Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/097e1c1c-4acd-3c1f-a21a-e305280afdaa.roa
File:                     097e1c1c-4acd-3c1f-a21a-e305280afdaa.roa (raw, json)
Hash identifier:          bTSWbLkn3ipuF+qDPGDl4BHkaz+fm8UsNzf62mPrJ6c=
Subject key identifier:   78:FD:EF:13:45:59:5E:17:3C:9F:B4:61:F8:30:6E:B6:7B:FB:A1:C7
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584EA793DB2C5FDED12BD8835480
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/097e1c1c-4acd-3c1f-a21a-e305280afdaa.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     397212
IP address blocks:        2001:500:135::53/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 21 Aug 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:93:db:2c:5f:de:d1:2b:d8:83:54:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=d0f579c9-78fe-464b-9e8f-b23dc97c2c81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:12:ac:67:54:9e:46:ee:99:94:ed:c8:b3:57:
                    9a:ed:b7:e6:29:5e:ee:66:08:81:de:c0:f6:73:be:
                    e6:3c:7d:ac:33:f6:65:51:cf:02:26:73:02:bb:1b:
                    e4:53:d3:95:80:4f:bf:b7:49:d4:7c:63:ce:e3:22:
                    ba:98:45:e3:95:c9:26:f3:ff:19:bd:36:ae:12:6d:
                    13:e0:d5:ec:bb:89:8d:73:c6:68:d7:90:99:06:27:
                    d1:c5:7b:47:9d:2b:c4:fb:b2:32:0f:e1:42:8e:2e:
                    bd:ba:c8:f1:e4:b1:c4:6d:75:f8:ff:1a:bd:1f:46:
                    1f:79:aa:3f:f8:b3:3e:6f:0a:0e:52:d3:56:d2:c8:
                    c0:0c:3e:9b:a1:68:a8:3f:6b:8d:08:21:bb:9d:04:
                    ec:99:6a:65:dd:2f:73:f7:ef:b0:b0:ef:4d:9e:74:
                    d2:8b:80:f9:a0:9f:a6:d4:6b:cf:92:a3:8c:c5:5d:
                    a1:29:9d:73:05:cd:16:59:e8:aa:73:19:30:32:2a:
                    f4:d5:4b:fb:96:98:f9:a8:fe:a0:ed:59:5d:d1:23:
                    13:1b:ec:8f:8a:14:0a:34:84:47:10:9b:09:5d:15:
                    8e:c1:83:dd:fa:64:a3:0d:43:fe:1e:e5:28:cb:f8:
                    6c:ab:f0:4d:87:d6:36:a4:a0:9a:70:c4:25:e6:15:
                    f4:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:FD:EF:13:45:59:5E:17:3C:9F:B4:61:F8:30:6E:B6:7B:FB:A1:C7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/097e1c1c-4acd-3c1f-a21a-e305280afdaa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:135:0:0:0:0:53/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:df:29:b6:2c:26:db:dc:0e:ce:4a:36:45:e5:14:4d:ed:d1:
         c3:5e:01:3e:10:e7:61:d1:01:0c:bd:db:53:1c:0a:71:32:73:
         83:9c:d3:03:8b:4e:a4:23:f3:70:98:e0:df:1d:74:9d:58:dd:
         b7:5d:8f:11:e1:3b:e2:cb:f5:55:66:4f:0b:8c:cb:bb:cf:36:
         c8:31:3a:7b:16:93:10:a2:08:e9:ca:15:53:38:9b:85:9a:9a:
         66:eb:d0:af:17:b0:43:0a:59:2d:e2:09:2b:c8:8c:ed:34:be:
         57:16:91:86:79:f4:7a:13:61:78:05:d3:96:73:e1:2d:2c:d5:
         1b:69:1b:50:d2:15:57:c4:5b:c4:74:92:97:9f:f3:a5:8a:01:
         58:99:a9:22:17:b4:03:2a:3d:0d:03:fc:70:6f:11:7b:6a:c3:
         b3:b6:df:91:98:ad:d8:ae:95:f5:46:79:e0:c2:19:76:d8:ce:
         94:c0:96:26:e3:11:c1:60:d8:5e:88:ae:56:7a:20:7c:9d:0a:
         23:eb:d0:fa:be:2a:01:bf:d9:f1:0a:28:3d:52:59:ca:12:e1:
         a5:ca:56:0b:94:ef:1a:fc:2a:0e:cd:c8:e8:44:16:80:a0:fc:
         fb:3e:1e:19:51:51:b8:8f:87:a9:69:84:88:34:e9:e6:d4:88:
         74:ca:e8:2b
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE6nk9ssX97RK9iDVIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
ZDBmNTc5YzktNzhmZS00NjRiLTllOGYtYjIzZGM5N2MyYzgxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqxKsZ1SeRu6ZlO3Is1ea7bfmKV7uZgiB3sD2
c77mPH2sM/ZlUc8CJnMCuxvkU9OVgE+/t0nUfGPO4yK6mEXjlckm8/8ZvTauEm0T
4NXsu4mNc8Zo15CZBifRxXtHnSvE+7IyD+FCji69usjx5LHEbXX4/xq9H0Yfeao/
+LM+bwoOUtNW0sjADD6boWioP2uNCCG7nQTsmWpl3S9z9++wsO9NnnTSi4D5oJ+m
1GvPkqOMxV2hKZ1zBc0WWeiqcxkwMir01Uv7lpj5qP6g7Vld0SMTG+yPihQKNIRH
EJsJXRWOwYPd+mSjDUP+HuUoy/hsq/BNh9Y2pKCacMQl5hX03QIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFHj97xNFWV4XPJ+0YfgwbrZ7+6HHMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMDk3ZTFjMWMtNGFjZC0z
YzFmLWEyMWEtZTMwNTI4MGFmZGFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAE1
AAAAAAAAAAAAUzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQAF3ym2LCbb3A7OSjZF5RRN7dHDXgE+EOdh0QEM
vdtTHApxMnODnNMDi06kI/NwmODfHXSdWN23XY8R4Tviy/VVZk8LjMu7zzbIMTp7
FpMQogjpyhVTOJuFmppm69CvF7BDClkt4gkryIztNL5XFpGGefR6E2F4BdOWc+Et
LNUbaRtQ0hVXxFvEdJKXn/OligFYmakiF7QDKj0NA/xwbxF7asOztt+RmK3YrpX1
Rnngwhl22M6UwJYm4xHBYNheiK5WeiB8nQoj69D6vioBv9nxCig9UlnKEuGlylYL
lO8a/CoOzcjoRBaAoPz7Ph4ZUVG4j4epaYSINOnm1Ih0yugr
-----END CERTIFICATE-----
Generated at Wed Aug 19 17:03:34 2026 by rpki-client