Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/96fe7d51-bf4c-3201-9265-0ced16966385.roa
File:                     96fe7d51-bf4c-3201-9265-0ced16966385.roa (raw, json)
Hash identifier:          Bg1SOc2tQHAUd4LXbS3tL6WHRVgRlMkici9w9GvHGpk=
Subject key identifier:   F9:EB:C1:9A:84:41:78:4B:03:E0:9F:D0:13:17:0C:6F:02:DD:0F:08
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584EE22752F2F8A5CFE231075780
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/96fe7d51-bf4c-3201-9265-0ced16966385.roa
Signing time:             Wed 19 Aug 2026 01:00:12 +0000
ROA not before:           Wed 19 Aug 2026 01:00:12 +0000
ROA not after:            Tue 17 Nov 2026 02:00:12 +0000
asID:                     396592
IP address blocks:        2001:503:231d::2:30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 21 Aug 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e2:27:52:f2:f8:a5:cf:e2:31:07:57:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 19 01:00:12 2026 GMT
            Not After : Nov 17 02:00:12 2026 GMT
        Subject: CN=15ffa8ec-3cc4-4af6-b423-1c836a92237e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:0d:d5:a2:97:bb:63:9c:43:41:43:8e:d8:e4:
                    f6:67:4e:11:b7:5c:fa:11:7c:18:13:fa:be:34:20:
                    71:72:a3:cd:5f:0e:b4:57:da:9c:d4:24:5f:22:8a:
                    6a:ab:57:ec:f2:4a:3a:f5:80:3f:41:6c:2a:81:77:
                    b8:0c:54:eb:c0:27:23:26:4c:43:d2:f9:86:d2:12:
                    54:2d:2e:7b:f1:f6:a0:d2:13:5d:be:61:65:5c:ce:
                    75:6a:99:0f:d2:9a:59:79:6e:26:bf:cf:93:5c:3b:
                    14:1a:88:0d:64:9a:05:e7:97:d8:3e:2b:01:f7:c6:
                    56:84:41:92:39:f8:a4:35:b6:12:e6:ad:5a:af:8f:
                    e2:01:6c:63:fc:27:ea:00:4f:27:0e:9e:78:5d:87:
                    ad:a1:76:59:1d:65:87:bf:2a:0f:f3:e4:c8:98:98:
                    89:58:a3:75:8d:2b:28:91:7c:6c:45:8d:fa:d2:ca:
                    11:9a:84:20:24:ce:5c:f3:b3:63:fd:cf:3b:24:ea:
                    52:c5:a3:40:60:1a:86:93:eb:a6:06:e3:ea:90:99:
                    ff:89:7a:c5:d2:e8:d3:9c:58:2e:a2:95:55:b3:f0:
                    72:20:26:dd:db:e1:b9:2c:33:cb:79:e5:70:47:2a:
                    03:49:3e:7f:57:3e:56:15:42:bb:cf:1c:b9:21:03:
                    59:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:EB:C1:9A:84:41:78:4B:03:E0:9F:D0:13:17:0C:6F:02:DD:0F:08
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/96fe7d51-bf4c-3201-9265-0ced16966385.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:231d:0:0:0:2:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:97:33:ab:6c:4b:22:0a:4e:e2:31:9d:fd:6d:20:12:8d:fa:
         01:21:9c:e0:81:c2:c3:d4:11:16:b9:87:05:4f:2b:56:0f:73:
         94:de:df:5b:dd:c6:f4:4b:06:de:5a:bc:0a:20:37:b3:ff:43:
         ed:42:94:ec:07:d3:08:65:11:ee:55:56:75:ef:be:de:f7:a5:
         16:77:a5:68:36:53:97:69:65:1a:30:c0:b3:ec:16:ec:aa:0e:
         48:23:b1:39:7e:72:12:bd:52:a4:c9:45:32:bd:f7:17:7f:21:
         e9:50:f8:9a:af:7a:a7:ef:ef:e7:3e:9a:7d:30:aa:ed:88:a3:
         58:dd:1d:23:3c:42:66:2d:9e:f1:8f:a2:e8:4b:33:e3:52:db:
         1b:68:43:3d:d7:12:85:a8:09:64:38:7b:5b:a5:11:fb:fd:58:
         91:90:87:8d:ba:e6:e8:59:4b:98:ff:ca:5c:d8:e9:9e:55:81:
         62:a3:f7:3f:3a:bb:30:c9:47:0f:e4:ff:3d:65:b5:93:b9:05:
         42:3c:14:82:74:59:c5:1b:05:9d:0a:8e:87:61:de:70:43:a3:
         49:c0:e8:f6:fa:4d:90:b9:96:73:56:86:24:61:45:0d:11:ed:
         da:46:6d:62:88:58:c0:97:52:25:25:5c:5d:b1:44:d2:c7:25:
         d7:c8:1f:c5
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE7iJ1Ly+KXP4jEHV4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDgxOTAxMDAxMloXDTI2MTExNzAyMDAxMlowLzEtMCsGA1UEAxMk
MTVmZmE4ZWMtM2NjNC00YWY2LWI0MjMtMWM4MzZhOTIyMzdlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlA3Vope7Y5xDQUOO2OT2Z04Rt1z6EXwYE/q+
NCBxcqPNXw60V9qc1CRfIopqq1fs8ko69YA/QWwqgXe4DFTrwCcjJkxD0vmG0hJU
LS578fag0hNdvmFlXM51apkP0ppZeW4mv8+TXDsUGogNZJoF55fYPisB98ZWhEGS
OfikNbYS5q1ar4/iAWxj/CfqAE8nDp54XYetoXZZHWWHvyoP8+TImJiJWKN1jSso
kXxsRY360soRmoQgJM5c87Nj/c87JOpSxaNAYBqGk+umBuPqkJn/iXrF0ujTnFgu
opVVs/ByICbd2+G5LDPLeeVwRyoDST5/Vz5WFUK7zxy5IQNZtQIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFPnrwZqEQXhLA+Cf0BMXDG8C3Q8IMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvOTZmZTdkNTEtYmY0Yy0z
MjAxLTkyNjUtMGNlZDE2OTY2Mzg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAyMd
AAAAAAAAAAIAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQBZlzOrbEsiCk7iMZ39bSASjfoBIZzggcLD1BEW
uYcFTytWD3OU3t9b3cb0SwbeWrwKIDez/0PtQpTsB9MIZRHuVVZ1777e96UWd6Vo
NlOXaWUaMMCz7Bbsqg5II7E5fnISvVKkyUUyvfcXfyHpUPiar3qn7+/nPpp9MKrt
iKNY3R0jPEJmLZ7xj6LoSzPjUtsbaEM91xKFqAlkOHtbpRH7/ViRkIeNuuboWUuY
/8pc2OmeVYFio/c/OrswyUcP5P89ZbWTuQVCPBSCdFnFGwWdCo6HYd5wQ6NJwOj2
+k2QuZZzVoYkYUUNEe3aRm1iiFjAl1IlJVxdsUTSxyXXyB/F
-----END CERTIFICATE-----
Generated at Wed Aug 19 20:33:33 2026 by rpki-client