Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0760ae27-6fc0-3fd4-bb49-52c20bf4be47.roa
File:                     0760ae27-6fc0-3fd4-bb49-52c20bf4be47.roa (raw, json)
Hash identifier:          Wp4Yw4i/FsFt1TMBGPpgtaDN1fyFa/tkSuLK76k8X6Q=
Subject key identifier:   3E:0A:E0:DC:D7:79:69:86:64:20:46:63:1E:8A:6D:B2:91:4E:32:A0
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E683F66EEB4D8677EC8BA9A00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0760ae27-6fc0-3fd4-bb49-52c20bf4be47.roa
Signing time:             Mon 06 Jul 2026 09:00:12 +0000
ROA not before:           Mon 06 Jul 2026 09:00:12 +0000
ROA not after:            Sun 04 Oct 2026 09:00:12 +0000
asID:                     396581
IP address blocks:        2001:502:8cc::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:68:3f:66:ee:b4:d8:67:7e:c8:ba:9a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul  6 09:00:12 2026 GMT
            Not After : Oct  4 09:00:12 2026 GMT
        Subject: CN=e02c6684-fb3b-4cd8-8e04-1cf31de91472
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:69:c8:14:13:2c:bc:23:28:45:11:0a:e8:17:
                    b2:68:54:b1:25:86:04:50:27:1d:b6:51:27:25:a9:
                    46:c6:73:41:e8:b0:f1:9e:3c:a6:4f:97:c8:f7:26:
                    45:f7:82:45:5b:db:cf:af:31:ac:50:23:54:dd:46:
                    d7:8c:f8:a2:0b:94:72:06:bc:da:94:2b:d7:a2:97:
                    51:8b:39:b8:0f:63:80:5e:8f:a1:72:87:b3:5f:02:
                    1c:6b:64:3a:c2:8b:63:bc:6b:63:f2:5d:0f:8b:e2:
                    81:93:2f:c5:5e:ef:df:6f:d9:52:1a:aa:e2:d8:18:
                    f9:85:f1:bc:bf:b8:3e:63:21:fd:15:7f:c3:85:78:
                    0e:30:c3:34:9c:60:4c:06:0a:3d:3d:b7:72:f3:45:
                    36:3f:fb:1f:f8:ed:d8:e4:fb:b4:a0:02:8b:22:bc:
                    12:28:85:9e:f9:92:99:3b:14:b3:27:59:04:30:02:
                    e5:fd:73:0d:07:39:5b:d4:a4:70:11:ad:71:29:a0:
                    7d:be:ff:1c:e1:6f:14:f0:cd:f1:d9:67:1d:7c:19:
                    8f:cf:88:26:be:ea:c8:c1:84:c9:af:78:a4:bd:b1:
                    f0:c3:6a:5f:10:16:d5:dd:92:6f:aa:38:20:db:0f:
                    db:59:6d:27:a5:da:a9:a2:72:7e:9d:c7:d4:cc:2f:
                    8f:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:0A:E0:DC:D7:79:69:86:64:20:46:63:1E:8A:6D:B2:91:4E:32:A0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0760ae27-6fc0-3fd4-bb49-52c20bf4be47.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:8cc:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bb:b9:c0:37:46:2a:03:8f:98:4c:7d:5d:9d:25:a6:cd:56:29:
         bd:c4:41:ff:ab:7d:38:f1:3c:16:c0:48:f2:ba:1c:82:5e:76:
         e9:fe:e3:82:66:fb:1b:87:5c:60:a8:a9:20:8f:01:17:be:88:
         dc:e3:b0:57:d9:b1:4a:4a:ed:0d:5a:ed:14:65:b4:f0:39:67:
         22:68:f7:30:94:19:1a:01:1f:bb:98:12:a1:7c:46:04:67:9a:
         d4:5b:97:7b:ba:47:f2:43:a0:77:62:a7:e4:68:b2:05:81:24:
         8b:4b:1f:4a:c2:de:2a:b4:09:25:e5:91:7f:26:0e:2a:91:b0:
         28:ab:68:9e:53:1e:05:a5:85:f1:76:70:b2:1c:c8:0a:5a:5f:
         b4:fc:78:a9:fa:91:a7:31:2e:01:eb:a6:4a:84:31:3f:93:99:
         f7:0a:0d:e8:30:79:dc:4a:0e:2c:c6:78:a2:a7:a6:71:38:52:
         1a:c2:ef:38:5c:bb:c4:b5:c2:05:12:16:bf:49:94:dd:d7:89:
         0b:31:9a:0e:54:6b:70:37:d8:47:5a:b4:8b:82:6d:cd:63:b5:
         cb:47:8b:ae:1d:89:8b:a8:c2:3d:f2:29:ef:67:ef:83:ea:f9:
         4e:b1:51:3b:c6:9f:b9:9f:95:13:53:7b:ae:ff:d2:ef:b9:36:
         1b:4e:b5:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:57:30 2026 by rpki-client