Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/60b37323-7fd8-3669-ac46-f0d6ed767e6e.roa
File:                     60b37323-7fd8-3669-ac46-f0d6ed767e6e.roa (raw, json)
Hash identifier:          IDfomtdFy/aTI3cbgxsdxk91TcDu0eog6xHO9UePkHc=
Subject key identifier:   0A:EA:19:58:8B:64:F1:66:13:52:7A:6B:B7:E4:16:8E:B6:6E:64:37
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F498AFC23534246838F92E240
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/60b37323-7fd8-3669-ac46-f0d6ed767e6e.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     397203
IP address blocks:        2001:501:b1f9::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:8a:fc:23:53:42:46:83:8f:92:e2:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=1c37e13c-b40c-4dbd-a8f8-1bf7bb79442d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:b2:34:0d:8f:ed:63:c5:c2:da:59:cc:65:7e:
                    22:f9:d8:92:b1:25:b2:5f:bb:9c:6b:24:06:61:f6:
                    98:2c:e9:70:cb:23:00:e4:65:37:a5:cc:88:18:5d:
                    9a:78:5c:57:c0:79:a9:84:74:9b:03:9a:f4:a0:6c:
                    c9:36:68:42:47:dc:93:25:f8:93:ad:f6:db:f5:7b:
                    a3:9c:b7:cf:94:06:c4:6e:43:bc:78:72:87:e0:2f:
                    94:f5:dc:36:83:cd:9d:c9:38:78:83:3f:cb:0b:eb:
                    3f:48:96:5d:12:22:42:f6:5c:ae:10:66:7a:35:13:
                    5e:31:5e:c4:bd:67:15:12:5c:1d:9b:5c:35:19:7b:
                    bc:14:13:d8:df:ff:f2:1d:a1:94:eb:6e:d0:4e:ac:
                    5a:05:b4:be:9f:e1:29:c4:b5:74:ad:63:6f:24:7b:
                    19:e5:f1:89:b1:a0:e8:87:94:29:59:b3:73:a3:fc:
                    05:76:4e:91:b0:fa:98:5e:e0:e8:0e:fe:5f:49:ac:
                    e5:61:fd:6b:2b:15:5d:da:f8:35:8c:b9:95:2f:08:
                    1b:9b:3f:92:52:4c:46:1e:d1:09:49:b1:07:2b:4a:
                    94:29:ec:48:be:5f:56:8a:2a:dc:c4:43:fd:21:fa:
                    38:6a:b8:28:bf:20:28:36:b8:bb:5e:93:17:d2:2f:
                    a1:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:EA:19:58:8B:64:F1:66:13:52:7A:6B:B7:E4:16:8E:B6:6E:64:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/60b37323-7fd8-3669-ac46-f0d6ed767e6e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:501:b1f9:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:6f:78:80:98:da:7f:4d:a4:21:8d:11:dc:fb:b2:9e:97:f2:
         7a:e6:46:cb:5b:4d:fc:86:d5:a5:b8:b5:15:9f:2a:a0:1d:f5:
         f7:e7:fa:4d:83:42:eb:d9:5d:d1:0f:56:5c:8c:16:9e:c8:52:
         da:d6:c8:21:59:01:c1:b3:18:5f:b0:1d:b3:5e:c2:d7:4e:d5:
         6e:9d:64:03:cb:9a:ca:40:13:28:a2:21:20:10:5e:79:97:f2:
         ff:ca:79:95:86:ca:68:34:8e:2c:30:02:57:0d:dd:2f:33:3d:
         f9:4e:16:49:d4:14:a2:2f:e6:33:e5:2c:69:8d:b3:f3:e8:87:
         c1:88:dc:c7:89:ca:76:77:6a:2e:74:a1:33:fc:6b:51:65:2a:
         ee:b7:97:69:d4:5d:f0:a3:a1:d8:46:2d:e4:6c:eb:b9:77:ad:
         6b:17:de:fe:2a:23:83:b2:f7:c9:da:a1:91:35:21:25:66:38:
         bc:e4:53:99:7c:1f:30:2a:4a:55:e7:40:e1:81:d6:6a:43:6d:
         e1:6d:89:d4:72:77:c1:cb:1d:2f:bc:50:f4:0e:f9:79:fa:60:
         2f:31:91:9f:87:aa:49:9d:12:1d:7d:e4:7d:06:69:48:be:60:
         ac:d5:4d:02:0c:3a:67:a8:94:4a:13:60:84:b6:22:21:b6:17:
         91:25:9e:78
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE9JivwjU0JGg4+S4kAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
MWMzN2UxM2MtYjQwYy00ZGJkLWE4ZjgtMWJmN2JiNzk0NDJkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsbI0DY/tY8XC2lnMZX4i+diSsSWyX7ucayQG
YfaYLOlwyyMA5GU3pcyIGF2aeFxXwHmphHSbA5r0oGzJNmhCR9yTJfiTrfbb9Xuj
nLfPlAbEbkO8eHKH4C+U9dw2g82dyTh4gz/LC+s/SJZdEiJC9lyuEGZ6NRNeMV7E
vWcVElwdm1w1GXu8FBPY3//yHaGU627QTqxaBbS+n+EpxLV0rWNvJHsZ5fGJsaDo
h5QpWbNzo/wFdk6RsPqYXuDoDv5fSazlYf1rKxVd2vg1jLmVLwgbmz+SUkxGHtEJ
SbEHK0qUKexIvl9WiircxEP9Ifo4argovyAoNri7XpMX0i+hswIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFArqGViLZPFmE1J6a7fkFo62bmQ3MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNjBiMzczMjMtN2ZkOC0z
NjY5LWFjNDYtZjBkNmVkNzY3ZTZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAbH5
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQCbb3iAmNp/TaQhjRHc+7Kel/J65kbLW038htWl
uLUVnyqgHfX35/pNg0Lr2V3RD1ZcjBaeyFLa1sghWQHBsxhfsB2zXsLXTtVunWQD
y5rKQBMooiEgEF55l/L/ynmVhspoNI4sMAJXDd0vMz35ThZJ1BSiL+Yz5SxpjbPz
6IfBiNzHicp2d2oudKEz/GtRZSrut5dp1F3wo6HYRi3kbOu5d61rF97+KiODsvfJ
2qGRNSElZji85FOZfB8wKkpV50DhgdZqQ23hbYnUcnfByx0vvFD0Dvl5+mAvMZGf
h6pJnRIdfeR9BmlIvmCs1U0CDDpnqJRKE2CEtiIhtheRJZ54
-----END CERTIFICATE-----
Generated at Thu Oct 8 19:27:17 2026 by rpki-client