Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a2351c14-8a2f-3d13-9955-fa3dc45c8da7.roa
File:                     a2351c14-8a2f-3d13-9955-fa3dc45c8da7.roa (raw, json)
Hash identifier:          qnmaCxSqkxjdtMO0vbdmbrAlRVOZb3TWNWMU8SKesjE=
Subject key identifier:   63:BF:B7:BA:5C:74:2E:EA:53:E1:1B:93:04:31:E2:E7:C2:67:83:71
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E059C7DBDB7BB359350FB2F80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a2351c14-8a2f-3d13-9955-fa3dc45c8da7.roa
Signing time:             Mon 01 Jun 2026 01:00:10 +0000
ROA not before:           Mon 01 Jun 2026 01:00:10 +0000
ROA not after:            Sun 30 Aug 2026 01:00:10 +0000
asID:                     36631
IP address blocks:        2001:500:d937::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:05:9c:7d:bd:b7:bb:35:93:50:fb:2f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun  1 01:00:10 2026 GMT
            Not After : Aug 30 01:00:10 2026 GMT
        Subject: CN=145712e9-e045-42cd-9e01-91a77e852972
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:f8:08:74:69:31:f7:4f:6f:5e:f9:d2:5e:45:
                    c1:c6:1f:d8:9f:f0:76:77:74:ec:f4:e3:70:59:4b:
                    3d:00:8e:58:a5:00:a2:2d:01:2e:12:cc:3c:2b:50:
                    a3:05:05:7f:34:9a:b1:7b:d5:d3:4e:0f:be:c8:96:
                    19:3c:04:ee:a8:9d:6a:b1:fa:d7:1a:30:99:49:0d:
                    65:dc:ee:aa:80:a8:7a:63:ca:88:bb:bd:fd:4c:57:
                    86:90:70:3e:72:58:52:81:13:51:5f:49:39:e5:c1:
                    2e:3b:01:db:5f:c2:9b:bb:d3:52:a9:bf:d6:4d:5d:
                    8d:4c:6a:a4:00:10:52:0b:38:a8:c8:df:16:4c:d2:
                    16:7d:40:95:f7:93:95:8a:49:49:46:22:b7:7b:f7:
                    6e:f0:ec:d2:64:3b:14:73:36:09:f7:33:64:1b:d3:
                    1d:22:c3:e4:e1:0b:4b:d3:fe:aa:ff:a9:7b:b6:9d:
                    fa:e7:20:8f:df:11:a1:f7:e6:11:7e:84:dd:5f:5d:
                    71:25:d2:90:a6:ae:f0:90:9b:a7:f9:ea:10:87:54:
                    de:ff:71:58:fe:9a:8f:4c:02:e2:0b:50:9c:a7:2b:
                    53:e3:36:a3:18:40:33:d1:cc:2d:4a:8a:2f:c5:5c:
                    45:1b:61:a2:ae:33:df:73:04:b3:14:63:ff:d1:e4:
                    22:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:BF:B7:BA:5C:74:2E:EA:53:E1:1B:93:04:31:E2:E7:C2:67:83:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a2351c14-8a2f-3d13-9955-fa3dc45c8da7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:d937:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9a:0a:71:9a:02:f8:d2:ed:22:cf:30:f9:5d:df:9c:13:63:58:
         8e:4b:a4:2a:59:75:df:ac:62:d9:99:df:d2:a6:22:5c:17:ae:
         35:47:2e:0b:ba:83:be:a3:76:ac:24:35:ee:3c:9c:25:03:28:
         52:5c:ad:6c:74:ad:e1:3e:53:06:1b:94:17:b2:08:70:4f:a7:
         0a:c3:de:92:35:82:0c:d3:90:a9:53:65:7f:7a:8b:23:3a:e1:
         32:49:d2:cb:c4:c6:7a:2e:d0:14:16:1e:ae:84:02:e2:a4:b7:
         d9:06:d6:25:f9:1f:1f:9d:13:2d:46:db:d9:b4:97:bb:2c:87:
         81:ee:d4:b0:30:11:0e:c8:91:60:0d:bf:aa:71:ab:dc:84:8e:
         a0:8d:61:92:67:69:54:76:21:c2:7c:fa:a6:7f:af:19:36:52:
         99:d7:30:f0:7c:ed:94:46:08:2c:13:21:0f:e9:e0:30:85:67:
         f3:a2:38:e7:04:30:15:2c:73:54:45:66:9c:f5:9b:b0:a1:a3:
         87:2a:78:e3:07:7a:5c:3e:65:d2:9f:39:c5:28:8e:27:fb:cc:
         fd:70:8b:e5:af:7d:86:cf:09:45:be:56:4e:c1:66:2e:40:82:
         ac:c0:37:97:94:14:86:0f:6b:d1:bf:9e:19:85:d9:4a:4c:76:
         2b:ba:f4:f4
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE4FnH29t7s1k1D7L4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDYwMTAxMDAxMFoXDTI2MDgzMDAxMDAxMFowLzEtMCsGA1UEAxMk
MTQ1NzEyZTktZTA0NS00MmNkLTllMDEtOTFhNzdlODUyOTcyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnfgIdGkx909vXvnSXkXBxh/Yn/B2d3Ts9ONw
WUs9AI5YpQCiLQEuEsw8K1CjBQV/NJqxe9XTTg++yJYZPATuqJ1qsfrXGjCZSQ1l
3O6qgKh6Y8qIu739TFeGkHA+clhSgRNRX0k55cEuOwHbX8Kbu9NSqb/WTV2NTGqk
ABBSCzioyN8WTNIWfUCV95OViklJRiK3e/du8OzSZDsUczYJ9zNkG9MdIsPk4QtL
0/6q/6l7tp365yCP3xGh9+YRfoTdX11xJdKQpq7wkJun+eoQh1Te/3FY/pqPTALi
C1CcpytT4zajGEAz0cwtSoovxVxFG2GirjPfcwSzFGP/0eQijQIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFGO/t7pcdC7qU+EbkwQx4ufCZ4NxMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYTIzNTFjMTQtOGEyZi0z
ZDEzLTk5NTUtZmEzZGM0NWM4ZGE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFANk3
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQCaCnGaAvjS7SLPMPld35wTY1iOS6QqWXXfrGLZ
md/SpiJcF641Ry4LuoO+o3asJDXuPJwlAyhSXK1sdK3hPlMGG5QXsghwT6cKw96S
NYIM05CpU2V/eosjOuEySdLLxMZ6LtAUFh6uhALipLfZBtYl+R8fnRMtRtvZtJe7
LIeB7tSwMBEOyJFgDb+qcavchI6gjWGSZ2lUdiHCfPqmf68ZNlKZ1zDwfO2URggs
EyEP6eAwhWfzojjnBDAVLHNURWac9ZuwoaOHKnjjB3pcPmXSnznFKI4n+8z9cIvl
r32GzwlFvlZOwWYuQIKswDeXlBSGD2vRv54ZhdlKTHYruvT0
-----END CERTIFICATE-----
Generated at Sat Jun 13 15:08:38 2026 by rpki-client