Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4a2d3f89-6b67-3e54-aaa2-b859726b428c.roa
File:                     4a2d3f89-6b67-3e54-aaa2-b859726b428c.roa (raw, json)
Hash identifier:          lVfnGE8dsPYMwLh/2dok9UDgDMyef2WWP9KQZdqylok=
Subject key identifier:   FC:D1:F4:5A:87:E1:6F:4F:78:20:21:C6:18:62:13:13:B0:59:42:9A
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584DD0904E83C93CADF22299FC60
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4a2d3f89-6b67-3e54-aaa2-b859726b428c.roa
Signing time:             Wed 13 May 2026 01:00:24 +0000
ROA not before:           Wed 13 May 2026 01:00:24 +0000
ROA not after:            Tue 11 Aug 2026 01:00:24 +0000
asID:                     396578
IP address blocks:        2001:502:1ca1::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:d0:90:4e:83:c9:3c:ad:f2:22:99:fc:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 13 01:00:24 2026 GMT
            Not After : Aug 11 01:00:24 2026 GMT
        Subject: CN=f7ed2c3f-8bc7-4c62-8dbf-e663aef7c2f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:50:50:e2:4f:58:31:92:71:45:c8:00:4b:00:
                    6c:c6:c3:f2:53:72:68:77:d0:57:b8:5c:9b:de:88:
                    dc:19:b4:2b:dc:52:1c:fe:d8:79:16:5e:97:4d:ed:
                    f5:25:4b:5b:cf:93:70:9b:20:26:b8:ba:94:89:65:
                    0d:dd:21:4a:8c:2d:66:38:68:8b:ac:c9:42:d4:d4:
                    2d:55:b3:fa:35:9d:96:0a:18:28:ca:57:22:91:0e:
                    03:a6:66:20:07:7f:be:7a:56:ad:5b:02:99:25:f4:
                    bf:ef:b9:26:d5:d0:d2:6d:e7:dc:20:dd:c0:22:90:
                    ec:32:0e:12:e2:03:13:a1:3c:47:3f:77:e7:70:22:
                    5e:c2:f2:08:39:d0:7e:28:98:c8:96:7d:d2:9d:9a:
                    22:8c:2d:39:2c:46:a2:93:a7:c3:f4:ad:43:33:35:
                    2f:49:ad:90:1e:56:76:de:5e:8f:de:af:b6:30:ba:
                    3b:cf:bf:5e:63:7a:ed:91:f5:8e:ea:f2:fb:f7:69:
                    14:a3:9e:11:74:a1:46:93:2a:7b:cc:ec:09:48:ca:
                    e8:2e:07:37:d9:27:22:f2:4d:52:5c:48:07:50:fc:
                    aa:fd:f8:59:b5:0c:a2:32:f0:42:89:79:e4:fd:e3:
                    a3:8f:5e:e4:60:a5:8e:1f:8f:22:e4:56:e5:74:ac:
                    92:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:D1:F4:5A:87:E1:6F:4F:78:20:21:C6:18:62:13:13:B0:59:42:9A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4a2d3f89-6b67-3e54-aaa2-b859726b428c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:1ca1:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:b5:84:a3:c5:a9:7e:75:00:3b:80:8e:f0:c6:9d:e5:20:cd:
         1d:88:b8:87:e9:f9:f6:ed:0c:ae:bd:4f:0b:3d:e9:b1:3a:b2:
         7b:e8:55:b4:54:5e:cf:77:b4:f5:d7:0a:57:77:30:dc:3b:70:
         b3:85:01:16:59:e4:e5:9f:8c:00:e8:f7:e8:f5:29:2e:b0:7f:
         1a:af:ef:e5:ba:79:b6:c7:e7:bb:b5:42:aa:f2:43:1b:8b:c1:
         18:91:0d:9f:eb:f0:f3:85:b2:6e:51:08:c2:87:f2:de:46:ac:
         05:0d:c5:40:f9:0b:1a:d2:a8:e9:41:01:40:bb:59:06:2e:c2:
         83:00:05:5c:1d:8a:fe:73:60:c8:02:36:17:4e:92:80:7e:81:
         fb:81:f5:82:bc:5e:74:bb:53:a2:e9:fb:e7:57:80:29:d8:2f:
         0d:e3:79:39:a1:7d:a6:40:f1:16:06:6e:d3:76:3f:98:c4:be:
         8d:2c:ba:9b:9d:81:43:ad:a2:3a:71:89:b5:8b:6e:d0:db:a7:
         63:6d:77:60:c7:25:03:79:02:0c:f0:dc:7f:e3:96:fd:c2:dc:
         41:58:b9:8e:d6:7f:a2:4f:68:59:7f:cb:49:39:38:30:0a:9d:
         98:d9:e8:fe:bb:9d:3f:96:5b:66:b4:6a:17:5c:b1:05:23:ab:
         49:65:91:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:04:47 2026 by rpki-client