Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5b88dcb1-05fd-39ac-841b-0072ed0b239d.roa
File:                     5b88dcb1-05fd-39ac-841b-0072ed0b239d.roa (raw, json)
Hash identifier:          rAw7yq4/V+KnZy50KX72RPbpXlARHMR+ii9h+E1oNUw=
Subject key identifier:   BA:F5:D3:D5:62:0D:C2:49:79:B7:DC:F6:C7:70:8D:D7:B6:41:0F:12
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584EAD1C3B479447B61FC4AAE420
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5b88dcb1-05fd-39ac-841b-0072ed0b239d.roa
Signing time:             Fri 31 Jul 2026 01:00:11 +0000
ROA not before:           Fri 31 Jul 2026 01:00:11 +0000
ROA not after:            Thu 29 Oct 2026 01:00:11 +0000
asID:                     27544
IP address blocks:        2001:503:231d::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 21 Aug 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ad:1c:3b:47:94:47:b6:1f:c4:aa:e4:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 31 01:00:11 2026 GMT
            Not After : Oct 29 01:00:11 2026 GMT
        Subject: CN=cb282962-2393-4f6a-9920-a5d3e0a7903c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:41:66:f6:8b:2f:cb:b0:df:57:d1:06:73:4e:
                    d8:63:7f:9f:f8:ec:75:d3:d9:16:2e:00:ab:19:ae:
                    7a:1d:6f:a5:e9:e8:6d:db:d8:11:21:f6:ad:a8:52:
                    d3:68:0a:ef:4f:28:40:a3:e5:05:89:e9:ef:60:31:
                    db:9e:a0:1e:66:00:ff:8b:94:c4:07:f9:69:7c:7a:
                    08:b8:bc:62:ca:4d:af:fe:9c:7a:7d:f0:63:e7:7a:
                    1b:42:28:53:27:08:e5:cb:97:5e:69:38:48:df:7d:
                    59:9f:f5:fb:ff:d2:05:56:ff:36:af:f6:a9:f2:cd:
                    92:52:a6:21:46:ef:97:d3:9a:71:16:31:0e:12:66:
                    87:79:0f:d0:05:27:73:46:9e:99:da:e9:25:0e:f3:
                    da:8a:c5:3e:08:75:be:d1:8e:f3:28:2d:95:47:c8:
                    5f:e2:d6:59:89:b7:f8:1f:39:31:ed:c5:32:87:37:
                    1d:ce:8e:9a:6b:80:72:4c:96:43:32:0e:c4:67:f3:
                    ca:c1:d3:f9:37:75:f1:e3:a0:3c:cc:95:18:fa:7a:
                    19:ab:90:2d:6d:bd:19:0d:3e:cb:c9:25:e5:1e:02:
                    5e:b2:c4:38:3c:c0:bc:85:ba:0e:26:4a:0d:39:37:
                    bf:d5:93:e9:2b:63:ab:55:48:d1:12:d8:24:fb:8a:
                    ef:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:F5:D3:D5:62:0D:C2:49:79:B7:DC:F6:C7:70:8D:D7:B6:41:0F:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5b88dcb1-05fd-39ac-841b-0072ed0b239d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:231d::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:bd:6c:e4:d8:f4:e4:b6:ec:60:ec:99:23:57:3c:13:76:8f:
         22:02:b4:22:23:27:74:bc:95:b6:ba:ac:29:d3:cc:bc:15:26:
         a6:ee:88:fe:56:74:da:45:69:00:39:a5:5d:d1:64:e6:c4:61:
         68:b2:37:35:e5:6d:97:9d:a1:44:2b:0a:17:60:a0:13:0d:0f:
         8f:2c:c0:0f:4e:bc:62:5e:ba:68:86:e3:bb:25:63:c3:17:5f:
         7f:07:34:3e:ee:89:b7:58:2a:0e:15:1e:1a:90:8f:7c:29:6e:
         2d:90:d8:62:fd:eb:e8:e7:da:e6:6b:85:29:d8:9f:7e:64:dc:
         56:e8:83:66:2a:8e:71:b2:7a:ef:8a:0d:3b:9a:b2:fd:06:3c:
         6f:4c:9a:dd:19:74:fe:6e:8f:57:2f:7f:51:46:49:53:f2:75:
         61:c9:b8:aa:ea:c0:4e:20:d2:5e:00:d4:20:a1:9d:ef:89:55:
         21:08:09:76:4a:83:10:10:31:9f:96:ce:01:8e:38:81:ab:2e:
         13:b1:f7:b2:10:d8:a7:23:f8:84:81:99:6f:28:a9:9a:b1:b4:
         57:19:f6:95:4e:e4:c7:e2:36:67:32:23:dc:93:68:ee:9e:fc:
         cf:5d:e9:ce:98:d8:54:bb:58:63:96:3f:1d:43:e4:5f:6f:7e:
         68:22:85:34
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE6tHDtHlEe2H8Sq5CAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDczMTAxMDAxMVoXDTI2MTAyOTAxMDAxMVowLzEtMCsGA1UEAxMk
Y2IyODI5NjItMjM5My00ZjZhLTk5MjAtYTVkM2UwYTc5MDNjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyEFm9osvy7DfV9EGc07YY3+f+Ox109kWLgCr
Ga56HW+l6eht29gRIfatqFLTaArvTyhAo+UFienvYDHbnqAeZgD/i5TEB/lpfHoI
uLxiyk2v/px6ffBj53obQihTJwjly5deaThI331Zn/X7/9IFVv82r/ap8s2SUqYh
Ru+X05pxFjEOEmaHeQ/QBSdzRp6Z2uklDvPaisU+CHW+0Y7zKC2VR8hf4tZZibf4
Hzkx7cUyhzcdzo6aa4ByTJZDMg7EZ/PKwdP5N3Xx46A8zJUY+noZq5Atbb0ZDT7L
ySXlHgJessQ4PMC8hboOJkoNOTe/1ZPpK2OrVUjREtgk+4rvlwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFLr109ViDcJJebfc9sdwjde2QQ8SMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNWI4OGRjYjEtMDVmZC0z
OWFjLTg0MWItMDA3MmVkMGIyMzlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAyMd
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAFK9bOTY9OS27GDsmSNXPBN2jyICtCIjJ3S8lba6rCnTzLwVJqbu
iP5WdNpFaQA5pV3RZObEYWiyNzXlbZedoUQrChdgoBMND48swA9OvGJeumiG47sl
Y8MXX38HND7uibdYKg4VHhqQj3wpbi2Q2GL96+jn2uZrhSnYn35k3Fbog2YqjnGy
eu+KDTuasv0GPG9Mmt0ZdP5uj1cvf1FGSVPydWHJuKrqwE4g0l4A1CChne+JVSEI
CXZKgxAQMZ+WzgGOOIGrLhOx97IQ2Kcj+ISBmW8oqZqxtFcZ9pVO5MfiNmcyI9yT
aO6e/M9d6c6Y2FS7WGOWPx1D5F9vfmgihTQ=
-----END CERTIFICATE-----
Generated at Wed Aug 19 18:45:32 2026 by rpki-client