Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/24f7a023-e5ce-3d27-8805-9c2b663cf394.roa
File:                     24f7a023-e5ce-3d27-8805-9c2b663cf394.roa (raw, json)
Hash identifier:          YFtWgcK5cfNPd702bMeciyCGQ1sw6k28OJrLTwZHjKE=
Subject key identifier:   52:5D:8E:AF:F8:45:D2:07:3B:2F:3B:F3:F1:B0:50:46:7D:1F:95:44
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E815FBA269BCCECB1999A9C40
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/24f7a023-e5ce-3d27-8805-9c2b663cf394.roa
Signing time:             Wed 15 Jul 2026 09:00:13 +0000
ROA not before:           Wed 15 Jul 2026 09:00:13 +0000
ROA not after:            Tue 13 Oct 2026 09:00:13 +0000
asID:                     396591
IP address blocks:        2001:501:8a29::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:81:5f:ba:26:9b:cc:ec:b1:99:9a:9c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 15 09:00:13 2026 GMT
            Not After : Oct 13 09:00:13 2026 GMT
        Subject: CN=7196ec58-e990-4a51-86e3-b5e8b9b6cb78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:9c:2b:a7:1e:12:a0:66:8c:cb:5f:00:ff:b0:
                    fe:16:14:6d:12:e5:48:02:4c:3c:4d:b0:9f:eb:67:
                    b1:52:9e:4f:51:11:0e:af:34:67:f6:95:af:8e:18:
                    54:25:d1:b7:f6:b5:2f:95:7c:2b:bc:72:e6:45:d2:
                    c4:6e:f7:78:2a:96:54:14:5b:77:d5:9e:fe:06:27:
                    23:e6:e0:c6:ff:e8:6e:73:bd:f6:a8:78:c2:81:fa:
                    df:64:03:c6:97:a4:e3:d9:e0:b3:9f:3b:6e:14:55:
                    40:3d:4a:b2:15:20:37:ec:b3:0d:93:1b:b4:39:57:
                    24:f7:66:a6:3b:53:3a:e0:48:15:2e:76:13:17:16:
                    8f:85:d9:90:c5:64:37:18:42:a5:0d:60:46:e9:31:
                    29:6a:71:77:9b:c8:d5:35:81:62:ca:d8:78:fc:39:
                    63:0d:1c:aa:a5:2b:31:fe:75:b4:a2:23:c0:a8:47:
                    74:b4:fe:74:49:aa:4c:e8:ed:c6:73:99:8f:c0:89:
                    28:e0:9e:0d:bb:60:21:ac:12:8a:7c:81:4b:17:67:
                    c6:ef:f2:83:eb:dd:73:80:c2:f9:4c:69:84:e5:f0:
                    fe:b7:9c:92:f8:f2:34:41:2c:cb:8f:1f:e1:a2:b2:
                    16:cb:7a:0c:06:09:42:d0:4e:af:d7:65:16:ce:da:
                    3a:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:5D:8E:AF:F8:45:D2:07:3B:2F:3B:F3:F1:B0:50:46:7D:1F:95:44
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/24f7a023-e5ce-3d27-8805-9c2b663cf394.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:501:8a29:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bd:ca:e0:79:73:bb:02:23:42:94:c9:28:6b:fd:d3:f5:de:c8:
         e8:ba:57:34:2d:66:d4:57:be:cd:e8:5c:2a:4f:f6:78:b3:6e:
         1a:19:ed:5a:03:8a:17:a2:54:45:d2:4c:34:45:2d:74:94:54:
         61:b4:2a:85:7f:58:ce:72:36:18:23:03:29:86:29:17:e7:c3:
         10:83:9e:a1:77:1d:ed:0e:c0:3d:61:9b:dd:65:5b:55:ff:af:
         5b:98:6c:de:83:c1:8f:02:c0:34:00:e0:5d:3a:d9:f4:c0:66:
         a3:45:2e:93:d1:c2:88:5e:e5:05:ec:bd:6f:63:a0:f2:68:45:
         3e:e6:44:90:53:77:be:b1:0c:9e:2b:4b:f3:f7:6d:0e:1d:1d:
         85:fa:15:66:d9:98:2a:2a:c8:ee:d4:c1:81:f1:5a:73:75:69:
         fb:3e:69:d5:3e:49:85:82:c3:b7:ca:94:35:31:5e:f7:35:59:
         61:39:b9:e5:56:a0:ca:5a:f6:74:a4:0b:58:85:20:3b:fb:f0:
         e2:57:7f:a7:35:5b:59:4d:30:91:8d:5f:27:4b:76:7a:39:4b:
         eb:dc:f7:66:56:0e:f2:30:f7:3c:d6:49:b3:32:d0:3f:9b:eb:
         8d:99:ac:cc:85:78:81:29:03:3c:dc:d7:ba:d9:52:0c:1e:a8:
         04:46:99:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:49:34 2026 by rpki-client