Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8616368e-512e-32cf-bc6d-4dee51571cf4.roa
File:                     8616368e-512e-32cf-bc6d-4dee51571cf4.roa (raw, json)
Hash identifier:          kX6Oz3Oipk/nDMsuwzIoJa1WXLtyj8tRehR8jT0IgsY=
Subject key identifier:   99:AB:FA:75:8F:01:FF:1F:7C:C4:F3:10:43:63:77:79:67:9E:B2:22
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E18AEE3053AF97E4A6F7C99EA
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8616368e-512e-32cf-bc6d-4dee51571cf4.roa
Signing time:             Sun 07 Jun 2026 21:00:12 +0000
ROA not before:           Sun 07 Jun 2026 21:00:12 +0000
ROA not after:            Sat 05 Sep 2026 21:00:12 +0000
asID:                     396576
IP address blocks:        2001:503:c27::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:18:ae:e3:05:3a:f9:7e:4a:6f:7c:99:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun  7 21:00:12 2026 GMT
            Not After : Sep  5 21:00:12 2026 GMT
        Subject: CN=405f2cc4-3747-44c6-9945-bc64a57bb63f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:79:56:34:c8:10:5b:89:05:67:a9:7c:ae:d7:
                    da:79:49:85:97:05:32:da:29:47:18:e6:a5:78:b3:
                    61:be:d8:50:32:28:85:66:4b:e9:d8:4f:4b:84:91:
                    ff:0b:88:d5:ca:5a:23:30:65:ae:8b:74:4c:74:88:
                    ab:19:5e:7a:e1:13:71:6b:6a:79:cc:15:a2:83:d0:
                    2f:08:b7:bc:c3:d0:95:6e:c7:1f:42:32:33:2b:42:
                    19:52:d9:88:6c:8d:35:1c:84:a2:73:e8:e8:b5:da:
                    1b:44:f0:d9:f5:6a:c9:b9:7f:6b:ac:cd:fa:23:02:
                    72:2e:cf:67:fc:61:09:b2:13:e4:29:78:b8:46:f7:
                    64:6b:23:1c:6f:e4:7d:d0:ab:4d:cf:03:2e:a3:e7:
                    db:46:f0:22:f7:d5:b6:e8:39:58:d4:b2:88:38:27:
                    82:08:4c:70:8f:5c:46:9f:cd:17:c3:1f:22:ce:48:
                    62:e8:ee:94:00:e9:4d:66:7a:e9:db:ac:f3:cc:65:
                    5a:b7:6e:f5:9b:e1:07:c7:bd:f2:cd:47:dc:b5:2d:
                    cc:57:35:97:3e:dd:78:70:90:a3:d3:4c:aa:97:99:
                    8c:b9:1d:13:d0:f3:e6:d3:38:83:63:e0:2c:35:cc:
                    e2:4f:d9:17:ec:c2:2c:bf:5d:28:5d:c0:43:ad:46:
                    5d:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:AB:FA:75:8F:01:FF:1F:7C:C4:F3:10:43:63:77:79:67:9E:B2:22
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8616368e-512e-32cf-bc6d-4dee51571cf4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:c27::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:8b:9f:0e:18:05:d3:b7:3b:78:36:9d:b4:42:49:60:d7:b9:
         b2:c7:57:d9:87:85:2c:d6:60:7f:fa:a5:92:f0:02:c8:03:db:
         01:ee:38:0d:58:9a:e6:04:1c:db:d6:a5:ed:dc:0d:d7:d6:00:
         1b:19:07:00:af:d9:54:a1:9c:9f:e2:d3:29:48:45:e1:30:c0:
         57:a1:fc:24:96:66:d0:73:b6:6a:27:e4:bd:4d:c9:3c:bd:0e:
         f9:1a:a4:ec:81:a0:21:5d:cf:e1:6c:1b:3c:4e:ae:98:75:6b:
         6f:53:b5:da:e3:4a:34:8c:f2:d3:52:bb:df:22:8a:c5:1a:ca:
         50:45:bd:ae:98:d1:d3:56:15:f0:37:e1:8d:6d:87:c1:5b:07:
         0c:95:a1:c8:0d:a0:89:6c:77:61:1e:e4:d5:09:09:d2:d1:46:
         ff:04:0c:80:fd:6b:53:27:09:f8:8b:7d:23:55:75:2c:db:b6:
         64:c3:d0:9a:c5:d4:3b:b6:b3:c9:07:1c:ca:41:3a:18:77:07:
         7e:6c:5e:35:e3:7e:fd:a9:69:ef:87:9e:3f:03:4f:e6:be:d6:
         6c:af:9f:19:b2:54:d8:1e:00:7d:9a:82:99:99:ae:bf:68:09:
         74:a2:ab:55:f2:f1:f1:0f:32:6d:87:4f:90:42:d3:a4:67:4d:
         2c:6f:de:a0
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE4YruMFOvl+Sm98meowDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDYwNzIxMDAxMloXDTI2MDkwNTIxMDAxMlowLzEtMCsGA1UEAxMk
NDA1ZjJjYzQtMzc0Ny00NGM2LTk5NDUtYmM2NGE1N2JiNjNmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwnlWNMgQW4kFZ6l8rtfaeUmFlwUy2ilHGOal
eLNhvthQMiiFZkvp2E9LhJH/C4jVylojMGWui3RMdIirGV564RNxa2p5zBWig9Av
CLe8w9CVbscfQjIzK0IZUtmIbI01HISic+jotdobRPDZ9WrJuX9rrM36IwJyLs9n
/GEJshPkKXi4RvdkayMcb+R90KtNzwMuo+fbRvAi99W26DlY1LKIOCeCCExwj1xG
n80Xwx8izkhi6O6UAOlNZnrp26zzzGVat271m+EHx73yzUfctS3MVzWXPt14cJCj
00yql5mMuR0T0PPm0ziDY+AsNcziT9kX7MIsv10oXcBDrUZdWQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFJmr+nWPAf8ffMTzEENjd3lnnrIiMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvODYxNjM2OGUtNTEyZS0z
MmNmLWJjNmQtNGRlZTUxNTcxY2Y0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAwwn
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAIGLnw4YBdO3O3g2nbRCSWDXubLHV9mHhSzWYH/6pZLwAsgD2wHu
OA1YmuYEHNvWpe3cDdfWABsZBwCv2VShnJ/i0ylIReEwwFeh/CSWZtBztmon5L1N
yTy9DvkapOyBoCFdz+FsGzxOrph1a29TtdrjSjSM8tNSu98iisUaylBFva6Y0dNW
FfA34Y1th8FbBwyVocgNoIlsd2Ee5NUJCdLRRv8EDID9a1MnCfiLfSNVdSzbtmTD
0JrF1Du2s8kHHMpBOhh3B35sXjXjfv2pae+Hnj8DT+a+1myvnxmyVNgeAH2agpmZ
rr9oCXSiq1Xy8fEPMm2HT5BC06RnTSxv3qA=
-----END CERTIFICATE-----
Generated at Sat Jun 13 16:02:10 2026 by rpki-client