Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/5cad48ae-519e-3c6b-ac26-e146145d06bd.roa
File:                     5cad48ae-519e-3c6b-ac26-e146145d06bd.roa (raw, json)
Hash identifier:          82uLdw8NmnrdtApE5LMy35h9cA86HRufevE2pO/Ep1Y=
Subject key identifier:   A7:B5:AB:0C:14:43:1C:26:45:99:7B:D0:B2:0F:41:07:27:C0:97:74
Certificate issuer:       /CN=cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58
Certificate serial:       010D0C9F4328584D6C0FB7A8E49306BEE4CAD5C0
Authority key identifier: 26:D1:9B:B5:02:FD:CB:75:4D:60:A0:BB:6A:8F:47:07:E2:4C:17:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/5cad48ae-519e-3c6b-ac26-e146145d06bd.roa
Signing time:             Tue 07 Apr 2026 01:00:23 +0000
ROA not before:           Tue 07 Apr 2026 01:00:23 +0000
ROA not after:            Mon 06 Jul 2026 01:00:23 +0000
asID:                     55293
IP address blocks:        2607:fb30::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:6c:0f:b7:a8:e4:93:06:be:e4:ca:d5:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58
        Validity
            Not Before: Apr  7 01:00:23 2026 GMT
            Not After : Jul  6 01:00:23 2026 GMT
        Subject: CN=59a2a73b-ebb3-4c70-887a-ae4a4205f090
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:bc:67:7a:06:0e:2a:7d:b7:8a:d7:81:1f:cc:
                    0d:0f:14:db:c8:18:2b:61:91:e9:a5:9d:47:2a:89:
                    58:7b:09:b9:55:4e:d5:c4:0e:40:88:69:85:c7:e8:
                    30:35:45:74:53:f1:30:89:9e:12:f5:3b:97:e6:e1:
                    e4:2e:76:3a:2e:0e:23:a0:55:5e:72:be:ee:13:f6:
                    f5:50:0e:6d:55:f9:f4:2d:5c:55:2b:75:7c:9c:2a:
                    59:55:8e:0a:60:1f:a3:bb:59:0c:1e:4a:c6:16:6a:
                    ea:7c:69:b9:49:dd:f3:89:db:47:a7:96:2a:59:8f:
                    86:2b:65:be:34:4f:ec:ab:6d:af:15:23:d1:bf:2f:
                    30:aa:c0:eb:f3:21:42:b2:8a:3b:fc:45:99:d1:04:
                    1d:b8:21:b0:24:67:74:51:6e:76:df:eb:90:26:fd:
                    3f:85:6f:a1:6f:29:e1:00:60:99:c2:d1:b0:bc:ca:
                    a4:25:5d:b8:47:8c:d8:db:fc:52:db:59:63:db:e7:
                    d4:76:04:15:cb:ec:aa:f2:d1:1f:83:03:64:7b:4d:
                    76:55:7e:d0:80:36:36:b5:ff:39:86:4a:42:73:41:
                    57:67:ee:be:85:51:26:c7:02:90:28:46:86:1e:23:
                    3d:4e:00:9c:23:3d:4c:e5:4d:d7:ea:ab:a0:58:05:
                    85:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:B5:AB:0C:14:43:1C:26:45:99:7B:D0:B2:0F:41:07:27:C0:97:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/5cad48ae-519e-3c6b-ac26-e146145d06bd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.crl

            X509v3 Authority Key Identifier:
                keyid:26:D1:9B:B5:02:FD:CB:75:4D:60:A0:BB:6A:8F:47:07:E2:4C:17:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:fb30::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:da:db:07:84:20:30:6a:f2:5a:f4:4c:53:fb:58:b6:f2:a2:
         bc:01:41:25:e4:82:bb:46:57:2a:2b:19:83:e6:5b:aa:4b:a6:
         9d:33:fe:4b:b4:e4:3a:52:28:26:aa:64:17:f8:19:32:a5:3e:
         13:2a:ab:fe:23:f6:81:9f:bf:6c:da:69:81:e1:04:49:4e:9f:
         46:c1:9e:05:fa:37:40:4d:62:d0:e1:93:c3:83:e8:98:75:0f:
         ea:ec:b2:d5:97:49:b5:68:96:17:e8:fe:99:26:cc:a2:8b:e2:
         e0:1e:06:3c:0d:34:72:6f:64:0f:ab:be:41:b2:5f:27:21:f3:
         30:9d:59:0c:4b:db:23:d4:01:87:72:27:6b:0f:b1:7d:47:dc:
         ce:7a:ea:cf:99:76:18:be:09:37:f6:cc:17:83:f5:f9:aa:5f:
         53:37:b6:46:f1:62:a1:5a:92:a4:f0:06:32:3b:4a:6b:e0:95:
         6c:6e:f4:21:c0:c1:c4:a1:62:8e:2e:75:e2:ac:c3:95:78:55:
         22:54:0b:81:d5:2b:14:98:7f:88:f5:c5:39:31:4d:3f:25:4d:
         08:ae:aa:02:f2:0d:f6:10:8f:4d:b6:8c:d9:40:c0:51:b3:a3:
         77:f6:a9:35:67:5f:06:a2:81:47:f8:fe:3d:58:08:6c:8f:3b:
         d2:10:c4:64
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE1sD7eo5JMGvuTK1cAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2M5MzgzZTQtMmM1MS00ZmZkLWJmZTktNjllOWZkNmM1
YjU4MB4XDTI2MDQwNzAxMDAyM1oXDTI2MDcwNjAxMDAyM1owLzEtMCsGA1UEAxMk
NTlhMmE3M2ItZWJiMy00YzcwLTg4N2EtYWU0YTQyMDVmMDkwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAirxnegYOKn23iteBH8wNDxTbyBgrYZHppZ1H
KolYewm5VU7VxA5AiGmFx+gwNUV0U/EwiZ4S9TuX5uHkLnY6Lg4joFVecr7uE/b1
UA5tVfn0LVxVK3V8nCpZVY4KYB+ju1kMHkrGFmrqfGm5Sd3zidtHp5YqWY+GK2W+
NE/sq22vFSPRvy8wqsDr8yFCsoo7/EWZ0QQduCGwJGd0UW523+uQJv0/hW+hbynh
AGCZwtGwvMqkJV24R4zY2/xS21lj2+fUdgQVy+yq8tEfgwNke012VX7QgDY2tf85
hkpCc0FXZ+6+hVEmxwKQKEaGHiM9TgCcIz1M5U3X6qugWAWFoQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFKe1qwwUQxwmRZl70LIPQQcnwJd0MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9jYzkz
ODNlNC0yYzUxLTRmZmQtYmZlOS02OWU5ZmQ2YzViNTgvNWNhZDQ4YWUtNTE5ZS0z
YzZiLWFjMjYtZTE0NjE0NWQwNmJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvY2M5MzgzZTQtMmM1MS00ZmZkLWJm
ZTktNjllOWZkNmM1YjU4L2NjOTM4M2U0LTJjNTEtNGZmZC1iZmU5LTY5ZTlmZDZj
NWI1OC5jcmwwHwYDVR0jBBgwFoAUJtGbtQL9y3VNYKC7ao9HB+JMFzswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9jYzkzODNlNC0yYzUxLTRmZmQtYmZlOS02OWU5
ZmQ2YzViNTguY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgf7MDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQCK2tsHhCAwavJa9ExT+1i28qK8AUEl5IK7RlcqKxmD5luqS6adM/5L
tOQ6UigmqmQX+BkypT4TKqv+I/aBn79s2mmB4QRJTp9GwZ4F+jdATWLQ4ZPDg+iY
dQ/q7LLVl0m1aJYX6P6ZJsyii+LgHgY8DTRyb2QPq75Bsl8nIfMwnVkMS9sj1AGH
cidrD7F9R9zOeurPmXYYvgk39swXg/X5ql9TN7ZG8WKhWpKk8AYyO0pr4JVsbvQh
wMHEoWKOLnXirMOVeFUiVAuB1SsUmH+I9cU5MU0/JU0IrqoC8g32EI9NtozZQMBR
s6N39qk1Z18GooFH+P49WAhsjzvSEMRk
-----END CERTIFICATE-----
Generated at Fri Apr 17 20:48:27 2026 by rpki-client