Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5856dfc8-bc2b-397f-85f3-7d2ac08a0af4.roa
File:                     5856dfc8-bc2b-397f-85f3-7d2ac08a0af4.roa (raw, json)
Hash identifier:          hZ+hRi3NRrGqRKXyOJfmrolHXPFmW98POoQXykwfxEs=
Subject key identifier:   AC:0C:C0:D1:F3:1F:FF:2A:0B:E7:20:4C:BA:89:FB:C3:D5:27:FA:EF
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F03A782173F4ABBDF7CDE5670
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5856dfc8-bc2b-397f-85f3-7d2ac08a0af4.roa
Signing time:             Mon 31 Aug 2026 01:00:12 +0000
ROA not before:           Mon 31 Aug 2026 01:00:12 +0000
ROA not after:            Sun 29 Nov 2026 02:00:12 +0000
asID:                     396552
IP address blocks:        2001:500:124::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:03:a7:82:17:3f:4a:bb:df:7c:de:56:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 31 01:00:12 2026 GMT
            Not After : Nov 29 02:00:12 2026 GMT
        Subject: CN=f12a27d6-b37c-46db-9577-e4dc84e9402f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:92:e7:1d:d7:c9:5f:7d:93:83:81:bd:69:f8:
                    f6:98:3c:07:af:3a:06:ed:64:5d:0f:90:39:e1:3f:
                    75:56:14:5a:e9:c0:2b:30:44:ef:56:34:90:db:80:
                    40:c5:9d:47:2f:d3:10:af:db:e8:70:87:94:fc:af:
                    79:35:6d:9a:5c:7b:55:0d:57:be:78:5d:da:f8:2c:
                    4e:73:62:37:24:70:f4:54:e1:88:db:91:fa:41:c1:
                    e4:c9:82:19:81:c2:7d:12:e9:60:f5:ae:2e:da:24:
                    13:16:de:4a:fd:5d:4d:9e:96:0a:74:3d:6a:bc:94:
                    8e:f4:37:44:df:24:04:9f:34:ab:d0:f8:7a:2e:4c:
                    19:8d:dd:9e:2f:8d:62:99:6c:0e:f3:04:ad:c6:62:
                    b3:af:e7:f0:61:fc:c2:fc:f3:8a:4d:6b:30:cb:ea:
                    32:28:cc:8c:3f:95:25:e9:5a:2e:d1:f9:3f:56:9d:
                    b5:f7:ce:69:b8:ff:9f:dc:10:83:20:e0:91:16:00:
                    bf:31:45:b8:d8:46:92:d0:7b:f2:b4:3a:07:76:bf:
                    01:d6:b4:66:d0:21:ef:d7:61:21:38:d3:da:c5:9f:
                    47:c5:bb:f6:46:2c:68:03:52:18:4b:00:e8:7c:05:
                    4d:28:70:16:d6:1a:db:e7:11:60:27:e4:95:38:70:
                    af:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:0C:C0:D1:F3:1F:FF:2A:0B:E7:20:4C:BA:89:FB:C3:D5:27:FA:EF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5856dfc8-bc2b-397f-85f3-7d2ac08a0af4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:124::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:e1:16:42:3d:85:f4:f6:ef:c1:84:d5:b9:45:6a:76:1b:73:
         25:da:ef:5c:76:e1:ed:ab:53:76:07:14:95:21:d5:49:c2:6f:
         c7:bb:3e:e2:94:2d:c6:66:8b:fb:36:0a:4b:c6:ee:da:ce:a9:
         37:28:ef:77:ab:a4:5d:c6:4d:4e:9d:60:cd:af:49:7e:91:62:
         e4:25:d1:a7:be:33:d0:4e:95:e2:d9:43:cb:31:58:e1:5c:e6:
         8d:6b:25:32:6a:06:36:a6:31:b0:87:b9:1f:51:43:e7:8f:9e:
         37:00:e5:47:cb:44:a8:82:e9:18:c8:0b:e3:56:a9:ec:69:1f:
         fc:27:6a:1e:3d:05:f7:24:40:a2:16:71:03:ea:78:ef:f1:e8:
         e0:b5:af:c3:ea:44:24:60:f0:c7:3a:45:dd:b6:84:b5:c9:9f:
         51:7f:a5:57:28:2d:60:05:94:a8:41:6e:0e:bd:fd:c7:ea:f6:
         b8:91:da:3d:f9:e2:23:06:b7:01:76:33:de:23:8f:ba:9f:47:
         5f:98:ac:31:bb:d1:8e:d5:28:c1:53:22:0c:a1:76:19:60:87:
         18:3f:b6:5e:a4:34:ce:1c:9b:45:3e:c2:3a:3f:7b:39:d5:52:
         4e:f8:c1:ba:b6:13:71:e0:3c:2c:84:1c:ff:b3:c9:dc:92:1c:
         11:d3:fd:80
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE8Dp4IXP0q733zeVnAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDgzMTAxMDAxMloXDTI2MTEyOTAyMDAxMlowLzEtMCsGA1UEAxMk
ZjEyYTI3ZDYtYjM3Yy00NmRiLTk1NzctZTRkYzg0ZTk0MDJmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu5LnHdfJX32Tg4G9afj2mDwHrzoG7WRdD5A5
4T91VhRa6cArMETvVjSQ24BAxZ1HL9MQr9vocIeU/K95NW2aXHtVDVe+eF3a+CxO
c2I3JHD0VOGI25H6QcHkyYIZgcJ9Eulg9a4u2iQTFt5K/V1NnpYKdD1qvJSO9DdE
3yQEnzSr0Ph6LkwZjd2eL41imWwO8wStxmKzr+fwYfzC/POKTWswy+oyKMyMP5Ul
6Vou0fk/Vp21985puP+f3BCDIOCRFgC/MUW42EaS0HvytDoHdr8B1rRm0CHv12Eh
ONPaxZ9Hxbv2RixoA1IYSwDofAVNKHAW1hrb5xFgJ+SVOHCvWQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFKwMwNHzH/8qC+cgTLqJ+8PVJ/rvMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNTg1NmRmYzgtYmMyYi0z
OTdmLTg1ZjMtN2QyYWMwOGEwYWY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEk
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAE/hFkI9hfT278GE1blFanYbcyXa71x24e2rU3YHFJUh1UnCb8e7
PuKULcZmi/s2CkvG7trOqTco73erpF3GTU6dYM2vSX6RYuQl0ae+M9BOleLZQ8sx
WOFc5o1rJTJqBjamMbCHuR9RQ+ePnjcA5UfLRKiC6RjIC+NWqexpH/wnah49Bfck
QKIWcQPqeO/x6OC1r8PqRCRg8Mc6Rd22hLXJn1F/pVcoLWAFlKhBbg69/cfq9riR
2j354iMGtwF2M94jj7qfR1+YrDG70Y7VKMFTIgyhdhlghxg/tl6kNM4cm0U+wjo/
eznVUk74wbq2E3HgPCyEHP+zydySHBHT/YA=
-----END CERTIFICATE-----
Generated at Thu Sep 24 10:18:29 2026 by rpki-client