Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/351cb160-40cd-3cf5-8b71-b432039090a1.roa
File:                     351cb160-40cd-3cf5-8b71-b432039090a1.roa (raw, json)
Hash identifier:          q+r0kWZxPTYN0FLufz/33jWrwDH6LyujgrSFJOa1Dxo=
Subject key identifier:   0E:BE:B3:AB:31:7B:D2:EE:03:FF:A6:71:22:B2:B2:41:35:65:F7:4B
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E4F1F462003552033DEB04F40
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/351cb160-40cd-3cf5-8b71-b432039090a1.roa
Signing time:             Sat 27 Jun 2026 09:00:12 +0000
ROA not before:           Sat 27 Jun 2026 09:00:12 +0000
ROA not after:            Fri 25 Sep 2026 09:00:12 +0000
asID:                     396542
IP address blocks:        2620:0:5050::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 30 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:4f:1f:46:20:03:55:20:33:de:b0:4f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun 27 09:00:12 2026 GMT
            Not After : Sep 25 09:00:12 2026 GMT
        Subject: CN=ec19e49d-4ac1-4716-a530-8838773656e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:9f:99:3c:0c:9c:cb:85:2f:da:93:a4:54:e5:
                    2c:c5:6d:1d:b0:b5:db:7d:90:cb:36:2a:db:ba:8f:
                    9f:88:df:88:1c:29:9b:ba:dc:ae:d4:6e:d9:71:9b:
                    c0:5f:f6:b8:2d:43:9e:27:1b:0e:d4:4d:76:05:43:
                    95:5b:8c:4b:94:f3:57:5c:a9:0d:24:01:c5:4f:89:
                    14:3a:f7:76:2a:96:a2:cd:8e:9d:71:40:48:fa:e1:
                    61:91:45:1d:0e:69:f0:c8:02:d1:07:48:1f:01:9b:
                    e4:fd:52:b8:81:82:1e:22:d4:30:bd:17:cd:32:d9:
                    4f:04:56:e7:bc:b8:95:ad:65:ce:5e:c5:7e:11:47:
                    84:ac:bb:98:c8:87:7d:20:0e:ee:01:ed:0e:dd:65:
                    ba:64:a9:d4:dc:cd:d1:6a:83:fa:9f:1a:e7:cd:a0:
                    34:4d:0a:1f:e6:56:2d:1f:76:f7:17:8e:df:c2:33:
                    63:c5:bf:40:b3:90:d2:0e:3d:a0:e2:91:c9:c3:4f:
                    5c:a7:4a:0b:65:3d:76:31:02:1d:ef:1f:11:bd:74:
                    02:5b:7c:68:0e:a8:c0:75:9e:b4:53:e8:f1:a7:93:
                    07:03:d7:6c:f3:a3:90:3b:1f:f7:c2:64:d3:35:4f:
                    15:fa:21:92:05:8f:ac:b4:42:a6:57:a5:07:69:65:
                    a3:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:BE:B3:AB:31:7B:D2:EE:03:FF:A6:71:22:B2:B2:41:35:65:F7:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/351cb160-40cd-3cf5-8b71-b432039090a1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:0:5050:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:8f:ea:66:93:bd:80:2d:1d:30:6e:26:51:b0:03:c5:d8:8f:
         3e:e5:04:7d:fb:56:2a:25:54:bf:ed:36:9a:dd:b8:24:34:a1:
         42:36:f1:e5:ec:78:00:2e:94:3a:ff:47:c5:b5:5c:09:9e:9c:
         19:2f:a3:aa:11:56:e0:fe:94:06:eb:79:16:62:75:03:67:9e:
         f8:d7:0b:ca:49:02:38:e9:dc:cc:fb:c5:2c:1f:d9:a9:c5:be:
         9b:72:d8:7d:6c:c6:09:e5:95:88:42:98:db:1e:c9:06:0b:12:
         7e:24:4e:46:40:bc:90:67:34:29:eb:b5:24:7e:5f:29:11:fb:
         fd:19:2c:3e:be:62:7b:85:fc:99:29:1b:bf:70:3e:b8:a0:8d:
         f5:fd:4e:c5:ec:9c:8f:3a:8d:2c:51:da:f0:06:2d:cb:3a:84:
         f6:0b:78:93:29:c8:9a:55:2c:b2:e9:d1:a4:c5:fb:31:55:8c:
         9a:8a:b2:2a:2c:39:56:bd:1f:5b:80:6a:af:a0:ae:67:8f:81:
         29:80:2a:16:0f:cb:e9:b1:b3:12:88:e6:b0:cf:f5:7a:83:7d:
         3d:3a:64:49:b7:dc:de:31:bf:8e:34:08:99:bd:26:78:a2:2d:
         9e:fd:8b:dd:e7:b0:b7:45:94:0f:f1:fc:93:ea:44:2d:91:5a:
         66:2c:58:89
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE5PH0YgA1UgM96wT0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDYyNzA5MDAxMloXDTI2MDkyNTA5MDAxMlowLzEtMCsGA1UEAxMk
ZWMxOWU0OWQtNGFjMS00NzE2LWE1MzAtODgzODc3MzY1NmU3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkp+ZPAycy4Uv2pOkVOUsxW0dsLXbfZDLNirb
uo+fiN+IHCmbutyu1G7ZcZvAX/a4LUOeJxsO1E12BUOVW4xLlPNXXKkNJAHFT4kU
Ovd2KpaizY6dcUBI+uFhkUUdDmnwyALRB0gfAZvk/VK4gYIeItQwvRfNMtlPBFbn
vLiVrWXOXsV+EUeErLuYyId9IA7uAe0O3WW6ZKnU3M3RaoP6nxrnzaA0TQof5lYt
H3b3F47fwjNjxb9As5DSDj2g4pHJw09cp0oLZT12MQId7x8RvXQCW3xoDqjAdZ60
U+jxp5MHA9ds86OQOx/3wmTTNU8V+iGSBY+stEKmV6UHaWWjJwIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFA6+s6sxe9LuA/+mcSKyskE1ZfdLMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMzUxY2IxNjAtNDBjZC0z
Y2Y1LThiNzEtYjQzMjAzOTA5MGExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAAFBQ
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQCHj+pmk72ALR0wbiZRsAPF2I8+5QR9+1YqJVS/
7Taa3bgkNKFCNvHl7HgALpQ6/0fFtVwJnpwZL6OqEVbg/pQG63kWYnUDZ5741wvK
SQI46dzM+8UsH9mpxb6bcth9bMYJ5ZWIQpjbHskGCxJ+JE5GQLyQZzQp67Ukfl8p
Efv9GSw+vmJ7hfyZKRu/cD64oI31/U7F7JyPOo0sUdrwBi3LOoT2C3iTKciaVSyy
6dGkxfsxVYyairIqLDlWvR9bgGqvoK5nj4EpgCoWD8vpsbMSiOawz/V6g309OmRJ
t9zeMb+ONAiZvSZ4oi2e/Yvd57C3RZQP8fyT6kQtkVpmLFiJ
-----END CERTIFICATE-----
Generated at Sun Jun 28 20:41:06 2026 by rpki-client