Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/089caa2c-e7d2-3bb5-a68f-eb6800fe07e9.roa
File:                     089caa2c-e7d2-3bb5-a68f-eb6800fe07e9.roa (raw, json)
Hash identifier:          ZTjkSFKharYyeR8An5xZAdeLbCrpig3Q0pJhDTL5/4M=
Subject key identifier:   FE:C9:99:53:90:C0:3F:A7:47:86:43:C1:4B:7B:D2:B3:9A:96:17:C3
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E736A308E29927972C54399C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/089caa2c-e7d2-3bb5-a68f-eb6800fe07e9.roa
Signing time:             Fri 10 Jul 2026 09:00:12 +0000
ROA not before:           Fri 10 Jul 2026 09:00:12 +0000
ROA not after:            Thu 08 Oct 2026 09:00:12 +0000
asID:                     397210
IP address blocks:        2001:502:cbe4::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:73:6a:30:8e:29:92:79:72:c5:43:99:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 10 09:00:12 2026 GMT
            Not After : Oct  8 09:00:12 2026 GMT
        Subject: CN=df5ba306-6dd5-4a83-9b15-a26d565147d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:41:e4:d4:ed:97:d4:1d:bb:78:8b:65:13:ae:
                    44:02:b5:da:8d:d9:c6:be:12:00:39:68:7e:fd:ba:
                    b8:2b:aa:60:aa:2f:50:89:5b:29:43:1b:78:0f:d6:
                    c7:f4:32:47:bf:63:bb:3c:13:b7:c1:56:de:22:e2:
                    ad:91:35:6a:88:95:9b:ed:16:36:e6:77:48:3f:99:
                    24:2f:10:c3:8f:a6:39:4b:20:17:93:44:16:c9:b7:
                    a6:3b:37:2d:8a:28:1a:1d:5d:cb:95:d1:1d:d6:18:
                    14:f9:f7:c7:f8:99:19:3d:8f:71:47:8a:a9:ec:59:
                    4e:19:5e:f0:e1:37:6d:d1:c3:1d:ce:7c:4b:f0:80:
                    a4:20:af:ed:ea:cb:0c:aa:d1:d6:2a:d0:32:41:c9:
                    f7:06:20:dd:fc:30:d9:ab:62:f8:b1:cf:55:76:e2:
                    44:ea:ac:5a:54:1b:2a:61:20:31:93:2a:98:45:ee:
                    d6:ef:85:51:95:a7:c8:4c:f2:e7:b3:9f:47:a9:7c:
                    fb:79:30:6e:44:7d:a5:0b:5b:28:4b:18:0e:e0:54:
                    af:9c:bc:b3:fc:07:6e:e5:bd:a7:7c:7b:ab:1c:e0:
                    c0:e2:77:48:63:a3:4c:4e:68:01:61:ea:55:16:9c:
                    56:49:bd:e5:2e:4f:83:e8:28:23:e7:bf:86:3e:fd:
                    51:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:C9:99:53:90:C0:3F:A7:47:86:43:C1:4B:7B:D2:B3:9A:96:17:C3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/089caa2c-e7d2-3bb5-a68f-eb6800fe07e9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:cbe4:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:19:e6:69:6e:6e:ca:34:99:55:ed:e6:92:e7:e3:ef:9d:ce:
         45:5c:5b:04:24:98:55:85:a4:59:55:4f:79:74:0a:b3:38:e4:
         2b:a0:48:0d:41:3a:e0:82:f1:1a:40:49:13:63:48:d4:3e:dc:
         1f:34:95:6a:c2:f6:db:a8:7f:6c:7a:7c:be:d1:46:51:b7:c1:
         33:8f:5d:3f:5d:71:12:a6:f7:38:90:62:9b:b4:34:41:f6:28:
         3a:5c:20:55:80:fd:c4:c6:a7:32:7a:0f:05:47:cf:92:f3:df:
         e0:6e:0b:07:fc:a7:82:3c:d4:96:66:50:e8:bc:88:ed:34:76:
         08:fb:d8:60:a0:da:27:9f:98:b6:cc:a0:cc:f6:ea:16:e7:f7:
         8e:e6:79:68:a7:d0:0d:14:39:db:5a:0d:15:b2:5c:14:b5:25:
         f2:1d:5c:a2:50:cf:2d:2d:cf:06:8b:12:6b:8c:13:83:7e:9d:
         d4:5c:10:f1:81:e7:df:98:c8:cd:2c:81:03:70:50:4d:03:31:
         b2:3c:67:98:46:41:aa:ab:82:06:c9:80:a4:cd:75:7b:2a:ca:
         bc:0f:cb:89:1c:e1:34:f2:fd:9b:c3:66:ea:23:f3:b9:82:e0:
         3a:ab:a7:70:04:58:a1:7d:2d:64:a4:1b:e0:82:93:95:d7:df:
         ef:cc:7d:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:18:35 2026 by rpki-client