Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0042ca43-f62d-331a-bf7a-d18021f9eb0e.roa
File:                     0042ca43-f62d-331a-bf7a-d18021f9eb0e.roa (raw, json)
Hash identifier:          EYEK1bZsYVfrgpzdDqmjEsc47QUgSNDhiOdYJH6/8vI=
Subject key identifier:   24:57:57:A1:CA:BA:EA:81:4F:0E:B7:A8:70:71:3B:A8:09:DB:3A:29
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E7A64EEB6A0088591E8C5A6C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0042ca43-f62d-331a-bf7a-d18021f9eb0e.roa
Signing time:             Sun 12 Jul 2026 21:00:13 +0000
ROA not before:           Sun 12 Jul 2026 21:00:13 +0000
ROA not after:            Sat 10 Oct 2026 21:00:13 +0000
asID:                     36624
IP address blocks:        2001:500:120::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:7a:64:ee:b6:a0:08:85:91:e8:c5:a6:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 12 21:00:13 2026 GMT
            Not After : Oct 10 21:00:13 2026 GMT
        Subject: CN=e8d5f523-1f3f-496d-9efe-500917a0d055
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:5e:36:86:53:37:3a:8c:7f:29:cc:69:61:8e:
                    b4:c8:1e:e6:7c:16:de:ac:de:c1:4a:c4:47:b6:4f:
                    78:2d:f0:ae:95:05:2e:db:49:5c:8b:3d:41:68:5f:
                    19:d5:c2:92:c3:b5:b5:9a:20:66:9a:3c:7f:c7:54:
                    10:3e:f6:ca:7f:01:d6:dd:bf:15:39:3c:fa:69:bf:
                    34:69:07:28:b9:69:3c:86:5a:9b:59:1c:61:ef:71:
                    3c:0c:21:5f:ae:34:8f:d3:b1:91:c5:64:80:9c:d8:
                    2e:4a:26:1d:03:00:4f:64:ec:a3:be:a4:90:aa:14:
                    54:ad:90:6c:a1:b9:30:ac:b1:a5:fa:5b:1a:8d:21:
                    be:1c:81:0e:fa:29:10:9a:9c:d4:7c:5c:4a:e8:7f:
                    7a:6a:04:ac:9c:80:4f:aa:4c:4f:5c:df:16:79:fa:
                    af:8b:08:e3:e7:71:5c:64:60:cd:13:29:5c:14:3d:
                    61:90:71:22:4e:82:77:1f:e7:01:e9:96:17:0a:ed:
                    55:93:8f:e8:36:70:7e:01:db:5f:af:fa:f1:51:be:
                    59:a7:d9:61:3b:18:c8:56:39:bb:cd:0f:b2:fa:3e:
                    47:fa:02:ee:fd:4c:69:ab:24:1b:6e:a0:f8:13:79:
                    9d:fe:e6:b0:80:89:81:93:07:c6:88:06:11:7e:0c:
                    da:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:57:57:A1:CA:BA:EA:81:4F:0E:B7:A8:70:71:3B:A8:09:DB:3A:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0042ca43-f62d-331a-bf7a-d18021f9eb0e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:120:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:ac:e7:14:4e:58:f6:d4:4c:e5:41:fb:c9:4a:88:e4:36:16:
         92:55:5f:ff:10:45:bf:db:6c:28:e6:05:60:a1:d9:8c:a3:64:
         d6:45:e2:16:d3:c4:6d:33:b3:90:8f:79:5b:49:7b:b2:36:22:
         a4:1b:da:5c:bc:e4:0b:97:48:73:6a:48:55:e5:99:62:ee:d7:
         95:fa:93:92:d4:72:80:45:d8:5a:61:56:12:db:f6:6d:81:96:
         fa:67:8f:72:43:17:c6:c6:8e:3c:f2:29:90:f1:dd:20:df:f3:
         9d:ec:60:c3:a8:7d:52:29:e2:16:ea:87:e9:ce:b0:73:7a:41:
         55:ff:f5:7e:5c:b4:05:ca:99:e1:e6:09:bb:4f:68:c8:c7:5f:
         f2:a4:ab:39:89:50:b6:81:1a:6d:21:a0:13:d5:86:50:da:1c:
         cc:2c:08:3e:ca:72:e4:fe:30:7e:53:79:b5:40:33:1f:7b:eb:
         44:66:1b:93:58:0a:60:e5:87:71:76:0b:7d:5f:2b:62:a1:c5:
         3c:a2:a9:96:5e:09:46:1a:7d:04:4e:2d:52:89:e0:e2:f7:4b:
         27:3c:48:fe:82:af:8f:ea:9e:12:62:fa:36:e0:b6:55:6b:3f:
         41:ee:ba:09:48:5d:46:13:f1:ef:bf:dd:65:72:85:a3:95:9f:
         0a:b1:11:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:23:37 2026 by rpki-client