Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/30e82159-e8e2-32ab-b5c0-f05e38091265.roa
File:                     30e82159-e8e2-32ab-b5c0-f05e38091265.roa (raw, json)
Hash identifier:          aEnOp1hDsjOkJE1osYLhBBhTmDKe2vhec8GeJe6wcZc=
Subject key identifier:   AB:5D:D6:8D:B1:EC:73:2C:74:00:64:5C:FF:BA:20:8A:DE:C5:4C:EF
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D037D4D47FAC5C341626F4200
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/30e82159-e8e2-32ab-b5c0-f05e38091265.roa
Signing time:             Sat 28 Feb 2026 14:00:40 +0000
ROA not before:           Sat 28 Feb 2026 14:00:40 +0000
ROA not after:            Fri 29 May 2026 13:00:40 +0000
asID:                     397212
IP address blocks:        2001:501:b1f9::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:03:7d:4d:47:fa:c5:c3:41:62:6f:42:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Feb 28 14:00:40 2026 GMT
            Not After : May 29 13:00:40 2026 GMT
        Subject: CN=4d66ad30-48dc-4432-822f-a24cf4112cb8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:53:c6:3b:13:78:6e:37:0e:40:45:a1:8e:26:
                    29:dd:05:c1:05:6c:01:e6:d8:f7:ca:5c:bb:00:88:
                    68:43:5e:83:e4:52:71:bc:62:80:82:17:4c:0d:24:
                    e8:85:c6:c8:24:e6:ea:9f:ba:55:a0:b2:43:0e:95:
                    d1:87:09:38:a2:4c:00:a2:0f:bf:a1:8c:63:d8:3c:
                    06:41:e5:62:ce:f7:e9:db:04:7c:a4:95:76:ad:e5:
                    df:1f:b7:85:40:03:04:23:1a:2b:05:9a:13:df:91:
                    1f:76:f8:f5:0d:6f:0e:95:dc:be:74:de:48:d9:4c:
                    10:3b:86:39:c5:68:58:1c:bc:02:27:5a:49:cd:d2:
                    22:cd:65:ee:67:2d:89:12:c6:5d:2d:b0:f9:19:49:
                    3e:7e:d3:c9:e7:8f:69:75:26:11:e9:00:21:92:67:
                    de:59:d0:e7:68:36:8b:6d:9e:11:4a:bb:09:a7:64:
                    0c:f7:11:d4:c0:04:69:f6:ad:b8:ac:6a:4d:5b:8f:
                    5d:68:83:4d:3e:68:f2:0f:60:8c:62:7f:5c:61:c0:
                    dd:44:1d:97:36:3f:42:f7:d6:47:88:d5:cf:aa:b5:
                    6a:6e:59:f0:db:ab:db:19:38:3c:52:6a:a2:ed:00:
                    16:63:3e:57:2a:09:b6:bd:00:10:27:ba:48:e6:8f:
                    bf:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:5D:D6:8D:B1:EC:73:2C:74:00:64:5C:FF:BA:20:8A:DE:C5:4C:EF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/30e82159-e8e2-32ab-b5c0-f05e38091265.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:501:b1f9:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a2:93:dc:af:8e:0d:bd:3a:fd:0d:aa:ee:b0:f5:e4:e5:1d:b5:
         80:26:57:30:b3:6b:1d:ba:d7:44:d9:ee:2a:0a:2a:2c:3f:2c:
         ef:f8:e7:c6:84:0c:21:da:fe:52:a6:a9:89:02:38:37:d1:aa:
         41:f4:5a:f8:9d:6e:63:f7:51:c0:7a:1f:56:6f:bd:3c:3a:02:
         74:92:9b:54:38:5d:ab:71:84:9a:63:45:65:9e:ee:ae:a3:fe:
         fc:17:06:33:b5:c6:fd:9a:8d:b6:75:a1:98:bb:81:55:10:e2:
         41:52:8a:37:40:32:10:86:05:66:85:47:cc:a2:ec:60:b2:72:
         74:91:b2:68:d6:c3:cf:7e:21:63:42:5a:f2:0d:c0:ac:fe:f4:
         61:3c:97:3c:0c:19:28:ba:6f:e6:ea:4b:de:22:10:cb:82:3b:
         29:b7:a6:2b:e1:f9:44:a8:77:53:e8:cd:8d:8c:78:a7:c2:9f:
         79:6d:94:ed:63:26:da:30:e1:e8:99:f4:81:7a:7e:90:0e:48:
         18:ae:d5:58:51:ca:b1:f7:10:09:61:88:e9:3b:77:de:f2:be:
         d5:cd:3a:33:48:9b:07:56:2f:9f:4d:cd:f0:df:92:54:df:36:
         2b:f4:25:87:58:47:9e:a6:13:d4:04:3e:3b:a2:72:82:5d:43:
         aa:5a:5b:68
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE0DfU1H+sXDQWJvQgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDIyODE0MDA0MFoXDTI2MDUyOTEzMDA0MFowLzEtMCsGA1UEAxMk
NGQ2NmFkMzAtNDhkYy00NDMyLTgyMmYtYTI0Y2Y0MTEyY2I4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAplPGOxN4bjcOQEWhjiYp3QXBBWwB5tj3yly7
AIhoQ16D5FJxvGKAghdMDSTohcbIJObqn7pVoLJDDpXRhwk4okwAog+/oYxj2DwG
QeVizvfp2wR8pJV2reXfH7eFQAMEIxorBZoT35Efdvj1DW8Oldy+dN5I2UwQO4Y5
xWhYHLwCJ1pJzdIizWXuZy2JEsZdLbD5GUk+ftPJ549pdSYR6QAhkmfeWdDnaDaL
bZ4RSrsJp2QM9xHUwARp9q24rGpNW49daINNPmjyD2CMYn9cYcDdRB2XNj9C99ZH
iNXPqrVqblnw26vbGTg8Umqi7QAWYz5XKgm2vQAQJ7pI5o+/cQIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFKtd1o2x7HMsdABkXP+6IIrexUzvMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMzBlODIxNTktZThlMi0z
MmFiLWI1YzAtZjA1ZTM4MDkxMjY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAbH5
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQCik9yvjg29Ov0Nqu6w9eTlHbWAJlcws2sdutdE
2e4qCiosPyzv+OfGhAwh2v5SpqmJAjg30apB9Fr4nW5j91HAeh9Wb708OgJ0kptU
OF2rcYSaY0Vlnu6uo/78FwYztcb9mo22daGYu4FVEOJBUoo3QDIQhgVmhUfMouxg
snJ0kbJo1sPPfiFjQlryDcCs/vRhPJc8DBkoum/m6kveIhDLgjspt6Yr4flEqHdT
6M2NjHinwp95bZTtYybaMOHomfSBen6QDkgYrtVYUcqx9xAJYYjpO3fe8r7VzToz
SJsHVi+fTc3w35JU3zYr9CWHWEeephPUBD47onKCXUOqWlto
-----END CERTIFICATE-----
Generated at Mon Mar 2 03:14:22 2026 by rpki-client