Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f3434756-b2ac-35d8-b17a-59f348bcc54c.roa
File:                     f3434756-b2ac-35d8-b17a-59f348bcc54c.roa (raw, json)
Hash identifier:          JZNiskmcKyzRPmNuhJBHtAuqZhDRDCvVGfpHo0+SSKM=
Subject key identifier:   D6:A7:CE:23:43:70:6D:D0:44:83:65:67:63:17:6B:DC:62:17:F5:31
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584DD4E1CE36160F6252DA64BEC0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f3434756-b2ac-35d8-b17a-59f348bcc54c.roa
Signing time:             Thu 14 May 2026 14:07:55 +0000
ROA not before:           Thu 14 May 2026 14:07:55 +0000
ROA not after:            Wed 12 Aug 2026 14:07:55 +0000
asID:                     397208
IP address blocks:        2001:500:856e::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:d4:e1:ce:36:16:0f:62:52:da:64:be:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 14 14:07:55 2026 GMT
            Not After : Aug 12 14:07:55 2026 GMT
        Subject: CN=e5369f7f-67bf-4b03-972c-6e228f503c04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:fe:ca:bd:e6:d6:07:06:fd:1c:db:11:ee:31:
                    84:82:9c:a3:8e:cf:2f:f6:04:e3:f3:c5:f7:6c:44:
                    fb:b5:97:2f:37:d0:6f:c5:ff:8c:29:21:26:e8:99:
                    e5:96:91:92:0c:21:e5:e5:07:2b:d2:36:54:28:22:
                    e9:9c:2f:de:83:f8:08:e1:6f:7c:9c:ee:6c:23:f3:
                    ae:a9:ad:ba:71:01:05:ae:60:78:68:73:7d:fe:ce:
                    4d:f3:0c:a0:33:b8:44:ae:b3:67:04:18:3a:b6:7f:
                    39:c6:55:c1:0d:79:8a:5c:18:32:ac:e5:0c:40:fe:
                    34:5b:4d:62:ed:20:f9:b5:5d:a0:15:0f:c9:a6:61:
                    68:20:7f:02:c9:56:15:20:f3:30:a5:7f:2f:fa:7b:
                    fb:0c:19:bc:10:79:1f:99:ff:fb:a1:66:ad:cb:bf:
                    2a:7d:51:dc:15:8f:ea:f3:d6:2e:85:68:61:7d:62:
                    ef:69:c2:1e:c6:66:31:84:c0:7a:3e:ef:03:47:ab:
                    c6:ce:ba:68:9f:91:6d:47:ea:26:eb:86:cb:7e:4e:
                    91:36:2a:3c:67:cf:d9:59:cd:6f:9a:55:02:be:41:
                    80:19:dd:79:84:58:24:08:c4:66:92:e0:d8:2c:ab:
                    9b:bd:01:b0:a2:7b:55:92:ab:80:28:c4:a6:07:fb:
                    24:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:A7:CE:23:43:70:6D:D0:44:83:65:67:63:17:6B:DC:62:17:F5:31
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f3434756-b2ac-35d8-b17a-59f348bcc54c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:856e::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:00:81:6b:95:8d:2e:99:1e:7b:d8:e6:80:f4:da:c5:f5:ef:
         9b:ff:76:f5:34:31:06:6a:a1:d1:99:8a:57:fe:fd:a4:b7:07:
         52:02:fe:6e:a2:63:88:72:d1:fd:4d:63:0e:b4:e9:fc:54:6c:
         8a:d8:35:7c:4c:71:59:7b:7b:f1:a1:d4:27:1c:f7:24:36:71:
         10:17:3d:91:4c:0f:dc:c8:74:a8:36:b8:c4:c5:ec:43:23:5a:
         53:5b:e9:a9:be:c7:89:f8:06:99:bc:8d:31:94:32:f4:e1:ee:
         e0:ad:4e:89:b8:a4:76:f5:96:ca:67:ae:e9:6b:27:24:65:a7:
         8d:e7:60:b3:26:6b:07:af:e1:24:1d:4c:72:ed:8c:dc:d5:f8:
         fb:b9:9a:df:a9:c5:c9:ba:10:24:8e:93:7c:6f:b2:70:a9:34:
         f0:bb:e5:cb:34:76:d6:66:86:e6:04:e0:fa:27:06:00:ee:2c:
         c4:48:2c:fc:e0:b1:8d:79:60:9e:58:89:e4:4a:17:58:1f:55:
         16:ba:dc:75:b7:99:40:0a:f8:c1:c2:25:b2:83:ca:0a:95:df:
         5b:0a:da:4c:63:b7:ee:1b:07:5b:1e:80:d4:ea:73:c1:c8:1a:
         4e:89:0f:4c:4e:6c:ca:8a:44:e8:54:f7:e4:ab:bf:82:d5:a1:
         49:e9:9a:04
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE3U4c42Fg9iUtpkvsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDUxNDE0MDc1NVoXDTI2MDgxMjE0MDc1NVowLzEtMCsGA1UEAxMk
ZTUzNjlmN2YtNjdiZi00YjAzLTk3MmMtNmUyMjhmNTAzYzA0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgP7KvebWBwb9HNsR7jGEgpyjjs8v9gTj88X3
bET7tZcvN9Bvxf+MKSEm6JnllpGSDCHl5Qcr0jZUKCLpnC/eg/gI4W98nO5sI/Ou
qa26cQEFrmB4aHN9/s5N8wygM7hErrNnBBg6tn85xlXBDXmKXBgyrOUMQP40W01i
7SD5tV2gFQ/JpmFoIH8CyVYVIPMwpX8v+nv7DBm8EHkfmf/7oWaty78qfVHcFY/q
89YuhWhhfWLvacIexmYxhMB6Pu8DR6vGzrpon5FtR+om64bLfk6RNio8Z8/ZWc1v
mlUCvkGAGd15hFgkCMRmkuDYLKubvQGwontVkquAKMSmB/skkQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFNanziNDcG3QRINlZ2MXa9xiF/UxMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZjM0MzQ3NTYtYjJhYy0z
NWQ4LWIxN2EtNTlmMzQ4YmNjNTRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAIVu
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAEMAgWuVjS6ZHnvY5oD02sX175v/dvU0MQZqodGZilf+/aS3B1IC
/m6iY4hy0f1NYw606fxUbIrYNXxMcVl7e/Gh1Ccc9yQ2cRAXPZFMD9zIdKg2uMTF
7EMjWlNb6am+x4n4Bpm8jTGUMvTh7uCtTom4pHb1lspnrulrJyRlp43nYLMmawev
4SQdTHLtjNzV+Pu5mt+pxcm6ECSOk3xvsnCpNPC75cs0dtZmhuYE4PonBgDuLMRI
LPzgsY15YJ5YieRKF1gfVRa63HW3mUAK+MHCJbKDygqV31sK2kxjt+4bB1segNTq
c8HIGk6JD0xObMqKROhU9+Srv4LVoUnpmgQ=
-----END CERTIFICATE-----
Generated at Sat Jun 13 22:06:01 2026 by rpki-client