Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d4b2406d-66bb-3b47-b43d-b547a603db16.roa
File:                     d4b2406d-66bb-3b47-b43d-b547a603db16.roa (raw, json)
Hash identifier:          QWB6KCOmoqACk9ov44qcezGWfeBm62AIB70Znd24Xn0=
Subject key identifier:   40:E7:08:14:FA:3E:DD:AF:D0:7E:3D:3F:2F:25:63:E5:66:DA:7E:4D
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E059C830E5E5C29ED771E7338
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d4b2406d-66bb-3b47-b43d-b547a603db16.roa
Signing time:             Mon 01 Jun 2026 01:00:10 +0000
ROA not before:           Mon 01 Jun 2026 01:00:10 +0000
ROA not after:            Sun 30 Aug 2026 01:00:10 +0000
asID:                     396617
IP address blocks:        2001:500:d937::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:05:9c:83:0e:5e:5c:29:ed:77:1e:73:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun  1 01:00:10 2026 GMT
            Not After : Aug 30 01:00:10 2026 GMT
        Subject: CN=748f0be9-708d-4881-ad38-a42452754098
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:36:a8:5e:40:f5:08:d8:00:26:34:51:b8:05:
                    2f:0f:a3:ac:b7:9f:45:d5:96:66:3d:61:df:6f:80:
                    6c:5c:7f:ac:3b:a4:8e:f2:72:39:cc:fb:f5:73:0f:
                    fc:8e:81:6b:6e:9e:0b:49:b7:ba:b2:16:51:fa:0c:
                    f8:10:1a:ed:ec:36:bf:74:6f:10:96:44:6b:fe:fd:
                    6e:78:08:40:8e:69:e9:98:8c:30:3d:25:05:04:69:
                    bc:e0:d6:7a:1a:52:66:28:dc:be:f2:8d:bf:c3:b9:
                    86:89:51:ad:9f:2b:a2:e3:10:5b:37:c6:40:ec:40:
                    8d:dd:38:2c:ad:d7:ae:84:25:e3:4e:f3:37:e6:bb:
                    64:57:eb:9b:88:bb:0d:26:c3:e6:a6:00:fb:e1:59:
                    5c:5a:44:37:91:c9:d8:17:94:e3:bf:2b:9d:c6:13:
                    78:78:5f:7a:1d:94:59:05:74:7e:f5:bf:4e:4e:c9:
                    e1:9f:01:d9:30:ca:4c:a4:97:c7:ff:5b:b6:a5:51:
                    80:c9:a9:62:0d:37:c3:58:fb:bf:7e:49:19:30:09:
                    cc:46:06:4e:1b:38:58:b5:4e:32:3f:4d:80:5a:ee:
                    8b:ed:1e:c4:1c:2b:1f:15:9b:51:ac:32:f6:f7:55:
                    e9:4d:ac:07:34:de:53:35:a8:0a:d4:56:0d:70:ca:
                    43:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:E7:08:14:FA:3E:DD:AF:D0:7E:3D:3F:2F:25:63:E5:66:DA:7E:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d4b2406d-66bb-3b47-b43d-b547a603db16.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:d937:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:4b:a9:0a:eb:15:78:8f:1c:f1:8f:09:2b:b1:9c:5d:6f:3a:
         8e:8f:fe:d0:60:44:95:cb:bf:4c:72:3d:f0:3f:23:6f:46:cb:
         f6:bb:8f:f2:cf:0c:98:f4:07:f4:9d:a3:4b:35:3b:cb:fb:77:
         20:94:e3:99:97:38:67:69:dd:5d:63:48:e3:df:eb:11:10:30:
         62:43:b7:f3:e7:de:4c:de:40:ea:1b:01:53:93:54:5d:ed:aa:
         16:0b:50:b6:f6:1e:5b:bf:ad:75:f4:f4:ea:82:b3:a0:1f:29:
         1b:74:39:05:b1:0c:bc:cc:02:bb:8e:dd:15:ab:fb:0b:ae:2f:
         3b:0f:1d:e5:36:6a:66:8b:53:38:d6:73:59:69:44:e9:4c:0e:
         94:28:36:f5:83:39:26:ab:09:80:a5:29:79:70:e5:c0:9e:82:
         40:11:e3:68:55:df:34:eb:09:20:2d:38:68:f7:a5:7b:38:b6:
         36:40:f7:57:62:7d:53:86:c5:7d:99:d6:05:33:c1:7d:7a:4c:
         b5:aa:0c:7a:b6:78:e9:5c:61:8b:6a:f8:f6:b9:d4:5f:bd:3f:
         a8:8a:b9:d8:75:17:68:83:78:66:84:36:f4:3c:45:e3:3e:d8:
         16:01:ca:ef:50:dc:b9:a2:1c:c3:ad:7a:d2:37:44:ff:1b:9a:
         e9:c8:f7:0a
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE4FnIMOXlwp7XceczgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDYwMTAxMDAxMFoXDTI2MDgzMDAxMDAxMFowLzEtMCsGA1UEAxMk
NzQ4ZjBiZTktNzA4ZC00ODgxLWFkMzgtYTQyNDUyNzU0MDk4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnzaoXkD1CNgAJjRRuAUvD6Ost59F1ZZmPWHf
b4BsXH+sO6SO8nI5zPv1cw/8joFrbp4LSbe6shZR+gz4EBrt7Da/dG8QlkRr/v1u
eAhAjmnpmIwwPSUFBGm84NZ6GlJmKNy+8o2/w7mGiVGtnyui4xBbN8ZA7ECN3Tgs
rdeuhCXjTvM35rtkV+ubiLsNJsPmpgD74VlcWkQ3kcnYF5TjvyudxhN4eF96HZRZ
BXR+9b9OTsnhnwHZMMpMpJfH/1u2pVGAyaliDTfDWPu/fkkZMAnMRgZOGzhYtU4y
P02AWu6L7R7EHCsfFZtRrDL291XpTawHNN5TNagK1FYNcMpDJwIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFEDnCBT6Pt2v0H49Py8lY+Vm2n5NMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZDRiMjQwNmQtNjZiYi0z
YjQ3LWI0M2QtYjU0N2E2MDNkYjE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFANk3
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQAFS6kK6xV4jxzxjwkrsZxdbzqOj/7QYESVy79M
cj3wPyNvRsv2u4/yzwyY9Af0naNLNTvL+3cglOOZlzhnad1dY0jj3+sREDBiQ7fz
595M3kDqGwFTk1Rd7aoWC1C29h5bv6119PTqgrOgHykbdDkFsQy8zAK7jt0Vq/sL
ri87Dx3lNmpmi1M41nNZaUTpTA6UKDb1gzkmqwmApSl5cOXAnoJAEeNoVd806wkg
LTho96V7OLY2QPdXYn1ThsV9mdYFM8F9eky1qgx6tnjpXGGLavj2udRfvT+oirnY
dRdog3hmhDb0PEXjPtgWAcrvUNy5ohzDrXrSN0T/G5rpyPcK
-----END CERTIFICATE-----
Generated at Sat Jun 13 17:44:30 2026 by rpki-client