Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3837a08c-9f0b-34e0-98c1-3c0cbbd090b8.roa
File:                     3837a08c-9f0b-34e0-98c1-3c0cbbd090b8.roa (raw, json)
Hash identifier:          VFZI15tbRYmHOO52dwKbxwGQSbmZU7LDT2Hft2AZEqY=
Subject key identifier:   02:AF:7A:46:B0:A3:24:2C:EA:2F:2A:9B:0D:D0:D6:42:D5:04:21:0F
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D83CAF6E34396D3117F173480
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3837a08c-9f0b-34e0-98c1-3c0cbbd090b8.roa
Signing time:             Wed 15 Apr 2026 13:00:30 +0000
ROA not before:           Wed 15 Apr 2026 13:00:30 +0000
ROA not after:            Tue 14 Jul 2026 13:00:30 +0000
asID:                     36619
IP address blocks:        2001:500:127::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:83:ca:f6:e3:43:96:d3:11:7f:17:34:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 15 13:00:30 2026 GMT
            Not After : Jul 14 13:00:30 2026 GMT
        Subject: CN=14fbde83-a205-412a-b312-cede5bf5e7a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:d0:65:52:15:85:7f:21:91:ce:76:5e:ec:1f:
                    c4:31:ae:45:0f:f7:a0:ce:51:5f:51:9e:45:00:c5:
                    f2:b9:17:05:de:9c:85:00:af:7d:82:bb:f3:5b:c5:
                    0c:3b:0a:00:9f:5b:93:76:7c:73:70:f5:7e:3a:eb:
                    6b:2c:4e:5f:bd:84:c5:4f:e2:94:1d:78:43:ba:cc:
                    de:56:d3:49:f5:9a:94:46:3f:92:c3:b4:b4:85:5f:
                    0f:a5:fc:b0:7c:89:5a:f9:ad:e2:94:45:37:72:02:
                    e3:d4:98:9e:3e:a6:44:69:ec:4f:7a:7f:b0:3e:be:
                    73:5c:25:32:32:1c:76:02:15:81:34:43:c3:3c:11:
                    4d:ee:23:8f:b3:11:88:26:b9:be:cd:a4:2f:0f:4c:
                    0a:85:87:95:d6:a1:46:0d:9b:4a:69:ee:c4:d4:d2:
                    bc:0b:9c:e7:f7:aa:f3:55:c1:a8:d5:00:2e:b5:a3:
                    9f:64:c8:6b:04:e6:32:2d:cb:92:c3:86:69:33:e0:
                    04:14:4b:98:90:c9:f2:a1:7a:24:b7:07:a8:f4:56:
                    44:93:d6:2f:ba:f3:7f:33:d0:77:0c:14:04:49:60:
                    f7:45:15:1c:1b:03:67:fc:91:97:62:e7:45:d7:66:
                    c7:e5:94:c9:4b:9d:f5:da:62:c1:dc:3b:d8:a9:47:
                    f4:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:AF:7A:46:B0:A3:24:2C:EA:2F:2A:9B:0D:D0:D6:42:D5:04:21:0F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3837a08c-9f0b-34e0-98c1-3c0cbbd090b8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:127:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:1b:26:df:09:64:a6:63:4d:e0:e2:3e:51:54:d0:fe:24:37:
         06:4d:ad:4c:14:e5:2d:ce:c3:4e:43:f1:2f:25:7f:3a:90:a3:
         df:b5:ce:b0:52:6b:7c:5e:70:fb:57:20:56:87:67:b3:e3:c0:
         9e:98:f1:32:02:4c:a3:10:5e:af:8b:c2:0e:77:c3:c9:de:a3:
         94:c9:7d:c1:fb:6b:ea:41:71:66:43:55:b2:5b:e6:ce:4f:bd:
         48:79:de:2f:1b:74:fe:49:13:41:04:e6:2f:de:35:93:61:00:
         22:20:e0:d1:df:bf:c3:76:20:e4:0c:37:9e:1c:12:6c:aa:b9:
         c6:2f:d7:5f:66:4b:18:34:f7:ee:59:04:e1:de:b5:a5:0b:13:
         09:66:67:06:cd:60:73:ce:21:87:9f:de:7e:23:09:b7:c6:9d:
         80:30:7d:59:32:fa:3a:55:10:73:69:ee:a4:94:81:6f:2d:5c:
         26:69:51:b0:16:37:9a:58:d7:d9:b9:8e:e8:5e:94:f5:e9:30:
         04:ea:f9:45:6b:2e:ac:54:e1:f8:77:94:25:28:00:f5:93:fc:
         a3:ee:02:a2:3e:56:3b:43:34:86:d2:5e:14:9a:57:62:9d:09:
         32:57:7e:65:fa:a4:29:e2:9c:63:11:5e:18:65:c3:76:98:c9:
         7e:e8:30:4f
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE2DyvbjQ5bTEX8XNIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDQxNTEzMDAzMFoXDTI2MDcxNDEzMDAzMFowLzEtMCsGA1UEAxMk
MTRmYmRlODMtYTIwNS00MTJhLWIzMTItY2VkZTViZjVlN2EzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAudBlUhWFfyGRznZe7B/EMa5FD/egzlFfUZ5F
AMXyuRcF3pyFAK99grvzW8UMOwoAn1uTdnxzcPV+OutrLE5fvYTFT+KUHXhDusze
VtNJ9ZqURj+Sw7S0hV8PpfywfIla+a3ilEU3cgLj1JiePqZEaexPen+wPr5zXCUy
Mhx2AhWBNEPDPBFN7iOPsxGIJrm+zaQvD0wKhYeV1qFGDZtKae7E1NK8C5zn96rz
VcGo1QAutaOfZMhrBOYyLcuSw4ZpM+AEFEuYkMnyoXoktweo9FZEk9YvuvN/M9B3
DBQESWD3RRUcGwNn/JGXYudF12bH5ZTJS5312mLB3DvYqUf0BwIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFAKvekawoyQs6i8qmw3Q1kLVBCEPMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMzgzN2EwOGMtOWYwYi0z
NGUwLTk4YzEtM2MwY2JiZDA5MGI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEn
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQA2GybfCWSmY03g4j5RVND+JDcGTa1MFOUtzsNO
Q/EvJX86kKPftc6wUmt8XnD7VyBWh2ez48CemPEyAkyjEF6vi8IOd8PJ3qOUyX3B
+2vqQXFmQ1WyW+bOT71Ied4vG3T+SRNBBOYv3jWTYQAiIODR37/DdiDkDDeeHBJs
qrnGL9dfZksYNPfuWQTh3rWlCxMJZmcGzWBzziGHn95+Iwm3xp2AMH1ZMvo6VRBz
ae6klIFvLVwmaVGwFjeaWNfZuY7oXpT16TAE6vlFay6sVOH4d5QlKAD1k/yj7gKi
PlY7QzSG0l4UmldinQkyV35l+qQp4pxjEV4YZcN2mMl+6DBP
-----END CERTIFICATE-----
Generated at Fri Apr 17 12:21:09 2026 by rpki-client