Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cfacf094-27e2-32b3-b01f-9f0f4eca4b1e.roa
File:                     cfacf094-27e2-32b3-b01f-9f0f4eca4b1e.roa (raw, json)
Hash identifier:          QWIeWfL+2WDm0NMcsnEWuEFTAhLpfdMp3XDWLQRYxNQ=
Subject key identifier:   91:86:9B:7F:52:E5:93:1D:30:9C:B1:AD:52:A2:39:A5:43:D2:0F:D1
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E4F1F4EA70C3F9855AA72C300
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cfacf094-27e2-32b3-b01f-9f0f4eca4b1e.roa
Signing time:             Sat 27 Jun 2026 09:00:12 +0000
ROA not before:           Sat 27 Jun 2026 09:00:12 +0000
ROA not after:            Fri 25 Sep 2026 09:00:12 +0000
asID:                     10515
IP address blocks:        2620:0:5050::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 30 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:4f:1f:4e:a7:0c:3f:98:55:aa:72:c3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun 27 09:00:12 2026 GMT
            Not After : Sep 25 09:00:12 2026 GMT
        Subject: CN=194326aa-45bd-43e2-8a52-960d5d4604fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:e5:65:a4:b6:d3:f5:df:16:dc:7c:f1:42:1b:
                    3d:6b:e4:0a:bc:1c:e1:eb:8d:ff:b9:ea:91:b1:70:
                    44:5d:bb:f1:46:f7:b5:52:4d:45:7e:b5:23:e3:52:
                    a3:3c:05:01:e4:1b:e4:dc:57:d0:ae:6d:d5:95:fe:
                    f7:82:49:90:1d:05:22:26:61:4c:48:f8:ba:40:2d:
                    db:2f:80:a8:bb:33:54:c5:91:23:09:d4:63:57:91:
                    91:21:07:66:05:00:20:f4:d7:15:0b:1e:29:d4:f0:
                    ee:75:84:3c:3e:8d:a2:6c:a3:33:68:5b:0b:14:75:
                    04:04:dd:9c:b5:e3:6c:d9:48:18:4e:7d:60:e3:12:
                    3c:cd:d8:45:30:bb:5f:0f:7b:94:37:9b:e4:08:17:
                    c2:e6:fc:c8:a9:3f:b0:36:29:27:7a:cf:0e:79:ad:
                    ce:e2:db:59:b5:17:1d:bd:3d:a8:24:3b:b1:a9:b7:
                    0a:df:f8:63:6b:75:8b:af:04:d4:c0:cd:f2:c1:ef:
                    7d:b8:08:c3:f7:61:64:a5:8e:41:b7:42:3b:d1:61:
                    24:e1:d1:02:39:9e:3d:a4:5a:c2:a0:12:77:c1:28:
                    5f:20:f3:21:73:8b:30:04:a4:bc:96:56:d9:bb:ca:
                    cb:07:53:24:81:2d:e3:67:c2:b3:96:3e:1d:cb:10:
                    d6:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:86:9B:7F:52:E5:93:1D:30:9C:B1:AD:52:A2:39:A5:43:D2:0F:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cfacf094-27e2-32b3-b01f-9f0f4eca4b1e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:0:5050:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9f:14:9e:6f:67:a6:d1:66:bd:13:af:c8:ba:ae:e7:6b:1c:2d:
         60:6d:34:59:1c:d9:8c:2e:35:86:62:8d:1f:7f:ce:83:1f:85:
         9c:b2:fd:b3:e3:3f:13:b8:b4:3f:8c:17:54:39:43:4e:24:d4:
         5a:81:da:ce:d7:5e:2b:19:ef:64:e6:3d:f1:81:79:79:46:92:
         a3:43:2e:0a:99:93:14:75:a6:d1:a3:92:9e:e5:3f:8d:35:62:
         23:72:c7:a7:34:bb:95:f4:93:bd:37:78:2b:3a:7a:a4:73:a6:
         dd:a9:f1:40:70:56:69:d6:8f:f9:9e:87:54:d3:87:e5:be:1a:
         07:4f:7d:9d:8c:20:ac:a6:dd:15:85:a5:68:f0:05:85:11:2c:
         63:b5:86:da:1e:74:ae:19:6a:ac:29:ad:55:3c:bd:d6:65:23:
         6d:06:bd:b4:53:0d:44:b6:7c:9e:fb:0a:3e:55:a7:08:99:76:
         ad:4b:9a:56:42:ab:68:ba:f2:f0:99:09:9b:0c:41:aa:bc:ba:
         b8:15:35:12:46:53:c5:78:47:8f:16:2f:a6:d9:fb:62:2e:e9:
         e4:b4:9a:08:0c:39:86:91:af:94:1d:d1:1f:fb:03:47:9f:a1:
         0c:56:15:81:4c:e4:58:08:57:e6:46:cb:f0:12:06:91:0e:92:
         df:b7:74:2a
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE5PH06nDD+YVapywwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDYyNzA5MDAxMloXDTI2MDkyNTA5MDAxMlowLzEtMCsGA1UEAxMk
MTk0MzI2YWEtNDViZC00M2UyLThhNTItOTYwZDVkNDYwNGZiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqeVlpLbT9d8W3HzxQhs9a+QKvBzh643/ueqR
sXBEXbvxRve1Uk1FfrUj41KjPAUB5Bvk3FfQrm3Vlf73gkmQHQUiJmFMSPi6QC3b
L4CouzNUxZEjCdRjV5GRIQdmBQAg9NcVCx4p1PDudYQ8Po2ibKMzaFsLFHUEBN2c
teNs2UgYTn1g4xI8zdhFMLtfD3uUN5vkCBfC5vzIqT+wNiknes8Oea3O4ttZtRcd
vT2oJDuxqbcK3/hja3WLrwTUwM3ywe99uAjD92FkpY5Bt0I70WEk4dECOZ49pFrC
oBJ3wShfIPMhc4swBKS8llbZu8rLB1MkgS3jZ8Kzlj4dyxDWkQIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFJGGm39S5ZMdMJyxrVKiOaVD0g/RMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvY2ZhY2YwOTQtMjdlMi0z
MmIzLWIwMWYtOWYwZjRlY2E0YjFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAAFBQ
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQCfFJ5vZ6bRZr0Tr8i6rudrHC1gbTRZHNmMLjWG
Yo0ff86DH4Wcsv2z4z8TuLQ/jBdUOUNOJNRagdrO114rGe9k5j3xgXl5RpKjQy4K
mZMUdabRo5Ke5T+NNWIjcsenNLuV9JO9N3grOnqkc6bdqfFAcFZp1o/5nodU04fl
vhoHT32djCCspt0VhaVo8AWFESxjtYbaHnSuGWqsKa1VPL3WZSNtBr20Uw1Etnye
+wo+VacImXatS5pWQqtouvLwmQmbDEGqvLq4FTUSRlPFeEePFi+m2ftiLunktJoI
DDmGka+UHdEf+wNHn6EMVhWBTORYCFfmRsvwEgaRDpLft3Qq
-----END CERTIFICATE-----
Generated at Sun Jun 28 20:36:11 2026 by rpki-client