Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1e13af31-7f5e-3a6a-afa7-6d366ea95c40.roa
File:                     1e13af31-7f5e-3a6a-afa7-6d366ea95c40.roa (raw, json)
Hash identifier:          dCPHdkAPExK9/qI+SXkOA3O/6dqcpZ5Ke7ZRt//mFbU=
Subject key identifier:   11:CD:19:98:0C:2A:81:B3:F2:37:0A:3E:01:7C:09:5C:C8:CB:D0:25
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F0AA2310DA336F26EAC801600
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1e13af31-7f5e-3a6a-afa7-6d366ea95c40.roa
Signing time:             Wed 02 Sep 2026 13:00:12 +0000
ROA not before:           Wed 02 Sep 2026 13:00:12 +0000
ROA not after:            Tue 01 Dec 2026 14:00:12 +0000
asID:                     397199
IP address blocks:        2001:502:8cc::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:0a:a2:31:0d:a3:36:f2:6e:ac:80:16:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep  2 13:00:12 2026 GMT
            Not After : Dec  1 14:00:12 2026 GMT
        Subject: CN=f1cb109d-d62c-4894-bf69-e00396d5eb2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:d6:9e:1e:d7:ac:fa:95:0d:e3:02:80:fb:2d:
                    e9:80:0c:bf:95:3a:a6:33:da:a8:f3:f9:4b:09:13:
                    76:eb:95:59:6f:6f:e0:98:2c:ef:d5:c1:35:b1:52:
                    e0:60:25:ee:04:4f:46:c0:f5:d1:a2:0d:93:6f:c3:
                    61:46:f5:92:03:18:41:3e:f9:85:54:4d:38:4b:27:
                    ad:60:ee:b4:90:f8:dc:8d:00:1b:44:3a:cc:ea:07:
                    a0:26:c4:80:1e:25:d2:33:38:3d:31:ad:9f:85:d1:
                    a5:d6:8f:53:59:1e:90:f6:f1:b5:d9:83:f7:c3:ec:
                    14:8e:fc:63:f9:d2:d8:0f:e6:aa:32:e6:f1:29:0b:
                    25:36:b1:bf:85:95:b6:e3:94:7c:d7:3a:b7:fa:f4:
                    63:da:fb:40:58:5e:20:f5:0d:50:55:de:55:02:8f:
                    81:ae:33:59:f7:35:9e:2d:8a:be:48:cf:cb:36:a0:
                    7d:5b:af:b1:84:09:1b:8d:2d:a0:e4:ab:90:bf:3e:
                    b3:09:80:54:93:4f:f7:97:5f:a0:5b:63:6f:06:6a:
                    14:80:75:19:1f:5f:ae:81:82:8e:97:09:fc:e7:96:
                    3a:14:ec:2a:5e:7f:64:7f:a9:3f:a4:38:f7:cf:71:
                    60:9d:c5:d9:6b:f8:dd:40:e6:31:86:5f:4f:6d:54:
                    ec:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:CD:19:98:0C:2A:81:B3:F2:37:0A:3E:01:7C:09:5C:C8:CB:D0:25
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1e13af31-7f5e-3a6a-afa7-6d366ea95c40.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:8cc:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:97:72:af:f4:18:d0:fa:1f:cc:31:07:2b:5c:52:2b:43:b1:
         bd:2b:b6:62:ab:64:83:90:12:d5:1d:77:da:b7:07:b5:cd:d9:
         3d:55:11:55:6a:21:94:cd:8f:7e:e8:7d:83:80:a2:64:88:eb:
         6f:8e:a4:8b:b7:7f:1d:13:72:a9:c8:52:30:92:3f:ae:e6:0b:
         28:88:c1:6a:d2:fe:0e:b8:d4:b7:f5:48:d5:5e:f8:87:c6:74:
         4a:5f:d8:b2:c1:c8:2b:ac:f7:77:e5:17:62:96:a0:ed:f4:de:
         82:3c:a7:50:d3:9e:b4:1e:b6:d1:98:11:0d:8a:2f:f6:5a:26:
         92:5d:f0:02:ef:a5:92:72:f3:08:b6:47:1a:b5:8f:a5:e1:0a:
         a5:ef:94:df:20:74:2b:9f:6d:bd:4f:93:02:e3:ac:51:07:69:
         c5:6e:27:7a:ff:d7:1d:81:53:83:41:76:1f:8a:68:30:74:a3:
         97:c8:6a:b9:2a:c6:26:80:76:fb:ad:77:68:68:eb:b4:0c:a3:
         57:f7:99:95:20:3f:b3:d4:87:20:dc:35:f1:66:a5:65:c1:f3:
         b8:a9:fe:09:e7:cd:69:44:4c:09:74:ea:99:cf:de:74:b1:4e:
         01:a0:88:f8:49:f2:47:a5:38:b7:a8:39:21:a5:7d:9a:79:2a:
         ea:96:19:aa
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE8KojENozbybqyAFgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDkwMjEzMDAxMloXDTI2MTIwMTE0MDAxMlowLzEtMCsGA1UEAxMk
ZjFjYjEwOWQtZDYyYy00ODk0LWJmNjktZTAwMzk2ZDVlYjJkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsdaeHtes+pUN4wKA+y3pgAy/lTqmM9qo8/lL
CRN265VZb2/gmCzv1cE1sVLgYCXuBE9GwPXRog2Tb8NhRvWSAxhBPvmFVE04Syet
YO60kPjcjQAbRDrM6gegJsSAHiXSMzg9Ma2fhdGl1o9TWR6Q9vG12YP3w+wUjvxj
+dLYD+aqMubxKQslNrG/hZW245R81zq3+vRj2vtAWF4g9Q1QVd5VAo+BrjNZ9zWe
LYq+SM/LNqB9W6+xhAkbjS2g5KuQvz6zCYBUk0/3l1+gW2NvBmoUgHUZH1+ugYKO
lwn855Y6FOwqXn9kf6k/pDj3z3FgncXZa/jdQOYxhl9PbVTsBQIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFBHNGZgMKoGz8jcKPgF8CVzIy9AlMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMWUxM2FmMzEtN2Y1ZS0z
YTZhLWFmYTctNmQzNjZlYTk1YzQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAgjM
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQB/l3Kv9BjQ+h/MMQcrXFIrQ7G9K7Ziq2SDkBLV
HXfatwe1zdk9VRFVaiGUzY9+6H2DgKJkiOtvjqSLt38dE3KpyFIwkj+u5gsoiMFq
0v4OuNS39UjVXviHxnRKX9iywcgrrPd35RdilqDt9N6CPKdQ0560HrbRmBENii/2
WiaSXfAC76WScvMItkcatY+l4Qql75TfIHQrn229T5MC46xRB2nFbid6/9cdgVOD
QXYfimgwdKOXyGq5KsYmgHb7rXdoaOu0DKNX95mVID+z1Icg3DXxZqVlwfO4qf4J
581pREwJdOqZz950sU4BoIj4SfJHpTi3qDkhpX2aeSrqlhmq
-----END CERTIFICATE-----
Generated at Tue Sep 22 20:44:17 2026 by rpki-client