Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/88cf2a4e-4125-3725-85f4-cba598b5ef93.roa
File:                     88cf2a4e-4125-3725-85f4-cba598b5ef93.roa (raw, json)
Hash identifier:          cg1xgwYwduPtVr8OfT4SNc6AzJ56KXRc+NUHjJK60hc=
Subject key identifier:   82:B4:70:C7:31:10:27:C5:3A:45:FD:99:36:92:7D:77:18:06:74:45
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E4F1F546A1CB94EAA91B8F680
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/88cf2a4e-4125-3725-85f4-cba598b5ef93.roa
Signing time:             Sat 27 Jun 2026 09:00:12 +0000
ROA not before:           Sat 27 Jun 2026 09:00:12 +0000
ROA not after:            Fri 25 Sep 2026 09:00:12 +0000
asID:                     396583
IP address blocks:        2620:0:5050::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 30 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:4f:1f:54:6a:1c:b9:4e:aa:91:b8:f6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun 27 09:00:12 2026 GMT
            Not After : Sep 25 09:00:12 2026 GMT
        Subject: CN=5713f250-3add-4c86-a3f6-49b9d8f2c3ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:2d:b2:82:56:eb:c2:b2:a7:56:c9:72:4a:10:
                    66:5c:f1:c8:62:4a:63:5b:f0:47:62:45:69:a2:c7:
                    5a:aa:32:d9:89:5c:bd:a3:28:f9:65:41:e9:f9:c4:
                    c8:60:14:63:be:82:be:b3:dd:a8:92:b1:db:be:8f:
                    ff:0a:a0:80:e9:45:33:a7:8f:98:ed:f9:2f:99:e5:
                    3a:85:cb:60:b8:92:ed:de:b1:03:c7:9f:47:49:c7:
                    eb:18:9f:98:f8:fa:6c:15:8d:3f:7c:34:d2:92:c8:
                    8f:85:5f:a1:ff:f2:b5:e2:96:98:d7:7a:ea:31:c5:
                    3c:48:cd:c3:84:aa:57:b0:a8:98:a1:14:0e:2c:25:
                    56:de:9c:6f:81:aa:aa:03:a8:74:a9:9c:c7:f9:44:
                    dd:fe:fd:6b:d3:f9:f0:70:8c:ed:0f:ce:4a:54:c2:
                    20:d8:f3:6b:d1:8f:f6:c2:18:44:47:54:50:66:8a:
                    07:ff:52:b6:02:a4:f5:f5:8a:60:38:bc:11:f0:a9:
                    3b:fc:0f:5e:b4:a6:d3:6b:49:69:8a:f8:65:6f:d5:
                    18:4a:67:03:fa:d5:9c:da:4c:f8:65:a9:2f:63:dc:
                    38:65:77:54:61:c0:fa:8a:7a:71:0b:0b:c4:ba:bc:
                    d4:20:68:de:1e:1f:1a:b3:cf:ad:46:ea:26:95:b5:
                    f8:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:B4:70:C7:31:10:27:C5:3A:45:FD:99:36:92:7D:77:18:06:74:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/88cf2a4e-4125-3725-85f4-cba598b5ef93.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:0:5050:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:4e:e5:25:91:c8:35:3f:0d:eb:90:54:2d:49:b6:03:c6:67:
         1e:78:aa:35:d7:c8:5a:23:45:f9:10:19:f3:a1:df:f2:dc:35:
         9d:cd:ca:ce:71:4a:51:bb:90:48:23:ab:95:0e:5b:a6:9c:0e:
         d2:7d:06:dc:64:37:70:01:56:6a:0d:1a:55:17:17:4c:88:a9:
         35:25:58:34:4d:39:3b:4d:f6:93:45:fb:96:38:f3:32:01:da:
         33:fb:7e:e2:80:fe:d5:2a:57:1a:05:78:c8:7b:99:05:24:7c:
         99:7e:5a:ea:77:d9:9e:aa:91:70:80:9b:39:65:62:3c:50:57:
         4d:50:ad:2e:05:2b:22:13:c9:fc:ad:7f:30:a2:76:85:d3:46:
         c3:75:37:ff:62:20:d0:8e:43:63:a6:49:f0:64:0b:3a:90:b2:
         be:16:6c:9f:94:31:21:f3:31:b6:11:f5:25:04:2b:f4:25:2d:
         c7:1b:3c:eb:ab:29:39:03:73:cf:ab:b5:61:88:05:51:4d:e0:
         de:2e:aa:d1:f6:bc:68:7a:30:6b:11:eb:a7:ca:64:54:5e:37:
         da:b2:51:91:37:4a:0d:64:30:04:fe:a5:bf:21:1d:76:09:37:
         ee:fe:89:03:1c:94:ed:ce:1f:ec:b9:98:b4:7b:72:ad:be:d4:
         99:75:0d:66
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE5PH1RqHLlOqpG49oAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDYyNzA5MDAxMloXDTI2MDkyNTA5MDAxMlowLzEtMCsGA1UEAxMk
NTcxM2YyNTAtM2FkZC00Yzg2LWEzZjYtNDliOWQ4ZjJjM2JhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgi2yglbrwrKnVslyShBmXPHIYkpjW/BHYkVp
osdaqjLZiVy9oyj5ZUHp+cTIYBRjvoK+s92okrHbvo//CqCA6UUzp4+Y7fkvmeU6
hctguJLt3rEDx59HScfrGJ+Y+PpsFY0/fDTSksiPhV+h//K14paY13rqMcU8SM3D
hKpXsKiYoRQOLCVW3pxvgaqqA6h0qZzH+UTd/v1r0/nwcIztD85KVMIg2PNr0Y/2
whhER1RQZooH/1K2AqT19YpgOLwR8Kk7/A9etKbTa0lpivhlb9UYSmcD+tWc2kz4
ZakvY9w4ZXdUYcD6inpxCwvEurzUIGjeHh8as8+tRuomlbX4RQIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFIK0cMcxECfFOkX9mTaSfXcYBnRFMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvODhjZjJhNGUtNDEyNS0z
NzI1LTg1ZjQtY2JhNTk4YjVlZjkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAAFBQ
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQA0TuUlkcg1Pw3rkFQtSbYDxmceeKo118haI0X5
EBnzod/y3DWdzcrOcUpRu5BII6uVDlumnA7SfQbcZDdwAVZqDRpVFxdMiKk1JVg0
TTk7TfaTRfuWOPMyAdoz+37igP7VKlcaBXjIe5kFJHyZflrqd9meqpFwgJs5ZWI8
UFdNUK0uBSsiE8n8rX8wonaF00bDdTf/YiDQjkNjpknwZAs6kLK+FmyflDEh8zG2
EfUlBCv0JS3HGzzrqyk5A3PPq7VhiAVRTeDeLqrR9rxoejBrEeunymRUXjfaslGR
N0oNZDAE/qW/IR12CTfu/okDHJTtzh/suZi0e3KtvtSZdQ1m
-----END CERTIFICATE-----
Generated at Sun Jun 28 19:34:43 2026 by rpki-client