Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/61ad84b4-4d48-3a4e-8e44-6f2f22763aeb.roa
File:                     61ad84b4-4d48-3a4e-8e44-6f2f22763aeb.roa (raw, json)
Hash identifier:          qxKLn16i0ZeTSQ6+s/B807D+9zkUhmzxFvX1p+s8rII=
Subject key identifier:   F1:4D:E2:30:C4:12:3A:44:6C:3D:91:05:A6:F0:A5:B0:34:66:0E:31
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F498BE5DCA9A390BACAFB7780
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/61ad84b4-4d48-3a4e-8e44-6f2f22763aeb.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     396595
IP address blocks:        2001:503:d414::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 08 Oct 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:8b:e5:dc:a9:a3:90:ba:ca:fb:77:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=5396bd32-b60a-427e-935f-dea4b8419171
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:0b:e9:5e:c6:a5:aa:fa:01:69:78:fa:aa:51:
                    a5:36:20:c0:e6:a9:53:41:73:19:e9:58:5b:18:8b:
                    ee:1c:48:47:30:77:8e:cd:c6:43:4e:bd:8b:e4:68:
                    b0:2e:02:c6:57:e7:0f:a5:d8:a2:8d:5f:60:92:0a:
                    85:78:57:18:50:87:2b:53:af:94:a3:6a:22:6e:51:
                    8a:67:a2:b9:1b:a3:7a:65:93:dd:b8:e6:75:b3:e3:
                    1b:9b:bf:5a:23:4b:52:b9:49:9f:4c:ed:5f:6a:48:
                    a0:2c:55:d9:26:ba:09:af:89:c7:3b:14:35:1f:03:
                    11:83:f2:df:65:5b:6d:85:e4:c4:72:5a:a1:25:38:
                    73:cb:52:90:66:ec:4e:d3:54:a5:77:cb:8b:7f:19:
                    e1:1e:73:22:79:48:e9:3f:e9:d4:c2:b2:70:2d:26:
                    f1:a8:45:e6:e9:e6:6d:a8:25:02:8b:85:4d:ce:5f:
                    62:5c:34:6b:c1:e2:43:cf:84:05:09:65:31:ee:58:
                    88:08:a2:9d:c7:3c:34:6d:2c:bc:14:75:b2:aa:99:
                    a8:af:72:e2:0f:ea:a9:b5:3d:52:61:ef:28:57:4e:
                    ed:ee:ad:67:59:09:71:2a:17:a4:73:a6:c2:83:de:
                    2c:f4:36:8f:a3:f4:da:6e:39:14:f0:ab:bc:f6:5b:
                    0f:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:4D:E2:30:C4:12:3A:44:6C:3D:91:05:A6:F0:A5:B0:34:66:0E:31
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/61ad84b4-4d48-3a4e-8e44-6f2f22763aeb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:d414:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:9a:4a:2d:ea:9e:e2:ad:f5:89:9d:79:64:fb:ff:1b:d0:9e:
         00:66:a9:d4:33:46:eb:d0:a9:85:7a:60:81:c5:e5:52:f0:0d:
         3d:30:86:7b:73:2d:73:94:cb:4c:1a:51:32:98:b9:79:48:7e:
         2e:f2:e3:40:9d:56:4b:f8:bf:ab:0a:8e:e0:a8:aa:eb:2c:d5:
         10:ee:98:30:e1:16:c6:0b:df:6b:bf:35:26:24:71:55:2b:b8:
         04:63:04:b2:2a:d1:80:f8:93:c4:99:53:0f:2d:29:31:f2:4b:
         2b:8b:22:a0:16:fd:df:80:aa:c8:62:00:f0:17:0a:82:2e:93:
         99:e3:b5:cb:af:6c:32:78:1e:b8:68:76:e5:a2:03:a7:b0:1e:
         39:af:84:6c:21:e0:96:14:0b:c6:1d:98:f0:0e:80:cc:ae:15:
         f6:b8:0f:2a:eb:3e:f9:d2:7c:f4:d5:9a:c7:d8:ce:8f:1a:e8:
         16:c8:36:a2:ed:c6:3f:2f:1c:53:b4:ac:ff:f2:d1:a5:36:db:
         7f:08:89:78:9e:d1:f8:e6:66:a1:7c:ff:1c:51:5e:0a:9e:f0:
         33:4f:df:82:bd:1b:f4:67:0d:f8:25:6a:79:99:8c:b9:ee:37:
         9f:61:9f:f1:c6:8b:0b:97:9a:76:44:68:58:29:a3:17:a0:3f:
         5d:4d:6f:c6
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE9Ji+XcqaOQusr7d4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
NTM5NmJkMzItYjYwYS00MjdlLTkzNWYtZGVhNGI4NDE5MTcxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnQvpXsalqvoBaXj6qlGlNiDA5qlTQXMZ6Vhb
GIvuHEhHMHeOzcZDTr2L5GiwLgLGV+cPpdiijV9gkgqFeFcYUIcrU6+Uo2oiblGK
Z6K5G6N6ZZPduOZ1s+Mbm79aI0tSuUmfTO1fakigLFXZJroJr4nHOxQ1HwMRg/Lf
ZVttheTEclqhJThzy1KQZuxO01Sld8uLfxnhHnMieUjpP+nUwrJwLSbxqEXm6eZt
qCUCi4VNzl9iXDRrweJDz4QFCWUx7liICKKdxzw0bSy8FHWyqpmor3LiD+qptT1S
Ye8oV07t7q1nWQlxKhekc6bCg94s9DaPo/TabjkU8Ku89lsPcwIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFPFN4jDEEjpEbD2RBabwpbA0Zg4xMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNjFhZDg0YjQtNGQ0OC0z
YTRlLThlNDQtNmYyZjIyNzYzYWViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFA9QU
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQAWmkot6p7irfWJnXlk+/8b0J4AZqnUM0br0KmF
emCBxeVS8A09MIZ7cy1zlMtMGlEymLl5SH4u8uNAnVZL+L+rCo7gqKrrLNUQ7pgw
4RbGC99rvzUmJHFVK7gEYwSyKtGA+JPEmVMPLSkx8ksriyKgFv3fgKrIYgDwFwqC
LpOZ47XLr2wyeB64aHblogOnsB45r4RsIeCWFAvGHZjwDoDMrhX2uA8q6z750nz0
1ZrH2M6PGugWyDai7cY/LxxTtKz/8tGlNtt/CIl4ntH45mahfP8cUV4KnvAzT9+C
vRv0Zw34JWp5mYy57jefYZ/xxosLl5p2RGhYKaMXoD9dTW/G
-----END CERTIFICATE-----
Generated at Wed Oct 7 04:08:46 2026 by rpki-client