Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/83c3c1b8-1b4b-30ce-9da4-201d0f897f6f.roa
File:                     83c3c1b8-1b4b-30ce-9da4-201d0f897f6f.roa (raw, json)
Hash identifier:          dJj6va+nFZAUi6W0AF3h3VHrQEyW0YSPOD6cT+6AB+8=
Subject key identifier:   CB:BF:3D:62:C4:1E:5E:09:24:EA:70:1B:E8:E7:D1:FB:93:BC:85:75
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584DD4E1D0250A5C110AFF977380
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/83c3c1b8-1b4b-30ce-9da4-201d0f897f6f.roa
Signing time:             Thu 14 May 2026 14:07:56 +0000
ROA not before:           Thu 14 May 2026 14:07:56 +0000
ROA not after:            Wed 12 Aug 2026 14:07:56 +0000
asID:                     396542
IP address blocks:        2001:500:856e::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:d4:e1:d0:25:0a:5c:11:0a:ff:97:73:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 14 14:07:56 2026 GMT
            Not After : Aug 12 14:07:56 2026 GMT
        Subject: CN=7195702c-6697-406b-bcbd-6cdbf77123c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:bc:47:7d:12:dd:45:89:d1:bc:42:83:a9:ac:
                    74:1f:fd:bf:69:3e:53:4f:ee:87:c5:48:64:01:85:
                    65:22:ce:62:bc:39:25:70:64:02:f9:f7:75:c5:8f:
                    d4:d0:97:cd:de:f3:45:1c:9e:e0:88:f3:50:c1:a9:
                    6f:30:f9:26:dd:6f:53:eb:85:77:b5:4c:12:87:f7:
                    c8:2a:8a:21:7b:0f:fb:3b:f6:29:ca:81:9f:42:15:
                    03:9e:17:90:8b:fd:d0:3e:69:cb:79:f9:bd:02:4f:
                    b7:0e:37:af:d3:2b:a8:98:36:55:a4:dc:4c:a9:77:
                    5e:99:f6:de:db:e3:4f:4d:97:48:0f:c2:54:36:49:
                    08:30:c6:53:a1:70:0f:e2:bb:6d:aa:5b:23:4d:dd:
                    81:ae:62:f3:3c:e8:04:5d:da:85:a8:08:64:5b:41:
                    36:09:61:d1:f5:eb:42:f6:60:f5:a7:93:00:a1:28:
                    19:41:5a:bf:ff:f1:28:8a:83:f2:9c:78:78:6e:88:
                    d3:07:ba:fd:fb:de:53:ab:7f:25:77:25:15:1b:bb:
                    32:8b:b6:ad:40:22:ce:3b:f8:6c:f6:30:93:53:d9:
                    d7:b7:4d:3b:9b:5e:81:6f:b7:86:8e:7b:23:66:75:
                    af:d7:39:3f:7f:61:b1:44:df:7f:c4:87:68:24:2f:
                    fe:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:BF:3D:62:C4:1E:5E:09:24:EA:70:1B:E8:E7:D1:FB:93:BC:85:75
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/83c3c1b8-1b4b-30ce-9da4-201d0f897f6f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:856e::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:ec:f8:27:c7:57:ad:79:ee:bb:90:ef:c3:f7:42:c1:5c:ba:
         e0:76:8e:38:3f:49:d6:14:a4:6d:f6:a6:ae:29:09:d7:ed:12:
         bb:c6:cd:ce:18:42:b5:3b:bc:d4:0b:00:72:12:a8:0d:e6:97:
         7f:a6:e8:4d:37:e3:36:8b:73:58:18:80:7e:cc:3c:1c:5a:9b:
         1d:ec:f4:8d:83:83:b5:c8:02:c4:a9:73:3c:d7:0c:58:82:1c:
         de:18:8d:db:da:11:d0:98:bc:8d:44:17:cb:64:53:b7:34:4e:
         e3:84:8e:66:01:5d:cd:8a:b9:36:3e:ec:53:81:1d:d8:cd:8e:
         79:20:9e:de:e5:62:64:94:d9:fc:a5:cb:f8:01:10:ca:04:35:
         cd:c6:c7:e4:5d:8a:1b:2c:3d:13:88:d1:e6:03:55:10:90:04:
         a1:40:1e:fa:6e:a9:85:e1:a2:38:d2:a6:33:e3:ff:22:7e:ff:
         87:23:20:85:26:e3:9a:1b:74:26:9c:85:c9:98:24:f2:3f:a2:
         f1:1b:6f:53:e5:04:b7:22:29:8e:17:58:0b:b0:2b:08:6a:ff:
         58:96:7d:bb:4a:bc:8a:f3:cd:93:77:f4:18:be:e2:3c:92:d8:
         e6:0e:a4:dd:95:40:b2:b2:48:b7:3a:46:eb:45:5d:92:99:ac:
         a6:a4:50:67
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE3U4dAlClwRCv+Xc4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDUxNDE0MDc1NloXDTI2MDgxMjE0MDc1NlowLzEtMCsGA1UEAxMk
NzE5NTcwMmMtNjY5Ny00MDZiLWJjYmQtNmNkYmY3NzEyM2MxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApLxHfRLdRYnRvEKDqax0H/2/aT5TT+6HxUhk
AYVlIs5ivDklcGQC+fd1xY/U0JfN3vNFHJ7giPNQwalvMPkm3W9T64V3tUwSh/fI
Koohew/7O/YpyoGfQhUDnheQi/3QPmnLefm9Ak+3Djev0yuomDZVpNxMqXdemfbe
2+NPTZdID8JUNkkIMMZToXAP4rttqlsjTd2BrmLzPOgEXdqFqAhkW0E2CWHR9etC
9mD1p5MAoSgZQVq///EoioPynHh4bojTB7r9+95Tq38ldyUVG7syi7atQCLOO/hs
9jCTU9nXt007m16Bb7eGjnsjZnWv1zk/f2GxRN9/xIdoJC/++wIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFMu/PWLEHl4JJOpwG+jn0fuTvIV1MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvODNjM2MxYjgtMWI0Yi0z
MGNlLTlkYTQtMjAxZDBmODk3ZjZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAIVu
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAE7s+CfHV6157ruQ78P3QsFcuuB2jjg/SdYUpG32pq4pCdftErvG
zc4YQrU7vNQLAHISqA3ml3+m6E034zaLc1gYgH7MPBxamx3s9I2Dg7XIAsSpczzX
DFiCHN4YjdvaEdCYvI1EF8tkU7c0TuOEjmYBXc2KuTY+7FOBHdjNjnkgnt7lYmSU
2fyly/gBEMoENc3Gx+RdihssPROI0eYDVRCQBKFAHvpuqYXhojjSpjPj/yJ+/4cj
IIUm45obdCachcmYJPI/ovEbb1PlBLciKY4XWAuwKwhq/1iWfbtKvIrzzZN39Bi+
4jyS2OYOpN2VQLKySLc6RutFXZKZrKakUGc=
-----END CERTIFICATE-----
Generated at Sat Jun 13 17:53:34 2026 by rpki-client