c:07:ee:c1:72:49:f1:01:93:40:59:f3:95:62:b8:ed:8e:
         37:60:1a:9f:2e:17:c3:48:2b:8a:69:52:b7:a2:98:45:02:4a:
         c5:f9:c2:4d:18:41:a1:36:03:fb:fc:d7:4a:e0:75:6f:f5:47:
         4d:93:0f:7f:b2:5e:fc:4c:25:9e:27:57:ce:bd:47:eb:a9:24:
         86:ea:0e:d7:36:5a:28:1b:eb:ee:40:f9:f7:79:a5:99:59:be:
         45:31:9f:72:9e:f5:f5:eb:00:05:6f:cd:f5:75:fc:d8:80:91:
         6a:51:e3:2f:b3:7e:d9:a4:79:d6:25:0b:98:38:f4:d1:91:87:
         bd:04:b7:07:de:40:d9:6d:c6:92:f2:45:46:b7:33:9e:2f:84:
         a1:b3:27:7f:ef:c0:2f:30:a9:dd:4f:4d:17:f1:3c:f8:dc:65:
         39:d9:00:60:68:a5:e7:a4:b6:ce:d7:bb:30:ae:4d:74:4e:ee:
         93:c4:76:68
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE2H+ouATnfu2jgh2AAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDQxNzAxMDAyN1oXDTI2MDcxNjAxMDAyN1owLzEtMCsGA1UEAxMk
NmRmOGQ1YTMtOTk4MS00ZTVmLTliMmEtN2JjMjAxNGM0MTk1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp2Q7HFuTDvPQUVr9bzmvEDR6PpjgTqGKskEl
myhjvIq9uBslpLAy0pj2hmJ1CBBcSuDcqOlU9S17R3Ha99pVcFCiDN4Yels5nCKG
wcA0JxMm4qkP3yRAyCakvm9s9IDtinHYkx3TbK1k2zswTWlrNWlSbnUOD5sqmnWT
okdUdbVeP3z1oYx9EOyjuGm+Nc1Ndl+UBuk2iFGaVy3lAaevq0dli4RnDQDEWya2
DCF9Sn49Kw57blx2gx9KRQ3sCsOh8cntu6WwTW1gBmvsAFTJrZNiEQ7k8YwlNq0H
RNKvrKkB8MVKHrzx9S7JaUfIGkmrh6GrUIpvMOVKy9sHbjr62wIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFPL/sMlQ8bZ7zftoY3fOWV4A3SZNMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMTUyZTIxZjEtYmUwMS0z
ZWVkLWI3MGItN2U4OWIxNDlmYTcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAgjM
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQBh31T+nLndn5D4hCjAUbWYtgPxVr6mRzy58Gac
c8te0mmpB+Gbc022pEEOg5SBbOpqmEaAqmoHSWAbeKa0HQaWS0R1s3auy9N+DAfu
wXJJ8QGTQFnzlWK47Y43YBqfLhfDSCuKaVK3ophFAkrF+cJNGEGhNgP7/NdK4HVv
9UdNkw9/sl78TCWeJ1fOvUfrqSSG6g7XNlooG+vuQPn3eaWZWb5FMZ9ynvX16wAF
b831dfzYgJFqUeMvs37ZpHnWJQuYOPTRkYe9BLcH3kDZbcaS8kVGtzOeL4Shsyd/
78AvMKndT00X8Tz43GU52QBgaKXnpLbO17swrk10Tu6TxHZo
-----END CERTIFICATE-----
Generated at Fri Apr 17 11:22:43 2026 by rpki-client