Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ac5b4b11-c9b7-3751-876d-c15d3bf79a24.roa
File:                     ac5b4b11-c9b7-3751-876d-c15d3bf79a24.roa (raw, json)
Hash identifier:          TR3Dpqm+KUJjx/B+/B3w1HaFzyB24W+SMpllbXvSuWE=
Subject key identifier:   E9:94:68:DC:3C:37:0F:AB:BF:46:AB:AC:60:0F:DE:54:EA:0C:F2:85
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F4974DDAFCFBD6D4D789CEA00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ac5b4b11-c9b7-3751-876d-c15d3bf79a24.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     396578
IP address blocks:        2001:503:c27::2:30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:74:dd:af:cf:bd:6d:4d:78:9c:ea:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=59ef7a6b-35d4-4898-8f14-0b11822a6116
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:8a:4b:d4:5b:87:6b:63:61:49:57:e7:d7:61:
                    41:a3:9d:10:68:f5:05:f8:92:63:4e:7e:a0:b7:85:
                    06:28:18:84:cc:e2:2f:32:8b:bb:db:5e:7e:c9:bf:
                    e6:51:f1:75:d1:91:4b:48:51:3f:06:38:38:d8:f7:
                    b1:7a:fb:a5:0b:b5:b6:c6:92:17:02:2d:3b:33:63:
                    f2:7b:7e:7c:a6:45:4b:d1:b3:e8:2a:a1:57:8d:f6:
                    91:55:55:69:82:5b:b3:92:ec:39:26:e8:ee:59:4b:
                    35:9f:68:a2:46:03:ff:99:80:a6:36:d4:33:8d:d9:
                    87:0b:f9:0c:05:95:7c:18:27:30:f4:bb:3d:cd:1a:
                    a4:4c:c4:fb:1f:03:a5:c0:ad:5a:d6:61:23:04:01:
                    04:53:45:2a:f3:12:ed:7a:03:39:54:ec:c2:72:0c:
                    5a:42:3a:69:c4:61:94:7e:8d:ed:9d:c2:c4:0f:f1:
                    eb:83:ef:90:3b:62:cd:db:d1:7f:09:95:ad:96:37:
                    24:c4:14:54:99:af:0d:ac:00:34:a0:b8:ae:86:42:
                    24:7e:5e:03:1a:31:be:a1:96:e5:44:18:31:41:2c:
                    8a:b3:20:11:92:9a:eb:20:88:de:18:7c:65:0c:e3:
                    87:ad:fa:be:d3:16:31:ee:4a:84:e6:6e:7a:3e:94:
                    cb:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:94:68:DC:3C:37:0F:AB:BF:46:AB:AC:60:0F:DE:54:EA:0C:F2:85
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ac5b4b11-c9b7-3751-876d-c15d3bf79a24.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:c27:0:0:0:2:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:4d:52:da:c8:c5:d8:55:1c:94:91:da:2b:ba:ec:a0:d5:5e:
         0d:7f:5d:f0:f7:fb:94:82:89:c0:e4:8d:ed:f3:eb:40:82:06:
         c5:3d:58:79:25:b9:cd:74:11:fb:30:b5:7b:6c:1e:f5:ca:85:
         03:d5:23:6b:42:47:df:19:b0:11:2e:c5:91:cd:6b:d6:ff:5d:
         32:5d:11:5d:5c:97:b2:ad:79:ac:36:10:d4:f1:8b:8e:ad:89:
         00:60:b9:35:60:52:f5:88:c6:c9:4a:5c:62:c6:6f:2a:b2:50:
         b9:63:c8:56:90:32:2d:94:b7:90:52:9b:ac:38:70:38:1f:45:
         bd:f8:d1:9a:b4:b4:10:fb:69:b9:6e:43:60:c9:41:b2:3b:f3:
         3f:62:ef:dc:67:ee:64:da:a8:be:91:09:d8:ab:b0:c8:4d:38:
         90:d4:d4:b1:45:55:d2:4a:a7:37:f8:84:37:f3:31:fe:e9:b1:
         4f:0c:c0:f5:f4:71:95:a3:1c:71:bd:a9:81:1b:76:2b:8e:30:
         ff:19:72:16:31:dc:9a:22:ba:16:77:3e:41:5d:ca:ad:25:03:
         fb:25:25:9a:38:d8:4a:17:37:fa:a4:d2:6b:4b:98:eb:a3:d0:
         95:be:e1:39:44:bb:11:9a:0d:5d:f6:61:1a:98:48:f2:46:c3:
         87:c1:b5:f9
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE9JdN2vz71tTXic6gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
NTllZjdhNmItMzVkNC00ODk4LThmMTQtMGIxMTgyMmE2MTE2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA54pL1FuHa2NhSVfn12FBo50QaPUF+JJjTn6g
t4UGKBiEzOIvMou7215+yb/mUfF10ZFLSFE/Bjg42PexevulC7W2xpIXAi07M2Py
e358pkVL0bPoKqFXjfaRVVVpgluzkuw5JujuWUs1n2iiRgP/mYCmNtQzjdmHC/kM
BZV8GCcw9Ls9zRqkTMT7HwOlwK1a1mEjBAEEU0Uq8xLtegM5VOzCcgxaQjppxGGU
fo3tncLED/Hrg++QO2LN29F/CZWtljckxBRUma8NrAA0oLiuhkIkfl4DGjG+oZbl
RBgxQSyKsyARkprrIIjeGHxlDOOHrfq+0xYx7kqE5m56PpTLuwIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFOmUaNw8Nw+rv0arrGAP3lTqDPKFMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYWM1YjRiMTEtYzliNy0z
NzUxLTg3NmQtYzE1ZDNiZjc5YTI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAwwn
AAAAAAAAAAIAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQAETVLayMXYVRyUkdoruuyg1V4Nf13w9/uUgonA
5I3t8+tAggbFPVh5JbnNdBH7MLV7bB71yoUD1SNrQkffGbARLsWRzWvW/10yXRFd
XJeyrXmsNhDU8YuOrYkAYLk1YFL1iMbJSlxixm8qslC5Y8hWkDItlLeQUpusOHA4
H0W9+NGatLQQ+2m5bkNgyUGyO/M/Yu/cZ+5k2qi+kQnYq7DITTiQ1NSxRVXSSqc3
+IQ38zH+6bFPDMD19HGVoxxxvamBG3YrjjD/GXIWMdyaIroWdz5BXcqtJQP7JSWa
ONhKFzf6pNJrS5jro9CVvuE5RLsRmg1d9mEamEjyRsOHwbX5
-----END CERTIFICATE-----
Generated at Sat Sep 26 15:00:20 2026 by rpki-client