Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/48fe6789-8097-38fc-b1bc-0e84457a3a03.roa
File:                     48fe6789-8097-38fc-b1bc-0e84457a3a03.roa (raw, json)
Hash identifier:          xcqcp8r3eg8AHiqy/IdqrNK+UmtBXqxflcl5p2r3Pyk=
Subject key identifier:   77:71:F5:34:91:80:82:55:20:ED:65:A6:6D:3E:3A:EF:25:30:54:11
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E1E449443E25E38B3B56D5000
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/48fe6789-8097-38fc-b1bc-0e84457a3a03.roa
Signing time:             Tue 09 Jun 2026 21:00:12 +0000
ROA not before:           Tue 09 Jun 2026 21:00:12 +0000
ROA not after:            Mon 07 Sep 2026 21:00:12 +0000
asID:                     19836
IP address blocks:        2001:500:126::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:1e:44:94:43:e2:5e:38:b3:b5:6d:50:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun  9 21:00:12 2026 GMT
            Not After : Sep  7 21:00:12 2026 GMT
        Subject: CN=b3009ba9-2e54-4851-bcc1-1c8a5011da7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:8a:6f:07:0c:b9:73:bb:d7:f5:f7:f9:93:45:
                    29:a6:68:ed:9b:60:45:02:85:1f:01:eb:9d:e9:11:
                    25:cc:da:58:de:76:50:92:af:c0:d5:d6:0f:67:78:
                    72:f1:9c:2b:7f:c5:0d:8f:29:bb:fd:8f:57:b6:d4:
                    bc:e7:29:f9:c8:1b:a9:ea:c9:d6:7a:10:22:89:4e:
                    86:f8:89:72:aa:dd:68:f2:79:d3:cb:64:a8:1d:90:
                    dd:37:54:97:e1:47:f9:1f:6c:e4:b4:35:20:90:5d:
                    1e:02:8f:91:3f:38:9c:71:01:be:2d:0c:4a:bf:52:
                    6e:f5:75:95:ba:a9:03:96:ab:8b:3c:62:18:25:dd:
                    42:22:c3:44:9f:21:b0:cd:ef:1f:1a:b1:21:3f:39:
                    55:53:dd:50:85:c2:52:a2:c0:b8:d2:4c:81:63:49:
                    34:23:70:aa:cd:41:7e:fc:39:80:04:2e:0a:8a:db:
                    a7:61:0d:ab:cc:e1:d6:75:ce:e9:9e:5f:ef:e2:30:
                    6a:38:21:a4:14:d3:e3:67:91:39:bb:34:6b:16:d9:
                    b4:40:42:18:92:2b:37:46:bf:da:22:31:f2:c1:5c:
                    dd:b1:39:f9:f1:de:81:9d:4e:aa:27:2a:48:8d:ae:
                    81:a8:c7:d8:64:61:04:24:05:dc:97:5e:d5:a8:97:
                    be:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:71:F5:34:91:80:82:55:20:ED:65:A6:6D:3E:3A:EF:25:30:54:11
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/48fe6789-8097-38fc-b1bc-0e84457a3a03.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:126::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:7e:f1:ff:4e:6b:41:c8:2a:51:2e:11:5b:33:38:15:89:e2:
         12:9c:f3:63:23:a4:39:02:8c:4c:cb:b9:46:72:04:1c:6a:b8:
         f0:32:24:e0:59:89:06:64:ea:89:1b:8f:00:46:fb:ac:0c:38:
         ad:52:1b:0f:eb:e8:37:23:5d:4b:fd:4a:0c:8e:fa:94:a7:cd:
         51:25:0f:72:30:1d:c8:18:43:d5:88:ff:f9:43:b7:87:49:b3:
         9a:96:b2:60:51:cc:6a:d7:11:cf:23:e1:b2:f8:3a:ab:d0:15:
         cf:56:cb:d8:fa:39:3d:61:a3:65:85:b2:11:4a:ca:eb:95:db:
         34:5e:71:88:11:78:97:81:3e:8b:2f:77:cb:d2:8d:ed:a6:98:
         2e:e3:f0:6d:0f:0e:e6:ac:1f:6c:c4:dd:e8:af:f6:27:bd:16:
         55:63:ae:3c:a1:ef:8f:24:12:08:14:8e:64:dd:c3:4f:90:22:
         1c:40:aa:8d:b0:21:9a:fc:32:0f:79:10:1d:26:42:53:59:1e:
         35:17:1f:cc:3d:16:f7:21:e0:dd:d1:f8:90:bb:b2:11:50:50:
         ee:08:b3:ff:32:8c:7c:86:0c:65:f1:56:18:22:2c:e3:31:86:
         51:9d:83:ff:b4:83:6c:3d:b0:c6:c7:99:f9:c5:bd:1e:5b:8c:
         0e:db:19:8f
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE4eRJRD4l44s7VtUAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDYwOTIxMDAxMloXDTI2MDkwNzIxMDAxMlowLzEtMCsGA1UEAxMk
YjMwMDliYTktMmU1NC00ODUxLWJjYzEtMWM4YTUwMTFkYTdmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9opvBwy5c7vX9ff5k0Uppmjtm2BFAoUfAeud
6RElzNpY3nZQkq/A1dYPZ3hy8Zwrf8UNjym7/Y9XttS85yn5yBup6snWehAiiU6G
+Ilyqt1o8nnTy2SoHZDdN1SX4Uf5H2zktDUgkF0eAo+RPziccQG+LQxKv1Ju9XWV
uqkDlquLPGIYJd1CIsNEnyGwze8fGrEhPzlVU91QhcJSosC40kyBY0k0I3CqzUF+
/DmABC4KitunYQ2rzOHWdc7pnl/v4jBqOCGkFNPjZ5E5uzRrFtm0QEIYkis3Rr/a
IjHywVzdsTn58d6BnU6qJypIja6BqMfYZGEEJAXcl17VqJe+IwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFHdx9TSRgIJVIO1lpm0+Ou8lMFQRMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNDhmZTY3ODktODA5Ny0z
OGZjLWIxYmMtMGU4NDQ1N2EzYTAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEm
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAAp+8f9Oa0HIKlEuEVszOBWJ4hKc82MjpDkCjEzLuUZyBBxquPAy
JOBZiQZk6okbjwBG+6wMOK1SGw/r6DcjXUv9SgyO+pSnzVElD3IwHcgYQ9WI//lD
t4dJs5qWsmBRzGrXEc8j4bL4OqvQFc9Wy9j6OT1ho2WFshFKyuuV2zRecYgReJeB
Posvd8vSje2mmC7j8G0PDuasH2zE3eiv9ie9FlVjrjyh748kEggUjmTdw0+QIhxA
qo2wIZr8Mg95EB0mQlNZHjUXH8w9Fvch4N3R+JC7shFQUO4Is/8yjHyGDGXxVhgi
LOMxhlGdg/+0g2w9sMbHmfnFvR5bjA7bGY8=
-----END CERTIFICATE-----
Generated at Sat Jun 13 19:38:23 2026 by rpki-client