Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/33a1eb5c-1d69-3add-9aa4-e55163f8de48.roa
File:                     33a1eb5c-1d69-3add-9aa4-e55163f8de48.roa (raw, json)
Hash identifier:          zjNXyc0geQU/72b6YzfyQB4QxNHnvGDcujNP8ySTXes=
Subject key identifier:   CE:B6:2A:22:EA:AD:E2:0E:7D:25:F8:EF:A6:38:A0:0D:64:1C:A0:4A
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D93255768307CCA1990A0D600
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/33a1eb5c-1d69-3add-9aa4-e55163f8de48.roa
Signing time:             Tue 21 Apr 2026 01:00:24 +0000
ROA not before:           Tue 21 Apr 2026 01:00:24 +0000
ROA not after:            Mon 20 Jul 2026 01:00:24 +0000
asID:                     40717
IP address blocks:        2001:502:cbe4::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:93:25:57:68:30:7c:ca:19:90:a0:d6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 21 01:00:24 2026 GMT
            Not After : Jul 20 01:00:24 2026 GMT
        Subject: CN=80e9737b-c53f-4435-aac0-9fd24c030704
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:33:18:47:0f:45:ef:69:9e:3b:b0:ea:e2:6d:
                    dd:4f:83:a2:99:34:bd:d3:ba:f7:7c:f2:8d:d2:f0:
                    b2:b3:be:ba:f2:0e:fa:57:c9:44:f6:f5:7e:4e:30:
                    0c:c4:12:76:13:19:3b:1e:69:0d:b2:16:a0:1a:eb:
                    31:2a:8b:89:73:e4:5f:1a:eb:d4:d9:40:fc:40:9f:
                    28:3b:eb:3a:1f:d0:67:e0:25:06:e3:8a:f2:b8:9f:
                    3c:19:96:7e:1b:ab:06:55:57:04:7e:7e:d2:7d:b9:
                    24:24:90:11:b9:91:13:c0:47:e0:55:5f:d8:40:30:
                    fe:4f:04:a8:bb:03:65:f8:03:e2:87:c6:e7:de:69:
                    9a:e8:7b:5e:ce:a8:5f:4a:6b:7b:07:2c:4a:20:6a:
                    0b:d8:4e:d3:0f:b1:08:af:72:92:a7:1b:3e:07:47:
                    19:43:f7:02:8f:7b:e1:54:6f:aa:f4:90:3c:bb:6d:
                    4c:0b:f6:b6:97:bb:23:60:4f:7b:da:86:d7:77:3a:
                    5d:ce:68:33:a6:21:e5:ff:1e:70:fc:f7:e0:ea:25:
                    8c:38:da:4e:a0:2e:05:89:cd:36:84:db:b9:ee:cb:
                    3d:9c:38:5e:e5:6a:ca:bb:dc:de:4d:c5:ba:03:b5:
                    40:97:2d:3f:47:9c:d2:37:27:49:cd:1a:e9:0c:38:
                    89:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:B6:2A:22:EA:AD:E2:0E:7D:25:F8:EF:A6:38:A0:0D:64:1C:A0:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/33a1eb5c-1d69-3add-9aa4-e55163f8de48.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:cbe4:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:d0:aa:c9:4d:99:31:68:02:82:c9:17:71:cc:1e:19:96:4c:
         40:44:5b:70:1b:52:e0:14:d1:3a:87:2e:5f:42:08:21:d5:22:
         29:03:a0:4d:8c:cc:d6:a8:3e:3c:a3:68:c0:4f:d0:3e:93:3e:
         c3:6f:0f:d1:a0:75:b5:f3:10:32:58:b2:83:19:ea:b0:8a:b6:
         ad:4f:5a:ee:64:6e:b5:4c:86:97:b3:ef:ff:d5:7b:e2:29:88:
         94:31:14:85:b5:0d:9d:63:a6:c2:d7:72:c5:5e:16:97:d9:4c:
         c3:9a:c6:53:aa:1a:27:f1:4f:c7:6f:00:fd:ee:03:78:af:98:
         5e:66:94:dc:e5:f9:77:37:e5:23:14:5c:ce:49:8e:70:b4:29:
         9c:eb:8d:ae:41:77:60:87:92:cc:3b:11:ea:60:b8:13:38:5a:
         40:f2:e4:26:18:b3:6c:ca:30:7f:7e:99:8e:cd:00:dc:b6:5b:
         c1:c5:4d:8f:15:1d:c8:90:2f:4c:cb:78:e0:32:2a:77:d8:0e:
         de:06:0f:ba:a8:f0:5e:7a:33:16:09:8c:fd:a3:94:ea:98:dc:
         96:65:77:55:f0:7c:36:6a:79:bd:3f:a2:df:9e:78:45:b3:44:
         ef:ee:fe:eb:35:f0:27:a4:3c:56:25:14:23:91:09:a9:33:6a:
         1d:50:16:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:39:33 2026 by rpki-client