Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ac55a0f8-6841-3b9c-86a1-5270c022f11b.roa
File:                     ac55a0f8-6841-3b9c-86a1-5270c022f11b.roa (raw, json)
Hash identifier:          GQNp8EbR1w/HNamstVnvKSzLFphXK6VCycsFw9yqU8s=
Subject key identifier:   60:F0:79:04:9E:91:5C:DC:D8:89:3F:74:8C:5B:24:50:90:95:DE:34
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584EB57C6224EDC0ABE9A410ECC0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ac55a0f8-6841-3b9c-86a1-5270c022f11b.roa
Signing time:             Mon 03 Aug 2026 01:00:11 +0000
ROA not before:           Mon 03 Aug 2026 01:00:11 +0000
ROA not after:            Sun 01 Nov 2026 01:00:11 +0000
asID:                     396588
IP address blocks:        2001:500:856e::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 21 Aug 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:b5:7c:62:24:ed:c0:ab:e9:a4:10:ec:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug  3 01:00:11 2026 GMT
            Not After : Nov  1 01:00:11 2026 GMT
        Subject: CN=aa3ef451-5bb2-4a0e-9d0a-70e2db2aabf9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:17:2a:42:60:1a:99:0c:60:b2:cb:18:85:89:
                    8f:7c:e4:e0:a5:f1:8f:be:b9:62:eb:8d:8b:fc:d0:
                    74:02:ae:42:e2:47:4e:8d:fb:f9:ea:d7:9f:f2:95:
                    dd:4e:34:25:cb:3b:d8:b7:ae:df:15:82:38:9b:ea:
                    ea:54:62:ed:e2:f2:b2:c5:3c:2d:89:42:cf:2f:a7:
                    c9:88:89:bf:3a:aa:49:b3:77:17:7c:0f:97:06:bd:
                    d6:a5:95:75:9a:cd:89:66:6e:1f:76:7e:b3:0f:ad:
                    41:05:9f:eb:66:5a:1c:ef:5a:49:57:ac:57:e5:bc:
                    85:b8:83:80:a0:aa:cd:f4:a9:67:23:7b:c9:5b:09:
                    bb:9b:cf:1f:70:7c:7a:0d:03:00:0f:ea:6b:21:75:
                    42:77:91:fb:05:65:98:f5:56:b4:f9:30:2f:ae:f0:
                    74:5a:97:d1:4e:6f:d7:77:33:fe:53:b0:44:c3:91:
                    30:95:76:9c:83:a6:e5:24:7c:9d:cf:e6:cc:84:19:
                    b6:1b:c6:0c:a6:26:48:f0:9c:b8:b1:5b:dc:d3:82:
                    ed:89:a9:84:cb:89:6d:06:d3:9b:23:ac:5a:ec:3c:
                    53:f3:4e:ba:f5:64:6f:2a:c5:85:18:eb:2c:6a:e2:
                    89:af:8f:86:b3:28:09:ea:ff:63:cc:47:5d:6f:23:
                    15:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:F0:79:04:9E:91:5C:DC:D8:89:3F:74:8C:5B:24:50:90:95:DE:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ac55a0f8-6841-3b9c-86a1-5270c022f11b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:856e:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:1b:58:3d:0a:8b:70:a6:74:4f:2b:f4:be:23:6f:ac:50:43:
         62:9e:bd:e5:11:4e:33:0c:74:70:2b:87:0b:7c:00:e9:64:84:
         5a:1a:8e:da:2d:24:b0:92:49:38:15:f7:ec:b6:a3:89:3e:b3:
         c2:5c:cf:df:f0:60:a1:dc:f3:de:56:fa:25:0b:d3:91:97:74:
         06:08:39:65:2a:7c:94:6e:32:13:0f:c1:2e:f9:d8:6c:6b:ac:
         94:1e:67:b3:ad:d1:0b:97:10:ad:12:93:c0:ba:85:46:ad:ac:
         c1:0f:d0:66:f4:9f:7c:7f:1d:87:5b:19:f4:99:81:81:6a:e6:
         83:ff:19:e7:d9:30:70:4e:e8:1a:e1:c0:f8:8e:f6:1f:b8:f4:
         48:49:9f:fa:b0:fc:ab:e6:ac:ab:b4:88:8e:98:8d:ba:e5:27:
         54:73:b6:69:2e:3b:53:f0:38:98:e5:e3:46:2c:02:da:23:b3:
         1b:e2:49:17:94:c1:08:c3:88:06:1a:57:a4:87:e9:c1:95:cf:
         e9:ad:7d:c8:39:96:e3:df:75:03:50:6f:01:79:1b:86:c2:f6:
         07:46:32:20:02:c0:e2:3b:31:08:91:39:12:59:96:9d:25:5b:
         38:14:15:f1:56:fb:d8:f5:41:30:71:0c:ef:81:35:47:3f:aa:
         ba:dc:a3:68
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE61fGIk7cCr6aQQ7MAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDgwMzAxMDAxMVoXDTI2MTEwMTAxMDAxMVowLzEtMCsGA1UEAxMk
YWEzZWY0NTEtNWJiMi00YTBlLTlkMGEtNzBlMmRiMmFhYmY5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApRcqQmAamQxgsssYhYmPfOTgpfGPvrli642L
/NB0Aq5C4kdOjfv56tef8pXdTjQlyzvYt67fFYI4m+rqVGLt4vKyxTwtiULPL6fJ
iIm/OqpJs3cXfA+XBr3WpZV1ms2JZm4fdn6zD61BBZ/rZloc71pJV6xX5byFuIOA
oKrN9KlnI3vJWwm7m88fcHx6DQMAD+prIXVCd5H7BWWY9Va0+TAvrvB0WpfRTm/X
dzP+U7BEw5EwlXacg6blJHydz+bMhBm2G8YMpiZI8Jy4sVvc04LtiamEy4ltBtOb
I6xa7DxT80669WRvKsWFGOssauKJr4+GsygJ6v9jzEddbyMVGwIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFGDweQSekVzc2Ik/dIxbJFCQld40MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYWM1NWEwZjgtNjg0MS0z
YjljLTg2YTEtNTI3MGMwMjJmMTFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAIVu
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQCVG1g9CotwpnRPK/S+I2+sUENinr3lEU4zDHRw
K4cLfADpZIRaGo7aLSSwkkk4FffstqOJPrPCXM/f8GCh3PPeVvolC9ORl3QGCDll
KnyUbjITD8Eu+dhsa6yUHmezrdELlxCtEpPAuoVGrazBD9Bm9J98fx2HWxn0mYGB
auaD/xnn2TBwTuga4cD4jvYfuPRISZ/6sPyr5qyrtIiOmI265SdUc7ZpLjtT8DiY
5eNGLALaI7Mb4kkXlMEIw4gGGlekh+nBlc/prX3IOZbj33UDUG8BeRuGwvYHRjIg
AsDiOzEIkTkSWZadJVs4FBXxVvvY9UEwcQzvgTVHP6q63KNo
-----END CERTIFICATE-----
Generated at Wed Aug 19 18:46:43 2026 by rpki-client