Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3039f3df-2ec8-316d-8a85-dd1214f24ea4.roa
File:                     3039f3df-2ec8-316d-8a85-dd1214f24ea4.roa (raw, json)
Hash identifier:          cq14zNiZXzpwQekgu+mTIpeZ8nCWlh1tK3qQpzbs4mE=
Subject key identifier:   1D:82:25:25:DE:52:14:8B:62:9D:2D:86:6D:20:5B:ED:A6:FA:3C:16
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E640FBFD25FEAE5BA76458E40
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3039f3df-2ec8-316d-8a85-dd1214f24ea4.roa
Signing time:             Sat 04 Jul 2026 21:00:12 +0000
ROA not before:           Sat 04 Jul 2026 21:00:12 +0000
ROA not after:            Fri 02 Oct 2026 21:00:12 +0000
asID:                     396613
IP address blocks:        2001:500:126::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:64:0f:bf:d2:5f:ea:e5:ba:76:45:8e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul  4 21:00:12 2026 GMT
            Not After : Oct  2 21:00:12 2026 GMT
        Subject: CN=65030e51-3587-41da-8243-78f511da1ee1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:a1:99:69:5a:e7:6e:b5:10:46:93:ef:5e:f0:
                    9a:c6:3b:42:46:df:bb:a6:1f:d0:d3:66:3f:2f:a8:
                    1d:46:35:8f:93:05:1a:55:fe:6d:c1:69:6f:88:c9:
                    9b:d7:0d:7a:4f:e6:1e:51:ac:2b:b5:f4:33:8e:a8:
                    36:7e:d7:6a:11:93:f4:56:6b:e4:dc:b8:85:6f:bd:
                    d9:82:3d:62:a5:3e:b1:a5:ed:b0:19:38:1d:d7:9a:
                    75:8b:cd:ef:1f:e8:d4:e9:02:1b:84:85:9c:fa:2e:
                    c3:ba:1e:9d:dc:70:af:8a:83:22:1b:ad:1c:0c:85:
                    90:f4:e2:b3:30:ae:d1:12:f3:c8:0a:9a:53:d3:e5:
                    56:8d:af:18:db:11:54:70:95:af:ac:27:9d:35:9d:
                    3e:1b:c6:00:fc:0c:e4:6b:c3:1d:d1:58:a9:22:25:
                    3d:90:cc:43:fa:39:d7:1b:40:92:78:5e:32:2c:c0:
                    0d:38:1b:9b:0f:d7:a9:99:85:2f:76:c0:f5:13:e5:
                    96:d6:db:7f:a5:13:35:aa:09:76:b0:cc:9e:74:98:
                    69:65:c2:a2:1b:5a:24:25:41:58:0a:22:f0:1e:26:
                    62:ad:6a:0b:fe:5d:43:49:62:9c:08:2d:92:b9:35:
                    63:41:18:59:c0:ee:55:9a:33:02:05:17:05:5b:79:
                    1d:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:82:25:25:DE:52:14:8B:62:9D:2D:86:6D:20:5B:ED:A6:FA:3C:16
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3039f3df-2ec8-316d-8a85-dd1214f24ea4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:126:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:3d:4d:2c:49:56:e5:b3:a9:e9:24:e2:88:c5:e7:71:55:39:
         cd:ca:23:b1:97:10:a7:b6:a9:95:f1:57:24:3b:67:d0:63:d0:
         8b:0c:38:1d:19:3b:34:ee:84:2c:be:b0:c3:e9:e1:d0:3f:35:
         67:c6:49:f2:14:7e:9a:52:f5:c8:ae:d5:50:57:6e:aa:4b:bf:
         9d:7c:2e:ec:01:83:63:27:1a:95:d7:92:07:08:b9:34:f8:38:
         70:69:07:d4:41:03:ae:ad:ab:ab:cb:dd:8c:fc:2e:e4:a0:bb:
         9e:d4:f4:5c:4d:62:9c:52:06:34:d1:9c:f8:3f:a2:9f:c2:02:
         b2:fd:e8:0a:64:f4:e1:02:f9:4f:c2:84:31:68:e5:a5:04:bc:
         56:8a:34:0f:58:38:27:b0:93:95:68:b9:da:fb:7f:09:e9:68:
         f1:c6:39:b6:43:18:5a:71:ff:ec:b5:7b:ba:5d:35:fb:87:a9:
         1b:cc:01:12:bb:37:35:19:ac:e5:44:75:7c:d5:b0:fd:13:a9:
         b8:27:36:fd:60:af:47:bc:28:5d:5a:e9:73:31:92:89:60:14:
         97:01:7c:bb:29:19:59:5f:92:1f:aa:c6:89:9b:d0:27:7c:95:
         21:f4:95:21:de:e2:b2:94:07:81:f2:e9:88:a2:0b:bd:67:d3:
         95:6c:6c:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:34:31 2026 by rpki-client