Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/65b38a65-eb90-366e-956d-edb71209e5e8.roa
File:                     65b38a65-eb90-366e-956d-edb71209e5e8.roa (raw, json)
Hash identifier:          ICpsqyA+QrqMK0UwAUNL/x3k6DlA4K4lBaWE5lRLJaI=
Subject key identifier:   D6:73:E9:1A:07:B9:9B:B3:C4:EF:7A:F5:CD:DD:88:1A:6D:55:21:77
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584DDBBB144E99D856989D8FBA80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/65b38a65-eb90-366e-956d-edb71209e5e8.roa
Signing time:             Sun 17 May 2026 01:00:24 +0000
ROA not before:           Sun 17 May 2026 01:00:24 +0000
ROA not after:            Sat 15 Aug 2026 01:00:24 +0000
asID:                     397212
IP address blocks:        2001:500:30ff::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:db:bb:14:4e:99:d8:56:98:9d:8f:ba:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 17 01:00:24 2026 GMT
            Not After : Aug 15 01:00:24 2026 GMT
        Subject: CN=b2ad0c3e-fdf1-4c41-aaf1-da7b79e99df2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:ab:0c:eb:c1:a8:70:de:53:fa:72:66:d7:6e:
                    77:b9:db:c3:eb:37:7a:67:c4:cf:e6:0b:6f:df:02:
                    d3:4a:c2:98:29:3f:8c:87:31:73:9a:1c:6f:5f:37:
                    7a:25:42:01:b7:2e:df:bf:6c:ff:6e:33:cc:cd:25:
                    29:f3:67:22:84:a1:2d:5e:a8:95:b9:72:e8:71:3f:
                    3d:06:ad:5f:55:74:89:da:3d:ff:ce:25:5e:98:be:
                    82:e8:8d:13:d5:a0:6e:1f:5b:97:58:5d:9e:fb:b5:
                    93:7a:83:38:1f:9b:b2:32:f5:e1:90:d5:c5:00:9e:
                    8f:42:ce:55:32:65:c3:ef:24:e1:ed:13:55:7b:cf:
                    51:dd:38:4c:91:07:d5:a9:b2:47:bf:60:49:18:b2:
                    3e:01:0e:70:78:40:2f:58:93:4c:93:44:fe:e2:e1:
                    25:8d:61:36:cf:c0:44:cf:bb:4f:96:5b:d1:7f:a6:
                    26:30:5c:1b:e8:57:49:0e:d6:52:22:b1:c6:bc:38:
                    22:8a:68:1d:1a:4c:85:35:00:83:2d:e8:d0:bf:b4:
                    c8:81:79:c9:38:3e:7a:86:62:6b:6c:73:2f:5e:18:
                    d4:05:9e:06:c7:35:70:2f:d2:93:4a:4e:f6:b1:ab:
                    12:13:35:6f:7b:ea:ea:2e:ca:0b:6e:5b:f8:c4:ad:
                    ca:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:73:E9:1A:07:B9:9B:B3:C4:EF:7A:F5:CD:DD:88:1A:6D:55:21:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/65b38a65-eb90-366e-956d-edb71209e5e8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:30ff:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:66:08:ab:08:f7:41:bc:1e:99:72:de:26:c0:30:28:f4:ec:
         d2:ee:31:00:f4:5b:ad:12:7e:75:84:c2:a8:84:f6:b9:17:01:
         48:f5:dd:41:dc:ae:e3:f0:7f:e7:0b:ed:aa:6a:20:c4:11:33:
         bb:47:b0:1b:7e:aa:7a:4e:4f:3e:5f:59:ee:30:8c:59:b9:52:
         a6:de:b0:50:eb:17:29:ca:9b:2a:9c:c9:d7:4c:25:6b:e7:d4:
         c5:cf:c2:31:15:34:80:fc:e7:31:4d:80:ec:bd:6b:4b:a6:25:
         be:ae:63:4c:d1:b3:5c:14:1f:29:45:02:37:59:5b:69:d4:aa:
         00:4e:01:fa:63:3e:ee:17:a5:11:a8:30:26:0a:e4:b2:04:50:
         7b:a0:f8:ca:8e:27:b6:9c:07:3b:4a:5b:25:75:58:3d:be:05:
         92:e0:07:f1:87:b2:4e:21:28:79:a1:a7:e2:25:41:44:12:44:
         c2:49:31:c0:95:83:b8:08:2a:00:fe:41:63:72:ce:84:ca:f6:
         9c:bb:e5:5b:4a:0a:83:c5:a7:34:f5:cd:c9:31:5f:78:49:4c:
         ff:41:b6:f2:cf:76:9e:34:21:a7:75:fa:69:f9:49:74:6c:14:
         84:c8:8c:d4:8d:18:ee:90:f1:d6:20:1c:12:dd:57:57:13:83:
         63:a7:67:4c
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE3buxROmdhWmJ2PuoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDUxNzAxMDAyNFoXDTI2MDgxNTAxMDAyNFowLzEtMCsGA1UEAxMk
YjJhZDBjM2UtZmRmMS00YzQxLWFhZjEtZGE3Yjc5ZTk5ZGYyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtasM68GocN5T+nJm1253udvD6zd6Z8TP5gtv
3wLTSsKYKT+MhzFzmhxvXzd6JUIBty7fv2z/bjPMzSUp82cihKEtXqiVuXLocT89
Bq1fVXSJ2j3/ziVemL6C6I0T1aBuH1uXWF2e+7WTeoM4H5uyMvXhkNXFAJ6PQs5V
MmXD7yTh7RNVe89R3ThMkQfVqbJHv2BJGLI+AQ5weEAvWJNMk0T+4uEljWE2z8BE
z7tPllvRf6YmMFwb6FdJDtZSIrHGvDgiimgdGkyFNQCDLejQv7TIgXnJOD56hmJr
bHMvXhjUBZ4GxzVwL9KTSk72sasSEzVve+rqLsoLblv4xK3K/QIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFNZz6RoHuZuzxO969c3diBptVSF3MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNjViMzhhNjUtZWI5MC0z
NjZlLTk1NmQtZWRiNzEyMDllNWU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFADD/
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQADZgirCPdBvB6Zct4mwDAo9OzS7jEA9FutEn51
hMKohPa5FwFI9d1B3K7j8H/nC+2qaiDEETO7R7Abfqp6Tk8+X1nuMIxZuVKm3rBQ
6xcpypsqnMnXTCVr59TFz8IxFTSA/OcxTYDsvWtLpiW+rmNM0bNcFB8pRQI3WVtp
1KoATgH6Yz7uF6URqDAmCuSyBFB7oPjKjie2nAc7SlsldVg9vgWS4Afxh7JOISh5
oafiJUFEEkTCSTHAlYO4CCoA/kFjcs6Eyvacu+VbSgqDxac09c3JMV94SUz/Qbby
z3aeNCGndfpp+Ul0bBSEyIzUjRjukPHWIBwS3VdXE4Njp2dM
-----END CERTIFICATE-----
Generated at Sat Jun 13 19:26:18 2026 by rpki-client