Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/295b95b3-25fa-3b2d-946f-793ffaef9e40.roa
File:                     295b95b3-25fa-3b2d-946f-793ffaef9e40.roa (raw, json)
Hash identifier:          K+j8UHuJ2m9tnBPR9WDUS09PXsp55dL7/6R0sUElp9g=
Subject key identifier:   FD:BF:C9:86:BB:C8:5D:EF:9A:99:5D:20:40:D9:9E:EA:98:52:91:E9
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584EBB11AFE6918464DDEC1A7100
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/295b95b3-25fa-3b2d-946f-793ffaef9e40.roa
Signing time:             Wed 05 Aug 2026 01:00:12 +0000
ROA not before:           Wed 05 Aug 2026 01:00:12 +0000
ROA not after:            Tue 03 Nov 2026 02:00:12 +0000
asID:                     396620
IP address blocks:        2001:503:c27::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 21 Aug 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:bb:11:af:e6:91:84:64:dd:ec:1a:71:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug  5 01:00:12 2026 GMT
            Not After : Nov  3 02:00:12 2026 GMT
        Subject: CN=7868c0dc-1ffe-4d1d-bff2-d973b20e5675
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:8f:f2:64:7e:9b:01:29:f5:f1:c9:a4:f5:25:
                    16:62:8c:0f:b2:8e:f4:91:cd:e2:5b:40:4c:aa:7e:
                    fb:71:fa:59:5e:f7:65:98:d8:72:95:df:8b:bc:11:
                    fe:c2:c0:4a:84:79:c6:f2:65:f0:97:7b:6b:0d:b5:
                    70:65:2a:c7:a3:65:aa:13:76:e8:2b:6c:46:19:e2:
                    06:9a:cb:de:63:74:39:15:eb:ca:6c:bc:46:8e:b7:
                    55:89:a4:2c:22:41:3f:6f:72:c2:6e:46:04:35:53:
                    59:c8:94:f8:39:bb:44:d7:b2:fd:49:55:d0:38:9a:
                    79:a0:43:39:26:35:3e:a0:ce:ce:f1:14:cb:f0:25:
                    0b:09:59:37:31:7d:1d:f7:b2:8c:59:e4:5c:2e:e5:
                    7d:f2:20:5e:b2:77:a5:53:0e:44:38:f5:09:76:f6:
                    df:c8:ed:c2:8d:c1:66:41:c8:ca:db:bd:d7:37:97:
                    36:d0:6e:ba:cc:90:60:59:4d:b2:0c:26:cb:09:9b:
                    84:9a:e4:25:8a:ac:ce:91:82:2c:fd:99:ae:6e:a2:
                    e6:97:b8:ac:d3:7e:3e:c1:25:35:a6:d5:7f:73:05:
                    e3:54:cf:2a:20:49:04:a2:9f:6f:29:86:c1:24:6a:
                    f2:fb:12:1e:fc:e4:4d:2e:96:ff:9e:be:26:55:6d:
                    3e:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:BF:C9:86:BB:C8:5D:EF:9A:99:5D:20:40:D9:9E:EA:98:52:91:E9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/295b95b3-25fa-3b2d-946f-793ffaef9e40.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:c27::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:20:e8:32:10:18:f2:8a:d7:0a:08:ca:60:9c:df:9e:0f:b0:
         b3:4d:43:9c:f9:c1:aa:85:e3:c0:8c:53:4b:a4:49:d5:68:aa:
         72:eb:36:c9:66:9d:17:4b:bd:8d:93:f3:cc:46:1b:7e:45:46:
         95:59:99:14:8e:43:59:ac:fd:14:c7:2b:22:9e:33:9d:e4:b7:
         1c:95:64:97:ce:3c:14:55:96:8e:86:d8:7d:b9:28:c4:80:db:
         d8:a4:cc:64:69:1e:72:2c:b9:b4:8d:7a:79:b6:04:f0:2f:ce:
         e6:61:9a:a3:5a:38:f9:8a:a0:0c:18:7a:43:9d:d7:3d:30:b0:
         d8:1b:f7:87:dc:c2:08:73:f7:d2:45:86:ab:05:82:ef:4a:4e:
         1d:e4:a4:a9:2a:2a:d5:b4:be:fe:e6:8d:32:a6:00:19:47:f6:
         27:07:8c:70:d1:81:bf:ae:c2:73:a8:42:3c:0e:62:af:2f:2e:
         53:43:d3:7a:08:f5:08:7f:4d:7e:33:25:01:9b:b9:8b:f1:cb:
         2a:d3:9a:51:5b:79:63:ae:7d:a1:ca:d1:37:17:7c:5c:51:7f:
         a6:60:3b:fb:e7:3a:fd:fc:55:8e:20:f1:6e:d1:ab:36:ac:19:
         82:1d:f9:a5:a7:ba:b2:a2:24:d0:73:af:96:31:41:c7:3f:db:
         71:e1:36:0f
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE67Ea/mkYRk3ewacQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDgwNTAxMDAxMloXDTI2MTEwMzAyMDAxMlowLzEtMCsGA1UEAxMk
Nzg2OGMwZGMtMWZmZS00ZDFkLWJmZjItZDk3M2IyMGU1Njc1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy4/yZH6bASn18cmk9SUWYowPso70kc3iW0BM
qn77cfpZXvdlmNhyld+LvBH+wsBKhHnG8mXwl3trDbVwZSrHo2WqE3boK2xGGeIG
msveY3Q5FevKbLxGjrdViaQsIkE/b3LCbkYENVNZyJT4ObtE17L9SVXQOJp5oEM5
JjU+oM7O8RTL8CULCVk3MX0d97KMWeRcLuV98iBesnelUw5EOPUJdvbfyO3CjcFm
QcjK273XN5c20G66zJBgWU2yDCbLCZuEmuQliqzOkYIs/ZmubqLml7is034+wSU1
ptV/cwXjVM8qIEkEop9vKYbBJGry+xIe/ORNLpb/nr4mVW0+WQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFP2/yYa7yF3vmpldIEDZnuqYUpHpMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMjk1Yjk1YjMtMjVmYS0z
YjJkLTk0NmYtNzkzZmZhZWY5ZTQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAwwn
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAEkg6DIQGPKK1woIymCc354PsLNNQ5z5waqF48CMU0ukSdVoqnLr
NslmnRdLvY2T88xGG35FRpVZmRSOQ1ms/RTHKyKeM53ktxyVZJfOPBRVlo6G2H25
KMSA29ikzGRpHnIsubSNenm2BPAvzuZhmqNaOPmKoAwYekOd1z0wsNgb94fcwghz
99JFhqsFgu9KTh3kpKkqKtW0vv7mjTKmABlH9icHjHDRgb+uwnOoQjwOYq8vLlND
03oI9Qh/TX4zJQGbuYvxyyrTmlFbeWOufaHK0TcXfFxRf6ZgO/vnOv38VY4g8W7R
qzasGYId+aWnurKiJNBzr5YxQcc/23HhNg8=
-----END CERTIFICATE-----
Generated at Wed Aug 19 17:04:46 2026 by rpki-client