Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0f3e8908-2114-3d84-b323-fb23269317ae.roa
File:                     0f3e8908-2114-3d84-b323-fb23269317ae.roa (raw, json)
Hash identifier:          5eRjz4E+ZGp3koqDk7GJmn5VLX0PLSR8A/Lvr7X5tE8=
Subject key identifier:   1E:75:11:B6:74:2E:DC:B9:4A:D3:61:DA:50:15:40:81:BD:70:EE:5D
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E640FAB7AF27E51B42044E360
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0f3e8908-2114-3d84-b323-fb23269317ae.roa
Signing time:             Sat 04 Jul 2026 21:00:12 +0000
ROA not before:           Sat 04 Jul 2026 21:00:12 +0000
ROA not after:            Fri 02 Oct 2026 21:00:12 +0000
asID:                     36618
IP address blocks:        2001:500:126::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:64:0f:ab:7a:f2:7e:51:b4:20:44:e3:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul  4 21:00:12 2026 GMT
            Not After : Oct  2 21:00:12 2026 GMT
        Subject: CN=04858ed3-d422-4db6-ba0b-9301beda0c4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:15:3c:93:aa:c2:9b:3d:5a:94:4a:28:e3:cc:
                    da:87:a5:ba:6f:df:cf:f8:9d:5a:ce:d0:ab:3c:6f:
                    14:e3:96:01:97:2f:3d:01:af:95:45:7b:b2:89:be:
                    44:df:a5:3c:06:9c:24:1d:72:3f:56:40:fd:45:72:
                    70:f1:80:1f:15:36:51:bb:18:4f:00:87:38:87:5c:
                    c6:61:84:3f:ee:63:eb:38:72:43:e5:59:7b:ae:fa:
                    aa:94:7f:9d:e0:26:b0:c1:66:8d:d2:90:d3:73:5f:
                    fa:98:7e:d7:3c:31:72:46:60:e5:55:66:ec:04:e3:
                    08:1e:57:7e:ad:71:24:b8:8d:eb:a8:71:88:93:7a:
                    a5:70:fc:89:e3:e3:af:6b:85:2f:27:9d:fc:ee:5d:
                    0f:8d:e0:54:26:19:3f:cf:41:a1:18:7d:12:a4:a5:
                    b4:af:47:88:90:9a:0c:70:c3:0c:59:0d:6b:06:20:
                    b0:39:d2:5a:eb:e0:ee:38:2f:f5:0e:2d:64:44:09:
                    74:da:60:f6:ce:5e:77:41:13:a2:38:fb:e4:f9:ed:
                    c1:8d:32:f5:1c:cb:31:f1:10:5b:d4:a5:f9:76:c8:
                    f8:01:05:45:5c:12:c8:cf:d3:27:f0:9a:f1:97:7f:
                    e2:58:89:2b:b3:d9:c1:50:31:80:c3:8c:3c:73:0f:
                    45:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:75:11:B6:74:2E:DC:B9:4A:D3:61:DA:50:15:40:81:BD:70:EE:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0f3e8908-2114-3d84-b323-fb23269317ae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:126:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:68:eb:43:6d:28:a5:78:87:ec:ee:8c:1a:6b:a8:27:b0:b5:
         8f:44:59:2d:97:81:1f:e6:cd:6c:04:28:59:e7:23:12:2e:49:
         ca:ab:3d:ea:0e:97:ae:95:49:d8:11:1e:8a:f8:5f:b7:bc:e9:
         1c:5c:e1:8a:43:c6:71:76:4e:29:e8:de:2e:1c:c7:d3:a6:b9:
         0b:93:ff:8b:bc:81:c7:f6:55:3b:71:bd:99:d1:94:08:3f:b2:
         2a:54:47:b7:01:e2:67:e0:89:54:c8:cd:b9:e2:aa:35:bc:b8:
         d4:9c:22:85:24:f5:e5:ea:59:3f:01:49:0a:bd:7f:29:29:0f:
         88:2e:0a:45:9d:d7:a8:a3:e6:79:51:30:4e:50:7d:a5:4f:4e:
         79:86:2b:d2:ee:e3:87:79:37:56:ae:39:64:1b:28:77:b7:a5:
         32:51:f6:d4:38:4f:a0:17:8b:8a:f5:56:9a:04:3c:cf:88:02:
         cc:e4:bf:3b:36:23:b2:1d:5a:01:ef:27:40:f4:4b:b9:d7:46:
         47:33:92:59:71:c6:d0:f3:00:c0:55:6c:b8:e3:93:cf:37:d5:
         c5:db:c6:a0:ba:ad:58:b9:ab:01:29:ca:3c:b8:41:3f:c4:d5:
         8e:35:6d:3f:06:3e:cf:45:2b:dc:f6:18:e0:1d:48:86:b6:cb:
         bb:f4:2b:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:08:59 2026 by rpki-client