Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0bfcedeb-83a2-3dcc-b1a2-b43d7d16e5f2.roa
File:                     0bfcedeb-83a2-3dcc-b1a2-b43d7d16e5f2.roa (raw, json)
Hash identifier:          NorgonYHVhcu7lvaMgvNessMlU+Tz5LxVrT8nyy5HkE=
Subject key identifier:   6A:D3:CB:57:78:5D:25:21:F1:E2:B5:AC:FF:8F:4B:2E:0F:AA:84:05
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E683F62D6C9113C86241BB8B0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0bfcedeb-83a2-3dcc-b1a2-b43d7d16e5f2.roa
Signing time:             Mon 06 Jul 2026 09:00:12 +0000
ROA not before:           Mon 06 Jul 2026 09:00:12 +0000
ROA not after:            Sun 04 Oct 2026 09:00:12 +0000
asID:                     396590
IP address blocks:        2001:502:8cc::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:68:3f:62:d6:c9:11:3c:86:24:1b:b8:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul  6 09:00:12 2026 GMT
            Not After : Oct  4 09:00:12 2026 GMT
        Subject: CN=598a5469-c3db-44c9-9bd4-d2459b87a67a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:fe:82:93:1f:31:2b:1a:b9:94:e0:ea:26:4c:
                    b9:73:98:72:e0:ee:1c:6c:90:1c:12:b9:a6:43:9b:
                    06:e2:a6:01:d9:f5:bb:78:61:b4:fd:02:f0:57:27:
                    26:fe:fb:c8:00:04:fa:1f:80:27:77:a1:ee:f7:51:
                    be:b7:b7:df:74:9e:20:97:2d:c3:c1:4f:af:0f:25:
                    71:86:d9:ba:0d:61:d0:49:7d:43:f5:a3:02:be:0e:
                    a3:5b:c6:c6:5d:13:6d:87:e6:a7:a8:f6:e4:36:78:
                    13:dd:77:0c:47:95:d1:3c:d8:f0:90:ce:97:02:77:
                    9d:1b:96:86:35:c8:65:dc:66:f1:85:a5:44:86:c0:
                    32:19:34:c6:de:ce:7e:fb:41:30:b9:f7:b8:e7:23:
                    48:a0:73:6e:93:d1:9f:79:b2:27:d6:c8:fe:4b:36:
                    2b:7b:d0:60:fd:09:24:9a:b8:51:65:a9:70:1f:57:
                    2e:82:bd:d7:2e:53:b5:99:c0:05:b8:da:40:18:8d:
                    ef:f0:54:04:0b:a8:ca:2d:f1:2d:c6:1d:b8:10:c4:
                    9b:d2:8a:39:76:70:90:84:5c:4a:f4:21:e9:85:32:
                    65:80:c1:3d:0b:dc:71:08:8f:b3:6b:2b:04:0c:b2:
                    d0:29:72:21:59:9c:42:e8:73:02:0c:0e:72:38:6b:
                    33:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:D3:CB:57:78:5D:25:21:F1:E2:B5:AC:FF:8F:4B:2E:0F:AA:84:05
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0bfcedeb-83a2-3dcc-b1a2-b43d7d16e5f2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:8cc:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:3c:fb:25:51:1b:43:7f:1e:a6:9c:8c:9f:5d:09:68:a5:eb:
         4b:11:fd:f2:16:3d:06:78:06:a4:30:14:f8:ce:b2:58:3d:8a:
         67:a3:7f:44:a5:0a:7f:bf:21:25:20:b9:6c:d1:a1:4e:cc:96:
         26:9e:06:17:ee:95:8a:d9:4c:73:70:e8:09:2c:ad:32:68:5c:
         43:b8:56:e9:2c:6a:02:5e:98:4b:c9:05:e5:60:5d:04:fc:14:
         df:fa:71:ee:9f:0e:e7:6a:9f:33:bf:da:73:65:44:34:cf:b7:
         56:30:88:85:e3:0d:00:f4:b7:c0:68:10:9e:c0:ec:42:e3:85:
         43:6f:f9:08:55:99:75:7a:8f:a0:b6:78:53:88:32:db:7f:f2:
         78:31:28:51:05:73:02:4b:47:dd:e4:3b:ed:23:0e:8f:bc:52:
         9c:81:e2:aa:5b:89:a5:fb:3e:cd:6e:83:59:66:ba:0e:27:11:
         0c:cf:1c:2f:d7:af:d8:37:06:fb:1b:1d:33:c3:b6:77:25:0c:
         87:ee:23:a3:b7:13:eb:58:81:3f:6e:8d:f5:76:3e:ff:15:18:
         80:99:b6:25:26:5c:ea:c1:23:c7:1e:fa:2f:46:0a:01:8a:3f:
         1c:3d:5c:a8:62:6c:38:d6:f8:1b:e2:eb:15:3e:f5:44:99:c9:
         41:73:e1:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:40:25 2026 by rpki-client