Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/16b8bfd8-e11b-340a-937b-ad4c689a6b20.roa
File:                     16b8bfd8-e11b-340a-937b-ad4c689a6b20.roa (raw, json)
Hash identifier:          39adkXBkFGnQDWRFiKR8nfWbPdDIfc5cQtfQaQ/yJWA=
Subject key identifier:   3D:52:FF:70:96:B6:42:6E:36:B9:26:49:56:AA:50:BE:66:F9:BA:8B
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E815FB7AA2EF0FBEEFF08FA40
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/16b8bfd8-e11b-340a-937b-ad4c689a6b20.roa
Signing time:             Wed 15 Jul 2026 09:00:13 +0000
ROA not before:           Wed 15 Jul 2026 09:00:13 +0000
ROA not after:            Tue 13 Oct 2026 09:00:13 +0000
asID:                     20362
IP address blocks:        2001:501:8a29::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:81:5f:b7:aa:2e:f0:fb:ee:ff:08:fa:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 15 09:00:13 2026 GMT
            Not After : Oct 13 09:00:13 2026 GMT
        Subject: CN=dbbef075-3255-4f30-9b1a-561c6c25e1e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:45:84:27:94:c0:55:00:4b:b0:fe:c2:65:cd:
                    20:ab:1b:96:be:d9:d8:eb:62:ff:23:31:2f:e5:dd:
                    87:02:7d:3b:0f:cf:78:99:e8:23:4a:97:aa:f7:15:
                    00:31:5d:90:99:1d:a7:5a:98:d6:50:31:ca:20:13:
                    5b:7d:05:9e:d2:fb:45:61:32:58:9c:5f:1a:1c:b7:
                    cd:58:ca:e0:7a:a8:5e:a2:b1:63:f9:14:12:33:95:
                    b8:f9:c3:76:bc:3a:15:ad:2b:81:a0:e3:b1:d3:70:
                    d2:0f:36:b8:ac:6b:95:aa:88:21:95:c9:0b:39:c6:
                    8a:68:18:49:91:c9:d8:63:cd:c0:20:bf:39:d9:74:
                    56:d2:64:3c:75:19:ba:0e:46:c2:91:cd:36:44:24:
                    ec:60:b6:76:9d:95:92:22:dd:c4:84:78:16:ae:b7:
                    8d:59:b4:89:8c:15:b6:6a:fd:3f:9f:41:21:6a:78:
                    6d:aa:f5:9c:44:1b:3f:b1:11:97:d6:5d:fb:ad:92:
                    24:cf:c6:bf:7d:2f:60:17:89:7d:0b:51:1f:ac:e7:
                    4a:50:9f:bd:82:0a:f2:68:a6:79:54:f9:d2:f9:21:
                    4b:07:5f:7d:e9:ac:cc:ec:f9:e4:5e:a6:69:c7:84:
                    50:65:eb:e1:49:fa:b9:e2:31:a1:c6:ab:fd:b2:ba:
                    3f:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:52:FF:70:96:B6:42:6E:36:B9:26:49:56:AA:50:BE:66:F9:BA:8B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/16b8bfd8-e11b-340a-937b-ad4c689a6b20.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:501:8a29:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:13:47:55:22:30:3c:46:0d:b8:bf:b3:dc:e0:4c:c0:86:97:
         91:91:e4:e5:56:68:60:13:0f:ee:88:55:69:0b:4e:43:b4:66:
         34:11:59:e6:5d:bf:5c:d5:ff:07:85:eb:c8:e0:8b:47:89:3c:
         97:f4:aa:37:8b:e2:1d:34:62:bc:ba:f0:33:0c:94:7d:11:19:
         f1:8b:ec:c7:9c:49:a0:0a:a5:4c:ff:a5:73:91:0d:79:07:8b:
         12:43:0a:22:c4:b2:10:71:36:95:97:ba:b8:86:01:4d:7b:09:
         36:13:1d:51:19:b3:ca:d4:98:16:c3:9b:db:d5:a9:b7:79:67:
         15:db:c6:90:2b:0a:d1:51:a7:57:99:97:3a:62:79:7f:ee:b9:
         1c:0e:0d:c1:e3:77:c5:c2:79:d1:42:87:b4:13:ff:94:1a:91:
         b8:d6:7a:c3:11:83:bb:67:f8:67:4d:6d:d6:ee:e1:fd:d1:ef:
         2d:e6:28:33:76:ee:0f:4f:58:78:ca:20:87:29:95:e4:57:88:
         9d:81:90:31:5f:22:96:02:1b:f1:b7:32:81:37:2b:9d:71:d3:
         fb:e6:3f:ca:84:46:d2:38:b4:d3:7f:8a:30:bb:7d:fc:3e:b7:
         bd:74:f8:c0:43:8d:3c:27:06:a2:4e:7b:9d:99:8d:7d:7a:26:
         50:26:43:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:38:08 2026 by rpki-client