Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/252face9-8cc9-37ac-9d09-516b512859fe.roa
File:                     252face9-8cc9-37ac-9d09-516b512859fe.roa (raw, json)
Hash identifier:          fTEUZQ2uZwtgp/xOw7Xrz6C8o9OJh2Lx/9hVpeF/n3Q=
Subject key identifier:   E4:AE:DD:AF:F0:5B:C2:53:79:A5:7B:69:75:E0:76:98:76:43:58:0E
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E4DB9EEA15E98DB3453C82000
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/252face9-8cc9-37ac-9d09-516b512859fe.roa
Signing time:             Fri 26 Jun 2026 21:00:11 +0000
ROA not before:           Fri 26 Jun 2026 21:00:11 +0000
ROA not after:            Thu 24 Sep 2026 21:00:11 +0000
asID:                     397194
IP address blocks:        2001:503:eea3::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 30 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:4d:b9:ee:a1:5e:98:db:34:53:c8:20:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun 26 21:00:11 2026 GMT
            Not After : Sep 24 21:00:11 2026 GMT
        Subject: CN=c577d30f-e914-474f-8bf5-5977923b6706
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:42:ab:69:35:bd:59:41:ae:28:0d:39:c4:47:
                    18:7d:15:8b:30:ad:bb:6c:15:19:ab:38:17:e9:66:
                    df:e8:06:0d:00:63:6b:77:69:22:db:4b:68:0b:7d:
                    e2:00:d6:69:58:e7:f3:63:53:26:c6:9f:27:2c:bd:
                    ad:23:86:10:6e:bf:72:c4:79:ac:99:23:d8:16:93:
                    a7:09:44:2d:a1:09:35:b3:72:8b:c0:99:d8:6f:7e:
                    20:6a:3e:6f:7a:da:08:57:cb:8b:c6:d1:ac:0e:c5:
                    d7:14:4e:a5:fc:6e:bd:63:25:ca:b7:92:78:1c:d6:
                    17:83:59:d6:bb:54:81:7d:cc:05:13:79:59:2e:ae:
                    22:6a:7d:7e:95:f3:e6:d0:2b:f6:dd:84:cc:23:68:
                    4a:e2:2b:2f:82:84:b9:6e:7c:54:2b:93:4b:88:fb:
                    81:aa:a8:ca:9f:95:39:89:63:06:b7:09:32:6e:c7:
                    2c:63:b5:a9:27:db:d9:38:51:b1:37:a7:70:3b:16:
                    2a:ec:84:35:09:a2:ef:42:01:ba:15:02:ad:57:5a:
                    66:e0:7c:31:f4:ce:fb:b5:b2:46:f9:13:30:2e:90:
                    65:ed:4c:a0:c5:ac:8e:18:99:ad:d1:c3:4b:5e:ea:
                    34:ba:a4:f4:57:71:6e:ce:4e:b6:11:82:cd:aa:d4:
                    26:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:AE:DD:AF:F0:5B:C2:53:79:A5:7B:69:75:E0:76:98:76:43:58:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/252face9-8cc9-37ac-9d09-516b512859fe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:eea3:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:c7:df:e4:6d:e2:52:88:e8:0b:da:4e:72:06:56:db:1a:4b:
         7a:fe:24:0f:d5:fc:a3:f3:f4:c3:ef:68:cb:82:d4:e9:e4:f8:
         12:ab:39:10:02:4f:d4:8b:a0:34:61:77:96:49:a9:40:90:c6:
         23:a3:68:36:80:4d:08:ef:f1:34:c6:15:cb:9d:cb:5d:1d:36:
         a4:ea:3d:d9:77:40:7a:ee:fd:10:bc:00:2c:b6:f2:81:0b:4c:
         6e:ca:29:c4:76:36:97:39:de:50:b4:44:24:da:04:8c:f6:f3:
         49:e9:da:ac:f2:18:e3:c6:65:85:51:10:f9:27:f3:58:db:99:
         80:ac:42:6d:4b:ca:5b:bc:c0:a5:ee:c8:cd:0c:94:ec:87:d4:
         21:f5:26:30:f5:56:16:69:c8:75:4f:70:b3:fd:04:e1:61:d7:
         d9:50:1a:a8:4f:3a:90:e3:4a:5b:06:5b:eb:92:1a:df:03:46:
         55:50:75:30:f4:de:fc:1f:57:ac:93:28:36:ba:6f:9c:70:da:
         40:4a:a2:d5:fb:48:de:2f:70:e3:df:f7:75:57:40:66:ae:00:
         c7:f7:81:89:11:67:e6:4e:9c:30:31:a6:45:8f:cd:4d:c2:c8:
         f0:5e:c9:bb:f2:2d:47:45:23:d7:1f:be:27:7b:f5:1c:38:99:
         76:07:69:cf
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE5Nue6hXpjbNFPIIAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDYyNjIxMDAxMVoXDTI2MDkyNDIxMDAxMVowLzEtMCsGA1UEAxMk
YzU3N2QzMGYtZTkxNC00NzRmLThiZjUtNTk3NzkyM2I2NzA2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgUKraTW9WUGuKA05xEcYfRWLMK27bBUZqzgX
6Wbf6AYNAGNrd2ki20toC33iANZpWOfzY1Mmxp8nLL2tI4YQbr9yxHmsmSPYFpOn
CUQtoQk1s3KLwJnYb34gaj5vetoIV8uLxtGsDsXXFE6l/G69YyXKt5J4HNYXg1nW
u1SBfcwFE3lZLq4ian1+lfPm0Cv23YTMI2hK4isvgoS5bnxUK5NLiPuBqqjKn5U5
iWMGtwkybscsY7WpJ9vZOFGxN6dwOxYq7IQ1CaLvQgG6FQKtV1pm4Hwx9M77tbJG
+RMwLpBl7UygxayOGJmt0cNLXuo0uqT0V3Fuzk62EYLNqtQmgwIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFOSu3a/wW8JTeaV7aXXgdph2Q1gOMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMjUyZmFjZTktOGNjOS0z
N2FjLTlkMDktNTE2YjUxMjg1OWZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFA+6j
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQBvx9/kbeJSiOgL2k5yBlbbGkt6/iQP1fyj8/TD
72jLgtTp5PgSqzkQAk/Ui6A0YXeWSalAkMYjo2g2gE0I7/E0xhXLnctdHTak6j3Z
d0B67v0QvAAstvKBC0xuyinEdjaXOd5QtEQk2gSM9vNJ6dqs8hjjxmWFURD5J/NY
25mArEJtS8pbvMCl7sjNDJTsh9Qh9SYw9VYWach1T3Cz/QThYdfZUBqoTzqQ40pb
BlvrkhrfA0ZVUHUw9N78H1eskyg2um+ccNpASqLV+0jeL3Dj3/d1V0BmrgDH94GJ
EWfmTpwwMaZFj81NwsjwXsm78i1HRSPXH74ne/UcOJl2B2nP
-----END CERTIFICATE-----
Generated at Sun Jun 28 23:08:30 2026 by rpki-client